MailEnable IMAP W3C Logging Buffer Overflow

Added: 12/03/2005 CVE: CVE-2005-3155 BID: 15006 OSVDB: 19842 Background MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail. Problem MailEnable's IMAP service...

GameFlyXSS.txt

GameFly XSS Vulnerability ========================= Discovered By: Matthew Benenati Release Date: 12/1/2005 Severity: Medium A cross-site scripting vulnerability exists in the search page of the popular online video game rental service GameFly. Example:...

CVE-2005-3965

...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

CVE-2005-3964

CVE-2005-3964 affects OpenMotif libUil, specifically libUil.so in version 2.2.3 (and possibly others). The vulnerability arises from multiple buffer overflows in the UilDiags.c diag_issue_diagnostic and UilSrcSrc.c open_source_file functions, enabling arbitrary code execution by an attacker. Publ...

[SECURITY] [DSA 915-1] New helix-player packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 915-1 [email protected] http://www.debian.org/security/ Martin Schulze December 2nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-3963

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...

CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...

WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC)

WinEggDropShell 1.7 - Multiple Remote Stack Overflows PoC WinEggDropShell Multipe PreAuth Remote Stack Overflow PoC HTTP Server "GET" && FTP Server "USER" "PASS" command Bug Discoverd and coded by Sowhat Greetingz to killer,baozi,Darkeagle,all 0x557 and XFocus guys....; http://secway.org 2005-10-...

Confluence – the Enterprise Wiki, XSS vuln.

Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...

CVE-2005-3962

The CVE-2005-3962 issue is a real vulnerability in Perl where an integer overflow in the format-string processor (Perl_sv_vcatpvfn) can cause memory corruption and potentially arbitrary code execution. It affects Perl 5.9.2 and 5.8.6; multiple connected advisories (Debian DSA-943/DSA-943-1, CentO...

CVE-2005-3961

WebCalendar 1.0.1 is affected by CVE-2005-3961 due to missing input sanitising in the export_handler.php flow, enabling remote attackers to overwrite local WebCalendar data files by supplying a modified id parameter. Multiple OpenVAS/NASL and CVE references confirm this vulnerability and characte...

CVE-2005-3943

CVE-2005-3943 affects ilyav FAQ System v1.1 and earlier, with multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject SQL via (1) FAQ_ID and (2) action in viewFAQ.php, and (3) CATEGORY_ID in index.php. NVD lists a CVSSv2 base score of 7.5 (HIGH) with network access, low...

CVE-2005-3937

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in 1 selloffers.php, 2 buyoffers.php, 3 products.php, or 4 profiles.php...

CVE-2005-3932

The CVE-2005-3932 entry describes a SQL injection in okiraku.php of O-Kiraku Nikki 1.3 and earlier, where the day_id parameter can be exploited to execute arbitrary SQL commands. The vulnerability arises in the web application’s handling of the parameter, enabling an attacker to potentially read,...

CVE-2005-3944

The CVE-2005-3944 entry describes a SQL injection vulnerability in the SURVEY_ID parameter of survey.php in the ilyav Survey System 1.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to partial confidentiality and integrity or availability ...

CVE-2005-3947

CVE-2005-3947 affects PHP Upload Center. A vulnerability in index.php allows directory traversal through the filename parameter (using ../), enabling an attacker to read arbitrary files on the server with the web server’s privileges. Technical details across sources confirm the vulnerable compone...

CVE-2005-3955

CVE-2005-3955 affects MagpieRSS 7.1 as used in blogBuddiesv 0.3 and Jaws 0.6.2, allowing remote attackers to inject arbitrary scripts via (1) the url parameter to magpie_debug.php and (2) the rss_url parameter to magpie_slashbox.php and simple_smarty.php. The documented impact is cross-site scrip...

CVE-2005-3941

Orca Blog 1.3b and earlier is vulnerable to an SQL injection in blog.php, exploitable via the msg parameter to execute arbitrary SQL. Affected: Orca Blog (1.3b and earlier). Root cause: improper handling of user input in msg. Impact: partial confidentiality/integrity/availability per CVSS, base s...