CVE-2005-4159

The CVE concerns Simple Machines Forum (SMF) prior to 1.1 rc1 (inclusive) with a potential SQL injection in Memberlist.php via the start parameter. The vendor disputes that it constitutes a true SQL injection, arguing only a single character can be modified, which may be an invalid SQL syntax err...

CVE-2005-4164

CVE-2005-4164 is a SQL injection vulnerability in the view.php component of PHP-addressbook 1.2. An attacker can submit a crafted id parameter to remote-execute arbitrary SQL commands, with impact described as partial confidentiality, integrity, and availability. The NVD entry lists a base score ...

CVE-2005-4163

CVE-2005-4163 is a directory traversal vulnerability in Captcha PHP 0.9, where remote attackers can read arbitrary files via the _tcf parameter. Affected component: Captcha PHP 0.9 (captcha.php); root cause details beyond this are not provided in the supplied documents. Exploitation details, impa...

CVE-2005-4160

The CVE-2005-4160 entry concerns Torrential 1.2 and a directory traversal vulnerability in getdox.php that lets remote attackers read arbitrary files via ".. /" in the query. Connected documents confirm the same vulnerability description and indicate the affected component is getdox.php within To...

CVE-2005-4162

CVE-2005-4162 : An XSS vulnerability exists in ACME PerlCal 2.99.20, in the cal_make.pl component, allowing remote attackers to inject arbitrary web script or HTML via the p0 parameter. The issue stems from insufficient input handling in the affected script, enabling script execution when the pag...

CVE-2005-4159

NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum SMF 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. NOTE: the vendor says that since only one character...

CVE-2005-4164

SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4160

Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "../" sequences in the query string argument...

CVE-2005-4156

CVE-2005-4156 affects Mambo 4.5 (1.0.0) through 4.5 (1.0.9) with magic_quotes_gpc disabled. A remote attacker can read arbitrary files and potentially cause a denial of service via a query string that ends with a NULL character. Root cause: input handling vulnerability allowing unintended file ac...

CVE-2005-4155

CVE-2005-4155 affects ATutor 1.5.1 pl2: registration.PHP permits remote SQL execution via an e-mail address ending with a NULL character that bypasses the PHP regex check. Root cause: input crafted to defeat validation, enabling arbitrary SQL commands. Impact is remote compromise of ATutor via th...

CVE-2005-4153

CVE-2005-4153 affects Mailman 2.1.4–2.1.6, where a crafted message with bad date data could crash the Mailman server (remote DoS). Root cause: improper handling of date data in processed messages. Exploitation details are not provided in the included documents. Remediation in connected advisories...

CVE-2005-3533

CVE-2005-3533 is a buffer overflow in OSH (before 1.7-15) that allows local users to execute arbitrary code via a long current working directory and filename, potentially opening a root shell. Connected sources (Debian DSA-918-1, Ubuntu security notes, OpenVAS entries) corroborate local-exploit i...

CVE-2005-4154

CVE-2005-4154 affects PEAR installer 1.4.2 and earlier. The vulnerability is described as unspecified and allows user-assisted attackers to execute arbitrary code via a crafted package that can run code when the pear command is executed or when the Web/Gtk frontend is loaded. Connected sources co...

CVE-2005-4153

Removed by vendor...

CVE-2005-4157

CVE-2005-4157 concerns Kerio WinRoute Firewall prior to 6.1.3. The vulnerability, described in the public records, allows remote attackers to authenticate to the service using an account that has been disabled, indicating an authentication bypass/weak access control issue. The NVD entry assigns a...

CVE-2005-4158

CVE-2005-4158 affects sudo prior to version 1.6.8p12, where with Perl taint off the variables PERLLIB, PERL5LIB and PERL5OPT are not cleared, enabling a limited local user to influence which libraries a Perl script loads and potentially execute arbitrary code. Public disclosures (e.g., Debian DSA...

CVE-2005-4152

CVE-2005-4152 affects Soti Pocket Controller-Professional 5.0. Remote attackers could turn off, reboot, or hard reset a PDA by sending initialization/command/reset packets to TCP port 5492. Impact is denial of service and potential device unavailability. Root cause involves handling of specific p...

CVE-2005-3532

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...

CVE-2005-3532

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...

CVE-2005-3532

authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pamtally, does not call the pamacctmgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled...