CVE-2005-1817

Invision Power Board (IPB) versions 1.0–1.3 are affected by a vulnerability in index.php that allows remote attackers to edit arbitrary forum posts by sending a modified request. The issue is triggered via direct parameter manipulation in a HTTP request to index.php, enabling an attacker to alter...

CVE-2005-1820

Zeroboard zboard.php in versions 4.1pl2–4.1pl5 is affected by CVE-2005-1820: improper quoting in preg_replace allows remote attackers to execute arbitrary PHP code. Impact is remote code execution; no specific patch/version remediation is provided in the supplied documents. Exploitation details a...

CVE-2005-1788

The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....

CVE-2005-1818

CVE-2005-1818 affects NewLife Blogger prior to 3.3.1. Connected documents confirm multiple SQL injection vulnerabilities enabling remote attackers to execute arbitrary SQL commands via unknown attack vectors. The sources do not specify a patched version or remediation steps. Exploitation details ...

CVE-2005-1799

CVE-2005-1799 describes a cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10. The provided records specify an XSS issue that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base CVSS v2 score of 4.3 (m...

CVE-2005-1814

The CVE-2005-1814 entry describes a stack-based buffer overflow in PicoWebServer 1.0. The vulnerability occurs when processing a long URL, which can lead to a denial of service (application crash) and potentially arbitrary code execution. Affected component is the server’s URL handling/parsing lo...

CVE-2005-1795

The vulnerability affects Clam AntiVirus (ClamAV) prior to 0.85 on macOS, where the filecopy function in misc.c can be exploited by a virus name containing shell metacharacters. This occurs when HFS permissions prevent deletion and ditto is invoked, allowing remote code execution. The reported im...

CVE-2005-1796

CVE-2005-1796 is a format string vulnerability in the Ettercap Ncurses interface (ec_curses.c) that could allow a remote attacker to execute arbitrary code. It affects Ettercap prior to version 0.7.3. Debian advisories confirm a format string error and state upgrades to fix: version 0.7.1-1sarge1...

CVE-2005-1801

The CVE-2005-1801 entry concerns the Nokia 9500 vCard viewer. The vulnerability lies in the vCard viewer component, where processing a vCard with an excessively long Name field can cause the viewer to crash, resulting in a denial of service. The available documents do not provide concrete exploit...

CVE-2005-1816

Invision Power Board (IPB) versions 1.0–2.0.4 are affected by a privilege-escalation vulnerability where non-root admins can add themselves or other users to the root admin group via the “Move users in this group to” screen. This has been reported consistently across CVE-2005-1816 records (NVD, R...

CVE-2005-1822

Qualiteam X-Cart 4.0.8 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via various parameters (home.php: cat, printable; product.php: productid, mode; error_message.php: id; help.php: section; orders.php: mode; register.ph...

CVE-2005-1805

CVE-2005-1805 describes an SQL injection in the login.asp of OS4E (Online Solutions for Educators). The vulnerability involves the password parameter being unsafely handled, allowing remote attackers to manipulate SQL commands and potentially access or modify data. The affected product is cited a...

CVE-2005-1812

CVE-2005-1812 affects FutureSoft TFTP Server Evaluation Version 1.0.0.1, with multiple stack-based buffer overflows triggered by overly long filename or transfer mode fields in RRQ/WRQ requests. The vulnerability enables remote code execution and has a documented in-the-wild footprint via public ...

CVE-2005-1809

Sony Ericsson P900 Beamer is affected by CVE-2005-1809. The vulnerability occurs when an OBEX FTP session with a long filename is used in OBEX File Transfer or OBEX Object Push, triggering a denial-of-service (panic). The prime exposure vector is remote network interaction. No root-cause details ...

CVE-2005-1804

NPDS 5.0 contains multiple SQL injection vulnerabilities. Specifically, remote attackers can craft requests to (1) glossaire.php using the terme parameter and (2) links.php using the query parameter to execute arbitrary SQL commands. This is due to improper handling of user-supplied input. The im...

CVE-2005-1790

CVE-2005-1790 affects Microsoft Internet Explorer (IE) 6 SP2 6.0.2900.2180 and 6.0.2800.1106 and earlier. The vulnerability stems from a memory corruption in the DOM event handler when a body onLoad calls the window() function, enabling a remote attacker to crash IE and execute arbitrary code. Ex...

CVE-2005-1823

CVE-2005-1823 refers to multiple cross-site scripting (XSS) flaws in Qualiteam X-Cart 4.0.8. The provided documents specify vulnerable vectors within X-Cart’s PHP files, including parameters to home.php (cat, printable), product.php (productid, mode), error_message.php (id), help.php (section), o...

CVE-2005-1821

CVE-2005-1821 : The affected software is PowerDownload 3.0.2 and 3.0.3. The vulnerability is a PHP remote file inclusion in pdl_header.inc.php that allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php. The available connected documents corroborate the de...

CVE-2005-1798

Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. dot dot sequences in an HTTP request...

CVE-2005-1803

CVE-2005-1803 affects Net Portal Dynamic System (NPDS) 5.0. The description lists multiple XSS vectors: via the language parameter to admin.php or powerpack_f.php; the sitename parameter to sdv_infos.php; the categories parameter to faq.php; the lettre parameter to the glossaire module; the title...