CVE-2005-2023

Technical details about CVE-2005-2023 are not publicly provided in the supplied documents; monitor for updates.

CVE-2005-2024

CVE-2005-2024 affects Razor (razor-agents) prior to version 2.70. The vulnerability is a remote denial-of-service caused by Razor’s handling of certain email headers and unusual HTML messages (malformed headers such as Content-Type). Debian advisories (DSA-738-1) describe the issue as a remote DO...

CVE-2005-2033

Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter...

CVE-2005-2028

MercuryBoard 1.1.4 and earlier is affected by a SQL injection in index.php where unsanitized User-Agent header data is used in a database query, allowing remote attackers to modify data or query the database. The issue is caused by using header content directly in SQL; exploits are described in C...

CVE-2005-2038

Fortibus CMS 4.0.0 is affected by CVE-2005-2038, where remote attackers can modify information of other users (including Admin) via the "My info" page. The available documents confirm the affected product and the vulnerability class (unauthorized modification of user data) but do not provide expl...

CVE-2005-2031

CVE-2005-2031 affects socialMPN and involves multiple SQL injection vectors in PHP scripts: article.php (sid), user.php (uname), viewforum.php (siteid), newtopic.php (username), sections.php (secid or artid), index.php (siteid), and friend.php (sid). The underlying issue is improper input handlin...

CVE-2005-2030

Ultimate PHP Board (UPB) 1.9.6 GOLD stores passwords in the users.dat file with weak encryption and places it under the web document root, enabling remote attackers to obtain credentials via direct access to db/users.dat. The vulnerability notes suggest exploitation could involve CVE-2005-2005 to...

CVE-2005-2035

CVE-2005-2035 concerns SQL injection in the login.asp of Cool Cafe (Cool Café) Chat 1.2.1. The vulnerability lets remote attackers run arbitrary SQL commands through the password field, enabling potential authentication bypass or data access. Affected product: Cool Cafe Chat 1.2.1; vulnerable com...

CVE-2005-2029

The CVE-2005-2029 entry concerns amaroK Web Frontend 1.3. It describes that the globals.inc file is stored under the web root without a .php extension and with insufficient access control, enabling remote attackers to retrieve the database username and password via a direct request to the file. T...

pico33.txt

Multiple vulnerabilities in Pico Server pServ v3.3 discovered by Raphaël Rigo Product: Pico Server pServ Affected Version: 3.3 verified, =3.3 probably too Not affected Version: 3.4 OS affected: all Risk: critical Remote Exploit: yes URL: http://pserv.sourceforge.net/ Overview ======== Pico Server...

Another tcpdump BGP infinite loop vulnerability (CAN-2005-1267)

Hello While working on the FreeBSD Security Advisory for the recent tcpdump issues CAN-2005-1278, CAN-2005-1279, and CAN-2005-1280 I noticed another similar infinite loop DoS vulnerability in the BGP handling code. It affects at least tcpdump 3.8.3 and tcpdump 3.9 snapshots from before May 5. The...

Security fix for the ALT Linux 6 package sudo version 1:1.6.7p5-alt5

June 21, 2005 Dmitry V. Levin 1:1.6.7p5-alt5 - Backported upstream fix so a sudoers entry with sudo ALL no longer overwrites the value of safecmnd CAN-2005-1993...

CVE-2005-1994

Finjan SurfinGate 7.0SP2/SP3 is affected by CVE-2005-1994. The vulnerability allows remote attackers to download blocked files by supplying hex-encoded characters in a filename (demonstrated with "%2e"). The reported impact is partial confidentiality, with no documented integrity/availability imp...

CVE-2005-2002

CVE-2005-2002 corresponds to a SQL injection in Mambo 4.5.2.2 and earlier through the user_rating parameter in content.php, allowing remote attackers to alter SQL queries. The CVE entry is supported by multiple connected advisories and scanners (e.g., OpenVAS/Nessus) referencing Mambo/Open Source...

CVE-2005-2012

paFAQ 1.0 Beta 4 is affected by multiple SQL injection vulnerabilities in the login flow, allowing remote attackers to bypass authentication by manipulating the (1) username or (2) id parameters. The Nessus plugin and CVE records corroborate that the remote PHP/MySQL application is vulnerable to ...

CVE-2005-2014

The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack...

CVE-2005-2004

Vulnerability summary (CVE-2005-2004): Multiple cross-site scripting flaws affect Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier. The issues arise from insufficient sanitization of user input in several scripts, enabling remote attackers to inject arbitrary web script or HTML via any of these pa...

CVE-2005-2013

The CVE-2005-2013 entry concerns paFAQ 1.0 Beta 4, a PHP/MySQL web application. The described vulnerability allows remote attackers to access admin/backup.php directly, which contains a backup of the database including usernames and passwords. This exposure could reveal administrator credentials ...

CVE-2005-2008

CVE-2005-2008 affects Yaws Webserver 1.55 and earlier. A remote attacker can obtain the source code of yaw scripts by requesting a .yaws script with a trailing %00 (null). The root cause is a null-byte handling issue in script requests. Impact is information disclosure of script source; no integr...

CVE-2005-2007

CVE-2005-2007 describes a directory-traversal vulnerability in Edgewall Trac 0.8.3 and earlier. The issue permits remote attackers to read or write arbitrary files by supplying a double-dot path in the id parameter to the (1) upload or (2) attachment scripts. The initial and connected data consis...