10533 matches found
CVE-2005-3955
CVE-2005-3955 affects MagpieRSS 7.1 as used in blogBuddiesv 0.3 and Jaws 0.6.2, allowing remote attackers to inject arbitrary scripts via (1) the url parameter to magpie_debug.php and (2) the rss_url parameter to magpie_slashbox.php and simple_smarty.php. The documented impact is cross-site scrip...
CVE-2005-3930
SQL injection vulnerability in index.php in N-13 News 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2005-3950
CVE-2005-3950 affects NuFW’s nuauth component: versions 1.0.x prior to 1.0.16 and the 1.1 line are susceptible to a denial-of-service via malformed packets sent by authenticated users over the network. The issue is mitigated by applying the vendor fix (NuFW 1.0.16 and later / 1.1 line as applicab...
CVE-2005-3937
The CVE-2005-3937 entry concerns a SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earlier. The flaw allows remote attackers to execute arbitrary SQL commands by manipulating the cid parameter in one of four scripts: selloffers.php, buyoffers.php, products.php, or pr...
CVE-2005-3948
CVE-2005-3948 is a directory traversal vulnerability in PHPAlbum
CVE-2005-3931
CVE-2005-3931 : A SQL injection flaw exists in default.asp of ASP-Rider 1.6 , allowing remote attackers to inject arbitrary SQL commands via the HTTP Referer. The vulnerability targets the input handling in that page/file, enabling unauthorized data access or manipulation as described in the publ...
CVE-2005-3942
CVE-2005-3942 pertains to Orca Knowledgebase, affected in version 2.1b and earlier. The vulnerability is a SQL injection in the knowledgebase-control.php component, exploited via the qid parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents do not provide...
CVE-2005-3959
CVE-2005-3959 affects FreeWebStat 1.0 rev37. It describes multiple cross-site scripting (XSS) vulnerabilities where user-supplied input in the (1) site, (2) jsref, (3) jsres, (4) jscolor parameters to pixel.php and (5) the search key to stat.php are echoed into logdb.html without sanitization. Th...
CVE-2005-3930
The CVE-2005-3930 entry concerns N-13 News 1.2 where a vulnerability in index.php allows SQL injection through the id parameter. The underlying issue enables remote attackers to execute arbitrary SQL commands (as described in the initial record). The available documents do not specify affected ve...
CVE-2005-3952
CVE-2005-3952 describes an SQL injection in PHP Labs Top Auction. The vulnerability affects the viewcat.php script and could allow remote attackers to modify or retrieve data via the (1) category, (2) type parameters, or (3) certain search parameters. The root cause is unsafely handled user input...
CVE-2005-3946
CVE-2005-3946 affects Opera 8.50, where a Java applet with a large string argument to the removeMember JNI method of the com.opera.JSObject class can cause a denial of service (crash). The available documents identify the vulnerable component and the nature of the impact but do not provide a reme...
CVE-2005-3956
DMANews 0.904 and 0.910 are affected by multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to inject arbitrary SQL commands through (1) the id parameter in a comments action and (2) the sortorder and (3) display_num parameters in a news_list action. The provided...
CVE-2005-3945
The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service CPU consumption via a flood of SYN packets that produce identical hash values, which slo...
CVE-2005-3940
CVE-2005-3940 affects Orca Ringmaker and specifically the vulnerable script ringmaker.php in version 2.3c and earlier. The underlying issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the start parameter. The description (from NVD and CVE records) sta...
CVE-2005-3960
CVE-2005-3960 affects Kadu versions 0.4.2 and 0.5.0pre. The issue allows remote attackers to cause a denial of service by sending a malformed message (potentially with incomplete information). The provided connected documents confirm the affected product/version and the impact (availability), but...
CVE-2005-3945
The CVE-2005-3945 entry describes a vulnerability in the SynAttackProtect protection of Microsoft Windows 2003 (before SP1) and Windows 2000 (before SP4 with Update Roll-up). The issue arises from using a hash of predictable data, which enables a remote attacker to cause high CPU usage by sending...
CVE-2005-3957
Technical details for CVE-2005-3957 are not publicly available in the provided documents. No concrete affected products, versions, or impact are specified here. Monitor for updates.
CVE-2005-3935
SocketKB 1.1.0 and earlier is affected by a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL via the (1) node and (2) art_id parameters. The vulnerability’s root cause is improper handling of SQL queries related to these parameters, enabling potentially partial to...
CVE-2005-3958
The CVE-2005-3958 entry identifies a SQL injection vulnerability in Entergal MX 2.0, specific to index.php via the (1) idcat parameter in a showcat action and (2) the action parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the web i...