Skip to content
OpenAdvisories

Archive

1 November 2005

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3423 Public exploit

    Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2005-3422 Public exploit

    Cross-site scripting (XSS) vulnerability in error.asp in ASP Fast Forum allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-3411 Public exploit

    Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2005-3412 Public exploit

    Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2005-3397 Public exploit

    Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2005-3405 Public exploit

    ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum…

  • Unscored —
    CVE-2005-3408 Public exploit

    SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-3398 Public exploit EPSS 13%

    The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables th…

  • Unscored —
    CVE-2005-3395 Public exploit

    SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-3394 Public exploit

    Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2005-3404 Public exploit EPSS 10%

    Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitra…

  • Unscored —
    CVE-2005-3390 Public exploit EPSS 66%

    The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2005-3388 Public exploit EPSS 49%

    Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remo…