10535 matches found
CVE-2005-3009
CVE-2005-3009 affects CuteNews; the vulnerability exists in the index.php mod parameter and allows remote attackers to inject arbitrary web script or HTML (XSS). This is a client-side scripting flaw (XSS) likely exploitable via crafted input sent to the mod parameter. Exploitation details, affect...
CVE-2005-3011
The sortoffline function for texindex in texinfo 4.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files...
CVE-2005-3003
The CVE-2005-3003 entry concerns NooTopList 1.0.0 release 17, specifically in index.php. The vulnerability is a SQL injection in the application’s handling of the (1) o and (2) sort parameters, enabling remote attackers to execute arbitrary SQL commands. The NVD metrics indicate a high base sever...
CVE-2005-3007
Opera before 8.50 is affected by a vulnerability where appending a trailing dot to a filename spoofed the content type, potentially tricking users into processing dangerous content. The issue concerns the browser’s handling of file-type presentation rather to content-type verification, enabling m...
CVE-2005-3012
The CVE-2005-3012 issue affects SimpleCDR-X 1.3.3 via MasterDataCD::createImage, where the .temp directory is created with insecure permissions, enabling local users to read sensitive ISO images. No exploit details or explicit mitigation are provided in the connected documents. Summary of impact ...
CVE-2005-0138
CVE-2005-0138 affects SGI IRIX 6.5.25–6.5.27 where rpc.mountd does not correctly handle anonymous clients from hosts with undetermined hostnames. The public records describe this as a security-mechanism issue and note there is no clear attacker role, with the CVE possibly not meeting the vulnerab...
CVE-2005-3030
Directory traversal vulnerability in the archive decompression library in AhnLab V3Pro 2004 build 6.0.0.383, V3 VirusBlock 2005 build 6.0.0.383, and V3Net for Windows Server 6.0 build 6.0.0.383 allows remote attackers to write arbitrary files via a .. dot dot in the filename in a compressed archi...
CVE-2005-3030
CVE-2005-3030 is a directory traversal vulnerability in the archive decompression library used by AhnLab V3Pro 2004 (build 6.0.0.383), V3 VirusBlock 2005 (build 6.0.0.383), and V3Net for Windows Server 6.0 (build 6.0.0.383). The issue allows remote attackers to write arbitrary files by supplying ...
CVE-2005-3024
CVE-2005-3024 affects vBulletin 3.0.7 and older with multiple SQL injection vulnerabilities in various scripts. Remote attackers can inject via numerous parameters (e.g., announcement.php, thread.php, user.php, admincalendar.php, language.php, template.php, etc.), potentially compromising data in...
CVE-2005-3021
CVE-2005-3021 affects vBulletin
CVE-2005-3013
CVE-2005-3013 describes a buffer overflow in the liby2util component of YaST on SUSE Linux 9.3. The overflow is triggered by a long Loc entry and allows local users to execute arbitrary code. The vulnerability is local with low attack complexity and no authentication required, resulting in partia...
CVE-2005-2663
CVE-2005-2663 affects masqmail: opening the log file allows a local attacker to overwrite arbitrary files via a symlink attack, due to masqmail not relinquishing privileges. Affected versions are pre-0.2.18. Debian/DSA references indicate fixes in masqmail 0.2.20-1sarge1 and related updates for w...
CVE-2005-3020
CVE-2005-3020 : Concrete XSS vulnerabilities in vBulletin prior to 3.0.9. The vulnerability arises from insufficient input sanitization, allowing remote attackers to inject arbitrary script/HTML via multiple parameters across several scripts: (1) group in css.php, (2) redirect in index.php, (3) e...
CVE-2005-3011
CVE-2005-3011 and related texinfo issues affect the GNU texinfo package up to version 4.8 and earlier, specifically in the texindex utility. The root cause is insecure handling of temporary files, allowing a local attacker to overwrite files writable by the victim via a symlink/temporary-file rac...
CVE-2005-2764
CVE-2005-2764 concerns OpenTTD before 0.4.0.1, where multiple buffer overflows could allow a remote attacker to crash the server or client (DoS) and possibly execute arbitrary code via unspecified vectors. The NVD entry summarizes the impact as denial of service with potential code execution, ori...
CVE-2005-3005
The CVE-2005-3005 issue affects Helpdesk Software Hesk: an authentication bypass via manipulation of the PHPSESSID value (session ID) in admin.php and admin_main.php. Attackers can bypass login remotely by altering the session ID cookie/parameter to gain access without valid credentials; affected...
CVE-2005-3004
CVE-2005-3004 describes a SQL injection in Interakt MX Shop 3.2.0. The vulnerability is in the pages module of index.php, exploitable via the parameters (1) idp, (2) id_ctg, or (3) id_prd. The affected product is Interakt MX Shop 3.2.0. The documented impact is the ability to execute arbitrary SQ...
CVE-2005-3027
Sybari Antigen 8.0 SR2 is affected by a vulnerability in SMTP message filtering where the product does not properly filter messages, allowing remote attackers to bypass custom filter rules and send file attachments of arbitrary types via a message with the subject “Antigen forwarded attachment.” ...
