CVE-2005-3873

SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2005-3881

SQL injection vulnerability in search.php in AtlantisFAQ Knowledge Base Software 2.03 and earlier allows remote attackers to execute arbitrary SQL commands via the searchStr parameter...

CVE-2005-3882

SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-3873

SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2005-3881

Vulnerability details for CVE-2005-3881: AtlantisFAQ Knowledge Base Software (version 2.03 and earlier) contains a SQL injection in search.php via the searchStr parameter. Root cause: improper input handling in the search feature enables arbitrary SQL execution. Impact: remote attackers can execu...

CVE-2005-3859

CVE-2005-3859 describes a PHP remote file inclusion vulnerability in q-news.php (Q-News 2.0) that allows an attacker to execute arbitrary PHP code via a URL supplied in the id parameter. Affected software: Q-News 2.0. Root cause: improper handling of the id parameter enabling inclusion of remote ...

CVE-2005-3865

CVE-2005-3865 describes a SQL injection vulnerability in the web app component: AllWeb search 3.0 and earlier. The flaw is in the index.php file, where the vulnerable point is the search parameter, allowing remote attackers to execute arbitrary SQL commands. The available documents identify the a...

CVE-2005-3867

CVE-2005-3867 is an XSS vulnerability in RevenuePilot Search Engine Script 1.2.0 and earlier. The issue arises in the REQ parameter used when performing a search, allowing remote attackers to inject arbitrary web script or HTML. The NVD metrics indicate network access with medium complexity, no a...

CVE-2005-3866

CVE-2005-3866 involves a cross-site scripting (XSS) vulnerability in the SearchFeed Search Engine 1.3.2 and earlier . The flaw, likely exploitable via the REQ parameter used during a search, could allow remote attackers to inject arbitrary HTML and web script. The connected documents confirm the ...

CVE-2005-3860

The CVE-2005-3860 entry describes a PHP remote file inclusion vulnerability in Oliver May Athena PHP Website Administration 0.1a, exploitable via a URL in the athena_dir parameter to execute arbitrary PHP code. Connected sources confirm the affected product/variant and the root cause (RFI in athe...

CVE-2005-3864

SQL injection vulnerability in SourceWell prior to or at version 1.1.2 (and conflicting reports for 1.1.3) allows remote attackers to execute arbitrary SQL commands via the cnt parameter in index.php. The issue is exploitable remotely over the network with no authentication required and can lead ...

CVE-2005-3865

SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2005-3880

Omnistar KBase 4.0 and earlier contain SQL injection vulnerabilities in the web front end. Specifically, the parameters (1) article_id in users/comments.php, and (2) category_id and (3) id in users/kb.php allow remote attackers to modify the underlying SQL commands. This relates to the CVE-2005-3...

CVE-2005-3879

CVE-2005-3879 describes multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier. The issues allow remote attackers to execute arbitrary SQL commands by supplying crafted input to sbres_id via details_res.php, refer_friend.php, and report_link.php, and to sbcat...

CVE-2005-3862

CVE-2005-3862 affects the unalz decompressor for ALZ archives. Debian advisories (DSA-959-1) document a buffer overflow caused by insufficient bounds checking when parsing file names, enabling arbitrary code execution via a crafted ALZ archive. Remediation in provided docs: upgrade unalz to versi...

CVE-2005-3873

SQL injection vulnerability in ShockBoard topic.php affects ShockBoard 3.0 and 4.0, allowing remote attackers to inject arbitrary SQL commands via the offset parameter. The vulnerability is documented in CVE-2005-3873 with a NVD base score of 7.5 (HIGH) and network attack vector with no authentic...

CVE-2005-3863

CVE-2005-3863 describes a stack-based buffer overflow in kkstrtext.h of the ktools library (version 0.3 and earlier) used by multiple products (e.g., centericq, orpheus, motor, groan). The overflow can be triggered by a long parameter to the VGETSTRING macro and may allow an attacker to execute a...

CVE-2005-3869

The CVE-2005-3869 entry describes a Cross-site scripting (XSS) flaw in index.php of Google API Search 1.3.1 and earlier, exploitable via hex-encoded values in the REQ parameter to inject arbitrary script/HTML. Affected software: Google API Search 1.3.1 and earlier. Impact per the source: user-fac...

CVE-2005-3883

PHP before 5.1.0 contains a CRLF header-injection flaw in mb_send_mail that can be exploited remotely via the To address to inject arbitrary email headers. Multiple OpenVAS/Nessus results corroborate CVE-2005-3883 as part of broader PHP

CVE-2005-3871

CVE-2005-3871 concerns multiple SQL injection vulnerabilities in Joels Bulletin Board (JBB) v0.9.9rc3 and earlier. The flaws allow remote attackers to inject SQL via (1) nr in topiczeigen.php, (2) forum and (3) zeigeseite in showforum.php, (4) forum in newtopic.php, and (5) tidnr in neuerbeitrag....