Skip to content
OpenAdvisories

Archive

24 March 2005

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2005-0859 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in CzarNews 1.13b allows remote attackers to execute arbitrary PHP code via the…

  • Unscored —
    CVE-2005-0841 Public exploit

    SQL injection vulnerability in (1) people.php, (2) track.php, (3) edit.php, (4) document.php, (5) census.php, (6) passt…

  • Unscored —
    CVE-2005-0847 Public exploit

    Code Ocean FTP server 1.0 allows remote attackers to cause a denial of service via a large number of connections.

  • Unscored —
    CVE-2005-0842 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 2.3 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-0863 Public exploit

    Cross-site scripting (XSS) vulnerability in PHPOpenChat v3.x allows remote attackers to inject arbitrary web script or …

  • Unscored —
    CVE-2005-0854 Public exploit

    betaparticle blog (bp blog), posisbly before version 4, allows remote attackers to bypass authentication and (1) upload…

  • Unscored —
    CVE-2005-0852 Public exploit

    Microsoft Windows XP SP1 allows local users to cause a denial of service (system crash) via an empty datagram to a raw …

  • Unscored —
    CVE-2005-0862 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in PHPOpenChat 3.0.1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2005-0860 Public exploit

    PHP remote file inclusion vulnerability in TRG News Script 3.0 allows remote attackers to execute arbitrary PHP code vi…

  • Unscored —
    CVE-2005-0843 Public exploit

    CRLF injection vulnerability in search.php in Phorum 5.0.14a allows remote attackers to perform HTTP Response Splitting…

  • Unscored —
    CVE-2005-0853 Public exploit

    betaparticle blog (bp blog) stores the database under the web root, which allows remote attackers to obtain sensitive i…

  • Unscored —
    CVE-2005-0857 Public exploit

    Cross-site scripting (XSS) vulnerability in avatar.php for CoolForum 0.8 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2005-0858 Public exploit

    Multiple SQL injection vulnerabilities in CoolForum 0.8 and earlier allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-0848 Public exploit

    Multiple games developed by FUN labs, including 4X4 Off-road Adventure III, Big Game Hunter, Dangerous Hunts, Deer Hunt…