CVE-2005-4220

Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nma...

CVE-2005-4233

SQL injection vulnerability in advertiserstatistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the adnumber parameter...

CVE-2005-4237

CVE-2005-4237 affects MySQL Auction 3.0 and earlier. The vulnerability is a cross-site scripting (XSS) flaw in the search functionality, with parameters in the SearchZoom module (potentially the keyword parameter) allowing remote injection of arbitrary script/HTML. Exploitability and impact are d...

CVE-2005-4221

CVE-2005-4221 concerns an SQL injection in Arab Portal System 2 Beta 2, specifically in link.php. The vulnerability allows remote attackers to inject arbitrary SQL commands via the PHPSESSID (session ID) or the REQUEST_URI (query string). Public references confirm the issue and its CVE entry, but...

CVE-2005-4244

The vulnerability CVE-2005-4244 affects Snipe Gallery 3.1.4 and earlier. It is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the gallery_id parameter to view.php and the image_id parameter to image.php. Details indicate an injection flaw in how ...

CVE-2005-4226

The connected sources confirm CVE-2005-4226 affects phpWebThings 1.4 with multiple SQL injection vectors. Specifically, unsanitized input in download.php (ref), forum.php (direction, msg, sforum, reason, subname, toform), forum_edit.php (msg, forum), forum_write.php (msg, forum), guestbook.php (t...

CVE-2005-4225

CVE-2005-4225 affects myBloggie 2.1.3 beta and earlier. Multiple potential SQL injection vulnerabilities allow remote attackers to influence SQL commands via various parameters across add.php, addcat.php, adduser.php, del.php, delcat.php, delcomment.php, deluser.php, edit.php, editcat.php, and ed...

CVE-2005-4236

CVE-2005-4236 concerns an XSS vulnerability in the CKGOLD package, specifically in the search.php component. The issue allows remote attackers to inject arbitrary web script or HTML through the search parameters, enabling cross-site scripting. The available connected records confirm the flaw as a...

CVE-2005-4240

Vulnerability details (CVE-2005-4240): Affected software is VCD-db 0.98 and earlier. The issue is an SQL injection in search.php via the by parameter, allowing remote attackers to execute arbitrary SQL commands. Impact is stated as partial confidentiality/integrity/availability (per CVSS), with n...

CVE-2005-4211

PHP remote file inclusion in phpCOIN 1.2.2 affects coin_includes/db.php, allowing an attacker to supply a URL via the _CCFG[_PKG_PATH_DBSE] parameter to execute arbitrary PHP code. This is a code-execution exposure in the web application, with no exploitation details provided beyond the parameter...

CVE-2005-4224

CVE-2005-4224 affects e107 0.7 (and related entries) with multiple potential SQL injection paths. The vulnerabilities allow remote attackers to potentially execute arbitrary SQL through parameters in signup.php, subcontent.php, upload.php, and usersettings.php (e.g., email, hideemail, realname, s...

CVE-2005-4213

CVE-2005-4213 describes a SQL injection in mod.php of phpCOIN 1.2.2 exploitable via the phpcoinsessid cookie, allowing remote SQL commands. This affects phpCOIN 1.2.2 prior to any fixes; remediation is not detailed in the provided documents, but related Nessus entries reference a 1.2.2 fix releas...

CVE-2005-4234

The CVE-2005-4234 entry describes a SQL injection vulnerability in EncapsGallery 1.0.0 and earlier , specifically in gallery.php via the id parameter. The underlying issue is improper handling of user-supplied input leading to arbitrary SQL execution by remote attackers. Documented sources confir...

CVE-2005-4250

CVE-2005-4250 affects mcGallery PRO 2.2 and earlier, with a directory traversal vulnerability that allows remote attackers to read arbitrary files through the language parameter. The NVD entry notes a Partial Confidentiality impact (NETWORK access, low complexity, no authentication), but exploita...

CVE-2005-4227

CVE-2005-4227 affects DCP-Portal 6.1.1 with multiple potential SQL injection vectors. The vulnerability list covers parameters in advertiser.php, announcement.php, calendar.php, contents.php, forums.php, go.php, golink.php, inbox.php, index.php, informer.php, news.php, rate.php, search.php, and u...

CVE-2005-4231

The CVE-2005-4231 entry relates to a cross-site scripting (XSS) flaw in Link Up Gold 2.5 and earlier. The vulnerability arises from injectable input in multiple vectors: (1) the link parameter to tell_friend.php, (2) the phrase[] parameter to search.php in a search_links_advanced action, and (3)/...

CVE-2005-4230

CVE-2005-4230 concerns an SQL injection in poll.php of Link Up Gold 2.5 and earlier, exploitable via the number parameter to allow remote execution of arbitrary SQL commands. The core affected software is Link Up Gold (versions up to 2.5 and older). The cited sources (NVD entry) confirm the vulne...

CVE-2005-4219

CVE-2005-4219 affects Innovative CMS (ICMS, formerly Imoel-CMS). The setting.php page reportedly returns cleartext username and password information, potentially allowing an attacker to obtain credentials via a direct request. The NVD entry assigns a base CVSS v2 of 5.0 (Medium): Attack Vector Ne...

CVE-2005-4223

Utopia News Pro (UNP) 1.1.4 is affected by multiple potential SQL injection vulnerabilities that could allow an attacker to run arbitrary SQL commands remotely. The issues are reported in specific input parameters across several PHP scripts: newsid in editnews.php, catid and question in faq.php, ...

CVE-2005-4245

CVE-2005-4245 is a cross-site scripting (XSS) vulnerability in Snipe Gallery 3.1.4 and earlier affecting the file search.php . The issue arises from the keyword parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the record, the impact is confidentiality: non...