CVE-2005-0297

SQL injection vulnerability in Oracle Database 9i and 10g allows remote attackers to execute arbitrary SQL commands and gain privileges...

CVE-2005-0269

The CVE-2005-0269 vulnerability affects GNUBoard versions 3.40 and earlier, where a file extension check only validates lowercase-letter extensions. This allows remote attackers to upload arbitrary files by using file extensions that contain uppercase letters. The root cause is a case-sensitive c...

CVE-2005-0310

Exponent 0.95 allows remote attackers to obtain sensitive information via a direct HTTP request to 1 search.info.php, 2 permissions.info.php, 3 security.info.php, 4 formcontrol.php, or 5 filemodules.php, which reveals the path in an error message because the pathoscoreversion variable is undefine...

CVE-2005-0337

Postfix 2.1.3, when /proc/net/ifinet6 is not available and permitmxbackup is enabled in smtpdrecipientrestrictions, allows remote attackers to bypass e-mail restrictions and perform mail relaying by sending mail to an IPv6 hostname...

CVE-2005-0272

ReviewPost PHP Pro before 2.84 allows remote attackers to upload and execute arbitrary PHP files by posting a review file with multiple extensions, which bypasses the intended restrictions...

CVE-2005-0290

NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to bypass the filters using hex encoded URLs, as demonstrated using a hex encoded file extension...

CVE-2005-0304

CVE-2005-0304 describes a directory traversal in DivX Player 2.6 and earlier. A specially crafted ZIP file containing a skin allows a remote attacker to overwrite arbitrary files by using a .. in a filename, enabling possible partial availability impact as reflected in the CVSS score. The records...

CVE-2005-0294

minis.php in Minis 0.2.1 allows remote attackers to cause a denial of service infinite loop via an HTTP request for a file that the web server does not have permission to read, as demonstrated using the month parameter...

CVE-2005-0327

The CVE-2005-0327 entry concerns paFileDB 3.1, where pafiledb.php may allow remote code execution. The vulnerability arises from a modified action parameter used in an include statement for login.php, enabling an attacker to have PHP code executed on the remote server. The provided documents desc...

CVE-2005-0271

CVE-2005-0271 concerns ReviewPost (PHP Pro)

CVE-2005-0336

CVE-2005-0336 pertains to a Cross-site scripting (XSS) flaw in EMotion MediaPartner Web Server 5.0. The vulnerability arises when a URL containing .. sequences and HTML is processed, causing a directory browsing page to fail to filter HTML, enabling remote attackers to inject arbitrary HTML or we...

CVE-2005-0283

CVE-2005-0283 describes a directory traversal in QWikiwiki’s index.php that allows remote attackers to read arbitrary files by crafting the page parameter with a .. and a %00 terminator. The vulnerability stems from insufficient validation of the page parameter, enabling traversal to the file sys...

CVE-2005-0343

CVE-2005-0343 corresponds to a SQL injection in PerlDesk 1.x via the view parameter, enabling remote attackers to inject arbitrary SQL. Exploitation details in connected Nessus/NASL data indicate network-based, low-complexity access with no authentication, causing partial impact to confidentialit...

CVE-2005-0262

Buffer overflow in iplvaryon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument...

CVE-2005-0260

CVE-2005-0260 is a stack-based buffer overflow in the CA BrightStor ARCserve Backup Discovery Service. A large UDP 41524 packet can overflow the stack, enabling remote code execution on vulnerable systems. Public references and exploit listings (e.g., Metasploit modules for Discovery Service UDP ...

CVE-2005-0306

MercuryBoard 1.1.1 allows remote attackers to gain sensitive information via an HTTP request with the n parameter set to 0, which causes a divide-by-zero error and reveals the path in the resulting error message...

CVE-2005-0307

MercuryBoard 1.1.1 is affected by CVE-2005-0307 due to multiple XSS in index.php, allowing remote injection of arbitrary script or HTML via the (1) s, (2) l, (3) a, (4) t, (5) to, or (6) re parameters. The vulnerability is documented in CVE records and corroborated by OpenVAS noting multiple vuln...

CVE-2005-0307

Multiple cross-site scripting XSS vulnerabilities in index.php in MercuryBoard 1.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 s, 2 l, 3 a, 4 t, 5 to, or 6 re parameters...

CVE-2005-0312

WarFTPD 1.82 RC9, when running as an NT service, allows remote authenticated users to cause a denial of service access violation via a CWD command with a crafted pathname, as demonstrated using a large string of "%s" sequences, possibly indicating a format string vulnerability...

CVE-2005-0276

CVE-2005-0276 : The 3Com 3CDaemon 2.0 revision 10 FTP service is affected by multiple format string vulnerabilities in commands (username, cd, delete, rename, rmdir, literal, stat, CWD) that can cause a remote denial of service (application crash). This assessment is based on the NVD description;...