CVE-2005-3078

PunBB before 1.2.8 contains an XSS vulnerability exploitable via the forgotten e-mail feature, allowing remote attackers to inject arbitrary script or HTML. The issue is cataloged as CVE-2005-3078 with a NVD base score of 4.3 (MEDIUM) and an attack vector of NETWORK with no authentication require...

CVE-2005-3066

CVE-2005-3066 affects PerlDiver 1.x; the vulnerability is in perldiver.pl where the query string can be used to inject arbitrary web script/HTML (XSS). It is a remote, unauthenticated issue with MEDIUM base risk per NVD metrics. The vendor initially disputed it but it is acknowledged. The connect...

CVE-2005-3076

CVE-2005-3076 affects Simplog 0.9.1. The vulnerability allows remote attackers to execute arbitrary SQL commands or trigger SQL error messages by supplying invalid parameters to archive.php (pid, blogid, cid, m) or to blogadmin.php (blogid). Descriptions in NVD and CVE listings confirm these SQL ...

CVE-2005-3087

The vulnerability concerns the SecureW2 3.0 TLS implementation, where the pre‑master secret (PMS) is generated using weak random number generators (rand/srand from system time). This weak RNG makes it easier for an attacker to guess the PMS and decrypt sensitive data, as described in the CVE reco...

CVE-2005-3077

CVE-2005-3077 affects Microsoft Internet Explorer 5.2.3 for Mac OS . The vulnerability allows a remote attacker to cause a denial of service (crash) by processing a web page containing malformed attributes in a BGSOUND tag, potentially involving double-quotes in an about: URI. The connected Red H...

CVE-2005-3067

The CVE-2005-3067 entry describes a Cross-site scripting (XSS) risk in perldiver.cgi of PerlDiver 2.x, exploitable by remote attackers through the module parameter to inject arbitrary web script/HTML. The connected documents provide no additional technical details such as affected versions beyond...

CVE-2005-3083

CMS Made Simple 0.10 contains a cross-site scripting (XSS) vulnerability in index.php via the page parameter. Root cause is improper handling of the page parameter leading to script/HTML injection; impact implied is partial integrity compromise. CVSS 2.0 base score: 4.3 (Medium); vector: AV:N/AC:...

CVE-2005-3063

CVE-2005-3063 affects MailGust (v1.9) and describes an SQL injection vulnerability on the password reminder page, exploitable via the email field to execute arbitrary SQL commands. This is evidenced by multiple sources in connected documents (NVD entry, OpenVAS/NASL plugin, and Nessus plugin) sta...

CVE-2005-2710

Format string vulnerability in Real HelixPlayer and RealPlayer 10 allows remote attackers to execute arbitrary code via the 1 image handle or 2 timeformat attribute in a RealPix .rp or RealText .rt file...

CVE-2005-3079

PunBB before 1.2.8 is affected by a file-inclusion vulnerability triggered via the user language selection, allowing an attacker with an account to cause PHP code execution or read local files. The Nessus plugin details a broader set of flaws, including a similar file-inclusion path that can exec...

CVE-2005-3081

CVE-2005-3081 - wzdftpd allows remote authenticated users to execute arbitrary shell commands via shell metacharacters in the SITE command due to missing input sanitising in wzdftpd. Public advisories note this as a remote command execution vulnerability. Debian/DSA-1006-1 fixes the issue in the ...

CVE-2005-3065

CVE-2005-3065 affects MultiTheftAuto 0.5 patch 1 and earlier. The vulnerability allows remote attackers to cause a denial of service (application crash) by sending a crafted command 40 that uses a -1 length, triggering an out-of-bounds read. The available documents do not specify a patch or worka...

CVE-2005-3067

Cross-site scripting XSS vulnerability in perldiver.cgi in PerlDiver 2.x allows remote attackers to inject arbitrary web script or HTML via the module parameter...

CVE-2005-3086

CVE-2005-3086 affects ContentServ 3.1: the admin/about.php endpoint is vulnerable to directory traversal via the ctsWebsite parameter (using .. sequences), allowing remote attackers to read or include arbitrary files. This is publicly documented in NVD and corroborated by Red Hat and CVE listings...

CVE-2005-3068

Summary : CVE-2005-3068 affects the Eric IDE (eric3). Debian security advisory DSA-869-1 states the vulnerability is caused by missing input sanitising in eric, which could lead to arbitrary code execution. Affected releases: eric before 3.7.2; the fix is in eric 3.7.2-1 (and 3.6.2-2 for the rele...

CVE-2005-3085

The CVE-2005-3085 entry describes multiple cross-site scripting (XSS) vulnerabilities in Riverdark Studios’ RSS Syndicator module 2.1.7 (rss.php), allowing remote attackers to inject arbitrary web script or HTML via the forum or topic parameters. Affected component is rss.php within the RSS Syndi...

Apple Mac OS X QuickDraw Manager fails to properly handle corrupt PICT files

Overview Apple Mac OS X QuickDraw Manager contains a buffer overflow that may allow a remote attacker to execute arbitrary code. Description Apple Mac OS X QuickDraw is a 2D graphics library. It is used by several applications, including Safari, Mail, and Finder. QuickDraw is used to render PICT...

CVE-2005-3059

CVE-2005-3059 affects Opera 8.50 on Linux and Windows. The vulnerabilities are described as multiple unspecified issues tied to (1) handling of the must-revalidate cache directive for HTTPS pages and (2) a cookie comment encoding display issue. The connected documents do not provide concrete expl...

CVE-2005-3055

CVE-2005-3055 affects the Linux kernel 2.6.8 through 2.6.14-rc2. A local user-space process can issue a USB Request Block (URB) to a USB device and terminate before completion, causing a stale pointer reference and potential kernel OOPS/Denial of Service. Public sources in connected docs confirm ...

CVE-2005-3054

PHP fopen_wrappers.c vulnerability (CVE-2005-3054) affects PHP 4.4.0 and possibly other versions, where open_basedir with a trailing slash can fail to restrict access to directories whose names are substrings of the target path. This enables PHP scripts in one directory to access files in other d...