CVE-2005-4013

PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, allowing remote attackers to read sensitive information such as statistics and the log directory location, and possibly the logdb.dta file. Root cause: weak access permissions on stat.cfg exposed v...

CVE-2005-4026

CVE-2005-4026 affects Geeklog: search.php in Geeklog 1.4.x before 1.4.0rc1 and 1.3.x before 1.3.11sr3. The issue is an information disclosure where invalid datestart and dateend parameters trigger error messages that leak the web server path. This is a remote-style vulnerability that can reveal s...

CVE-2005-4029

WebEOC (pre-6.0.2) is affected by CVE-2005-4029. The issue allows remote attackers to read valid usernames from the HTML source on the WebEOC login page, which could enable further attacks such as brute-forcing to lock out legitimate users. The connected Red Hat and CVE records confirm the same v...

CVE-2005-4021

CVE-2005-4021 affects Gallery 2.0 before 2.0.2. The install log is stored under the web document root with insufficient access control, enabling a remote attacker to retrieve sensitive information via a simple GET request. Nessus plugin NASL-21019 corroborates that the installation data directory...

MailEnable IMAPD W3C Logging Buffer Overflow

This module exploits a buffer overflow in the W3C logging functionality of the MailEnable IMAPD service. Logging is not enabled by default and this exploit requires a valid username and password to exploit the flaw. MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1...

CVE-2005-4005

CVE-2005-4005 affects PHP-Fusion 6.00.109: SQL injection in messages.php via the srch_text parameter in the Search and Sort option, allowing a remote attacker to obtain path information and potentially execute arbitrary SQL commands. No remediation details are provided in the supplied documents; ...

CVE-2005-4007

SAPID CMS prior to 1.2.3.03 contains multiple unspecified vulnerabilities related to newly registered users and possible authorization checks, affecting the files mvc/controller/user_request_analysis.inc.php and usr/xml/ddc/authorization.xml. The exact impact and exploit paths are not detailed in...

CVE-2005-4006

SAPID CMS versions before 1.2.3.03 are vulnerable to an authentication bypass via direct requests to usr/system files (insert_file.php, insert_image.php, insert_link.php, insert_qcfile.php, edit.php). The issue enables remote attackers to bypass authentication and potentially obtain unauthorized ...

CVE-2005-3994

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3967. Reason: This candidate is a duplicate of CVE-2005-3967. Notes: All CVE users should reference CVE-2005-3967 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3995

Format string vulnerability in the dosyslog function in the OBEX server obexsrv.c for Sobexsrv before 1.0.0-pre4, when the syslog -S function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands...

CVE-2005-3997

CVE-2005-3997 (Zen Cart) affects Zen Cart 1.2.6d and earlier. Under certain PHP configurations, remote attackers can obtain sensitive information by directly requesting files in admin/includes, leaking the web server path in error messages. Affected files include: graphs/banner_daily.php, graphs/...

CVE-2005-4001

CVE-2005-4001 affects phpYellowTM Pro/Lite Edition 5.33. Two SQL injection vectors are described: (1) haystack parameter to search_result.php and (2) ckey parameter to print_me.php, enabling remote execution of arbitrary SQL. The NVD metrics indicate base score 7.5 (HIGH) with network attack vect...

CVE-2005-3993

CVE-2005-3993 affects MailEnable Professional 1.6 and earlier and MailEnable Enterprise 1.1 and earlier. The issue is multiple unspecified vulnerabilities that allow a denial of service (crash) via invalid IMAP commands. The provided documents do not specify the root cause details, affected versi...

CVE-2005-3999

The CVE-2005-3999 entry describes a reflected XSS in SiteBeater MP3 Catalog (version 2.03 and earlier) via the Search.asp page, where unspecified parameters can be injected with arbitrary script/HTML. This vulnerability enables remote attackers to execute script in a victim’s browser. The availab...

CVE-2005-3994

...

HobSR SQL inj. vuln

HobSR SQL inj. vuln Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hobsr-sql-inj-vuln.html vendor:www.hobosworld.com/scripts.php?id=5 affected version:1.0 and prior Product Description: HobSR is an top sites script where users sign up to have their...

CVE-2005-3998

CVE-2005-3998 is an XSS vulnerability in Solupress News 1.0 and earlier, occurring in the search.asp component when processing the keywords parameter. The provided sources indicate an unauthenticated remote attacker could inject arbitrary script or HTML via this input, leading to potential client...

CVE-2005-4002

CVE-2005-4002 affects WebEOC prior to 6.0.2. The vulnerability arises because the same secret key is used across all installations, enabling anyone with the key to decrypt data from any WebEOC deployment. The available documents do not specify a fixed root cause mechanism beyond the shared-key is...

Warm Links XSS vuln.

Warm Links XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/warm-links-xss-vuln.html vendor:http://www.mrcgiguy.com/wldetails.shtml affected version:v.1.0.0 and prior Product Description: Directory style index allows for easy navigation Doe...

CVE-2005-4000

CVE-2005-4000 describes a Cross-site scripting (XSS) vulnerability in the SiteBeater News System (archive.asp) ≤ 4.00, exploitable remotely via the sKeywords parameter. The provided sources state that an attacker can inject arbitrary web script or HTML, leading to potential user session or page c...