CVE-2005-3347

CVE-2005-3347 describes multiple directory traversal flaws in phpSysInfo 2.4 and earlier, impacting phpSysInfo itself and also affecting phpgroupware 0.9.16 and earlier, and egrouwpware prior to 1.0.0.009. The vulnerabilities allow remote attackers to include arbitrary files by supplying dot-dot ...

[Full-disclosure] [ GLSA 200511-15 ] Smb4k: Local unauthorized file access

Gentoo Linux Security Advisory GLSA 200511-15 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

KLA10379 ACE vulnerability in Veritas NetBackup Enterprise Server

A buffer overflow was found in Veritas NetBackup Enterprise Server. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed packet. Original advisories Symantec bulletin Related products...

CVE-2005-3646

Multiple SQL injection vulnerabilities in lib-sessions.inc.php in phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the sessionID parameter in 1 logout.php and 2 index.php...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...

CVE-2005-3648

Multiple SQL injection vulnerabilities in the getrecord function in datalib.php in Moodle 1.5.2 allow remote attackers to execute arbitrary SQL commands via the id parameter in 1 category.php and 2 info.php...

CVE-2005-3644

CVE-2005-3644 describes a memory exhaustion/DoS condition in the Windows Plug and Play (PnP) service. The issue arises in UPnP handling via RPC calls (PNP_GetDeviceList) in Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, where a remote attacker can request a large output bu...

CVE-2005-3650

The CVE-2005-3650 entry concerns the CodeSupport.ocx ActiveX control used by Sony to uninstall First4Internet XCP DRM. The vulnerability arises because the control’s “safe for scripting” setting enables remote attackers to call vulnerable methods (e.g., RebootMachine, IsAdministrator, ExecuteCode...

CVE-2005-3645

CVE-2005-3645 affects phpAdsNew and phpPgAds 2.0.6 and possibly earlier versions. The issue allows remote disclosure of the application installation path and other sensitive information via direct requests to create.php, and (if display_errors is enabled) to lib-updates.inc.php, lib-targetstats.i...

CVE-2005-3649

CVE-2005-3649 affects Moodle 1.5.2, where the script jumpto.php can be abused to redirect users to arbitrary external sites via the jump parameter. The issue is a server-side redirect vulnerability that can be triggered remotely, leading to potential phishing or user redirection scenarios. The pr...

CVE-2005-3646

CVE-2005-3646 concerns multiple SQL injection flaws in lib-sessions.inc.php of phpAdsNew and phpPgAds 2.0.6 (and earlier) . The vulnerabilities allow remoto attackers to inject SQL via the sessionID parameter in both logout.php and index.php . The issue is documented with a high impact (CVSS base...

CVE-2005-3648

CVE-2005-3648 (Moodle 1.5.2) Multiple SQL injection vulnerabilities exist in the get_record function of datalib.php, allowing remote attackers to inject arbitrary SQL via the id parameter in category.php and info.php. Root cause is improper input handling in Moodle’s database queries. Documents d...

[SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 898-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...

DSA-898-1 phpgroupware - programming errors

Bulletin has no description...

gdk security update

CentOS Errata and Security Advisory CESA-2005:810-01 Updated gdk-pixbuf packages that fix several security issues are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The gdk-pixbuf package contains an image loading library used...

CVE-2005-3636

Cross-site scripting XSS vulnerability in SAP Web Application Server WAS 6.10 allows remote attackers to inject arbitrary web script or HTML via Error Pages...

CVE-2005-3641

Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username...

CVE-2005-3637

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3530. Reason: This candidate is a duplicate of CVE-2005-3530. Notes: All CVE users should reference CVE-2005-3530 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-3634

SAP Web Application Server (WAS) 6.10–7.00 is affected by an open redirect in frameset.htm of the BSP runtime. A remote attacker can cause users to log out and be redirected to arbitrary sites by manipulating sap-sessioncmd (close) and sap-exiturl parameters. The vulnerability is tied to the BSP ...

CVE-2005-3637

CVE-2005-3637 is a duplicate of CVE-2005-3530 and is not a separate active entry. Connected data show CVE-2005-3530 documents a Cross-site scripting (XSS) vulnerability in Antville 1.1 that allows remote injection of arbitrary web script/HTML via the notfound.skin error document. Affected version...