10535 matches found
CVE-2005-3577
This CVE-2005-3577 describes a Cross-site Scripting (XSS) vulnerability in Walla TeleSite 3.0 and earlier, exploitable via the sug parameter in ts.exe (ts.cgi). The underlying issue is improper handling of user input in the CGI component, leading to injection of arbitrary web script/HTML when an ...
CVE-2005-3553
CVE-2005-3553 describes multiple SQL injection vulnerabilities in include.php of PHPKIT 1.6.1 R2 and earlier. The issues allow remote attackers to execute arbitrary SQL commands via (1) the id parameter when used with login/userinfo.php, and (2) the session parameter (the PHPKITSID variable). The...
CVE-2005-3588
The CVE-2005-3588 entry describes an SQL injection in Advanced Guestbook 2.2, exploitable via the username field in admin.php. The vulnerability is remote and allows execution of arbitrary SQL commands and privilege escalation. Documents indicate affected software is Advanced Guestbook 2.2; no sp...
CVE-2005-3543
SQL injection vulnerability in search.php in Phorum 5.0.0alpha through 5.0.20, when registerglobals is enabled, allows remote attackers to execute arbitrary SQL commands via the forumids parameter...
CVE-2005-3580
CVE-2005-3580 affects QDBM prior to 1.8.33-r2. Local users in the portage group can escalate privileges by placing a malicious shared object in the Portage temporary build directory, which is added to the runtime search path and loaded by dependent executables. The issue is confirmed in Gentoo GL...
CVE-2005-3566
CVE-2005-3566 affects VERITAS Cluster Server for UNIX prior to 4.0MP2. It describes a buffer overflow via a long VCSI18N_LANG environment variable that can allow a local user to execute arbitrary code through multiple ha commands (haagent, haalert, haattr, hacli, hacli_runcmd, haclus, haconf, had...
CVE-2005-3551
CVE-2005-3551 concerns toendaCMS prior to 0.6.2, where user account and session data are stored in the web root as XML files. An unauthenticated attacker can retrieve these files via direct HTTP requests, potentially exposing password hashes and other sensitive information. The core issue is impr...
CVE-2005-3564
The CVE-2005-3564 entry concerns the HP-UX envd daemon. Affected product: HP-UX envd (HP-UX B.11.00–B.11.11). Issue: local users can obtain privileges; root cause described as unknown attack vectors. Public details in connected docs include HP patch references HPSBUX02073 (SSRT051012 rev.2) and p...
CVE-2005-3557
Technical details about CVE-2005-3557 are not publicly provided in the connected documents. No affected versions, root cause, exploit info, or remediation are specified here. Monitor for updates.
CVE-2005-3591
CVE-2005-3591 describes a vulnerability in the Macromedia Flash plugin where Flash.ocx (Windows, 7.0.19.0 and earlier) and libflashplayer.so (Unix, before 7.0.25.0) allow a remote attacker to trigger a denial of service and potentially execute arbitrary code via parameters to the ActionDefineFunc...
CVE-2005-3559
CVE-2005-3559 is a directory traversal vulnerability in vmail.cgi of Asterisk, affecting 1.0.9 through 1.2.0-beta1 and enabling remote access to WAV files via a .. in the folder parameter. The issue is documented across multiple feeds (Debian DSA-1048-1 and SUSE/Nessus entries) with remediation g...
CVE-2005-3595
CVE-2005-3595 concerns Windows XP Home Edition, where the default installation includes a blank Administrator password. This enables remote attackers to gain control of the machine without authentication, as described in the CVE records. The related connected documents corroborate that the vulner...
CVE-2005-3546
suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...
CVE-2005-3561
CVE-2005-3561 is rejected/not used; reference CVE-2005-2954 instead.
CVE-2005-3565
The CVE-2005-3565 entry matches HP-UX Trusted Mode remshd remotely exploitable behavior. Affected software: HP-UX B.11.00, B.11.11, B.11.23; vulnerable component is the remshd daemon running in Trusted Mode. The underlying issue enables remote unauthorized access (no local user interaction requir...
CVE-2005-3344
The CVE-2005-3344 issue affects Horde Groupware/Horde3 where the default installation ships with an administrative account that has a blank password. This enables unauthenticated remote access to administrative functions, potentially compromising the system. Debian’s DSA-884-1 advisory fixes Hord...
CVE-2005-3573
CVE-2005-3573 affects Mailman 2.1.4–2.1.6 with two DoS vectors: (1) UTF-8 handling in attachment filenames can crash the server, and (2) malformed date handling can crash the Mailman service. Connected advisories (RHSA-2006:0204, Debian DSA-955-1, CentOS/CESA-2006:0204) document these issues and ...
CVE-2005-3587
CVE-2005-3587 affects ClamAV up to version 0.87.1. The issue is an improper boundary check in petite.c that could allow attackers to perform unknown attacks via unknown vectors. Public mentions anchor the vulnerability in advisories (Mandrake MDKSA-2005:205; GLSA-200511-04) and the OSV/DEBIAN/NVD...