Archive
20 March 2005
Vulnerabilities first published on this day (UTC), newest first.
22 results · Clear filters · Feed
-
Unscored —CVE-2005-0792 Public exploit
SQL injection vulnerability in ZPanel 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) uname p…
-
Unscored —CVE-2005-0783 Public exploit
Cross-site scripting (XSS) vulnerability in Phorum before 5.0.14a allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2005-0818 Public exploit
Cross-site scripting (XSS) vulnerability in PunBB 1.2.3 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-0791 Public exploit
Cross-site scripting (XSS) vulnerability in adframe.php in phpAdsNew 2.0.4-pr1, when register_globals is enabled, allow…
-
Unscored —CVE-2005-0804 Public exploit
Format string vulnerability in MailEnable 1.8 allows remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2005-0781 Public exploit
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers…
-
Unscored —CVE-2005-0823 Public exploit
ThePoolClub (1) iPool and (2) iSnooker 1.6.81 and earlier stores usernames and passwords in cleartext in the MyDetails.…
-
Unscored —CVE-2005-0800 Public exploit
PHP remote file inclusion vulnerability in install.php in mcNews 1.3 and earlier allows remote attackers to execute arb…
-
Unscored —
The GetEnhMetaFilePaletteEntries API in GDI32.DLL in Windows 2000 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2005-0776 Public exploit
adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, w…
-
Unscored —CVE-2005-0779 Public exploit
PlatinumFTP 1.0.18, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) …
-
Unscored —CVE-2005-0782 Public exploit
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows re…
-
Unscored —CVE-2005-0805 Public exploit
SQL injection vulnerability in index.php in Subdreamer Light, when magic_quotes_gpc is enabled, allows remote attackers…
-
Unscored —CVE-2005-0795 Public exploit
HolaCMS 1.4.9 does not restrict file access to the holaDB/votes directory, which allows remote attackers to overwrite a…
-
Unscored —CVE-2005-0796 Public exploit
Directory traversal vulnerability in HolaCMS 1.4.9-1 allows remote attackers to overwrite arbitrary files via a "holaDB…
-
Unscored —
Multiple "range checking flaws" in the ISO9660 filesystem handler in Linux 2.6.11 and earlier may allow attackers to ca…
-
Unscored —CVE-2005-0788 Public exploit
LimeWire 4.1.2 through 4.5.6 allows remote attackers to read arbitrary files by specifying the full pathname in a Gnute…
-
Unscored —
Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2005-0802 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in ACS Blog 0.8 through 1.1b allows remote attackers to execute …
-
Unscored —CVE-2005-0780 Public exploit
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, …
-
Unscored —CVE-2005-0786 Public exploit
SQL injection vulnerability in gb_new.inc in SimpGB allows remote attackers to execute arbitrary SQL commands via the q…
-
Unscored —CVE-2003-1131 Public exploit
PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote a…