CVE-2005-3515

Chipmunk Topsites Script is affected by a Cross-site Scripting (XSS) vulnerability in recommend.php where unvalidated input for the ID parameter can inject arbitrary script/HTML. Affected component: recommend.php within Chipmunk Topsites script; vulnerability is due to unsanitized ID parameter le...

CVE-2005-3518

The CVE-2005-3518 entry affects PunBB 1.2.7 and 1.2.8, where the search.php script unsafely handles the old_searches parameter, enabling remote SQL injection. The underlying cause is improper input handling in the database query, allowing arbitrary SQL execution by an attacker. Impact is document...

CVE-2005-3512

Vulnerability: CVE-2005-3512 affects VUBB alpha rc1 (index.php) where the t parameter in the newreply action is vulnerable to reflected XSS. Root cause is improper handling of the t parameter in the newreply flow, enabling injection of arbitrary script/HTML. Impact per provided details is partial...

CVE-2005-3511

CVE-2005-3511 affects Spymac Web OS 4.0. The vulns are multiple cross-site scripting (XSS) flaws in the blogs and notes modules, allowing remote attackers to inject arbitrary script/HTML via various parameters (e.g., blogs: curr, inspire, system, title, entry; caldate; notes: forwardid, del_folde...

CVE-2005-3514

Chipmunk Forum XSS vulnerability CVE-2005-3514 affects the Chipmunk Forum script (Chipmunk Forum

CVE-2005-3519

Multiple PHP file inclusion vulnerabilities affect MySource 2.14.0. The flaws allow remote attackers to execute arbitrary PHP code and include arbitrary local files through include path parameters in new_upgrade_functions.php, init_mysource.php, and various files using INCLUDE_PATH, SQUIZLIB_PATH...

CVE-2005-3521

Summary: CVE-2005-3521 describes a SQL injection in the e107 CMS, specifically the resetcore.php script affecting version 0.617 to 0.6173. The vulnerability permits remote attackers to execute arbitrary SQL, bypass authentication, and inject HTML or script via the (1) a_name parameter or (2) the ...

CVE-2005-3124

syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file...

CVE-2005-3510

CVE-2005-3510 affects Apache Tomcat 5.5.0–5.5.11, allowing a DoS via a huge number of simultaneous directory-list requests, causing CPU exhaustion. The Red Hat advisory RHSA-2010:0602 notes remediation by upgrading the Tomcat component in Red Hat Certificate System to version 5.5.23. Other OSV en...

CVE-2005-3517

Chipmunk Scripts Guestbook vulnerability (CVE-2005-3517) allows remote attackers to cause an error message by crafting a URL containing a single quote in the start parameter of index.php, enabling disclosure of the installation path. Affected software: Chipmunk Scripts Guestbook. Root cause: erro...

CVE-2005-3506

Cross-site scripting XSS vulnerability in proxy.asp in Sambar Server 6.3 BETA 2 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the 1 Remote Proxy Server or 2 Proxy Filter IPs field...

CVE-2005-3501

The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...

CVE-2005-2628

Macromedia Flash 6 and 7 Flash.ocx allows remote attackers to execute arbitrary code via a SWF file with a modified frame type identifier that is used as an out-of-bounds array index to a function pointer...

CVE-2005-3303

The FSG unpacker fsg.c in Clam AntiVirus ClamAV 0.80 through 0.87 allows remote attackers to cause "memory corruption" and execute arbitrary code via a crafted FSG 1.33 file...

CVE-2005-3505

Cross-site scripting XSS vulnerability in the Entropy Chat script in cPanel 10.2.0-R82 and 10.6.0-R137 allows remote attackers to inject arbitrary web script or HTML via a chat message containing Javascript in style attributes in tags such as , which are processed by Internet Explorer...

CVE-2005-3501

The cabdfind function in cabd.c of the libmspack library mspack for Clam AntiVirus ClamAV before 0.87.1 allows remote attackers to cause a denial of service infinite loop via a crafted CAB file that causes cabdfind to be called with a zero length...

CVE-2005-3504

CVE-2005-3504 is a buffer overflow in swcons within IBM AIX 5.2 (with debug malloc enabled) that could allow a remote attacker to trigger a core dump and potentially execute arbitrary code. The connected documents corroborate the affected component (swcons) and the underlying cause (buffer overfl...

CVE-2005-3505

CVE-2005-3505 describes a cross-site scripting (XSS) flaw in the Entropy Chat script used by cPanel versions 10.2.0-R82 and 10.6.0-R137. The underlying issue is that a chat message containing JavaScript in style attributes within tags such as can be processed by Internet Explorer, enabling remot...

CVE-2005-3503

CVE-2005-3503 affects chfn in pwdutils

CVE-2005-3500

CVE-2005-3500 affects ClamAV prior to 0.87.1. The tnef_attachment() function in tnef.c can cause a denial of service by an attacker sending a crafted CAB file that triggers an infinite loop and memory exhaustion by forcing ClamAV to repeatedly scan the same block. Public sources in the connected ...