6 July 2005

24 results · Feed

• Unscored —
  CVE-2005-1916

  linki.py in ekg 2005-06-05 and earlier allows local users to overwrite or create arbitrary files via a symlink attack o…

  Jul 6, 2005
• Unscored —
  CVE-2005-2156

  SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via …

  Jul 6, 2005
• Unscored —
  CVE-2005-2165

  read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file…

  Jul 6, 2005
• Unscored —
  CVE-2005-2167

  Cross-site scripting (XSS) vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to …

  Jul 6, 2005
• Unscored —
  CVE-2005-2152

  SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user…

  Jul 6, 2005
• Unscored —
  CVE-2005-2154 Public exploit

  PHP local file inclusion vulnerability in (1) view.php and (2) open.php in osTicket 1.3.1 beta and earlier allows remot…

  Jul 6, 2005
• Unscored —
  CVE-2005-2153

  SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute a…

  Jul 6, 2005
• Unscored —
  CVE-2005-2168

  delete.php in Plague News System 0.6 and earlier allows remote unauthenticated attackers to delete news, comments, and …

  Jul 6, 2005
• Unscored —
  CVE-2005-2148

  Cacti 0.8.6e and earlier does not perform proper input validation to protect against common attacks, which allows remot…

  cacti Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2164

  SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unkno…

  Jul 6, 2005
• Unscored —
  CVE-2005-2155 Public exploit

  PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitra…

  Jul 6, 2005
• Unscored —
  CVE-2005-2147

  Trac before 0.8.4 allows remote attackers to read or upload arbitrary files via a full pathname in the id parameter to …

  trac Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2151

  spf.c in Courier Mail Server does not properly handle DNS failures when looking up Sender Policy Framework (SPF) record…

  courier Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2158

  A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary comands, a re-…

  Jul 6, 2005
• Unscored —
  CVE-2005-2169

  Directory traversal vulnerability in source.php in Quick & Dirty PHPSource Printer 1.1 and earlier allows remote attack…

  Jul 6, 2005
• Unscored —
  CVE-2005-2163 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in AutoIndex PHP Script 1.5.2 allows remote attackers to inject a…

  Jul 6, 2005
• Unscored —
  CVE-2005-2149

  config.php in Cacti 0.8.6e and earlier allows remote attackers to set the no_http_headers switch, then modify session i…

  cacti Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2161

  Cross-site scripting (XSS) vulnerability in phpBB 2.0.16 allows remote attackers to inject arbitrary web script or HTML…

  Jul 6, 2005
• Unscored —
  CVE-2005-2166

  SQL injection vulnerability in index.php in Plague News System 0.6 and earlier allows remote attackers to execute arbit…

  Jul 6, 2005
• Unscored —
  CVE-2005-2157 Public exploit

  PHP remote file inclusion vulnerability in survey.inc.php for nabopoll 1.2 allows remote attackers to execute arbitrary…

  Jul 6, 2005
• Unscored —
  CVE-2005-2160

  IMail stores usernames and passwords in cleartext in a cookie, which allows remote attackers to obtain sensitive inform…

  Jul 6, 2005
• Unscored —
  CVE-2005-2159

  mshftp.dll in PlanetDNS PlanetFileServer 2.0.1.3 allows remote attackers to cause a denial of service (application cras…

  Jul 6, 2005
• Unscored —
  CVE-2005-2096

  zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed strea…

  rpm dpkg zlib bacula Debian
  Jul 6, 2005
• Unscored —
  CVE-2005-2162 Public exploit

  PHP remote file inclusion vulnerability in form.inc.php3 in MyGuestbook 0.6.1 allows remote attackers to execute arbitr…

  Jul 6, 2005