10533 matches found
CVE-2005-3549
CVE-2005-3549 describes a direct code injection vulnerability in Invision Power Board 2.0.1 Task Manager. The flaw allows limited remote attackers to execute arbitrary code by placing a target file reference in the Task PHP File To Run field and selecting Run Task Now. The affected software is In...
CVE-2005-3589
The CVE-2005-3589 entry describes a buffer overflow in FileZilla Server Terminal (0.9.4d and earlier) that enables remote denial of service by sending an excessively long USER command to the FTP server. Connected documents corroborate a Denial of Service vector against the FileZilla FTP Server Ad...
CVE-2005-3578
CVE-2005-3578 affects Walla TeleSite 3.0 and earlier due to an SQL injection in ts.exe (ts.cgi) that allows remote attackers to inject arbitrary SQL via the sug parameter. The NVD entry lists a network attack vector with low complexity and no authentication, yielding partial confidentiality, inte...
CVE-2005-3573
CVE-2005-3573 affects Mailman 2.1.4–2.1.6 with two DoS vectors: (1) UTF-8 handling in attachment filenames can crash the server, and (2) malformed date handling can crash the Mailman service. Connected advisories (RHSA-2006:0204, Debian DSA-955-1, CentOS/CESA-2006:0204) document these issues and ...
CVE-2005-3561
CVE-2005-3561 is rejected/not used; reference CVE-2005-2954 instead.
CVE-2005-3568
The CVE-2005-3568 issue affects IBM DB2 Content Manager prior to 8.2 Fix Pack 10, where the db2fmp process can enter a CPU-intensive loop (DoS) when importing a corrupted Microsoft Excel file. The underlying cause is a corrupted Excel file triggering text search processing to loop. Impact is Deni...
CVE-2005-3542
CVE-2005-3542 is a reservation duplicate of CVE-2005-3508. The connected document CVE-2005-3508 describes a SQL injection in Gallery (Galerie) 2.4 where the galid parameter allows remote attackers to execute arbitrary SQL commands via showGallery.php.
CVE-2005-3544
** vuln: XMB 1.9.3** has an XSS in u2u.php that lets remote attackers inject arbitrary scripts via the username parameter. The vulnerability arises from insufficient input sanitization in the web interface, enabling script execution in the victim’s browser. No explicit exploit details, affected v...
CVE-2005-3552
CVE-2005-3552 affects PHP-Kit 1.6.1 RC2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow a remote attacker to inject arbitrary script/HTML via several vectors, including login/profile.php, login/userinfo.php, admin/admin.php, imcenter.php, referer statistics,...
CVE-2005-3555
CVE-2005-3555 refers to multiple SQL injection vulnerabilities in PHPlist 2.10.1 and earlier. The issue allows authenticated remote attackers with administrator privileges to execute arbitrary SQL commands via the id parameter on the (1) editattributes page or (2) admin page. Affected software: P...
CVE-2005-3558
CVE-2005-3558 affects OSTE 1.0, with a PHP file inclusion vulnerability in index.php. The issue allows remote attackers to execute arbitrary code via the (1) page and (2) site parameters. The description indicates that the vulnerability stems from PHP file inclusion, leading to potential code exe...
CVE-2005-3583
The CVE-2005-3583 entry concerns Oracle/Sun Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.2_08, 1.4.2_09, and 1.5.0_05 (and possibly others) that allow remote attackers to cause a denial of service by sending a crafted serialized object (e.g., a font object), whic...
CVE-2005-3560
CVE-2005-3560 affects Zone Labs products (ZoneAlarm Pro 6.0, ZoneAlarm Internet Security Suite 6.0, ZoneAlarm Anti-Virus 6.0, ZoneAlarm Anti-Spyware 6.0–6.1, and ZoneAlarm 6.0). The issue allows remote attackers to bypass the product’s Advanced Program Control and OS Firewall filters by sending U...
CVE-2005-3567
The CVE-2005-3567 entry concerns the slapd daemon in IBM Tivoli Directory Server (ITDS) versions 5.2.0 and 6.0.0. It describes a vulnerability where binds using SASL EXTERNAL can bypass authentication, enabling an attacker to modify and delete directory data via unspecified attack vectors. The co...
CVE-2005-3550
CVE-2005-3550 affects toendaCMS prior to 0.6.2, where the admin.php engine allows directory traversal via the id_user parameter, enabling remote access to arbitrary files. Connected sources also document additional vulnerabilities in toendaCMS
CVE-2005-3584
CVE-2005-3584 is a cross-site scripting (XSS) vulnerability in PhpWebThings 1.4.4, exploitable through forum.php via the forum parameter. The underlying issue is insufficient input sanitization for that parameter, enabling remote attackers to inject arbitrary web script or HTML. The connected doc...
CVE-2005-3574
CVE-2005-3574 affects iCMS (PHP) via index.php. The vulnerability allows remote attackers to include arbitrary files through the page parameter, enabling a network-based attack with no authentication. The CVSSv2 base metrics in the provided data indicate a MEDIUM severity, with partial confidenti...
CVE-2005-2659
CVE-2005-2659 is a buffer overflow in the LZX decompression path of CHM Lib (chmlib) 0.35, used by KchmViewer. Root cause: overflow in LZX decompression. The impact and attack vectors are described as unknown in initial sources; later advisories (Debian DSA-886-1 and related OpenVAS entries) refe...
CVE-2005-3576
CVE-2005-3576 affects ts.exe in Walla TeleSite 3.0 and earlier. The vulnerability arises when an article number is supplied in the tsurl parameter, allowing remote attackers to access privileged information. The available documents confirm the affected software/component and the impact as informa...
