CVE-2005-1945

Cross-site scripting XSS vulnerability in the converthighlitewords function in Invision Blog before 1.1.2 Final allows remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data...

CVE-2005-1943

CVE-2005-1943 : The Loki download manager 2.0 contains multiple SQL injection vulnerabilities that could allow remote attackers to execute arbitrary SQL commands via (1) the password field to default.asp or (2) the cat parameter to catinfo.asp. The connected documents confirm the affected product...

CVE-2005-1957

The vulnerability concerns mtnpeak.net File Upload Manager, where an improper authentication check allows a remote attacker to modify a base64-encoded file parameter to perform privileged actions. Specifically, the affected component may be exploited to (1) read arbitrary files via the view actio...

CVE-2005-1942

Cisco switches that support 802.1x security are affected by CVE-2005-1942, where remote attackers can bypass port security and access the VLAN by spoofing Cisco Discovery Protocol (CDP) messages. The vulnerability arises from CDP message spoofing enabling bypass of port security, enabling partial...

CVE-2005-1973

CVE-2005-1973 affects Java Web Start in J2SE 5.0 and 5.0 Update 1, where applications can assign permissions to themselves and gain privileges. The connected documents corroborate this vulnerability and its privilege-escalation risk, but do not provide a patch version or explicit remediation steps.

CVE-2005-1953

CVE-2005-1953: Heap-based buffer overflow in the CGI extension for Pico Server (pServ) 3.3 allows remote attackers to execute arbitrary code via a long HTTP request. Root cause is a heap overflow in the CGI component; exploitation status is not described in the provided documents. No patch/remedi...

CVE-2005-0563

Microsoft Outlook Web Access (OWA) for Exchange Server 5.5 contains a cross-site scripting (XSS) vulnerability in the HTML encoding used in Compose New Message, allowing an attacker to cause script execution in the user’s context via a specially crafted email (encoded javascript: URL in an IMG ta...

CVE-2005-1954

CVE-2005-1954 affects the Singapore 0.9.11 application. Affected component appears to be PHP-based templates/files: admin.class.php and any .tpl.php under templates/admin_default/ or templates/default/. An error message reveals the filesystem path, enabling an attacker to obtain sensitive informa...

CVE-2005-1215

Microsoft ISA Server 2000 allows remote attackers to poison the ISA cache or bypass content restriction policies via a malformed HTTP request packet containing multiple Content-Length headers...

CVE-2005-1949

The CVE-2005-1949 entry refers to the ePing plugin for the e107 portal, where the eping_validaddr function in functions.php allows remote attackers to execute arbitrary commands via shell metacharacters after a valid eping_host argument. Exploitation details are described in the PT-2005-2900 and ...

CVE-2005-1948

CVE-2005-1948 affects Invision Gallery prior to 1.3.1. The product is vulnerable to multiple SQL injection flaws via (1) the comment parameter in an editcomment action or (2) the rating parameter when voting on a photo, due to improper sanitization of user-supplied data. Remote attackers could ex...

CVE-2005-1950

The CVE-2005-1950 entry concerns WebHints 1.03, where the hints.pl script allows remote command execution by passing shell metacharacters in the argument. OpenVAS entries corroborate a remote command execution flaw in the remote WebHints scripts, describing an exploitable condition that enables a...

CVE-2005-1945

CVE-2005-1945 affects Invision Blog prior to 1.1.2 Final. The vulnerability resides in the convert_highlite_words function, allowing remote attackers to inject arbitrary web script or HTML via double hex encoded highlight data (XSS). Impact is cross-site scripting with partial integrity impact as...

CVE-2005-1760

Summary: CVE-2005-1760 affects sysreport up to 1.3.15. When run as root, sysreport includes /etc/sysconfig/rhn/up2date; if a proxy password is configured, that password is written in plaintext in the report, enabling local privilege escalation. Affected software/versions: sysreport 1.3.15 and ear...

CVE-2005-1720

AFP Server for Mac OS X 10.4.1, when using an ACL enabled volume, does not properly remove an ACL when a file is copied to a directory that does not use ACLs, which will override the POSIX file permissions for that ACL...

CVE-2005-0488

Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENVUSERVAR command...

CVE-2005-1952

CVE-2005-1952 affects Pico Server (pServ) 3.3. A directory traversal flaw allows remote attackers to read arbitrary files and, via a crafted URL containing /./ before each .. sequence, potentially execute arbitrary commands due to an incorrect directory depth count. Exploitation details are not p...

CVE-2005-1962

The CVE-2005-1962 issue affects Cerberus Helpdesk 0.97.3, describing a Cross-site Scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php. The provided documents identify th...

CVE-2005-1963

CVE-2005-1963 affects Cerberus Helpdesk 0.97.3. It enables remote attackers to obtain sensitive information by crafting requests to reports.php, knowledgebase.php, or configuration.php, with the leakage exposed in a PHP error message. The available sources confirm an information disclosure vulner...

CVE-2005-1944

This CVE affects xmysqladmin 1.0 and earlier. The vulnerability arises from a symlink attack on a database backup file located in /tmp, enabling local users to delete arbitrary files. The available sources confirm the component (xmysqladmin) and the underlying cause (symlink in /tmp backup file) ...