7 June 2005

23 results · Feed

• Unscored —
  CVE-2005-1880

  everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file c…

  Jun 7, 2005
• Unscored —
  CVE-2005-1865

  Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL comma…

  Jun 7, 2005
• Unscored —
  CVE-2005-1872

  Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option …

  Jun 7, 2005
• Unscored —
  CVE-2005-1867

  Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attacke…

  Jun 7, 2005
• Unscored —
  CVE-2005-1873 Public exploit

  Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary…

  Jun 7, 2005
• Unscored —
  CVE-2005-1866

  Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject a…

  Jun 7, 2005
• Unscored —
  CVE-2005-1871

  Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allow…

  Jun 7, 2005
• Unscored —
  CVE-2005-1877

  Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to injec…

  Jun 7, 2005
• Unscored —
  CVE-2005-1874

  Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename c…

  Jun 7, 2005
• Unscored —
  CVE-2005-1875

  Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitr…

  Jun 7, 2005
• Medium 4.5
  CVE-2005-1876

  Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privilege…

  Jun 7, 2005
• Unscored —
  CVE-2005-1879

  LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file cre…

  Jun 7, 2005
• Unscored —
  CVE-2005-1882 Public exploit

  PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute…

  Jun 7, 2005
• Unscored —
  CVE-2005-1886 Public exploit

  Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject …

  Jun 7, 2005
• Unscored —
  CVE-2005-1885

  view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter t…

  Jun 7, 2005
• Unscored —
  CVE-2005-1864

  PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execu…

  Jun 7, 2005
• Unscored —
  CVE-2005-1881 Public exploit

  upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, whic…

  Jun 7, 2005
• Unscored —
  CVE-2005-1868

  I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file att…

  Jun 7, 2005
• Unscored —
  CVE-2005-1869

  PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary P…

  Jun 7, 2005
• Unscored —
  CVE-2005-1883

  global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.

  Jun 7, 2005
• Unscored —
  CVE-2005-1884 Public exploit

  Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u …

  Jun 7, 2005
• Unscored —
  CVE-2005-1878

  GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.…

  Jun 7, 2005
• Unscored —
  CVE-2005-1870 Public exploit

  PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to…

  Jun 7, 2005