CVE-2005-3833

The CVE-2005-3833 entry describes an SQL injection in Tunez

CVE-2005-3836

CVE-2005-3836 affects DeskLance 2.3 and earlier. The issue is a SQL injection through the announce parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD CVSS v2 base score is 7.5 (HIGH) with network vectors, low attack complexity, no authentication required, and partial ...

CVE-2005-3834

CVE-2005-3834 : An XSS vulnerability exists in Tunez (versions 1.21 and earlier) in search.php, exploitable via the searchFor parameter. Remote attackers can inject arbitrary web script or HTML. Affected software/component: Tunez 1.21 and earlier; vulnerable parameter: searchFor in search.php. Im...

CVE-2005-3835

PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter...

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

CVE-2005-3829

CVE-2005-3829 affects ActiveCampaign KnowledgeBuilder 2.4 and earlier. The issue allows remote attackers to cause a denial-of-service by supplying an invalid category parameter, which triggers a large number of SQL queries. The available documents confirm the vulnerability scenario and severity (...

CVE-2005-3832

CVE-2005-3832 describes a stack-based buffer overflow in CxUux60.dll and CxUux60u.dll used by SpeedProject products (Squeez 5.0 Build 4285; SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The vulnerability allows user-assisted attackers to execute arbitrary code via a ZIP archive containing...

CVE-2005-3832

Stack-based buffer overflow in 1 CxUux60.dll and 2 CxUux60u.dll, as used in SpeedProject products including a Squeez 5.0 Build 4285, and b SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...

CVE-2005-3830

Affected software/issue. ActiveCampaign SupportTrio 1.4 and earlier is affected by a directory traversal vulnerability in index.php, allowing remote attackers to read or include arbitrary files via the page parameter. This is the root cause described as a directory traversal issue, with potential...

CVE-2005-3831

The CVE-2005-3831 issue is a stack-based buffer overflow in two DLLs, CxZIP60.dll and CxZIP60u.dll, used by SpeedProject products (ZipStar 5.0 Build 4285, Squeez 5.0 Build 4285, SpeedCommander 11.0 Build 4430 and 10.51 Build 4430). The overflow is triggered by processing a ZIP archive containing ...

CVE-2005-3827

CVE-2005-3827 describes an SQL injection in AgileBill 1.4.92 and earlier, via the id parameter in the product_cat function/endpoint. The vulnerability allows remote attackers to execute arbitrary SQL commands, with CVSS v2 base metrics: AV:N/AC:L/Au:N/C:P/I:P/A:P and a base score of 7.5 (HIGH). A...

CVE-2005-3831

Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...

CVE-2005-3821

Cross-site scripting XSS vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name...

CVE-2005-3812

CVE-2005-3812 affects freeFTPd 1.0.10, where remote authenticated users can trigger a denial of service by sending a PORT command with missing arguments, causing a null dereference and crash. The issue is corroborated by multiple linked advisories and scanners (NVD/Nessus/OpenVAS entries) and is ...

CVE-2005-3825

The CVE-2005-3825 entry concerns a SQL injection in Comdev Vote Caster (version 3.1 and earlier) via the campaign_id parameter in a result action. The vulnerability allows remote attackers to execute arbitrary SQL commands, with the NVD listing a CVSSv2 base score of 7.5 (HIGH) and a network atta...

CVE-2005-3821

Cross-site scripting XSS vulnerability in vTiger CRM 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via multiple vectors, including the account name...

CVE-2005-3823

CVE-2005-3823 affects vTiger CRM 4.2 and earlier. The Users module allows remote attackers to execute arbitrary PHP code via an arbitrary file in the templatename parameter, which is passed to eval. The connected sources provide no explicit remediation details; update/patch information is not inc...

CVE-2005-3820

vTiger CRM <= 4.2 is affected by multiple directory traversal vulnerabilities in index.php (Leads module) where, due to improper handling of .. and null byte sequences in the module and action parameters, an attacker can read or include arbitrary files and potentially execute PHP code. The iss...

CVE-2005-3814

CVE-2005-3814 affects SmartPPC Pro with multiple XSS flaws accessible through the username parameter in directory.php, frames.php, and search.php. The PT-2005-4562 entry confirms the vulnerabilities, noting no specific affected versions and indicating that a fix/version with patches is not listed...