Archive
June 2005
Vulnerabilities first published in this month (UTC), newest first.
651 results · Feed
-
Unscored —CVE-2005-1893 Public exploit
FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which…
-
Unscored —
The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary …
-
Unscored —
Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors.
-
Unscored —
Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or ob…
-
Unscored —
Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors.
-
Unscored —
SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary S…
-
Unscored —
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read f…
-
Unscored —CVE-2005-1903 Public exploit
Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitra…
-
Unscored —
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrat…
-
Unscored —
everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file c…
-
Unscored —
Multiple SQL injection vulnerabilities in Calendarix Advanced 1.5 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option …
-
Unscored —
Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attacke…
-
Unscored —CVE-2005-1873 Public exploit
Multiple buffer overflows in Crob FTP 3.6.1, and possibly earlier versions, allow remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject a…
-
Unscored —
Unknown vulnerability in the privilege system in Drupal 4.4.0 through 4.6.0, when public registration is enabled, allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to injec…
-
Unscored —
Directory traversal vulnerability in Dzip before 2.9 allows remote attackers to create arbitrary files via a filename c…
-
Unscored —
Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitr…
-
Medium 4.5
Direct code injection vulnerability in CuteNews 1.3.6 and earlier allows remote attackers with administrative privilege…
-
Unscored —
LutelWall 0.97 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file cre…
-
Unscored —CVE-2005-1882 Public exploit
PHP remote file inclusion vulnerability in last_gallery.php in YaPiG 0.93u and 0.94u allows remote attackers to execute…
-
Unscored —CVE-2005-1886 Public exploit
Cross-site scripting (XSS) vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject …
-
Unscored —
view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter t…
-
Unscored —
PHP remote file inclusion vulnerability in cal_admintop.php in Calendarix Advanced 1.5 allows remote attackers to execu…
-
Unscored —CVE-2005-1881 Public exploit
upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, whic…
-
Unscored —
I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file att…
-
Unscored —
PHP remote file inclusion vulnerability in start_lobby.php in MWChat 6.x allows remote attackers to execute arbitrary P…
-
Unscored —
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
-
Unscored —CVE-2005-1884 Public exploit
Directory traversal vulnerability in the (1) rmdir or (2) mkdir commands in upload.php in YaPiG 0.92b, 0.93u and 0.94u …
-
Unscored —
GIPTables Firewall 1.1 and earlier allows local users to overwrite arbitrary files via a symlink attack on the temp.ip.…
-
Unscored —CVE-2005-1870 Public exploit
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to…
-
Unscored —CVE-2005-1858 Public exploit
FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a …
-
Unscored —
Multiple directory traversal vulnerabilities in YaMT before 0.5_2 allow attackers to overwrite arbitrary files via the …
-
Unscored —
Multiple buffer overflows in YaMT before 0.5_2 allow attackers to execute arbitrary code via the (1) rename or (2) sort…
-
Unscored —
Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitra…
-
Unscored —
NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly i…
-
Unscored —CVE-2005-1829 EPSS 13%
Microsoft Internet Explorer 6 SP2 allows remote attackers to cause a denial of service (infinite loop and application c…
-
Unscored —
Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to …