CVE-2009-3205

creationtimestamp| type| source ---|---|--- 2009-08-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9471...

CVE-2008-3205

creationtimestamp| type| source ---|---|--- 2008-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6042...

CVE-2008-3205

CVE-2008-3205 is a directory traversal vulnerability in the Easy-Script Wysi Wiki Wyg 1.0 web app, exploitable via a dot-dot sequence in the c parameter of index.php to read arbitrary files. The NVD entry gives a CVSSv2 base score of 5.0 (Medium) with network access, low attack complexity, no aut...

CVE-2007-3205

The parsestr function in 1 PHP, 2 Hardened-PHP, and 3 Suhosin, when called without a second parameter, might allow remote attackers to overwrite arbitrary variables by specifying variable names and values in the string to be parsed. NOTE: it is not clear whether this is a design limitation of the...

CVE-2007-3205

Summary: CVE-2007-3205 affects the parse_str function in PHP, Hardened-PHP, and Suhosin when called without a second parameter. The vulnerability allows a remote attacker to overwrite arbitrary variables by supplying variable names and values in the string to be parsed. The description notes unce...

CVE-2006-3205

CVE-2006-3205 affects Ultimate PHP Board (UPB) versions 1.9.6 and earlier. The issue stems from cookie-based authentication where parameters such as user_env , pass_env , power_env , and id_env can be modified to create a persistent logon that does not vary across sessions. This enables remote at...

CVE-2005-3205

CVE-2005-3205 : XSS in Oracle9i iSQLPlus (iSQLPlus) for Oracle9i Database Server Release 2 (9.0.2.4). The vulnerability arises in the iSQL Plus interface when using the command set markup HTML TABLE, allowing remote attackers to inject arbitrary script/HTML that executes when a user selects a tab...