CVE-2005-1791

CVE-2005-1791 affects Microsoft Internet Explorer 6 SP2 (build 6.0.2900.2180). The issue is a crash of URLMON.DLL when a user attempts to add a URI to the restricted zone whose full domain begins with a numeric sequence that looks like an IP address. The vulnerability is documented across CVE lis...

CVE-2005-1788

SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter...

CVE-2005-1822

Qualiteam X-Cart 4.0.8 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via various parameters (home.php: cat, printable; product.php: productid, mode; error_message.php: id; help.php: section; orders.php: mode; register.ph...

CVE-2005-1801

The CVE-2005-1801 entry concerns the Nokia 9500 vCard viewer. The vulnerability lies in the vCard viewer component, where processing a vCard with an excessively long Name field can cause the viewer to crash, resulting in a denial of service. The available documents do not provide concrete exploit...

CVE-2005-1816

Invision Power Board (IPB) versions 1.0–2.0.4 are affected by a privilege-escalation vulnerability where non-root admins can add themselves or other users to the root admin group via the “Move users in this group to” screen. This has been reported consistently across CVE-2005-1816 records (NVD, R...

CVE-2005-1814

The CVE-2005-1814 entry describes a stack-based buffer overflow in PicoWebServer 1.0. The vulnerability occurs when processing a long URL, which can lead to a denial of service (application crash) and potentially arbitrary code execution. Affected component is the server’s URL handling/parsing lo...

CVE-2005-1795

The vulnerability affects Clam AntiVirus (ClamAV) prior to 0.85 on macOS, where the filecopy function in misc.c can be exploited by a virus name containing shell metacharacters. This occurs when HFS permissions prevent deletion and ditto is invoked, allowing remote code execution. The reported im...

CVE-2005-1788

The CVE-2005-1788 entry describes an SQL injection vulnerability in resellerresources.asp within Hosting Controller 6.1 Hotfix 2.0, exploitable via the jresourceid parameter. Remote attackers can execute arbitrary SQL commands through this input. Affected software/component: Hosting Controller 6....

CVE-2005-1818

CVE-2005-1818 affects NewLife Blogger prior to 3.3.1. Connected documents confirm multiple SQL injection vulnerabilities enabling remote attackers to execute arbitrary SQL commands via unknown attack vectors. The sources do not specify a patched version or remediation steps. Exploitation details ...

CVE-2005-1799

CVE-2005-1799 describes a cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10. The provided records specify an XSS issue that lets an attacker inject arbitrary web script or HTML via unspecified vectors. The NVD entry lists a base CVSS v2 score of 4.3 (m...

CVE-2005-1796

CVE-2005-1796 is a format string vulnerability in the Ettercap Ncurses interface (ec_curses.c) that could allow a remote attacker to execute arbitrary code. It affects Ettercap prior to version 0.7.3. Debian advisories confirm a format string error and state upgrades to fix: version 0.7.1-1sarge1...

CVE-2005-1823

CVE-2005-1823 refers to multiple cross-site scripting (XSS) flaws in Qualiteam X-Cart 4.0.8. The provided documents specify vulnerable vectors within X-Cart’s PHP files, including parameters to home.php (cat, printable), product.php (productid, mode), error_message.php (id), help.php (section), o...

CVE-2005-1793

CVE-2005-1793 affects Microsoft Windows 98SE (and possibly other operating systems) via User32.DLL. A crafted icon (.ico) bitmap file with unusually large width and height values can cause a denial of service (crash). The vulnerability is described as allowing local and remote DoS; CVSS 2.0 base ...

CVE-2005-1814

Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a long URL...

CVE-2005-1805

CVE-2005-1805 describes an SQL injection in the login.asp of OS4E (Online Solutions for Educators). The vulnerability involves the password parameter being unsafely handled, allowing remote attackers to manipulate SQL commands and potentially access or modify data. The affected product is cited a...

CVE-2005-1798

Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. dot dot sequences in an HTTP request...

CVE-2005-1809

Sony Ericsson P900 Beamer is affected by CVE-2005-1809. The vulnerability occurs when an OBEX FTP session with a long filename is used in OBEX File Transfer or OBEX Object Push, triggering a denial-of-service (panic). The prime exposure vector is remote network interaction. No root-cause details ...

CVE-2005-1803

CVE-2005-1803 affects Net Portal Dynamic System (NPDS) 5.0. The description lists multiple XSS vectors: via the language parameter to admin.php or powerpack_f.php; the sitename parameter to sdv_infos.php; the categories parameter to faq.php; the lettre parameter to the glossaire module; the title...

CVE-2005-1804

NPDS 5.0 contains multiple SQL injection vulnerabilities. Specifically, remote attackers can craft requests to (1) glossaire.php using the terme parameter and (2) links.php using the query parameter to execute arbitrary SQL commands. This is due to improper handling of user-supplied input. The im...

CVE-2005-1810

SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $catID variable, as demonstrated using the cat parameter to index.php...