10535 matches found
CVE-2005-3956
DMANews 0.904 and 0.910 are affected by multiple SQL injection vulnerabilities in index.php. The flaws allow remote attackers to inject arbitrary SQL commands through (1) the id parameter in a comments action and (2) the sortorder and (3) display_num parameters in a news_list action. The provided...
CVE-2005-3940
CVE-2005-3940 affects Orca Ringmaker and specifically the vulnerable script ringmaker.php in version 2.3c and earlier. The underlying issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the start parameter. The description (from NVD and CVE records) sta...
CVE-2005-3931
SQL injection vulnerability in default.asp in ASP-Rider 1.6 allows remote attackers to execute arbitrary SQL commands via the HTTP referer...
CVE-2005-3961
exporthandler.php in WebCalendar 1.0.1 allows remote attackers to overwrite WebCalendar data files via a modified id parameter...
CVE-2005-3955
Multiple cross-site scripting XSS vulnerabilities in MagpieRSS 7.1, as used in a blogBuddiesv 0.3, b Jaws 0.6.2, and possibly other products, allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a magpiedebug.php and 2 rssurl parameter to b magpieslashbox.php a...
CVE-2005-3957
Unspecified vulnerability in the Trackback functionality in DotClear 1.2.1 has unknown impact and attack vectors...
[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 913-1 [email protected] http://www.debian.org/security/ Martin Schulze December 1st, 2005 http://www.debian.org/security/faq -...
CVE-2005-3704
CVE-2005-3704 describes a vulnerability in Mac OS X and OS X Server versions 10.4 through 10.4.3 where a remote attacker can spoof syslog messages by injecting control characters (e.g., newline) into log files. The description specifies this affects the system log server and enables manipulation ...
CVE-2005-3705
CVE-2005-3705 concerns a heap-based buffer overflow in WebKit used by Mac OS X and OS X Server 10.3.9 and 10.4.3, including Safari. The underlying issue is in WebKit’s handling of certain inputs, which could allow a remote attacker to execute arbitrary code on a vulnerable system. Affected produc...
CVE-2005-3702
CVE-2005-3702 affects Safari in Mac OS X and OS X Server 10.3.9 and 10.4.3. The vulnerability allows remote attackers to cause files to be downloaded to locations outside the download directory by supplying a long file name. The connected documents provide the affected products and the exact impa...
CVE-2005-2757
CVE-2005-2757 affects Mac OS X and OS X Server 10.4–10.4.3. The issue is a heap-based buffer overflow in CoreFoundation, exploitable by remote attackers to run arbitrary code through how URLs are validated. The description in the connected documents confirms the vulnerability and affected compone...
CVE-2005-3700
Technical details for CVE-2005-3700 are not publicly provided in the supplied documents. Monitor for updates when additional information becomes available.
randshopSQL.txt
Randshop all versiyon Sql İnjection Website:http://www.randshop.com Demo:http://www.randshop.com/demoshop/ ------------------------------------------------------------------- Credit:Liz0ziM & wannacut Mail:[email protected] www.biyo.tk...
Internet Explorer onload window vulnerability
Added: 12/01/2005 CVE: CVE-2005-1790 BID: 13799 OSVDB: 17094 Background Internet Explorer is an HTML web browser which comes by default on Microsoft operating systems. Problem Internet Explorer fails to properly initialize the window function when called from an onLoad event in a body tag. This...
Lore SQL inj. vuln.
Lore SQL inj. vuln. Vuln. dicovered by : r0t Date: 1 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/lore-sql-inj-vuln.html Vendor:http://www.pineappletechnologies.com/products/lore/ affected version: Tested on 1.5.4 Product Description: Lore is a professional knowledge base...
Panda Remote Heap Overflow
Date November 29, 2005 Vulnerability The Panda Antivirus Library provides file format support for virus analysis. During decompression of ZOO files Panda is vulnerable to a heap overflow allowing attackers complete control of the systems being protected. This vulnerability can be exploited remote...
DSA-913-1 gdk-pixbuf - several
Bulletin has no description...