CVE-2005-1958

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2005-1855. Reason: This candidate is a duplicate of CVE-2005-1855. Notes: All CVE users should reference CVE-2005-1855 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2005-1864

Calendarix Advanced

CVE-2005-1876

The CVE-2005-1876 entry describes a direct code injection vulnerability in CuteNews 1.3.6 and earlier . The issue allows remote attackers with administrative privileges to execute arbitrary PHP code by inputs injected into a template file (.tpl), effectively compromising the server’s PHP executio...

CVE-2005-1871

CVE-2005-1871 affects Drupal 4.4.0–4.6.0 where an improperly implemented input check in the privilege system (triggered when public registration is enabled) allows remote attackers to escalate privileges. The issue is described as a privilege escalation vulnerability in multiple sources (Drupal a...

CVE-2005-1882

CVE-2005-1882 (YaPiG) — YaPiG is a PHP-based image gallery. The vulnerability is a PHP Remote File Inclusion in last_gallery.php that allows an attacker to execute arbitrary PHP code by supplying a crafted YAPIG_PATH parameter in YaPiG versions 0.93u and 0.94u. The linked OpenVAS/NVD entries corr...

CVE-2005-1879

CVE-2005-1879 concerns LutelWall 0.97 and earlier. The vulnerability allows a local attacker to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget. OpenVAS and Gentoo GLSA entries describe an insecure temporary file creation during version updates,...

CVE-2005-1884

CVE-2005-1884 affects YaPiG (web-based PHP image gallery) versions 0.92b, 0.93u, and 0.94u. A directory traversal vulnerability exists in upload.php, where the dir parameter can be exploited with .. to create or delete arbitrary directories via rmdir or mkdir commands. Multiple sources (NVD entry...

CVE-2005-1865

CVE-2005-1865 describes multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 . Remote attackers can cause arbitrary SQL execution via the following inputs: (1) catview parameter to cal_week.php , (2) cat_view to cal_cat.php , (3) cal_day.php, or (4) id parameter to cal_pophols.php . ...

CVE-2005-1881

YaPiG (PHP image gallery) is affected by CVE-2005-1881 due to upload.php not properly restricting image file extensions in YaPiG versions 0.92b, 0.93u, and 0.94u. This allows remote attackers to upload arbitrary files and execute arbitrary PHP code on the server. The issue is part of a set of YaP...

CVE-2005-1878

The CVE-2005-1878 entry concerns GIPTables Firewall 1.1 and earlier. It describes a local vulnerability where an attacker can overwrite arbitrary files via a symlink attack on the temp.ip.addresses file. The impact is partial confidentiality/integrity compromise via local access. No explicit reme...

CVE-2005-1869

MWChat 6.x contains a PHP remote code execution via start_lobby.php through the CONFIG[MWCHAT Libs] parameter. The vulnerability affects the start_lobby.php file and can lead to arbitrary PHP execution by an attacker. The PT-2005-2826 advisory notes restricting access to start_lobby.php and avoid...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

FlexCast Server Terminal Authentication Unspecified Remote Issue

The remote host is running FlexCast, an audio/video streaming server. According to its banner, the version installed on the remote host suffers from a vulnerability in suppliers / terminal authentication. While details are as-yet unavailable, it is likely the flaw is remotely exploitable...

CVE-2005-1858

CVE-2005-1858 affects FUSE: memory from previously used pages is not cleared when a read returns fewer bytes than requested in FUSE 2.x before 2.3.0, enabling local information disclosure. Connected sources show Debian advisories (DSA-744-1) stating a fix in fuse 2.3.0-1 and later; upgrade to 2.3...

CVE-2005-1877

Cross-site scripting XSS vulnerability in viewticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter...

[Full-disclosure] everybuddy <= 0.4.3 insecure temporary file creation

everybuddy insecure temporary file creation Vendor: http://www.everybuddy.com/ no more vendor URL Advisory: http://www.zataz.net/adviso/everybuddy-06062005.txt Vendor informed: no more vendor Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file...

Fixed in Apache Tomcat 6.0.11

Moderate: Cross-site scripting CVE-2007-1355 The JSP and Servlet included in the sample application within the Tomcat documentation webapp did not escape user provided data before including it in the output. This enabled a XSS attack. These pages have been simplified not to use any user provided...

RHEL 4 : ImageMagick (RHSA-2005:480)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:480 advisory. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple image formats. A denial of service bu...

WordPress 'template-functions-category.php' 'cat_ID' Parameter SQL Injection

The version of WordPress installed on the remote host fails to properly sanitize user-supplied input to the 'catID' variable in the 'template-functions-category.php' script. This failure may allow an attacker to influence database queries resulting in the disclosure of sensitive information. Note...

[Full-disclosure] GIPTables Firewall <= v1.1 insecure temporary file creation

GIPTables Firewall insecure temporary file creation Vendor: http://www.giptables.org/ Advisory: http://www.zataz.net/adviso/giptables-05222005.txt Vendor informed: yes Exploit available: yes Impact : medium Exploitation : low The vulnerability is caused due to temporary file being created...