Archive
May 2005
Vulnerabilities first published in this month (UTC), newest first.
856 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2004-1843 Public exploit
SQL injection vulnerability in Member Management System 2.1 allows remote attackers to execute arbitrary SQL via the ID…
-
Unscored —CVE-2004-1925 Public exploit
Multiple SQL injection vulnerabilities in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allow remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attacke…
-
Unscored —CVE-2004-1801 Public exploit
Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot…
-
Unscored —CVE-2004-1873 Public exploit
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via…
-
Unscored —CVE-2004-1859 Public exploit
Directory traversal vulnerability in Trend Micro Interscan Web Viruswall in InterScan VirusWall 3.5x allows remote atta…
-
Unscored —CVE-2004-1928 Public exploit
The image upload feature in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to upload and possi…
-
Unscored —CVE-2004-1930 Public exploit
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, whe…
-
Unscored —
The ftp_syslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, poss…
-
Unscored —CVE-2004-1817 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in nqt.php in Network Query Tool (NQT) 1.6 allows remote attackers to inject a…
-
Unscored —CVE-2004-1958 Public exploit
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files…
-
Unscored —
Cross-site request forgery (CSRF) vulnerabilities in (1) cp_forums.php, (2) cp_usergroup.php, (3) cp_ipbans.php, (4) my…
-
Unscored —CVE-2004-1968 Public exploit
The readmsg action in myhome.php in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to read arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in board.php for ThWboard before beta 2.84 allows remote attackers to inject a…
-
Unscored —CVE-2004-1854 Public exploit
Buffer overflow in the logging function in Picophone 1.63 and earlier allows remote attackers to execute arbitrary code…
-
Unscored —
Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to r…
-
Unscored —CVE-2004-1953 Public exploit
phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which r…
-
Unscored —
4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request …
-
Unscored —
Ipswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attacker…
-
Unscored —CVE-2004-1844 Public exploit
Cross-site scripting (XSS) vulnerability in Member Management System 2.1 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2004-1866 Public exploit
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, wh…
-
Unscored —CVE-2004-1870 Public exploit
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' pas…
-
Unscored —
Fastream NETFile FTP/Web Server 6.5.1.980 allows remote attackers to cause a denial of service via a username that does…
-
Unscored —CVE-2004-1972 Public exploit
SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execu…
-
Unscored —CVE-2004-1975 Public exploit
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attacker…
-
Unscored —
TEXutil in ConTEXt, when executed with the --silent option, allows local users to overwrite arbitrary files via a symli…
-
Unscored —CVE-2004-1913 Public exploit
Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attac…
-
Unscored —CVE-2004-1781 Public exploit
Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CRE…
-
Unscored —CVE-2004-1944 Public exploit
Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition allows remote attackers to inject arbitrary HTML or we…
-
Unscored —
msxml3.dll in Internet Explorer 6.0.2600.0 allows remote attackers to cause a denial of service (crash) via a single & …
-
Unscored —
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid …
-
Unscored —CVE-2004-2060 Public exploit
ASPRunner 2.4 stores the database under the web root in the db directory, which may allow remote attackers to obtain th…
-
Unscored —CVE-2004-2047 Public exploit
Directory traversal vulnerability in EasyWeb FileManager 1.0 RC-1 for PostNuke allows remote attackers to retrieve arbi…
-
Unscored —
Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php for PhpBB 2.0.4 and 2.0.9 allows remote attackers to inject arbi…
-
Unscored —
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statemen…
-
Unscored —CVE-2004-2000 Public exploit
SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbi…