CVE-2005-1622

MetaCart e-Shop (ASP) is affected by CVE-2005-1622: Cross-site scripting in productsByCategory.asp allows remote attackers to inject arbitrary script/HTML via strCatalog_NAME. Root cause: insufficient input validation. Impact: integrity only (PARTIAL), no confidentiality/availability impact per t...

CVE-2005-1603

CVE-2005-1603 affects NiteEnterprises Remote File Manager 1.0. The vulnerability allows an attacker to trigger a denial-of-service (crash) by sending a crafted string to TCP port 7080. No exploit details or in-the-wild context are provided in the available documents. The sources list the impact a...

CVE-2005-1602

Technical details for CVE-2005-1602 are not publicly available in the provided connected documents. No specific affected product/version or exploit information is confirmed here. Monitor for updates from official sources.

CVE-2005-1600

Technical details (affected product/version/root cause/mitigation) are not publicly available in the provided connected documents. Monitor for updates.

CVE-2005-1591

Technical details for CVE-2005-1591 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are specified. Monitor for updates.

CVE-2005-1606

CVE-2005-1606 affects H-Sphere Winbox 2.4.2 and 2.4.3 RC1. The underlying issue is that usernames and passwords are stored in plaintext in world-readable log files, enabling local users to gain privileges. The documents do not provide explicit exploit details, affected components beyond the log l...

CVE-2005-1593

CVE-2005-1593 affects CodeThatShoppingCart 1.3.1 via the catalog.php id parameter. The issue is an input validation flaw that allows an unauthenticated remote attacker to perform both SQL injection and cross-site scripting by sending crafted requests, according to OpenVAS and CVE records. The vul...

CVE-2005-1601

CVE-2005-1601 affects MRO Maximo Self Service 4 and 5, where certain information is stored under the web document root and exposed via file extensions not processed by Tomcat. This allows remote attackers to directly request files (e.g., MXServer.properties) and obtain sensitive information. The ...

CVE-2005-1609

CVE-2005-1609 describes an unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serials 0451AWF00G–0513AWF00J that could allow local users and remote attackers to delete data. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH) with network attack vector and no authentication req...

CVE-2005-1613

OpenBB (Open Bulletin Board) <= 1.0.8 contains a cross-site scripting (XSS) vulnerability in member.php that allows an attacker to inject arbitrary script or HTML via the reverse parameter in a list action. This CVE, CVE-2005-1613, is documented across multiple sources (NVD, CVE list, and Open...

CVE-2005-1605

The entry CVE-2005-1605 describes a Cross-site Scripting (XSS) vulnerability in the guestbook of SiteStudio 1.6, exploitable via the name field to either psoft.guestbook.GuestBookServ (Standalone Site Studio) or E-Guest_sign.pl (Integrated Site Studio with H-Sphere). The vulnerability is triggere...

CVE-2005-1614

Vulnerability overview (CVE-2005-1614) : The UPB (Ultimate PHP Board) versions 1.8 through 1.9.6 are affected by a cross-site scripting (XSS) flaw in the viewforum.php script, exploitable via the postorder parameter. This can allow remote attackers to inject arbitrary script/HTML. The NVD reports...

CVE-2005-1619

PHPMyChat 0.14.5 is affected by multiple XSS vulnerabilities in start_page.css.php3 and style.css.php3, exploitable via the FontName parameter to inject arbitrary script/HTML. The issue is documented as CVE-2005-1619; notes indicate 0.14.5 is affected. Affected components are the PHPMyChat front-...

CVE-2005-1617

The CVE-2005-1617 entry concerns Willings WebCam and WebCam Lite up to version 2.8, where passwords are stored in memory in plaintext. This is the underlying vulnerability: a local-access risk that could allow a user with access to the host to read the password from memory. The available document...

[Full-disclosure] Pico Server (pServ) Remote Command Injection

Advisory: Pico Server pServ Remote Command Injection RedTeam found a remote command injection in Pico Server pServ which results in a remote attacker being able to issue arbitrary commands on the server. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably too...

Apple Mac OS X Foundation Framework vulnerable to buffer overflow via incorrect handling of an environmental variable

Overview A buffer overflow in Mac OS X Foundation Framework's processing of environment variables may lead to elevated privileges. Description A vulnerability is present Mac OS X Foundation Framework shipped in version 10.3.9 of Mac OS X and Mac OSX Server. There is a flaw in the handling of...

Apple Mac OS X chpass/chfn/chsh utilities do not properly validate external programs

Overview Apple Mac OS X Directory Service utilities use external programs insecurely, potentially allowing an attacker to execute arbitrary code. Description The OS X Directory Services have three utilities chpass, chfn, and chsh to update information in the user database, such as user name,...

[Full-disclosure] Pico Server (pServ) Information Disclosure Of CGI Sources

Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably t...

Apple Mac OS X vulnerable to buffer overflow via vpnd daemon

Overview Apple Mac OS X contains a buffer overflow in vpnd that could allow a local, authenticated attacker to execute arbitrary code with root privileges. Description Mac OS X includes a VPN server called vpnd, which is installed setuid root by default. vpnd fails to validate the length of the...

CVE-2005-1551

CVE-2005-1551 concerns Sophos Anti-Virus 3.93, where downloaded files that have only been written are not checked for viruses, creating a race condition. If the file is executed before the antivirus starts on system reboot, this may allow bypass of virus protection. The available documents identi...