10536 matches found
CVE-2005-1028
PHP-Nuke 6.x through 7.6 contains an information disclosure vulnerability where remote attackers can obtain sensitive information by directly requesting (1) index.php with the forum_admin parameter, (2) the Surveys module, or (3) the Your_Account module. The attack reveals the path in a PHP error...
CVE-2005-1020
Cisco IOS SSH server TACACS+ DoS affecting IOS 12.0–12.3: (1) username containing a domain name with TACACS+ auth, (2) a new SSH session in login phase when an existing user issues a send command, and (3) logging/termination during data send. Results in resource exhaustion and device reload. Cisc...
CVE-2005-1025
CVE-2005-1025 : The AS/400 4.3 FTP server, when running in IFS mode, is vulnerable to a symlink attack via RCMD and the ADDLNK utility, enabling remote attackers to obtain sensitive information from the QSYS.LIB library. The issue is documented with a MEDIUM severity (CVSS v2 base score 5.0). No ...
CVE-2005-1022
CVE-2005-1022 affects ColdFusion 6.1 Updater 1, where Java .class files are placed under the web root in /WEB-INF/cfclasses. This configuration allows a remote attacker to obtain sensitive information exposed by those class files. The NVD entry documents a public impact of partial confidentiality...
CVE-2005-1030
CVE-2005-1030 affects the Active Auction House ASP application. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via parameters such as ReturnURL, password, username, and other fields (e.g., ReturnURL to...
CVE-2005-1034
CVE-2005-1034 affects SurgeFTP 2.2m1 and allows a remote attacker to cause a denial of service (application hang) by abusing the non‑standard LEAK command. The underlying issue is how the LEAK command is processed, which can crash the ftp daemon. Public material in the connected sources notes tha...
CVE-2005-1008
CVE-2005-1008 is an XSS vulnerability in ASP-DEv XM Forum RC3, affecting posts.asp where a javascript: URL in an IMG tag can inject arbitrary script/HTML. The OpenVAS/Nessus entries corroborate a cross-site scripting issue in this XM Forum component. The connected documents do not provide specifi...
CVE-2005-1013
CVE-2005-1013 affects MailEnable Enterprise 1.04 and earlier and MailEnable Professional 1.54 and earlier. The issue is a denial-of-service via an EHLO command containing a Unicode string, which can crash the SMTP service. Connected documents corroborate a MailEnable SMTP DoS vector related to ma...
CVE-2005-1009
Affected product. BakBone NetVault (Client-Server NetVault, Process Manager service), versions 6.x and 7.x. Vulnerability. A heap-based buffer overflow in the network/communication handling code (triggered by a modified computer name length or a long Name entry in configure.cfg) can lead to arbit...
CVE-2005-0464
The CVE concerns SGI IRIX gr_osview (6.5.x, including 6.5.22) which does not drop privileges when opening user-specified description files in debug mode. Local attackers can read a line from arbitrary files by using -d and -D, which prints the line as a formatting error. The core issue is an info...
CVE-2005-1012
CVE-2005-1012 is an XSS vulnerability in Iatek SiteEnable. The issue allows remote attackers to inject arbitrary web script or HTML through (1) contenttype in content.asp, (2) the title, or (3) the description. The NVD entry confirms the affected component as SiteEnable and the impact is reflecte...
CVE-2005-1010
The CVE-2005-1010 vulnerability is a Cross-Site Scripting (XSS) flaw in Comersus Cart 6 that allows remote attackers to inject arbitrary HTML/JS via the Account Username field. Root cause: improper sanitization of user input in the Username field (as detailed in Nessus/NGD references). Impact: us...
CVE-2005-1014
MailEnable’s IMAP service is affected on Enterprise 1.04 and earlier and Professional 1.54 by a buffer overflow triggered by a long AUTHENTICATE command. This allows remote arbitrary code execution (no authentication required per CVSS vector). Impact is described as partial confidentiality, integ...
CVE-2005-1015
MailEnable Imapd (MEIMAP.exe) is affected by a buffer overflow vulnerability triggered by a long LOGIN command. The issue allows remote code execution and is tracked as CVE-2005-1015. Public sources (including Red Hat and NVD entries) describe the flaw as arising from a buffer overflow in the IMA...
CVE-2005-0465
CVE-2005-0465 concerns SGI IRIX gr_osview, a setuid-root utility. Local attackers can exploit a privilege-inheritance flaw by using gr_osview -s to open files without dropping privileges, potentially overwriting arbitrary files (e.g., /etc/shadow) when an attacker has a local account and an open ...
CVE-2005-1009
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow 1 remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or 2 local users to execute arbitrary code via a long Name entry in the configure.cfg file...
CVE-2005-1017
CVE-2005-1017 affects MaxWebPortal versions up to 1.33, where the Update_Events function in events_functions.asp is vulnerable to SQL injection via the EVENT_ID parameter (as demonstrated using events.asp). This can allow remote attackers to execute arbitrary SQL commands. The connected sources c...
CVE-2005-1011
CVE-2005-1011 affects SiteEnable’s content.asp script where the sortby parameter is not properly sanitized, enabling remote attackers to inject arbitrary SQL commands. The vulnerability is documented in multiple sources (NVD entry with CVSSv2 base score 7.5 HIGH, remote network access, no authent...