CVE-2005-1479

CVE-2005-1479 affects JGS-Portal 3.0.1 and earlier. A SQL injection in jgs_portal.php via the id parameter allows remote attackers to execute arbitrary SQL commands. This impacts confidentiality, integrity, and availability (partial). Attack vector is network with low complexity and no authentica...

CVE-2005-1508

PWSPHP (Portail Web System) is affected by cross-site scripting (XSS) in version 1.2.2 due to insufficient input validation in multiple modules/parameters (e.g., news, stats, profil.php, memberlist, recherche) and specifically the SettingsBase.php skin parameter per the NASL entry. The vulnerabil...

CVE-2005-1519

CVE-2005-1519 affects Squid (2.5 STABLE9 and earlier) where an unfiltered DNS client UDP port can allow remote spoofing of DNS lookups, potentially redirecting users to spoofed sites. Public advisories (Debian DSA-751-1, CentOS/Red Hat advisories, Ubuntu USN-129-1) describe a fix in updated Squid...

CVE-2005-1496

Oracle 10g DBMS_Scheduler Privilege Escalation (CVE-2005-1496): A flaw in the DBMS_Scheduler package allows a user with CREATE JOB privileges to switch SESSION_USER to SYS, enabling privilege escalation. Affected: Oracle 10g DBMS_Scheduler component. Root cause: vulnerability in how DBMS_Schedule...

CVE-2005-1486

FishCart 3.1 is affected by multiple vulnerabilities. The primary CVE (CVE-2005-1486) describes cross-site scripting via the following parameters: trackingnum, reqagree, or m in upstracking.php, and nlst in display.php. OpenVAS data also indicates SQL injection vulnerabilities in FishCart that co...

CVE-2005-1515

CVE-2005-1513, CVE-2005-1514, CVE-2005-1515, CVE-2020-3811, CVE-2020-3812 are referenced in the Debian DLA-2234-1 advisory for netqmail. The Debian advisory reports multiple issues in netqmail (qmail) affecting 64-bit platforms with large memory, including: CVE-2005-1513 (overflow in stralloc_rea...

CVE-2005-1488

Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 contains multiple cross-site scripting (XSS) vulnerabilities. Remote authenticated users can inject arbitrary web script or HTML through four input paths: (1) E-mail address, Note, or Public Certificate fields to address.html, (2) addressaction....

CVE-2005-1482

CVE-2005-1482 affects ArticleLive 2005. Remote attackers can gain privileges by modifying the (1) auth and (2) userId fields in a cookie. The provided sources describe the cookie-tampering vulnerability and resulting privilege escalation; no explicit patch/remediation is detailed in the supplied ...

CVE-2005-1512

CVE-2005-1512 concerns the Admin panel of PwsPHP 1.2.2 , where the upload validation for image files is inadequate. The vulnerability allows remote attackers to upload potentially arbitrary files, which could lead to arbitrary code execution on the server. The CVSS details from the entry indicate...

CVE-2005-1497

The CVE-2005-1497 entry concerns myBloggie 2.1.1. Affected component: index.php. Vulnerability: when handling an invalid post_id parameter, an error message reveals the server path, enabling partial information disclosure. Root cause: error message leakage rather than an executable exploit vector...

CVE-2005-1502

The CVE-2005-1502 entry describes a cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart. The affected components are the search_list.php script (parameter: searchstring) and item_list.php (parameters: secondgroup, maingroup). The core issue is the ability for remote attackers t...

CVE-2005-1489

Unknown vulnerability in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2 allows remote authenticated users to obtain the full path of the server via certain requests to 1 calendaraddevent.html, 2 calendarevent.html, or 3 calendartask.html...

CVE-2005-1489

CVE-2005-1489 concerns Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. The description states that remote authenticated users can obtain the server’s full path by making requests to calendar_addevent.html, calendar_event.html, or calendar_task.html. The available data include a CVSS v2 base ...

CVE-2005-1491

CVE-2005-1491 affects Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2. The issue allows remote authenticated users to perform file operations: (1) move their home directory via viewaction.html and (2) move arbitrary files via the importaction.html importfile parameter. The root cause is a vul...

CVE-2005-1511

PwsPHP 1.2.2 is affected by an authentication bypass vulnerability caused by manipulation of the Pseudo cookie, allowing remote attackers to post arbitrary comments. The issue is that authentication can be bypassed and comments posted without proper authorization. No explicit remediation details ...

CVE-2005-1482

ArticleLive 2005 allows remote attackers to gain privileges by modifying the 1 auth and 2 userId fields in a cookie...

CVE-2005-1483

Interspire ArticleLive 2005 is affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary script/HTML via the Query, Username, LastName, Biography, or BlogId parameters. A Nessus plugin also notes a session-handling flaw that could enable remote attackers to gain adm...

CVE-2005-1495

CVE-2005-1495 affects Oracle Database 9i/10g where Fine Grained Auditing (FGA) is disabled after the SYS user executes a SELECT on an FGA object, making detection harder and enabling potential evasion of auditing. The available documents describe the vulnerability and its impact but do not provid...

CVE-2005-1478

CVE-2005-1478 affects NetWin DMail 3.1a DSmtp (dsmtp.exe) where a format-string vulnerability in the xtellmail command allows remote code execution. The root cause is improper handling of format specifiers in DSmtp; impact is arbitrary code execution on the server. Public exploit details are not ...

CVE-2005-1499

CVE-2005-1499 affects myBloggie 2.1.1 via delcomment.php, where remote attackers can delete arbitrary comments by modifying the comment_id parameter. The NVD notes a CVSSv2 base score of 7.5 (HIGH) with network attack vector, low attack complexity, no authentication required, and partial impact o...