Archive
16 May 2005
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by o…
-
Unscored —
SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrar…
-
Unscored —
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a fil…
-
Unscored —
index.php in Fusion SBX 1.2 and earlier does not properly use the extract function, which allows remote attackers to by…
-
Unscored —CVE-2005-1614 Public exploit
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote a…
-
Unscored —CVE-2005-1590 Public exploit
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and acces…
-
Unscored —
Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows…
-
Unscored —
MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are n…
-
Unscored —CVE-2005-1604 Public exploit
PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing …
-
Unscored —CVE-2005-1593 Public exploit
Cross-site scripting (XSS) vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to inje…
-
Unscored —CVE-2005-1597 Public exploit
Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and …
-
Unscored —
Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject…
-
Unscored —CVE-2005-1615 Public exploit
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the p…
-
Unscored —
SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute ar…
-
Unscored —CVE-2005-1613 Public exploit
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to…
-
Unscored —
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows rem…
-
Unscored —
Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown im…
-
Unscored —CVE-2005-1610 Public exploit
Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inj…
-
Unscored —CVE-2005-1594 Public exploit
SQL injection vulnerability in catalog.php for CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary…
-
Unscored —
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via…
-
Unscored —CVE-2005-1606 Public exploit
H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-re…
-
Unscored —
CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive inf…
-
Unscored —CVE-2005-1603 Public exploit
NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted stri…
-
Unscored —
Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd dis…
-
Unscored —CVE-2005-1612 Public exploit
SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitr…
-
Unscored —
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote att…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrar…
-
Unscored —
The bbencode_second_pass and make_clickable functions in bbcode.php for phpBB before 2.0.15, as used in viewtopic.php, …
-
Unscored —
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leadi…
-
Unscored —CVE-2005-1618 Public exploit
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconn…
-
Unscored —
Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.
-
Unscored —
Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2005-1620 Public exploit
Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject…
-
Unscored —
Multiple "javascript vulerabilities in BB code" in BirdBlog before 1.3.1 allow remote attackers to inject arbitrary Jav…
-
Unscored —CVE-2005-1619 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in (1) start_page.css.php3 (aka start-page.css.php3) or (2) style.c…
-
Unscored —CVE-2005-1366 Public exploit
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../c…
-
Unscored —
Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to…
-
Unscored —CVE-2005-1611 Public exploit
Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web sc…