CVE-2005-1804

Multiple SQL injection vulnerabilities in Net Portal Dynamic System NPDS 5.0 allow remote attackers to execute arbitrary SQL commands via the 1 terme parameter in the glossaire module glossaire.php or 2 query parameter to links.php...

CVE-2004-2098

CVE-2004-2098 describes an XSS vulnerability in the banner engine (TBE) 5.0. The vulnerable component is the HTML banner view/preview capability, where attacker-supplied script can be executed in the context of other users. The CVE reports that remote attackers can trigger arbitrary script execut...

CVE-2005-1637

CVE-2005-1637 concerns NPDS versions 4.8 and 5.0, where multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL commands through the user-controlled thold parameter in the PHP scripts comments.php or pollcomments.php . The underlying issue is improper handling of in...

CVE-2004-1806

CFWebStore CFWebStore 5.0.x is vulnerable to SQL injection in index.cfm via the parameters category_id, product_id, or feature_id. The root cause is unsafe SQL construction, enabling remote attackers to run arbitrary SQL and potentially gain administrative access on affected hosts. The assessment...

CVE-2004-1807

CVE-2004-1807 describes a cross-site scripting (XSS) vulnerability in CFWebstore 5.0’s index.cfm that allows remote attackers to inject arbitrary script or HTML via the URL. The issue affects CFWebstore 5.0, with the root cause per the records being a client-side/script injection vulnerability in...

CVE-2004-1807

Cross-site scripting XSS vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2004-1806

SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the 1 categoryid, 2 productid, or 3 featureid parameters...

CVE-2004-1904

Buffer overflow in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string...

CVE-2005-0336

Cross-site scripting XSS vulnerability in EMotion MediaPartner Web Server 5.0 allows remote attackers to inject arbitrary HTML or web script, as demonstrated using a URL containing .. sequences and HTML, which results in a directory browsing page that does not properly filter the HTML...

CVE-2001-1461

CVE-2001-1461 is a directory traversal vulnerability in the WebID component of RSA Security SecurID 5.0, used by ACE/Agent on Windows, Windows NT and Windows 2000. The root cause is improper handling of URL-encoded sequences ("/.." and ".."), allowing an attacker to access restricted resources. T...

CVE-2001-1445

The CVE-2001-1445 entry relates to Lotus Domino's SMTP server versions 5.0–5.7, where remote attackers could bypass mail relaying restrictions by crafting RCPT TO commands. The available sources describe the vulnerability as an unknown issue with relaying control, without detailing the root cause...

CVE-2001-1461

Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded 1 /.. or 2 .. sequences...

CVE-2001-1450: Undefined Security Weakness

Microsoft Internet Explorer 5.0 through 6.0 allows attackers to cause a denial of service browser crash via a crafted FTP URL such as "/../"...

CVE-2005-0776

adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos...

CVE-2005-0777: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via 1 the checktags function or 2 the editbio field in the user profile...

CVE-2005-0768

Buffer overflow in the administration web server for GoodTech Telnet Server 4.0 and 5.0, and possibly all versions before 5.0.7, allows remote attackers to execute arbitrary code via a long string to port 2380...

CVE-2003-1108: Undefined Security Weakness

The Session Initiation Protocol SIP implementation in Alcatel OmniPCX Enterprise 5.0 Lx allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted INVITE messages, as demonstrated by the OUSPG PROTOS c07-sip test suite...

CVE-2004-1766

The CVE refers to NetScreen-Security Manager prior to Feature Pack 1 communicating with devices using ScreenOS 5.0 without encryption, allowing remote attackers to obtain sensitive information via sniffing. The available documents state the vulnerability and its impact (information disclosure) bu...

CVE-2004-1766

The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing...

CVE-2004-1766: Undefined Security Weakness

The default installation of NetScreen-Security Manager before Feature Pack 1 does not enable encryption for communication with devices running ScreenOS 5.0, which allows remote attackers to obtain sensitive information via sniffing...