10533 matches found
CVE-2005-3566
CVE-2005-3566 affects VERITAS Cluster Server for UNIX prior to 4.0MP2. It describes a buffer overflow via a long VCSI18N_LANG environment variable that can allow a local user to execute arbitrary code through multiple ha commands (haagent, haalert, haattr, hacli, hacli_runcmd, haclus, haconf, had...
CVE-2005-3543
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the forumids parameter...
CVE-2005-3577
This CVE-2005-3577 describes a Cross-site Scripting (XSS) vulnerability in Walla TeleSite 3.0 and earlier, exploitable via the sug parameter in ts.exe (ts.cgi). The underlying issue is improper handling of user input in the CGI component, leading to injection of arbitrary web script/HTML when an ...
CVE-2005-3553
CVE-2005-3553 describes multiple SQL injection vulnerabilities in include.php of PHPKIT 1.6.1 R2 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via (1) the id parameter when used with login/userinfo.php, and (2) the session parameter (the PHPKITSID variable). The...
CVE-2005-3575
CVE-2005-3575 affects Cyphor 0.19 and earlier. The vulnerability is an SQL injection in show.php via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Documented impact per CVSS indicates partial confidentiality, integrity, and availability impacts (base score 7.5; ne...
CVE-2005-3563
CVE-2005-3563 is a duplicate of CVE-2005-2956. Connected records describe the actual issue under CVE-2005-2956: ATutor 1.5.1 (and possibly earlier) stores temporary chat logs under the web document root with insufficient access control and predictable filenames, allowing remote attackers to obtai...
CVE-2005-3557
Technical details about CVE-2005-3557 are not publicly provided in the connected documents. No affected versions, root cause, exploit info, or remediation are specified here. Monitor for updates.
CVE-2005-3551
CVE-2005-3551 concerns toendaCMS prior to 0.6.2, where user account and session data are stored in the web root as XML files. An unauthenticated attacker can retrieve these files via direct HTTP requests, potentially exposing password hashes and other sensitive information. The core issue is impr...
CVE-2005-3591
CVE-2005-3591 describes a vulnerability in the Macromedia Flash plugin where Flash.ocx (Windows, 7.0.19.0 and earlier) and libflashplayer.so (Unix, before 7.0.25.0) allow a remote attacker to trigger a denial of service and potentially execute arbitrary code via parameters to the ActionDefineFunc...
CVE-2005-3548
CVE-2005-3548 affects Invision Power Board (IP.Board) 2.0.1: a directory traversal in the Task Manager component (Task PHP File To Run field) allows limited remote file inclusion via .., enabling network-accessible exploitation. According to the NVD entry, the attack vector is NETWORK with LOW co...
CVE-2005-3556
PHPlist 2.10.1 and earlier are affected by multiple XSS vulnerabilities that allow remote script/HTML injection via numerous parameters (for example, listname in admin/editlist.php; title in admin/spageedit.php; title field in admin/template.php; filter, delete, and start in admin/eventlog.php; i...
CVE-2005-3592
The CVE-2005-3592 entry documents a path disclosure vulnerability in CuteNews 1.4.0 and earlier. An attacker can trigger an error message (for example by supplying multiple ../ sequences in the archive parameter) to obtain the installation path of the application. This is a information-disclosure...
CVE-2005-3565
The CVE-2005-3565 entry matches HP-UX Trusted Mode remshd remotely exploitable behavior. Affected software: HP-UX B.11.00, B.11.11, B.11.23; vulnerable component is the remshd daemon running in Trusted Mode. The underlying issue enables remote unauthorized access (no local user interaction requir...
CVE-2005-3587
CVE-2005-3587 affects ClamAV up to version 0.87.1. The issue is an improper boundary check in petite.c that could allow attackers to perform unknown attacks via unknown vectors. Public mentions anchor the vulnerability in advisories (Mandrake MDKSA-2005:205; GLSA-200511-04) and the OSV/DEBIAN/NVD...
CVE-2005-3570
CVE-2005-3570 affects Horde webmail/application framework versions prior to 2.2.9. The vulnerability arises from unescaped error messages, enabling a remote attacker to inject arbitrary scripts or HTML (XSS) via not properly escaped error messages. Technical references in connected documents conf...
CVE-2005-3344
The CVE-2005-3344 issue affects Horde Groupware/Horde3 where the default installation ships with an administrative account that has a blank password. This enables unauthenticated remote access to administrative functions, potentially compromising the system. Debian’s DSA-884-1 advisory fixes Hord...
CVE-2005-3546
suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...
CVE-2005-3582
CVE-2005-3582 affects ImageMagick before 6.2.4.2-r1. Local users in the portage group can escalate privileges by placing a malicious shared object in the Portage temporary build directory, which is added to the runtime search path and loaded by executables. The issue stems from RUNPATH handling i...