Skip to content
OpenAdvisories

Archive

30 November 2005

Vulnerabilities first published on this day (UTC), newest first.

14 results · Clear filters · Feed

  • Unscored —
    CVE-2005-3911 Public exploit

    Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2005-3929 Public exploit

    Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attack…

  • Unscored —
    CVE-2005-3919 Public exploit

    Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML …

  • Unscored —
    CVE-2005-3918 Public exploit

    Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2005-3914 Public exploit

    Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2005-3928 Public exploit

    Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line …

  • Unscored —
    CVE-2005-3920 Public exploit

    SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal …

  • Unscored —
    CVE-2005-3926 Public exploit

    Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, …

  • Unscored —
    CVE-2005-3924 Public exploit

    SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2005-3908 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.…

  • Unscored —
    CVE-2005-3927 Public exploit

    Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbi…

  • Unscored —
    CVE-2005-3925 Public exploit

    Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote at…

  • Unscored —
    CVE-2005-3916 Public exploit

    SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2005-3909 Public exploit

    SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to e…