CVE-2005-2045

CVE-2005-2045 concerns multiple SQL injection flaws in DUportal Pro 3.4.3 from DUware. The product does not properly sanitize user input before using it in SQL queries, enabling remote attackers to affect database queries. Affected parameters include (1) iChannel to default.asp, (2) iData to deta...

CVE-2005-1526

PHP remote file inclusion vulnerability in configsettings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the configincludepath parameter...

CVE-2005-1524

CVE-2005-1524 affects Cacti 0.8.6d and earlier; a PHP file inclusion vulnerability in top_graph_header.php can allow remote code execution via config[library_path]. Related advisories also cover CVE-2005-1525 and CVE-2005-1526 (SQL/inclusion flaws) with patches in later releases. Debian/OSS advis...

CVE-2005-2047

Affected product: DUware DUpaypal Pro (3.0; 3.1 noted in related CVEs) is affected by multiple SQL injection vulnerabilities. Vulnerability: Improper sanitization of user-supplied input enables remote attackers to craft SQL queries via specific parameters and pages: iCat to cat.asp (and catEdit.a...

CVE-2005-1266

CVE-2005-1266 affects Apache SpamAssassin 3.0.1–3.0.3, where a remote attacker can trigger a denial of service by sending a message with a long Content-Type header and no boundaries, causing CPU consumption. The issue is documented across multiple advisories and vendors, with Debian Red Hat CentO...

CVE-2005-2048

Summary (CVE-2005-2048): DUforum 3.1 (DUware) is affected by multiple SQL injection vulnerabilities due to improper input sanitization. The exploitable parameters are (1) iMsg in messages.asp, (2) iFor in post.asp, (3) iFor in forums.asp, and (4) id in userEdit.asp. This allows remote attackers t...

CVE-2005-2042

The CVE-2005-2042 entry concerns an XSS vulnerability in ajax-spell prior to 1.8. The issue arises from allowing injection of arbitrary script/HTML via event handlers (e.g., onmouseover) in HTML tags, enabling remote attacker-controlled script execution. Affected component: ajax-spell (web UI) be...

CVE-2005-1525

SQL injection vulnerability in configsettings.php for Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-1524

PHP file inclusion vulnerability in topgraphheader.php in Cacti 0.8.6d and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the configlibrarypath parameter...

Fedora Core 3 : sudo-1.6.7p5-30.3 (2005-472)

Tue Jun 21 2005 Karel Zak 1.6.7p5-30.3 - fix 161116 - CVE-2005-1993 sudo trusted user arbitrary command execution Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it...

Cacti Local File Inclusion Vulnerability

The Cacti application running on the remote web server is affected by a local file inclusion vulnerability due to improperly validating user-supplied input to the 'configincludepath' parameter in 'configsettings.php'. A remote attacker can exploit this to execute arbitrary PHP code. %NASLMINLEVEL...

[Full-disclosure] iDEFENSE Security Advisory 06.22.05: Multiple Vendor Cacti Remote File Inclusion Vulnerability

Multiple Vendor Cacti Remote File Inclusion Vulnerability iDEFENSE Security Advisory 06.22.05 www.idefense.com/application/poi/display?id=265&type=vulnerabilities June 22, 2005 I. BACKGROUND Cacti is a round-robin database RRD tool that helps create graphs from database information and is availab...

CVE-2005-2030

Ultimate PHP Board UPB 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat...

CVE-2005-2032

CVE-2005-2032 concerns an unknown vulnerability in lpadmin on Sun Solaris 7/8/9 that allows local users to overwrite arbitrary files. Connected sources document affected products as Solaris with lp patches to remediate (e.g., 107115-20 for Solaris 7 SPARC, 107116-20 for Solaris 7 x86, 109320-22 a...

CVE-2005-2036

The CVE-2005-2036 entry describes a vulnerability in Cool Cafe (Cool Café) Chat 1.2.1 where modifyUser.asp can be exploited via a modified nickname value to allow remote attackers to obtain the administrator password and email address. The NVD/CVE records indicate a network-exposed, low-complexit...

CVE-2005-2034

CVE-2005-2034 describes an XSS vulnerability in BlueCollar iGallery 3.3 where the folder parameter in folderview.asp is not properly sanitized. This allows remote attackers to inject arbitrary script/HTML in pages served to other users. Public sources (NVD/Nessus/CVE lists) confirm the affected s...

CVE-2005-2040

CVE-2005-2040 documents multiple buffer overflows in Heimdal’s telnetd getterminaltype function (pre-0.6.5) that can allow remote code execution. The related entries CAN-2005-0468 and CAN-2005-0469 describe additional telnet client-side overflows (env and LINEMODE) affecting BSD telnet implementa...

CVE-2005-2039

CVE-2005-2039 affects NanoBlogger 3.2.1 and earlier, with unknown vulnerability in various plugins that allows remote attackers to execute arbitrary commands. The connected documents confirm the affected product/versions and the impact (remote code execution) but do not provide specific root caus...

CVE-2005-2022

Technical details about CVE-2005-2022 are not publicly available in the provided documents; no confirmed affected versions, root cause, impact, or remediation are disclosed beyond the brief description. Monitor for updates.

CVE-2005-2033

The CVE concerns i-Gallery by Blue-Collar Productions (version up to 3.3). A directory traversal flaw in folderview.asp allows an unauthenticated user to read arbitrary files and directories via the folder parameter. Connected Nessus data also notes potential XSS issues in i-Gallery