Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
218 results · Clear filters · Feed
-
Unscored —CVE-2005-3911 Public exploit
Multiple SQL injection vulnerabilities in calendar.php in BosDates 4.0 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2005-3929 Public exploit
Directory traversal vulnerability in the create function in xarMLSXML2PHPBackend.php in Xaraya 1.0 allows remote attack…
-
Unscored —CVE-2005-3919 Public exploit
Cross-site scripting (XSS) vulnerability in PBLang 4.65 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2005-3918 Public exploit
Multiple SQL injection vulnerabilities in OvBB 0.08a allow remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2005-3914 Public exploit
Multiple SQL injection vulnerabilities in AFFcommerce 1.1.4 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2005-3928 Public exploit
Buffer overflow in phgrafx in QNX 6.2.1 and 6.3.0 allows local users to execute arbitrary code via a long command line …
-
Unscored —CVE-2005-3920 Public exploit
SQL injection vulnerability in Babe Logger 2 allows remote attackers to execute arbitrary SQL commands via the (1) gal …
-
Unscored —CVE-2005-3926 Public exploit
Direct static code injection vulnerability in error.php in GuppY 4.5.9 and earlier, when register_globals is disabled, …
-
Unscored —CVE-2005-3924 Public exploit
SQL injection vulnerability in themes/kategorie/index.php in Randshop allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-3908 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in GhostScripter Amazon Shop 5.0.0, and other versions before 5.…
-
Unscored —CVE-2005-3927 Public exploit
Multiple directory traversal vulnerabilities in GuppY 4.5.9 and earlier allow remote attackers to read and include arbi…
-
Unscored —CVE-2005-3925 Public exploit
Multiple SQL injection vulnerabilities in Central Manchester CLC Helpdesk Issue Manager 0.9 and earlier allow remote at…
-
Unscored —CVE-2005-3916 Public exploit
SQL injection vulnerability in memberlist.php in WSN Forum 1.21 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-3909 Public exploit
SQL injection vulnerability in merchants/index.php in Post Affiliate Pro 2.0.4 and earlier allows remote attackers to e…
-
Unscored —CVE-2005-3902 Public exploit
Cross-site scripting (XSS) vulnerability in gui/errordocs/index.php in Virtual Hosting Control System (VHCS) 2.2.0 thro…
-
Unscored —CVE-2005-3894 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.…
-
Unscored —CVE-2005-3893 Public exploit
Multiple SQL injection vulnerabilities in index.pl in Open Ticket Request System (OTRS) 1.0.0 through 1.3.2 and 2.0.0 t…
-
Unscored —
Unspecified vulnerability in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server …
-
Unscored —
Multiple integer overflows in the Graphics Rendering Engine (GDI32.DLL) in Windows 2000 SP4, XP SP1 and SP2, and Server…
-
Unscored —CVE-2005-3884 Public exploit
Multiple SQL injection vulnerabilities in the search action in Zainu 2.0 and earlier allow remote attackers to execute …
-
Unscored —CVE-2005-3872 Public exploit
Multiple SQL injection vulnerabilities in Ugroup 2.6.2 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2005-3874 Public exploit
SQL injection vulnerability in netzbr.php in Netzbrett 1.5.1 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2005-3860 Public exploit
PHP remote file inclusion vulnerability in athena.php in Oliver May Athena PHP Website Administration 0.1a allows remot…
-
Unscored —CVE-2005-3865 Public exploit
SQL injection vulnerability in index.php in AllWeb search 3.0 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-3879 Public exploit
Multiple SQL injection vulnerabilities in Softbiz Resource Repository Script 1.1 and earlier allow remote attackers to …
-
Unscored —CVE-2005-3870 Public exploit
Multiple SQL injection vulnerabilities in edmobbs9r.php in edmoBBS 0.9 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2005-3875 Public exploit
Multiple SQL injection vulnerabilities in Enterprise Connector 1.0.2 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2005-3861 Public exploit
PHP remote file inclusion vulnerability in content.php in phpGreetz 0.99 and earlier allows remote attackers to execute…
-
Unscored —CVE-2005-3859 Public exploit
PHP remote file inclusion vulnerability in q-news.php in Q-News 2.0 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2005-3882 Public exploit
SQL injection vulnerability in answer.php in FAQSystems FAQRing Knowledge Base Software 3.0 and earlier allows remote a…
-
Unscored —CVE-2005-3878 Public exploit
Directory traversal vulnerability in index.php in PHP Doc System 1.5.1 and earlier allows remote attackers to access or…
-
Unscored —CVE-2005-3868 Public exploit
Multiple SQL injection vulnerabilities in K-Search 1.0 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2005-3864 Public exploit
SQL injection vulnerability in index.php in SourceWell 1.1.2 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2005-3873 Public exploit
SQL injection vulnerability in topic.php in ShockBoard 3.0 and 4.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2005-3877 Public exploit
Multiple SQL injection vulnerabilities in Simple Document Management System (SDMS) 2.0-CVS and earlier allow remote att…
-
Unscored —
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archi…
-
Unscored —CVE-2004-2592 Public exploit
Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (applic…
-
Unscored —CVE-2004-2573 Public exploit
PHP remote file inclusion vulnerability in tables_update.inc.php in phpGroupWare 0.9.14.005 and earlier allows remote a…
-
Unscored —CVE-2004-2574 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in phpGroupWare 0.9.14.005 and earlier allows remote attackers to…
-
Unscored —CVE-2005-3857 Public exploit
The time_out_leases function in locks.c for Linux kernel before 2.6.15-rc3 allows local users to cause a denial of serv…