Skip to content
OpenAdvisories

Archive

5 December 2005

Vulnerabilities first published on this day (UTC), newest first.

← November 2005 2005 / December /5 January 2006 →
  1. 139
  2. 22
  3. 315
  4. 455
  5. 536
  6. 615
  7. 726
  8. 829
  9. 914
  10. 1011
  11. 1127
  12. 122
  13. 1323
  14. 1449
  15. 1523
  16. 1629
  17. 1744
  18. 183
  19. 191
  20. 2076
  21. 2139
  22. 2246
  23. 2311
  24. 24 
  25. 25 
  26. 26 
  27. 273
  28. 2835
  29. 2923
  30. 305
  31. 31 
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2005-4016 Public exploit

    SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2005-4024

    Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-4017

    property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value…

  • Unscored —
    CVE-2005-4008

    SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2005-4011 Public exploit

    SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier…

  • Unscored —
    CVE-2005-4019 Public exploit

    SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2005-4010

    SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2005-4018 Public exploit

    SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers…

  • Unscored —
    CVE-2005-4025

    Help Desk Reloaded Free Help Desk does not remove or protect install.php once installation is complete, which allows re…

  • Unscored —
    CVE-2005-4022

    Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote …

  • Unscored —
    CVE-2005-4012

    Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4013

    PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote…

  • Unscored —
    CVE-2005-4023

    Unspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2005-4028

    Multiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject arbitrary web script or…

  • Unscored —
    CVE-2005-4020

    SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2005-4029

    WebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the WebEOC login webpage, …

  • Unscored —
    CVE-2005-4026

    search.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers to obtain sensitive in…

  • Unscored —
    CVE-2005-4027

    SQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL commands via unspecified …

  • Unscored —
    CVE-2005-4015

    PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote atta…

  • Unscored —
    CVE-2005-4009

    Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2005-4021

    The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access …

  • Unscored —
    CVE-2005-4014

    stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large la…

  • Unscored —
    CVE-2005-4005 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information a…

  • Unscored —
    CVE-2005-4007

    Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly autho…

  • Unscored —
    CVE-2005-4006

    SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files …

  • Unscored —
    CVE-2005-4001 Public exploit

    Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execu…

  • Unscored —
    CVE-2005-4003 Public exploit

    Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d an…

  • Unscored —
    CVE-2005-4000 Public exploit

    Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attack…

  • Unscored —
    CVE-2005-4004

    Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-4002

    WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data…

  • Unscored —
    CVE-2005-3998 Public exploit

    Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2005-3995 Public exploit

    Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, whe…

  • Unscored —
    CVE-2005-3997

    Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information …

  • Unscored —
    CVE-2005-3993

    Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow at…

  • Unscored —
    CVE-2005-3996 Public exploit

    SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to e…

  • Unscored —
    CVE-2005-3999

    Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attacke…