10533 matches found
CVE-2005-3160
Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the 1 album and 2 photo parameters...
CVE-2005-3162
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-3160. Reason: this candidate is a duplicate of CVE-2005-3160. Notes: All CVE users should reference CVE-2005-3160 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
[SECURITY] [DSA 845-1] New mason packages fix missing init script
-------------------------------------------------------------------------- Debian Security Advisory DSA 845-1 [email protected] http://www.debian.org/security/ Martin Schulze October 6th, 2005 http://www.debian.org/security/faq -...
CVE-2005-3175
CVE-2005-3175 concerns Microsoft Windows 2000 before Update Rollup 1 for SP4. The vulnerability permits a local administrator to unlock a computer that was locked by a domain administrator, enabling the local administrator to access the domain session. Connected documents corroborate the affected...
CVE-2005-3166
MediaWiki is affected by an unspecified vulnerability in edit submission handling that allows remote attackers to cause a denial of service (corruption of the previous submission). The affected versions are MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16. The vulnerability is triggered by a...
CVE-2005-3167
The CVE-2005-3167 entry concerns MediaWiki before 1.4.11 with an incomplete blacklist that fails to remove CSS inputs (HTML inline style attributes). This allows remote attackers to execute cross-site scripting (XSS) via Internet Explorer, as the inputs are processed as active content. The vulner...
CVE-2005-3164
CVE-2005-3164 involves the AJP connector in Apache Tomcat (affected versions: 4.0.1–4.0.6 and 4.1.0–4.1.36) as used in Hitachi Cosminexus Application Server and standalone deployments. The vulnerability arises when a connection is broken before POST request body data is sent; this can lead to an ...
CVE-2005-3118
CVE-2005-3118 concerns mason: Mason before 1.0.0 fails to install the init script after configuration, leaving the system without a firewall at boot. Debian’s DSA-845-1 notes this is a programming error and provides fixes across distributions (woody: 0.13.0.92-2woody1; sarge: 1.0.0-2.2; sid: 1.0....
CVE-2005-3168
The CVE-2005-3168 issue affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The SECEDIT ACL application fails to enforce ACLs on folders that appear after a long folder entry when using a security template, leading to potentially less secure permissions than intended. The concrete im...
CVE-2005-3157
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msgsend parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159...
CVE-2005-3157
CVE-2005-3157 describes an SQL injection in PHP-Fusion 6.00.109 caused by unsafely handling the msg_send parameter in messages.php. The vulnerability allows remote attackers to execute arbitrary SQL commands, with a likely impact on confidentiality, integrity, and availability as defined by the C...
CVE-2005-3171
CVE-2005-3171 affects Microsoft Windows 2000 before Update Rollup 1 for SP4. The issue occurs when Event ID 1704 is recorded to indicate that Group Policy security settings were updated, even if the processing fails (for example, Ntuser.pol cannot be accessed). This may cause administrators to be...
CVE-2005-3159
CVE-2005-3159 is a SQL injection vulnerability in PHP-Fusion, specifically in messages.php where the msg_view parameter can be exploited to execute arbitrary SQL. It is described as a different vulnerability from CVE-2005-3157 and CVE-2005-3158, and is rated HIGH (CVSS v2 base score 7.5) with net...
CVE-2005-3165
MediaWiki <= 1.4.9 is affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script or HTML via (1) tags or (2) Extension or sections that bypass HTML style attribute restrictions, notably affecting Internet Explorer clients. The root cause is described as b...
CVE-2005-3165
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via 1 tags or 2 Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet...
CVE-2005-3118
Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot...
CVE-2005-3169
CVE-2005-3169 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4 when the audit directory service access policy is enabled. The vulnerability is that a 565 event message for File Delete Child operations on Active Directory objects is not recorded in the security event log, potentiall...
CVE-2005-3170
CVE-2005-3170 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The LDAP client accepts LDAPS certificates even when the CA is not trusted, enabling attackers to mislead users into thinking they are on a trusted site. No exploitation details are provided in the sources. Remediation...