CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3834

CVE-2005-3834 : An XSS vulnerability exists in Tunez (versions 1.21 and earlier) in search.php, exploitable via the searchFor parameter. Remote attackers can inject arbitrary web script or HTML. Affected software/component: Tunez 1.21 and earlier; vulnerable parameter: searchFor in search.php. Im...

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

CVE-2005-3832

CVE-2005-3832 describes a stack-based buffer overflow in CxUux60.dll and CxUux60u.dll used by SpeedProject products (Squeez 5.0 Build 4285; SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The vulnerability allows user-assisted attackers to execute arbitrary code via a ZIP archive containing...

CVE-2005-3831

The CVE-2005-3831 issue is a stack-based buffer overflow in two DLLs, CxZIP60.dll and CxZIP60u.dll, used by SpeedProject products (ZipStar 5.0 Build 4285, Squeez 5.0 Build 4285, SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The overflow is triggered by processing a ZIP archive containing ...

CVE-2005-3827

CVE-2005-3827 describes an SQL injection in AgileBill 1.4.92 and earlier, via the id parameter in the product_cat function/endpoint. The vulnerability allows remote attackers to execute arbitrary SQL commands, with CVSS v2 base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P and a base score of 7.5 (HIGH). A...

CVE-2005-3832

Stack-based buffer overflow in 1 CxUux60.dll and 2 CxUux60u.dll, as used in SpeedProject products including a Squeez 5.0 Build 4285, and b SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2005-3830

Affected software/issue. ActiveCampaign SupportTrio 1.4 and earlier is affected by a directory traversal vulnerability in index.php, allowing remote attackers to read or include arbitrary files via the page parameter. This is the root cause described as a directory traversal issue, with potential...

CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...

CVE-2005-3829

CVE-2005-3829 affects ActiveCampaign KnowledgeBuilder 2.4 and earlier. The issue allows remote attackers to cause a denial-of-service by supplying an invalid category parameter, which triggers a large number of SQL queries. The available documents confirm the vulnerability scenario and severity (...

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

CVE-2005-3821

Cross-site scripting XSS vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name...

CVE-2005-3821

Cross-site scripting XSS vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name...

CVE-2005-3812

CVE-2005-3812 affects freeFTPd 1.0.10, where remote authenticated users can trigger a denial of service by sending a PORT command with missing arguments, causing a null dereference and crash. The issue is corroborated by multiple linked advisories and scanners (NVD/Nessus/OpenVAS entries) and is ...

CVE-2005-3823

CVE-2005-3823 affects vTiger CRM 4.2 and earlier. The Users module allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to eval. The connected sources provide no explicit remediation details; update/patch information is not inc...

CVE-2005-3825

The CVE-2005-3825 entry concerns a SQL injection in Comdev Vote Caster (version 3.1 and earlier) via the campaign_id parameter in a result action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the NVD listing a CVSSv2 base score of 7.5 (HIGH) and a network atta...

CVE-2005-3820

vTiger CRM <= 4.2 is affected by multiple directory traversal vulnerabilities in index.php (Leads module) where, due to improper handling of .. and null byte sequences in the module and action parameters, an attacker can read or include arbitrary files and potentially execute PHP code. The iss...

CVE-2005-3813

The CVE-2005-3813 entry concerns MailEnable’s IMAP service (meimaps.exe) in MailEnable Professional 1.7 and Enterprise 1.1. The vulnerability arises from incorrect handling of mailbox names during the RENAME command, allowing an authenticated remote attacker to trigger a denial of service (IMAP s...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...

CVE-2005-3822

CVE-2005-3822 affects vTiger CRM 4.2 and earlier, with multiple SQL injection flaws allowing remote attackers to run arbitrary SQL via the login form username or the EditView–Contacts record parameter. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network access, minimal authenticat...