6933 matches found
CVE-2005-4449
verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter. NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, th...
CVE-2005-4422
Unrestricted file upload vulnerability in toendaCMS before 0.6.2 Stable allows remote authenticated administrators to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in data/images/albums...
CVE-2005-4175
CVE-2005-4175 affects Insyde BIOS V190. The issue: the keyboard buffer is not cleared after reading the BIOS password during system startup, enabling a local attacker to read the password from physical memory. Practical impact is limited to local access scenarios as per the provided description. ...
CVE-2005-4176
AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory...
- Cisco IOS HTTP Server code injection/execution vulnerability-
It has been identified a vulnerability in the Cisco IOS Web Server. An attacker can inject arbitrary code in some of the dynamically generated web pages. To succesfully exploit the vulnerability the attacker only needs to know the IP of the Cisco. THERE'S NO NEED TO HAVE ACCESS TO THE WEB SERVER!...
CVE-2005-2741
Authorization Services in securityd for Apple Mac OS X 10.3.9 allows local users to gain privileges by granting themselves certain rights that should be restricted to administrators...
Aenovo - incssearchdisplay.asp?strSQL SQL Injection
Aenovo - incssearchdisplay.asp?strSQL SQL Injection source: https://www.securityfocus.com/bid/15036/info Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...
Aenovo - '/incs/searchdisplay.asp?strSQL' SQL Injection
source: https://www.securityfocus.com/bid/15036/info Aenovo, aeNovoShop and aeNovoWYSI are prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
Gnome-PTY-Helper UTMP - Hostname Spoofing
Gnome-PTY-Helper UTMP - Hostname Spoofing // source: https://www.securityfocus.com/bid/15004/info 'gnome-pty-helper' is susceptible to a local UTMP hostname spoofing vulnerability. This issue is due to the failure of the application to properly validate user-supplied data prior to using it to...
CVE-2005-2955
config.inc.php in ATutor 1.5.1, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which allows authenticated administrators or educators to execute arbitrary code by uploading files with other executable extensions such as .inc, .php4, or others...
MS Windows CSRSS Local Privilege Escalation Exploit (MS05-018)
Exploit for unknown platform in category local exploits ============================================================== MS Windows CSRSS Local Privilege Escalation Exploit MS05-018 ============================================================== include include include pragma comment...
CVE-2005-2786
Directory traversal vulnerability in bestmailedit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter...
CVE-2005-2786
Directory traversal vulnerability in bestmailedit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter...
CVE-2005-2786: Undefined Security Weakness
Directory traversal vulnerability in bestmailedit.cgi in cosmoshop 8.10.78 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter...
CVE-2005-2761
Cross-site scripting XSS vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message...
CVE-2005-2761
Cross-site scripting XSS vulnerability in phpGroupWare 0.9.16.000 allows administrators to inject arbitrary web script or HTML by modifying the main screen message...
CVE-2005-2699
Unrestricted file upload vulnerability in admin/admin.php in PHPKit 1.6.1 allows remote authenticated administrators to execute arbitrary PHP code by uploading a .php file to the content/images/ directory using images.php. NOTE: if a PHPKit administrator must already have access to the end system...
Microsoft Security Bulletin MS05-041 Vulnerability in Remote Desktop Protocol Could Allow Denial of Service (899591)
Microsoft Security Bulletin MS05-041 Vulnerability in Remote Desktop Protocol Could Allow Denial of Service 899591 Issued: August 9, 2005 Version: 1.0 Summary Who should read this document: System administrators who operate terminal servers that use Microsoft Windows 2000 or Windows Server 2003,...
CVE-2004-2234
CVE-2004-2234 concerns Moodle before 1.2, where teachers could log in as administrators due to an unspecified vulnerability (privilege escalation). Connected sources consistently reference Moodle