CVE-2005-2422

Cross-site scripting XSS vulnerability in index.php in Beehive Forum allows remote attackers to inject arbitrary web script or HTML via the webtag parameter...

CVE-2005-2446

...

CVE-2005-2432

PHPList is affected by an SQL injection in the admin area through the id parameter (e.g., admin or members pages). The underlying issue is manipulating SQL statements via the id argument, enabling potential unauthorized data access or modification as described in the CVE entry. Exploitation statu...

CVE-2005-2420

CVE-2005-2420 affects FtpLocate 2.02 (flsearch.pl) and allows remote command execution by injecting shell metacharacters through HTTP GET. Connected Nessus plugin NASL confirms a remote file inclusion style input manipulation via the fsite parameter, enabling arbitrary command execution on the af...

CVE-2005-2451

CVE-2005-2451 affects Cisco IOS 12.0–12.4 and IOS XR prior to 3.2 when IPv6 is enabled. A crafted IPv6 packet from a local network segment can cause a denial of service (reload) and may allow arbitrary code execution. The vulnerability impact is described as DoS with potential code execution, tri...

CVE-2005-1853

CVE-2005-1853 affects the Gopher client (gopher.c) in version 3.0.5, where temporary files are created insecurely, enabling local privilege escalation. Multiple connected sources (Debian DSA-770-1 / DSA-770-1 advisory notes; Debian OpenVAS entry) confirm the vulnerability and provide remediation ...

CVE-2005-2418

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2403. Reason: This candidate is a duplicate of CVE-2005-2403. Notes: All CVE users should reference CVE-2005-2403 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2447

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-2370. Reason: This candidate is a duplicate of CVE-2005-2370. Notes: All CVE users should reference CVE-2005-2370 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-2426

CVE-2005-2426 concerns FTPshell Server 3.38. The vulnerability allows remote authenticated users to cause a denial of service (application crash) by establishing multiple connections and disconnecting without issuing the QUIT command. The core issue appears to be related to how the server handles...

CVE-2005-2346

CVE-2005-2346 describes a buffer overflow in the Novell GroupWise 6.5 Client that can be triggered by a crafted GWVW02xx.INI language file (long ES02TKS.VEW value in Group Task section), allowing remote code execution. The affected product is the GroupWise 6.5 Client; the underlying issue is a un...

CVE-2005-2440

CVE-2005-2440 affects Thomson Web Skill Vantage Manager: a SQL injection vulnerability exists in login.asp via the svmPassword parameter. Root cause is improper handling/sanitization of user input in the login flow, enabling remote attackers to craft SQL statements executed by the backend. The vu...

CVE-2005-2450

CVE-2005-2450 affects ClamAV up to version 0.86.1, with multiple integer overflows in the TNEF, CHM, and FSG file format processors within libclamav. The vulnerability allows a remote attacker to gain privileges by sending a crafted e-mail message, as stated by multiple advisories. The dependency...

DSquare Exploit Pack: D2SEC_LOTUS_HASH

Name| d2seclotushash ---|--- CVE| CVE-2005-2428 Exploit Pack| D2ExploitPack Description| D2SEC Lotushash Notes|...

CVE-2005-2438

CVE-2005-2438 describes a cross-site scripting (XSS) vulnerability in UseBB 0.5.1 and earlier. The issue allows remote attackers to inject arbitrary JavaScript via the BBCode color value. The provided sources consistently cite the affected product/version and the injection vector, but do not publ...

CVE-2005-2419

The CVE-2005-2419 entry concerns the B-FOCuS Router 312+ where remote attackers can bypass authentication by issuing a direct request to firmwarecfg. The available documents confirm the affected device and the core flaw (authentication bypass via firmwarecfg access), but they provide no precise r...

CVE-2005-2447

CVE-2005-2447 entry is rejected/not used; reference CVE-2005-2370 should be used instead.

CVE-2005-2423

Technical details are not publicly available in the provided documents. Monitor for updates from official advisories to obtain affected products, vulnerable components, impact, and remediation.

CVE-2005-2431

The CVE-2005-2431 entry concerns GForge 4.5 where the (1) lost password and (2) account pending features fail to enforce a limit on outbound emails, allowing a remote attacker to perform a mail flood (send large numbers of messages to arbitrary addresses). Affected component is the email sending ...

CVE-2005-2445

CVE-2005-2445 = SQL injection in Product Cart 2.6. The vulnerability is in viewPrd.asp and allows remote attackers to execute arbitrary SQL commands via the idcategory parameter. Documents indicate a remote attacker could alter queries; no exploit details are provided in the sources. No remediati...

CVE-2005-2439

UseBB 0.5.1 and earlier contain an SQL injection via the search function when magic_quotes_gpc is disabled. The underlying issue is improper handling of user input in the search feature, enabling remote attackers to execute arbitrary SQL commands. No explicit exploitation details are provided her...