Skip to content
OpenAdvisories

Archive

6 November 2005

Vulnerabilities first published on this day (UTC), newest first.

17 results · Feed

  • Unscored —

    Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes …

  • Unscored —
    CVE-2005-3507 Public exploit EPSS 12%

    Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, a…

  • Unscored —
    CVE-2005-3520 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2005-3516 Public exploit

    Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to injec…

  • Unscored —
    CVE-2005-3519 Public exploit

    Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and…

  • Unscored —
    CVE-2005-3508 Public exploit

    SQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers to execute arbitrary SQ…

  • Unscored —

    index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum …

  • High —

    Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests

    Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requests to list a web directory that has a large number of files.

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Spymac Web OS 4.0 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2005-3518 Public exploit

    SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2005-3515 Public exploit

    Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject…

  • Unscored —
    CVE-2005-3522 Public exploit

    Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to…

  • Unscored —
    CVE-2005-3514 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-3509 Public exploit

    Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) bann…

  • Unscored —

    syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary…

  • Unscored —

    SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-3512 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web…