CVE-2005-2563

CVE-2005-2563 involves multiple XSS vulnerabilities in Gravity Board X (GBX) 1.1. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the board_id parameter to deletethread.php and (2) the template. The cited sources describe the affected software and the two attack ve...

CVE-2005-2577

Wyse Winterm 1125SE devices running firmware 4.2.09f or 4.4.061f are reported vulnerable to a remote denial of service via a crafted IP packet with a zero in the IP option length field, per CVE-2005-2577. The vulnerability targets the device’s network stack and can cause a crash without requiring...

CVE-2005-2558

Stack-based buffer overflow in the initsyms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long functionname field...

CVE-2005-2572

MySQL, when running on Windows, allows remote authenticated users with insert privileges on the mysql.func table to cause a denial of service server hang and possibly execute arbitrary code via 1 a request for a non-library file, which causes the Windows LoadLibraryEx function to block, or 2 a...

CVE-2005-2573

The CVE-2005-2573 issue affects Oracle MySQL Server on Windows (MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta). The mysql_create_function function in sql_udf.cc uses an incomplete blacklist in a directory traversal check, enabling an attacker to include arbitrary files via...

CVE-2005-2558

Stack-based buffer overflow in the initsyms function in MySQL 4.0 before 4.0.25, 4.1 before 4.1.13, and 5.0 before 5.0.7-beta allows remote authenticated users who can create user-defined functions to execute arbitrary code via a long functionname field...

CVE-2005-2567

CVE-2005-2567 affects SysCP 1.2.10 and earlier. The vulnerability is a PHP remote file inclusion via the language parameter, enabling an attacker to execute arbitrary PHP code on the server. The issue is documented in the CVE entry and corroborated by related advisories; no explicit exploit detai...

CVE-2005-2572

CVE-2005-2572 affects MySQL running on Windows. A remote authenticated user with insert privileges on mysql.func can cause a denial of service (server hang) and possibly arbitrary code execution by requesting a non-library file (LoadLibraryEx blocks) or by invoking functions in a library that mat...

CVE-2005-2561

MYFAQ 1.0 contains multiple SQL injection vulnerabilities reachable via the Theme, SousTheme, Faq, and question parameters across several PHP pages (affichagefaq.php3, choixsoustheme.php3, consultation.php3, insfaq.php3, inssoustheme.php3, instheme.php3, saisiefaqtotale.php3, saisiesoustheme.php3...

CVE-2005-2574

The CVE-2005-2574 entry concerns XMB Forum 1.9.1 where the file xmb.php “extracts and defines all provided variables,” allowing a remote attacker to modify arbitrary server variables such as _SERVER[REMOTE_ADDR] . This is a direct impact on server environment data due to improper input handling. ...

CVE-2005-2562

CVE-2005-2562 is an SQL injection vulnerability in Gravity Board X (GBX) 1.1 that allows remote attackers to bypass authentication via the login field and execute arbitrary SQL commands. Multiple connected documents corroborate injections affecting GBX 1.1, enabling credential bypass and potentia...

CVE-2005-2568

CVE-2005-2568 describes an eval-injection vulnerability in SysCP's template engine affecting SysCP 1.2.10 and earlier. An attacker can supply a string containing code inside { and } that is processed by PHP eval, enabling remote execution of arbitrary PHP. The NVD CVSS data rates impact as PARTIA...

CVE-2005-2570

CVE-2005-2570 affects FunkBoard 0.66CF and possibly earlier releases. A direct request to forums.php can disclose sensitive information by revealing the path in an error message, enabling information disclosure. The available sources state the flaw but do not provide detailed exploit scenarios, a...

CVE-2005-2574

xmb.php in XMB Forum 1.9.1 extracts and defines all provided variables, which allows remote attackers to modify arbitrary server variables such as SERVERREMOTEADDR...

CVE-2005-2578

...

CVE-2005-2357

EMC Navisphere Manager 6.4.1.0.0 is affected by a directory traversal vulnerability exposed via HTTP requests, enabling remote attackers to read arbitrary files using a .. in the URL. Root cause: insufficient HTTP request validation allowing traversal. In iDEFENSE advisory, CAN-2005-2357 (and CAN...

CVE-2005-2585

CVE-2005-2585 affects Mentor ADSL-FR4II router with firmware 2.00.0111. The issue is a denial-of-service condition caused by the router’s active TCP connections state table being consumed by a large number of connections (e.g., port scans). Other connected documents do not provide additional tech...

CVE-2005-2560

CVE-2005-2560 is a cross-site scripting (XSS) vulnerability in CFBB 1.1.0, where an attacker can inject arbitrary script/HTML via the page parameter to index.cfm. The CVSS v2 base score is 4.3 (medium): network access, no authentication, with only partial integrity impact. Affected component: ind...

CVE-2005-2562

SQL injection vulnerability in Gravity Board X GBX 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the login field...

CVE-2005-2470

CVE-2005-2470 describes a buffer overflow in Adobe Reader/Acrobat core plug-ins (affecting Adobe Reader 5.1–7.0.2 and Acrobat 5.0–7.0.2) that can cause a denial of service (crash) and may allow arbitrary code execution via unknown vectors. Public advisories from Red Hat (RHSA-2005:750) and others...