CVE-2005-3809

The CVE-2005-3809 vulnerability affects the Linux kernel (2.6.14 up to 2.6.14.3) in nfattr_to_tcp (ip_conntrack_proto_tcp.c) within ctnetlink. The issue allows an attacker to cause a denial-of-service (kernel oops) by sending an update message without private protocol information, triggering a nu...

CVE-2005-3810

CVE-2005-3810 affects the Linux kernel 2.6.14 family (2.6.14 up to 2.6.14.3). The vulnerable component is ip_conntrack_proto_icmp.c in the ctnetlink module, where a lack of ICMP_ID information in an ICMP IPv4 message can cause a kernel oops, i.e., a NULL dereference leading to a denial of service...

GlobalSCAPE Secure FTP Server Input Overflow

This module exploits a buffer overflow in the GlobalSCAPE Secure FTP Server. All versions prior to 3.0.3 are affected by this flaw. A valid user account or anonymous access is required for this exploit to work. This module requires Metasploit: https://metasploit.com/download Current source:...

sNews 1.3 SQL injection.

sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...

SMBCMS v2.1 SQL injection.

SMBCMS v2.1 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/smbcms-v21-sql-injection.html Vendor:www.smbcms.com affected vesion: v2.1 Vuln. Description: SMBCMS search engine contains a flaw that may allow an attacker to carry out an...

NetTerm NetFTPD USER Buffer Overflow

This module exploits a vulnerability in the NetTerm NetFTPD application. This package is part of the NetTerm package. This module uses the USER command to trigger the overflow. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2005-3792

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...

CVE-2005-3796

Direct static code injection vulnerability in adminoptionsmanage.php in AlstraSoft Affiliate Network Pro 7.2 allows attackers to execute arbitrary PHP code via the number parameter. NOTE: it is not clear from the original report whether administrator privileges are required. If not, then this doe...

CVE-2005-3791

HTTP response splitting vulnerability in phpAdsNew and phpPgAds 2.0.6 and earlier allows remote attackers to inject arbitrary HTML headers via adclick.php and possibly other unspecified vectors...

CVE-2005-3795

CVE-2005-3795 affects AlstraSoft Affiliate Network Pro 7.2 and involves multiple cross-site scripting (XSS) vulnerabilities. The affected parameters are (1) Err in admin/index.php and (2) firstname and (3) lastname in index.php. These allow remote attackers to inject arbitrary web script or HTML....

CVE-2005-3801

CVE-2005-3801 affects CounterPane PasswordSafe 1.x and 2.x. Local users can test possible encryption keys against a subset of stored key data without performing the full key derivation function (KDF), reducing brute-force search time. This is the concrete vulnerability described in the available ...

CVE-2005-3794

CVE-2005-3794 concerns AlstraSoft Affiliate Network Pro 7.2, where remote attackers can disclose sensitive information by issuing direct requests to scripts such as togateway.php (and other unspecified scripts). The linked sources consistently describe information disclosure without detailing spe...

CVE-2005-3798

The CVE-2005-3798 entry describes a SQL injection vulnerability in the admin/index.php script of AlstraSoft Template Seller Pro 3.25 . The underlying issue is an injectable username parameter that permits remote attackers to execute arbitrary SQL commands. This is the only concrete detail provide...

CVE-2005-3799

The CVE-2005-3799 entry concerns phpBB version 2.0.18, where a large SQL query can cause an error message that reveals SQL syntax or the full installation path, enabling information disclosure to remote attackers. Documents consistently describe this as an information-leak through error text gene...

CVE-2005-3802

CVE-2005-3802 affects Belkin F5D7232-4 and F5D7230-4 wireless routers with firmware 4.03.03 and 4.05.03. The issue arises in the web management interface: when a legitimate administrator is logged in, remote attackers can access the management interface without authentication. This is a direct by...

CVE-2005-3796

CVE-2005-3796 affects AlstraSoft Affiliate Network Pro 7.2. A vulnerability in admin_options_manage.php allows direct static code injection via the number parameter, enabling arbitrary PHP code execution. Root cause: inadequate input handling/validation in the affected PHP file. Impact per public...

CVE-2005-3800

The CVE concerns Macromedia Contribute Publishing Server (CPS) prior to version 1.11 that uses a weak algorithm to encrypt user passwords within connection keys that rely on shared FTP login credentials. The underlying issue enables disclosure of sensitive information by an attacker who can acces...

CVE-2005-3797

CVE-2005-3797 affects AlstraSoft Template Seller Pro 3.25. PHP remote file inclusion via the config[basepath] parameter allows remote code execution. The vulnerability is documented by NVD; no patch/version info is included in the provided connected documents. Exploitation details or in-the-wild ...

CVE-2005-3791

The vulnerability CVE-2005-3791 affects PHPAdsNew and phpPgAds up to version 2.0.6. The root cause is an HTTP response splitting flaw in adclick.php (and possibly other vectors), allowing remote attackers to inject arbitrary HTML headers. Reported impact: confidentiality unaffected, integrity par...

CVE-2005-3790

CVE-2005-3790 describes multiple cross-site scripting (XSS) vulnerabilities in phpWCMS 1.2.5, specifically in act_newsletter.php where the parameters (1) i and (2) text can be exploited to inject arbitrary script/HTML. The NVD entry provides a MEDIUM base score (4.3) with network access and no au...