CVE-2005-4189

CVE-2005-4189 covers multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 prior to 2.0.6. The issue arises from insufficient input sanitisation in several user-controllable fields (Calendar name when creating calendars; event title when deleting events; Category and Location ...

CVE-2005-4191

The CVE applies to Horde Nag Task List Manager H3, vulnerable in versions before 2.0.4 due to XSS in templates/tasklists/tasklists.inc (tasklist name/description). The root cause is cross‑site scripting in tasklists.inc, enabling remote authenticated users to inject arbitrary script/HTML when cre...

CVE-2005-4202

CVE-2005-4202 describes multiple directory traversal vulnerabilities in LogiSphere 0.9.9j that allow remote attackers to access arbitrary files. Exploitation paths include URL-based sequences (.., ..., ..//), the source parameter to viewsource.jsp (../), and the NS-query-pat parameter to the sear...

CVE-2005-4203

LogiSphere 0.9.9j is affected by CVE-2005-4203: an unrestricted ability to send messages via the msg command can be exploited remotely to cause denial of service by flooding the system with messages. Root cause: lack of restriction on the number of messages. The provided documents do not include ...

CVE-2005-4193

CVE-2005-4193 is an XSS vulnerability in UseBB prior to 0.7, exploitable via the $_SERVER['PHP_SELF'] variable in web requests. The affected component is UseBB’s input handling that processes PHP_SELF; impact is arbitrary scripted HTML in victim pages. The provided docs do not state a fixed versi...

CVE-2005-4200

Multiple unspecified vulnerabilities in MyBulletinBoard MyBB before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199...

CVE-2005-4209

CVE-2005-4209 concerns WorldClient webmail in Alt-N MDaemon 8.1.3. The issue arises from script tags in the Subject header, enabling cross‑site scripting that can prevent users from accessing their Inbox. The vulnerability is described as impacting availability (partial) without affecting confide...

CVE-2005-4207

CVE-2005-4207 concerns a SQL injection vulnerability in the BTGrup Admin WebController Script, where remote attackers can manipulate the application via the Username and Password fields. The issue is described in the NVD entry with a base score of 7.5 (HIGH) and an attack vector of NETWORK with n...

CVE-2005-4200

MyBB before 1.0 contains multiple SQL injection vulnerabilities (CVE-2005-4199 and CVE-2005-4200) across calendar.php, usercp.php, member.php, showthread.php/ratethread.php, and related actions. Root cause: improper sanitization of user-supplied input in various parameters (e.g., calendar.php mon...

CVE-2005-4206

CVE-2005-4206 affects Blackboard Learning and Community Portal System (Academic Suite) versions before 6, via a modified url parameter to frameset.jsp that loads an external URL in a frame, enabling remote redirection and phishing-like page spoofing. The issue’s root cause is the insecure handlin...

CVE-2005-4198

CVE-2005-4198 describes a SQL injection vulnerability in Netref 3.0’s index.php, exploitable via the cat parameter to execute arbitrary SQL commands remotely. The issue’s provenance is unspecified, as notes indicate the details were obtained from third‑party sources. The NVD entry lists a CVSS v2...

CVE-2005-4197

The vulnerability CVE-2005-4197 affects Nortel SSL VPN 4.2.1.6, specifically the tunnelform.yaws component. The issue allows remote attackers to execute arbitrary commands via a crafted link in the a parameter, and these commands run with extra privileges inside a cryptographically signed Java Ap...

CVE-2005-4204

CVE-2005-4204 affects LogiSphere 0.9.9j, where a cross-site scripting (XSS) vulnerability exists that could allow remote attackers to inject arbitrary Javascript via the msg command. The available sources report a persistent description of an XSS issue and note uncertainty whether it is distinct ...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...

CVE-2005-4190

The CVE-2005-4190 issue affects Horde Application Framework prior to 3.0.8, introducing multiple cross-site scripting (XSS) vulnerabilities. Exploitation is possible via several input vectors (identity, Category/Label search, Mobile Phone, Date/Time fields) when importing CSV files and through mo...

CVE-2005-4201

CVE-2005-4201 describes a directory traversal vulnerability in My Album Online 1.0, exploitable remotely via triple dot sequences (".../") in unspecified vectors. According to the NVD entry, it is a network-accepting issue with low attack complexity, no authentication, and partial confidentiality...

CVE-2005-4199

MyBB prior to 1.0 is affected by multiple SQL injection vulnerabilities. The public details identify concrete vectors, notably the month parameter in calendar.php (SQLi), and additional parameters in usercp.php, member.php, and showthread/ratethread.php. This is a documented remote, unauthenticat...

CVE-2005-4194

The vulnerability CVE-2005-4194 affects Sights 'n Sounds Streaming Media Server (MediaServerList.exe) version 2.0.3.a. A buffer overflow allows remote attackers to trigger a denial of service (application crash) by supplying a long query string. There is no remediation or patch information provid...

CVE-2005-4198

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources...

CVE-2005-4192

CVE-2005-4192 affects Horde Mnemo Note Manager H3 prior to 2.0.3. The vulnerability is a cross-site scripting (XSS) flaw in templates/notepads/notepads.inc, allowing remote authenticated users to inject arbitrary script or HTML via the notepad name or description when creating a new notepad. Impa...