Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
345 results · Clear filters · Feed
-
Unscored —CVE-2004-1842 Public exploit
Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administr…
-
Unscored —CVE-2004-1926 Public exploit
Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to inject arbitrary code via the (1) Theme, (2)…
-
Unscored —CVE-2004-1919 Public exploit
The hash_strcmp function in hasch.c in Crackalaka 1.0.8 allows remote attackers to cause a denial of service (crash) vi…
-
Unscored —CVE-2004-1838 Public exploit
Directory traversal vulnerability in xweb 1.0 allows remote attackers to download arbitrary files via a .. (dot dot) in…
-
Unscored —CVE-2004-1966 Public exploit
Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to exec…
-
Unscored —CVE-2004-1790 Public exploit
Cross-site scripting (XSS) vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote a…
-
Unscored —CVE-2004-1823 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jelsoft vBulletin 2.0 beta 3 through 3.0 can4 allows remote atta…
-
Unscored —CVE-2004-1910 Public exploit
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to…
-
Unscored —CVE-2004-1914 Public exploit
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execu…
-
Unscored —CVE-2004-1940 Public exploit
sipclient.cpp in KPhone 4.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a STUN respo…
-
Unscored —CVE-2004-1825 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote a…
-
Unscored —CVE-2004-1836 Public exploit
SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers t…
-
Unscored —CVE-2004-1827 Public exploit
Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final allows remote attackers to injec…
-
Unscored —CVE-2004-1924 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote att…
-
Unscored —CVE-2004-1830 Public exploit
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid …
-
Unscored —CVE-2004-1988 Public exploit
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers t…
-
Unscored —CVE-2004-1843 Public exploit
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID…
-
Unscored —CVE-2004-1925 Public exploit
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attacke…
-
Unscored —CVE-2004-1801 Public exploit
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot…
-
Unscored —CVE-2004-1873 Public exploit
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via…
-
Unscored —CVE-2004-1859 Public exploit
Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote atta…
-
Unscored —CVE-2004-1928 Public exploit
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possi…
-
Unscored —CVE-2004-1930 Public exploit
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, whe…
-
Unscored —CVE-2004-1817 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-1958 Public exploit
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files…
-
Unscored —CVE-2004-1968 Public exploit
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbi…
-
Unscored —CVE-2004-1854 Public exploit
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to r…
-
Unscored —CVE-2004-1953 Public exploit
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which r…
-
Unscored —CVE-2004-1844 Public exploit
Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1866 Public exploit
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, wh…
-
Unscored —CVE-2004-1870 Public exploit
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' pas…
-
Unscored —CVE-2004-1972 Public exploit
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execu…
-
Unscored —CVE-2004-1975 Public exploit
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attacker…
-
Unscored —CVE-2004-1913 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attac…
-
Unscored —CVE-2004-1781 Public exploit
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CRE…
-
Unscored —CVE-2004-1944 Public exploit
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multi…
-
Unscored —CVE-2004-2060 Public exploit
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain th…
-
Unscored —CVE-2004-2047 Public exploit
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbi…