10536 matches found
CVE-2005-1289
CVE-2005-1289 affects E-Cart 2004 1.1 and earlier. The issue is in index.cgi where user-supplied parameters (art and possibly cat) allow shell metacharacters to be interpreted, enabling remote execution of arbitrary commands. This is a remote code execution vulnerability with network access and n...
CVE-2005-1290
CVE-2005-1290 affects phpBB 2.0.14 and earlier. It has multiple XSS vulnerabilities allowing remote attackers to inject arbitrary script/HTML via: (1) the u parameter in profile.php, (2) the highlight parameter in viewtopic.php, and (3) the forumname or forumdesc parameters in admin_forums.php. T...
CVE-2005-1282
CVE-2005-1282 affects ArGoSoft Mail Server Pro 1.8.7.6, with multiple XSS vulnerabilities allowing remote injection via (1) IMG src, (2) webmail user settings, or (3) address book input. The connected sources confirm XSS exposure and affected component, but do not provide patch/version remediatio...
CVE-2005-1305
The CVE-2005-1305 issue affects the hyper.cgi script. It allows remote attackers to read arbitrary files by supplying a full pathname in the argument. NVD lists a base score of 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial confidentiality impact. Exploit ...
CVE-2005-1294
The vulnerability CVE-2005-1294 affects the Affix Bluetooth Protocol Stack for Linux, specifically via affix_sock_register. A socket call with a negative protocol value is used as an array index, enabling a local attacker to gain privileges. The documents do not specify affected versions or exact...
CVE-2005-1298
CVE-2005-1298 describes a vulnerability in the inserter.cgi script where remote attackers can read arbitrary files by passing a full pathname as the argument. The NVD entry lists a base score of 7.5 (HIGH) with NETWORK attack vector and LOW complexity, but the provided documents do not specify af...
CVE-2005-1304
CVE-2005-1304 affects the citat.pl script. The exposed vulnerability allows remote attackers to execute arbitrary files by supplying shell metacharacters in the argument. The available documents confirm the issue and its impact (arbitrary command/file execution) but do not provide exploit details...
CVE-2005-1288
The vulnerability CVE-2005-1288 affects ACS Blog 0.8 through 1.1.3, where attackers can gain administrator privileges by manipulating the value of the in cookie. Affected component: login/authentication flow (inc_login_check.asp). Root cause: insecure cookie handling that allows privilege escalat...
CVE-2005-1279
CVE-2005-1279 affects tcpdump up to version 3.8.3 (and related issues CVE-2005-1278, CVE-2005-1280). The vulnerability is a denial-of-service via infinite loops caused by improper handling in the BGP dissector (RT_ROUTING_INFO) and the LDP packet handling in ldp_print, exploitable by crafted netw...
CVE-2005-1274
Stack-based buffer overflow in the getIfHeader function in the WebDAV functionality in MySQL MaxDB before 7.5.00.26 allows remote attackers to execute arbitrary code via an HTTP unlock request and a long "If" parameter...
CVE-2005-0684
CVE-2005-0684 affects the MySQL MaxDB Webtool/WebTools in MaxDB before version 7.5.00.26. The vulnerability is a stack buffer overflow caused by improper handling of long HTTP GET requests containing a percent sign or long Lock-Token strings in WebDAV handling (WDVHandler_CommonUtils.c), allowing...
CVE-2005-1275
CVE-2005-1275: A heap-based buffer overflow in ImageMagick’s ReadPNMImage (pnm.c) allows remote attackers to crash or run arbitrary code by tricking a user into opening a specially crafted PNM file. Affected: ImageMagick 6.2.1 and earlier (as per multiple advisories). Red Hat/CentOS and SUSE/Mand...
CVE-2005-1275
Heap-based buffer overflow in the ReadPNMImage function in pnm.c for ImageMagick 6.2.1 and earlier allows remote attackers to cause a denial of service application crash via a PNM file with a small colors value...
CVE-2005-1283
Summary : CVE-2005-1283 describes multiple directory traversal vulnerabilities in ArGoSoft Mail Server Pro 1.8.7.6. Remote authenticated users can read arbitrary files via the UIDL parameter to the msg script or copy/move the user’s .eml file to arbitrary locations via the delete script. This is ...
CVE-2005-1296
The CVE-2005-1296 issue involves an include.cgi script that allows remote attackers to execute arbitrary commands via shell metacharacters in the argument. The available data indicate a remote, network-accessible flaw with a CVSSv2 base score of 7.5 (High) and partial impacts to confidentiality, ...
CVE-2005-1286
CVE-2005-1286 affects BitDefender 8 with an unquoted Windows search path when executing a process. The root cause is lack of quoting of the full pathname, enabling a local user to prevent BitDefender from starting by creating a malicious C:\program.exe. The NVD entry documents this local, high-co...
CVE-2005-1284
CVE-2005-1284 affects ArGoSoft Mail Server Pro 1.8.7.6; the addnew script allows remote attackers to create arbitrary accounts via a direct HTTP POST, even when web-interface account creation is disabled. This is a network‑level issue with CVSS2 base score 7.5 (HIGH). No exploit details or remedi...
CVE-2005-1299
CVE-2005-1299 concerns the inserter.cgi script, where remote attackers can execute arbitrary commands by supplying shell metacharacters in the argument. The issue yields a high-severity, in-progress code execution risk with complete impact on confidentiality, integrity and availability (CVSSv2 ba...
