CVE-2005-4237

CVE-2005-4237 affects MySQL Auction 3.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the search functionality, with parameters in the SearchZoom module (potentially the keyword parameter) allowing remote injection of arbitrary script/HTML. Exploitability and impact are d...

CVE-2005-4226

The connected sources confirm CVE-2005-4226 affects phpWebThings 1.4 with multiple SQL injection vectors. Specifically, unsanitized input in download.php (ref), forum.php (direction, msg, sforum, reason, subname, toform), forum_edit.php (msg, forum), forum_write.php (msg, forum), guestbook.php (t...

CVE-2005-4220

Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nma...

CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

CVE-2005-4244

The vulnerability CVE-2005-4244 affects Snipe Gallery 3.1.4 and earlier. It is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the gallery_id parameter to view.php and the image_id parameter to image.php. Details indicate an injection flaw in how ...

CVE-2005-4221

CVE-2005-4221 concerns an SQL injection in Arab Portal System 2 Beta 2, specifically in link.php. The vulnerability allows remote attackers to inject arbitrary SQL commands via the PHPSESSID (session ID) or the REQUEST_URI (query string). Public references confirm the issue and its CVE entry, but...

CVE-2005-4211

PHP remote file inclusion in phpCOIN 1.2.2 affects coin_includes/db.php, allowing an attacker to supply a URL via the _CCFG[_PKG_PATH_DBSE] parameter to execute arbitrary PHP code. This is a code-execution exposure in the web application, with no exploitation details provided beyond the parameter...

CVE-2005-4236

CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...

CVE-2005-4225

CVE-2005-4225 affects myBloggie 2.1.3 beta and earlier. Multiple potential SQL injection vulnerabilities allow remote attackers to influence SQL commands via various parameters across add.php, addcat.php, adduser.php, del.php, delcat.php, delcomment.php, deluser.php, edit.php, editcat.php, and ed...

CVE-2005-4240

Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...

CVE-2005-4227

CVE-2005-4227 affects DCP-Portal 6.1.1 with multiple potential SQL injection vectors. The vulnerability list covers parameters in advertiser.php, announcement.php, calendar.php, contents.php, forums.php, go.php, golink.php, inbox.php, index.php, informer.php, news.php, rate.php, search.php, and u...

CVE-2005-4230

CVE-2005-4230 concerns an SQL injection in poll.php of Link Up Gold 2.5 and earlier, exploitable via the number parameter to allow remote execution of arbitrary SQL commands. The core affected software is Link Up Gold (versions up to 2.5 and older). The cited sources (NVD entry) confirm the vulne...

CVE-2005-4217

The CVE-2005-4217 issue affects Perl in Apple Mac OS X Server 10.3.9, where privileges are not properly dropped when using the $

CVE-2005-4232

Jamit Job Board is affected: SQL injection in index.php via the cat parameter for versions 2.4.1 and earlier. The underlying issue is a vulnerable dynamic SQL path in index.php, allowing remote attackers to execute arbitrary SQL commands. The vendor disputes the issue, and CVE records note that s...

CVE-2005-4223

Utopia News Pro (UNP) 1.1.4 is affected by multiple potential SQL injection vulnerabilities that could allow an attacker to run arbitrary SQL commands remotely. The issues are reported in specific input parameters across several PHP scripts: newsid in editnews.php, catid and question in faq.php, ...

CVE-2005-4216

The vulnerability CVE-2005-4216 affects Macromedia Flash Media Server 2.0 r1145, specifically the Administration Service (FMSAdmin.exe). It allows remote attackers to trigger a denial-of-service (application crash) by sending a malformed request (one character) to TCP port 1111. The issue is caus...

CVE-2005-4229

The CVE-2005-4229 entry concerns EveryAuction before or at version 1.53, focusing on the auction.pl component. The vulnerability is an XSS flaw that allows a remote attacker to inject arbitrary web script or HTML through the searchstring parameter. The description notes that the provenance is unk...

CVE-2005-4245

CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...

CVE-2005-4250

CVE-2005-4250 affects mcGallery PRO 2.2 and earlier, with a directory traversal vulnerability that allows remote attackers to read arbitrary files through the language parameter. The NVD entry notes a Partial Confidentiality impact (NETWORK access, low complexity, no authentication), but exploita...

CVE-2005-4212

CVE-2005-4212 affects phpCOIN 1.2.2. A directory traversal vulnerability in coin_includes/db.php permits remote attackers to read arbitrary local files by supplying ".." sequences in the $_CCFG[_PKG_PATH_DBSE] variable. This is a server-side path traversal in the PHP include logic, enabling expos...