10535 matches found
CVE-2005-1588
SQL injection vulnerability in index.php for Quick.cart 0.3.0 allows remote attackers to execute arbitrary SQL commands via the iCategory parameter. NOTE: the vendor has privately disputed this issue, saying that Quick.cart does not even use SQL and therefore can not be vulnerable to SQL injectio...
CVE-2005-1577
The CVE-2005-1577 entry concerns APG Technology ClassMaster, where an improper restriction of access to sensitive folders enables remote attackers to reach those folders over a network share. The NVD notes a CVSS v2 base score of 7.5 (HIGH) with network attack vector, low complexity, and partial ...
CVE-2005-1559
The CVE-2005-1559 entry concerns the Web module of Neteyes Nexusway. The vulnerability allows remote command execution via hex-encoded shell metacharacters in the ip parameter of the (1) nslookup.cgi and (2) ping.cgi scripts. Affected software is the Neteyes Nexusway web module; the root cause is...
CVE-2005-1573
Vulnerability summary (CVE-2005-1573) : The issue affects the ASP Virtual News Manager, specifically the admin_login.asp endpoint. It is a SQL injection vulnerability that allows remote attackers to craft input via the password parameter to execute arbitrary SQL commands on the backend database. ...
CVE-2005-1583
The vulnerability CVE-2005-1583 affects 1Two News 1.0. It allows remote attackers to perform two actions via direct requests to admin endpoints: (1) delete images for new stories through admin/delete.php and (2) upload arbitrary images through admin/upload.php. The description does not state the ...
CVE-2005-1554
CVE-2005-1554 is an SQL injection vulnerability in WowBB’s view_user.php that affects WowBB versions 1.6, 1.61, and 1.62. The vulnerability permits remote attackers to execute arbitrary SQL commands via the sort_by parameter, as documented in multiple sources (NVD entries and CVE records). The Op...
CVE-2005-1568
CVE-2005-1568 affects DirectTopics 2.1 and 2.2. The flaw arises in topic.php where an invalid topic parameter can cause the server to disclose the path in an error message, leaking sensitive information. The NVD metrics indicate a base score of 5.0 (Medium) with network access required and no aut...
CVE-2005-1563
Bugzilla 2.10–2.18, 2.19.1, and 2.19.2 contain an information-disclosure flaw: the error message differs depending on whether a product exists, enabling remote attackers to infer the existence of hidden products. This CVE (CVE-2005-1563) is documented across CVE/NVD/CVE List entries and related a...
CVE-2005-1564
Bugzilla 2.10–2.18, 2.19.1, 2.19.2 contains a vulnerability in post_bug.cgi where a remote authenticated user can enter bugs into products that are closed for bug entry by altering the product name in the URL. The root cause is improper handling of product-name validation in the bug-entry flow, a...
CVE-2005-1550
CVE-2005-1550 affects Easy Message Board ( Perl-based bulletin board). The OpenVAS details describe an input validation flaw in the remote script, enabling a remote attacker to perform directory traversal or execute arbitrary commands on the host with the web server privileges. The issue is tied ...
CVE-2005-1582
The CVE-2005-1582 entry concerns a Cross-site scripting (XSS) vulnerability in index.php of 1Two News 1.0. The vulnerability permits remote injection of arbitrary web script or HTML via the query/POST parameters nom, email, siteweb, or commentaire. The NVD listing documents a MEDIUM impact score ...
CVE-2005-1548
CVE-2005-1548 is an SQL injection vulnerability in the index.php of Advanced Guestbook 2.3.1 . The flaw occurs in the entry parameter , allowing remote attackers to execute arbitrary SQL commands. The underlying issue is an input validation flaw that fails to sanitize user input before database i...
CVE-2005-1560
The vulnerability CVE-2005-1560 concerns the SSH module in Neteyes Nexusway, where remote attackers can execute arbitrary commands by injecting shell metacharacters in arguments to certain commands (as demonstrated with ping and traceroute). The provided documents do not specify affected versions...
CVE-2005-1561
CVE-2005-1561 affects MaxWebPortal
CVE-2005-1585
CVE-2005-1585 affects Quick.Forum 2.1.6 with multiple SQL injection vulnerabilities. The flaws allow remote attackers to manipulate the database by supplying crafted values to (1) iCategory or (2) page parameters in index.php, or (3) iCategory parameter in the query string to the forum directory....
CVE-2005-1546
CVE-2005-1546 affects ht (HT Editor): a buffer overflow in the PE parser can be triggered by a crafted PE file, allowing remote code execution. The Debian advisory DSA-743-1 specifies fixes in ht 0.8.0-2sarge4 for the sarge release; earlier versions (woody) are impacted and updates exist for othe...
CVE-2005-1552
GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 expose JPEG images despite having a password/username set, due to improper protection of image files. The issue allows remote attackers to obtain sensitive information by making a direct request to the image, effectively bypas...
CVE-2005-1544
Stack-based buffer overflow in libTIFF before 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag...
CVE-2005-1581
Vulnerability summary: CVE-2005-1581 describes a cross-site scripting (XSS) flaw in Bug Report 1.0. User input from various fields to bug_report.php is not filtered or quoted when processed by bug_list.php or admin/index.php, allowing remote attackers to inject arbitrary web script or HTML. What’...