CVE-2005-1220

The CVE-2005-1220 entry describes an information-disclosure vulnerability in Shoutbox SCRIPT 3.0.2 and earlier. An attacker could trigger a direct request to db/settings.dat to obtain usernames and password hashes, indicating a partial confidentiality impact. The connected documents confirm the a...

CVE-2005-0970

Mac OS X 10.3.9 and earlier allows users to install, create, and execute setuid/setgid scripts, contrary to the intended design, which may allow attackers to conduct unauthorized activities with escalated privileges via vulnerable scripts...

CVE-2005-0970

CVE-2005-0970 concerns Mac OS X 10.3.x and earlier where users can install, create, and execute setuid/setgid scripts, enabling unauthorized activities with escalated privileges through vulnerable scripts. The vulnerability is described as a design flaw in script handling that allows set-user IDs...

CVE-2005-1225

CVE-2005-1225 is an SQL injection vulnerability affecting Coppermine Photo Gallery 1.3.2, where the vulnerability exists in the way the server processes the favs parameter sent to either init.inc.php or zipdownload.php . The affected component is the web application’s PHP code handling these scri...

CVE-2005-1221

The CVE-2005-1221 entry concerns Ecommerce-Carts EcommPro 3.0 with a SQL injection in login.asp via the password field. Concrete details from connected documents show the vulnerability is caused by improper input handling in the password parameter, enabling remote attackers to execute arbitrary S...

CVE-2005-1222

CVE-2005-1222 : Netref cat_for_gen.php remote PHP script injection vulnerability in Annuaire Netref 4.2. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying PHP code via ad_direct and including it through m_for_racine, which is then written into cat_for_gen.php...

CVE-2005-1227

CVE-2005-1227 describes a cross-site scripting (XSS) vulnerability in PHProjekt 4.2 and earlier. The issue arises in the chatroom text submission form, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include explicit exploit code, affected versions ...

CVE-2005-0975

CVE-2005-0975 describes an integer signedness error in the Darwin kernel’s mach-o loader (mach_loader.c) used by Mac OS X 10.3.7 and earlier versions (before 10.3.9). The vulnerability allows local users to cause a denial of service (CPU consumption) by presenting a crafted mach-o header. The pro...

CVE-2005-1228

Summary: CVE-2005-1228 and CAN-2005-0988 affect gzip up to 1.3.5. Two issues: (1) -N option path traversal can cause arbitrary file creation/overwrite in directories; (2) a permission/ownership race during decompression can allow a local attacker to modify permissions or replace files with linked...

CVE-2005-1229

Directory traversal vulnerability in cpio 2.6 and earlier allows remote attackers to write to arbitrary directories via a .. dot dot in a cpio file...

WebcamXP Chat Name XSS

The remote host is running a version of webcamXP, a webcam software package and integrated web server for Windows, that suffers from an HTML injection flaw in its chat feature. An attacker can exploit this flaw by injecting malicious HTML and script code through the nickname field to redirect cha...

CVE-2005-1199

This CVE refers to an SQL injection in UBB.Threads, specifically in printthread.php, where the main parameter is exploitable due to insufficient input validation. The vulnerability affects UBB.Threads installations that process that script (e.g., historical references to versions around 6.5.x bet...

CVE-2005-0753

CVE-2005-0753 affects CVS (Concurrent Versions System). A buffer overflow in CVS processing of version/author information can allow remote code execution when a user connects to a malicious CVS server. Public advisories confirm a patch is available; Debian/FreeBSD/CentOS advisories document fixes...

CVE-2005-1198

CVE-2005-1198 describes a directory traversal vulnerability in apexec.pl used by the Anaconda Foundation Directory. The flaw allows remote attackers to read arbitrary files by inserting hex-encoded null characters (%00) within the middle of '..' sequences in the template parameter. The NVD entry ...

CVE-2005-1197

CVE-2005-1197 is a SQL injection vulnerability in Oracle Database Server 10g affecting the SYS.DBMS_CDC_IPUBLISH.CREATE_SCN_CHANGE_SET procedure via the CHANGE_SET_NAME parameter. Remote attackers could potentially execute arbitrary SQL commands; impact and remediation details are not specified i...

CVE-2005-1201

Summary: CVE-2005-1201 affects AZ Bulletin Board (AZBB) prior to version 1.0.08. The issue comprises two directory traversal flaws: (1) restricted to remote authenticated admin users who can delete arbitrary files via a “..” in the URL to admin_avatar.php or admin_attachment.php; (2) remote attac...

CVE-2005-1061

The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in the secure file that are later used as part of a regular expression, which causes the parser to crash, aka "logwatch log processing regular expression DoS."...

CVE-2005-0035

The CVE-2005-0035 entry concerns the Acrobat/Acrobat Reader ActiveX web control used with Internet Explorer (versions 7.0 and earlier). The vulnerability allows a remote attacker to determine the existence of local files via the LoadFile method, effectively an information-disclosure weakness in t...

CVE-2005-1195

CVE-2005-1195 affects xine-lib before 1.0 and products using it (e.g., MPlayer 1.0pre6 and earlier). Multiple heap-based buffer overflows in MMS over TCP (MMST) and RealMedia RTSP stream handling allow remote attackers to execute arbitrary code. Impact: code execution with the user’s privileges; ...

CVE-2005-0755

CVE-2005-0755 describes a heap-based buffer overflow in RealPlayer 10 and earlier, Helix Player prior to 10.0.4, and RealOne Player v1/v2. The flaw allows remote attackers to execute arbitrary code by sending a long hostname in a RAM file, enabling code execution and potential control of the affe...