CVE-2005-4195

CVE-2005-4195 describes multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) versions up to 1.3.1 (and note that vector 1 was reportedly present in 1.4.0). The affected entry lists five input points: (1) ParentId in SPT--BrowseResources.php, (2) ResourceId in SPT--FullRecord.php, ...

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to an information disclosure vulnerability when using an authenticating proxy server for HTTPS communications. Exploitation of this issue could result in an attacker gaining a user's authentication credentials. This issue only exists when the...

EncapsGallery SQL inj. vuln.

EncapsGallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html vendor:http://powerdev.com.ru/products/encapsgallery/ affected version:1.0.0 and prior Product Description: Photogallery, supports differen...

CVE-2005-4178

Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations...

CVE-2005-4178

CVE-2005-4178 refers to a buffer overflow in Dropbear SSH server prior to 0.47. The vulnerability arises from a memory allocation issue caused by an incorrect order of operations in an input handling path, allowing an authenticated user to execute arbitrary code on the server with the server user...

[SECURITY] [DSA 919-1] New curl packages fix potential security problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 919-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 919-1] New curl packages fix potential security problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 919-1 [email protected] http://www.debian.org/security/ Martin Schulze December 12th, 2005 http://www.debian.org/security/faq -...

CVE-2005-4177

The CVE-2005-4177 entry concerns an XSS vulnerability in Magic Book Personal and Professional 2.0, specifically in the book.cfm component where the StartRow parameter is not properly sanitized. The vulnerability could allow remote attackers to inject arbitrary web script or HTML, as documented by...

DSA-919-2 curl - buffer overflow

Bulletin has no description...

CVE-2005-4171

The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP...

CVE-2005-4165

CVE-2005-4165 affects ASP-DEV ASP Resources Forum. The vulnerability allows remote SQL injection through (1) forum_id in forum.asp, (2) unspecified params in register.asp, and (3) the Search For field in search.asp, enabling arbitrary SQL execution. The NVD notes a base score of 7.5 (HIGH) with n...

CVE-2005-4172

CVE-2005-4172 affects eFiction 1.0, 1.1, and 2.0. The issue allows remote attackers to obtain sensitive information by requesting storyblock.php with no arguments, causing a PHP error message that leaks the full pathname. This is an information-disclosure flaw arising from an error message reveal...

CVE-2005-4166

The CVE-2005-4166 entry documents a Cross-site Scripting (XSS) vulnerability in DUWare DUportal Pro 3.4.3, exploitable via the result parameter in password.asp. The affected component is password.asp within DUportal Pro 3.4.3; the root cause is input handling allowing script/HTML injection. The p...

CVE-2005-4176

CVE-2005-4176 affects AWARD BIOS Modular 4.50pg and is caused by failure to clear the keyboard buffer after BIOS password reads, enabling local users to read the password from physical memory. The vulnerability is local in scope with low base score (2.1); details on exploit code or practical in‑t...

CVE-2005-4174

CVE-2005-4174 affects eFiction versions 1.0, 1.1, and 2.0. The issue allows remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether the flaw originates from eFiction itself or from improper system administration (e.g., leftover u...

CVE-2005-4169

CVE-2005-4169 affects eFiction 1.0 with multiple SQL injection vulnerabilities. Specifically, remote attackers can inject SQL through the let parameter in authors.php (viewlist action) and the sid parameter in viewstory.php. The issue is documented in NVD/NASL/Nessus entries among related vulnera...

CVE-2005-4167

CVE-2005-4167 affects eFiction 1.0 and 1.1, where the let parameter in titles.php’s viewlist action is not sanitized, enabling stored or reflected XSS by remote attackers to inject arbitrary script/HTML. The vulnerability arises from unsanitized user input used to generate dynamic pages, allowing...

CVE-2005-4168

CVE-2005-4168 affects eFiction versions 1.0, 1.1, and 2.0. The vulnerabilities are SQL injections in two inputs: (1) the let parameter in the titles.php viewlist action, and (2) the username. The issue allows remote attackers to execute arbitrary SQL commands. The available documents do not provi...

CVE-2005-4171

The CVE reports a remote PHP code execution in eFiction 1.1 when image-upload is allowed. An uploaded file named with a .php extension can start as a GIF (passes image validation) but contains PHP code that gets executed by the web server, enabling arbitrary code execution. The vulnerability stem...

CVE-2005-4159

NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum SMF 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character...