Archive
November 2005
Vulnerabilities first published in this month (UTC), newest first.
218 results · Clear filters · Feed
-
Unscored —CVE-2005-3853 Public exploit
SQL injection vulnerability in snews.php in sNews 1.3 and earlier allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2005-3855 Public exploit
SQL injection vulnerability in process.php in 1-2-3 music store allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2005-3849 Public exploit
Cross-site scripting (XSS) vulnerability in the Search module in PmWiki up to 2.0.12 allows remote attackers to inject …
-
Unscored —CVE-2005-3838 Public exploit
Multiple SQL injection vulnerabilities in search.php in IsolSoft Support Center 2.2 and earlier allow remote attackers …
-
Unscored —CVE-2005-3844 Public exploit
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitra…
-
Unscored —CVE-2005-3846 Public exploit
SQL injection vulnerability in news.php in Fantastic News 2.1.1 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-3845 Public exploit
SQL injection vulnerability in invoices.php in EZ Invoice Inc 2.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2005-3834 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Tunez 1.21 and earlier allows remote attackers to inject arbi…
-
Unscored —CVE-2005-3833 Public exploit
SQL injection vulnerability in songinfo.php in Tunez 1.21 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-3827 Public exploit
SQL injection vulnerability in product_cat in AgileBill 1.4.92 and earlier allows remote attackers to execute arbitrary…
-
Unscored —CVE-2005-3826 Public exploit
Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-3813 Public exploit
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to c…
-
Unscored —CVE-2005-3819 Public exploit
Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL com…
-
Unscored —CVE-2005-3812 Public exploit
freeFTPd 1.0.10 allows remote authenticated users to cause a denial of service (null dereference and crash) via a PORT …
-
Unscored —CVE-2005-3818 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2005-3815 Public exploit
SQL injection vulnerability in forum.php in Orca Forum 4.3b and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-3825 Public exploit
SQL injection vulnerability in index.php in Comdev Vote Caster 3.1 and earlier allows remote attackers to execute arbit…
-
Unscored —CVE-2005-3816 Public exploit
Multiple SQL injection vulnerabilities in forum.php in freeForum 1.1 and earlier and earlier allow remote attackers to …
-
Unscored —CVE-2005-3817 Public exploit
Multiple SQL injection vulnerabilities in Softbiz Web Host Directory Script 1.1 and earlier allow remote attackers to e…
-
Unscored —CVE-2005-3811 Public exploit
Directory traversal vulnerability in admin/main.php in AMAX Magic Winmail Server 4.2 (build 0824) and earlier allows re…
-
Unscored —CVE-2005-3807 Public exploit
Memory leak in the VFS file lease handling in locks.c in Linux kernels 2.6.10 to 2.6.15 allows local users to cause a d…
-
Unscored —CVE-2005-3808 Public exploit
Integer overflow in the invalidate_inode_pages2_range function in mm/truncate.c in Linux kernel 2.6.11 to 2.6.14 allows…
-
Unscored —
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 wit…
-
Unscored —CVE-2005-3790 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in act_newsletter.php in phpwcms 1.2.5 allow remote attackers to in…
-
Unscored —CVE-2005-3797 Public exploit
PHP remote file inclusion vulnerability in payment_paypal.php in AlstraSoft Template Seller Pro 3.25 allows remote atta…
-
Unscored —CVE-2005-3789 Public exploit
Multiple directory traversal vulnerabilities in phpwcms 1.2.5 allow remote attackers to read arbitrary files via a .. (…
-
Unscored —CVE-2005-3769 Public exploit
SQL injection vulnerability in files.php in PHP Download Manager 1.1.3 and earlier allows remote attackers to execute a…
-
Unscored —
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP pa…
-
Unscored —CVE-2005-3770 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Post (PHPp) 1.0 allow remote attackers to inject arbitrary w…
-
Unscored —
The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to…
-
Medium —CVE-2005-3747 Public exploit
Mortbay Jetty Discloses JSP Source Code
Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.
-
Unscored —CVE-2005-3738 Public exploit
globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to over…
-
Medium —
Apache Struts Cross-site scripting Vulnerability
Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an er…
-
Unscored —CVE-2005-3746 Public exploit
SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2005-3748 Public exploit
SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote …
-
Unscored —CVE-2005-3742 Public exploit
Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inj…
-
Unscored —CVE-2005-3743 Public exploit
SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2004-2565 Public exploit
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Lin…
-
Unscored —CVE-2004-2562 Public exploit
SQL injection vulnerability in jobedit.asp in Leigh Business Enterprises (LBE) Web Helpdesk before 4.0.0.81 allows remo…
-
Unscored —CVE-2004-2564 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions…