CVE-2005-1122

The CVE-2005-1122 entry concerns the Monkey HTTP Server component monkeyd, specifically a format string vulnerability in cgi.c prior to version 0.9.1. A remote attacker can trigger a denial of service and potentially arbitrary code execution by sending an HTTP GET request containing double-encode...

CVE-2005-1141

GOCR 0.40 is affected by an Integer overflow in the readpgm function of pnm.c when using the netpbm library, allowing remote attackers to potentially execute arbitrary code via a specially crafted PNM file with large width/height, resulting in a heap-based buffer overflow. Affected component: GOC...

CVE-2005-1137

Simple PHP Blog sphpBlog 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sbfunctions.php, which leaks the full pathname in a PHP error message...

CVE-2005-1125

CVE-2005-1125 describes a race condition in the Libsafe library (versions up to 2.0.16) that can occur in multi-threaded applications. The issue allows an attacker to bypass Libsafe protection and potentially trigger other vulnerabilities before the _libsafe_die function completes. Public details...

CVE-2005-1130

Pinned: CVE-2005-1130 is an XSS vulnerability in Pinnacle Cart (PHP) where the index.php script fails to sanitize the pg parameter, allowing arbitrary HTML/script injection. Affected component: Pinnacle Cart index.php; entry points: pg parameter. Reported exploitability is remote with no authenti...

CVE-2005-1129

The CVE-2005-1129 entry applies to eGroupWare 1.0.6 and earlier. If an e-mail is composed with an attachment but not sent, the system may send that attachment in the next e-mail, potentially exposing sensitive information to the wrong recipient. Affected component: the e-mail/attachment handling ...

CVE-2005-1142

Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than implied by its width and height values...

CVE-2005-1115

CVE-2005-1115 refers to multiple XSS flaws in Photo Album 2.0.53 module for phpBB. The vulnerabilities arise when user-supplied input is not properly sanitized, allowing remote attackers to inject arbitrary script or HTML via the bsid parameter to the scripts album_cat.php and album_comment.php. ...

CVE-2005-1131

CVE-2005-1131 affects Veritas i3 Focalpoint Server versions 7.1 and earlier. The vulnerability is described with unknown attack vectors and an impact described as 'critical' in the initial records, with NVD noting a network-attack vector (AV:N) and a base score of 10.0. The connected documents do...

CVE-2005-1110

The CVE-2005-1110 entry describes a stack-based buffer overflow in the RespondeHTTPPendiente function of SUMUS 0.2.2’s HTTP server. A large packet sent to TCP port 81 can allow remote attackers to execute arbitrary code. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH) with network access, l...

CVE-2005-1144

Summary : popup.php in EasyPHPCalendar before 6.2.8 is vulnerable to information disclosure via an invalid ev parameter, which reveals the web server’s full pathname in a PHP error message. Affected software : EasyPHPCalendar (prior to 6.2.8). Root cause : improper handling/display of the ev para...

CVE-2005-1143

EasyPHPCalendar vulnerability CVE-2005-1143: XSS in index.php via the yr parameter, affecting versions prior to 6.2.8. Remote code execution of arbitrary scripts/HTML possible as described. Remediation: upgrade to 6.2.8 or later. No exploitation details provided in the connected documents.

CVE-2005-1127

CVE-2005-1127 covers a format-string vulnerability in the log function of the perl-Net-Server module (versions ≤ 0.87) as used by Postfix Greylisting Policy Server (Postgrey) ≤ 1.18. The issue arises from format specifiers not being properly handled before sending to syslog, allowing remote attac...

CVE-2005-1135

The CVE-2005-1135 issue affects Simple PHP Blog (sphpBlog) 0.4.0, where the search.php script’s q parameter is not properly validated, enabling a remote attacker to inject arbitrary web script or HTML (XSS). The vulnerability is confirmed by the primary CVE entry and supports remediation guidance...

CVE-2005-1119

CVE-2005-1119 affects Sudo VISudo 1.6.8 and earlier. The vulnerability arises from a symlink attack on temporary files, enabling local users to corrupt arbitrary files. Impact is local privilege concern (I = Partial) with no confidentiality/vitality impact, per available data. The provided docume...

CVE-2005-1123

CVE-2005-1123 affects the Monkey HTTP Daemon (monkeyd) before version 0.9.1. The vulnerability allows a remote attacker to cause a denial-of-service via a request for a zero-byte file, resulting in memory corruption. Public sources (Gentoo GLSA 200504-14 and Nessus entries) describe a DoS and, in...

CVE-2005-1134

Serendipity (0.8 and earlier) is affected by an SQL injection in exit.php. The vulnerability allows remote attackers to inject arbitrary SQL via the url_id or entry_id parameters, risking data disclosure and modification. Root cause: unsafe handling of user-supplied input in SQL queries. CVSS2 ba...

CVE-2005-1150

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service hang...

CVE-2005-1146

NOTE: this issue has been disputed by the vendor. Cross-site scripting XSS vulnerability in the login command in calendar.pl in CalendarScript 3.21 allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-1145...

CVE-2005-1149

CVE-2005-1149 is a SQL injection flaw in aspclick.it ACNews 1.0, affecting admin/login.asp where the (1) username and (2) password parameters are unsafely handled. The Red Hat advisory echoes the same description, indicating remote attackers could execute arbitrary SQL commands. The available doc...