CVE-2005-3849

CVE-2005-3849 describes a cross-site scripting (XSS) vulnerability in the Search module of PmWiki up to version 2.0.12. The issue allows remote attackers to inject arbitrary web script or HTML via the q parameter. The available sources confirm the vulnerability and its description, but do not pro...

CVE-2005-3848

CVE-2005-3848 concerns a memory leak in the Linux kernel’s icmp_push_reply() that can be triggered by crafting a large number of ICMP packets, causing memory consumption and a denial of service. Public details in the initial entry specify Linux kernels before 2.6.12.6 and 2.6.13 are affected, wit...

CVE-2005-3847

CVE-2005-3847 affects Linux kernel 2.6.11 up to but not including 2.6.13 and 2.6.12.6, allowing local users to cause a deadlock by sending SIGKILL to a real-time thread that is dumping core. SUSE/ Debian OpenVOS references confirm the issue and its remediation. The known fix is in 2.6.12.6 via th...

CVE-2005-3844

SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...

CVE-2005-3843

CVE-2005-3843 describes an SQL injection in Nicecoder iDesk 1.0, specifically in faq.php via the cat_id parameter, allowing remote attackers to execute arbitrary SQL commands. The connected documents confirm the vulnerable component (faq.php, cat_id) and the impact (arbitrary SQL execution); no e...

CVE-2005-3845

CVE-2005-3845 describes a SQL injection in invoices.php for EZ Invoice Inc 2.0, exploitable via the i parameter to execute arbitrary SQL commands remotely. The affected component is invoices.php within EZ Invoice Inc 2.0. The vendor notes a patch is available and will be emailed to customers upon...

CVE-2005-3838

The CVE-2005-3838 issue affects IsolSoft Support Center 2.2 and earlier. Multiple SQL injection vulnerabilities exist in search.php, exploitable via the parameters (1) lorder, (2) Priority, (3) Status, (4) Category, (5) searchvalue, and (6) field to execute arbitrary SQL commands remotely. The pr...

CVE-2005-3841

CVE-2005-3841 is a cross-site scripting (XSS) vulnerability in kPlaylist 1.6 (build 400) and possibly other versions. The flaw allows remote attackers to inject arbitrary web script or HTML through the searchfor parameter. According to the provided data, the impact is limited to confidentiality a...

CVE-2005-3842

The CVE-2005-3842 entry concerns a SQL injection vulnerability in index.php of the pdjk-support suite, version 1.1a and earlier. The flaw allows remote attackers to inject arbitrary SQL via the rowstart, news_id, and faq_id parameters, potentially impacting confidentiality, integrity, and availab...

CVE-2005-3846

SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2005-3845

SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL commands via the i parameter. NOTE: the vendor has stated "EZ Invoice, Inc has a patah available. Please email [email protected] and EZI will email you the patch to fix this...

CVE-2005-3840

CVE-2005-3840 describes a SQL injection vulnerability in Omnistar Live (kb.php) affecting version 5.2 and earlier. The issue arises from unsafely processing user-supplied input for the id and category_id parameters, enabling remote attackers to execute arbitrary SQL commands. The description note...

CVE-2005-3844

CVE-2005-3844 concerns a SQL injection vulnerability in the phpWordWordPress PHP News and Article Manager 3.0. The issue allows remote attackers to execute arbitrary SQL commands via parameters: (1) poll and (2) category in index.php, and (3) ctg in an archive action. Affected software is the PHP...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3833

SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL commands via the songid parameter...

CVE-2005-3837

Cross-site scripting XSS vulnerability in the search module in sCssBoard 1.2 and 1.12, and earlier versions, allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter...

CVE-2005-3836

SQL injection vulnerability in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the announce parameter...

CVE-2005-3833

The CVE-2005-3833 entry describes an SQL injection in Tunez

CVE-2005-3835

The CVE-2005-3835 entry documents a PHP remote file inclusion vulnerability in DeskLance 2.3 and earlier, exploitable through a URL parameter (main) in support/index.php to execute arbitrary PHP code. Affected software: DeskLance (desktop/web app)

CVE-2005-3836

CVE-2005-3836 affects DeskLance 2.3 and earlier. The issue is a SQL injection through the announce parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network vectors, low attack complexity, no authentication required, and partial ...