CVE-2005-1071

CVE-2005-1071 describes an SQL injection in the file banner.inc.php of JPortal Web Portal 2.3.1 . The vulnerability is exploitable via the haslo parameter, allowing remote attackers to execute arbitrary SQL commands. Affected component: banner.inc.php within JPortal Web Portal 2.3.1. Root cause d...

CVE-2005-1077

CVE-2005-1077 concerns XSS vulnerabilities in XAMPP 1.4.x , allowing remote attackers to inject arbitrary script/HTML via the endpoints cds.php , Guestbook-EN.pl , or phonebook.php . The NVD entry lists a Medium base score (4.3) with network attack vector and no authentication needed, but the doc...

CVE-2005-1053

CVE-2005-1053 affects ModernBill 4.3.0 and earlier. Vulnerable component: orderwiz.php; exploitation via parameters (c_code or aid) allows remote attackers to inject arbitrary web script/HTML (XSS). The consolidated sources describe XSS risk in the affected script and parameter vectors; no specif...

CVE-2005-1050

CVE-2005-1050 affects PostNuke 0.760-RC3 in the Reviews module’s modload op. The vulnerability allows remote attackers to disclose sensitive information by supplying an invalid id parameter, causing a PHP error message that reveals the path. The NVD entry rates impact as Partial Confidentiality w...

CVE-2005-1056

The CVE describes a heap overflow in HP OpenView Network Node Manager (NNM) components affecting versions 6.2–6.4 and 7.01–7.50. Connected Nessus data attributes the flaw to the HP OpenView Topology Manager Daemon, which handles IP discovery/layout. An unauthenticated, remote attacker can send a ...

CVE-2005-1073

CVE-2005-1073 describes a directory-traversal vulnerability in RadScripts RadBids Gold 2, where an attacker can read arbitrary files via the read parameter in index.php. The NVD entry lists a 5.0/Medium CVSS v2 base score with network exposure and no authentication, indicating remote access is po...

CVE-2005-1054

CVE-2005-1054 affects ModernBill prior to or including 4.3.0, allowing remote PHP code execution via a PHP remote file include through the DIR parameter in news.php when DIR is set to a URL. This is echoed by later related CVEs (e.g., CVE-2008-5060) describing similar PHP RFI vulnerabilities in M...

CVE-2005-1076

CVE-2005-1076 describes a cross-site scripting (XSS) vulnerability in the WebCT Campus Edition 4.1 discussion board, allowing an attacker to inject arbitrary script/HTML via the message field. The connected Red Hat and CVE-2008-1225 records corroborate XSS in WebCT 4.1.5.8 and note potential over...

CVE-2005-1065

The vulnerability CVE-2005-1065 affects tetex in Novell Linux Desktop 9. An attacker with local access can determine the existence of arbitrary files via a symlink attack in /var/cache/fonts, enabling partial confidentiality impact without authentication. The common root cause is a symlink handli...

CVE-2005-1058

Cisco IOS 12.2T, 12.3 and 12.3T contain an ISAKMP/XAUTH processing flaw: if XAUTH attributes in the ISAKMP profile are not fully processed after Phase 1, a remote attacker can bypass XAUTH and proceed to Phase 2 negotiations, potentially gaining access to private resources. Affected functionality...

CVE-2005-0390

CVE-2005-0390 affects Axel, a lightweight download accelerator. The issue is a buffer overflow in Axel’s HTTP redirection capability (in conn.c) prior to version 1.0b, which could allow remote attackers to execute arbitrary code. The CVE entry documents a network-facing vulnerability with a base ...

CVE-2005-1082

CVE-2005-1082: The affected software is AzDGDatingPlatinum version 1.1.0. The issue consists of multiple SQL injection vulnerabilities in view.php (id parameter) and in members/index.php (from parameter). The underlying root cause is SQL injection that allows remote attackers to craft inputs to e...

CVE-2005-1081

The CVE-2005-1081 entry describes an XSS vulnerability in AzDGDatingPlatinum version 1.1.0, triggered by the id parameter in view.php. The underlying issue is likely insufficient input sanitization allowing remote attackers to inject arbitrary web script or HTML. Affected component: view.php (id ...

CVE-2005-0941

OpenOffice.org (1.1.4 and earlier) is affected by CVE-2005-0941 due to a mismatch between 16-bit length values used for memory allocation and 32-bit processing in StgCompObjStream::Load, causing a heap-based buffer overflow via crafted DOC files. This can lead to remote denial of service and pote...

CVE-2005-1049

Summary: CVE-2005-1049 describes multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC3 (and related RC4 variants) where an attacker can inject arbitrary HTML/JavaScript via the module parameter to admin.php or the op parameter to user.php. The issue is noted to exist when the ...

CVE-2005-1047

CVE-2005-1047 concerns a vulnerability in the phpBB 2.0.x up.php file upload mod. The issue is that the upload script does not properly restrict file types, allowing remote authenticated users to upload executable PHP files and subsequently access them from the uploads directory to execute arbitr...

RHEL 3 / 4 : gaim (RHSA-2005:365)

An updated gaim package that fixes multiple denial of service issues is now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Gaim application is a multi-protocol instant messaging client. A buffer overflow bug was found in the wa...

GLD (Greylisting Daemon) Postfix Buffer Overflow

This module exploits a stack buffer overflow in the Salim Gasmi GLD use exploit/linux/misc/gld/postfix msf undefinedpostfix show actions ...actions... msf undefinedpostfix set ACTION msf undefinedpostfix show options ...show and set options... msf undefinedpostfix run This module requires...

MS05-017 Microsoft Message Queueing Service Path Overflow

This module exploits a stack buffer overflow in the RPC interface to the Microsoft Message Queueing service. The offset to the return address changes based on the length of the system hostname, so this must be provided via the 'HNAME' option. Much thanks to snort.org and Jean-Baptiste Marchand's...

RHEL 2.1 : dhcp (RHSA-2005:212)

An updated dhcp package that fixes a string format issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The dhcp package provides the ISC Dynamic Host Configuration Protocol DHCP server and...