Skip to content
OpenAdvisories

Archive

21 December 2005

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2005-4462 Public exploit

    PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to exec…

  • Unscored —
    CVE-2005-4461 Public exploit

    SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2005-4460 Public exploit

    Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4454 Public exploit

    Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss opti…

  • Unscored —
    CVE-2005-4456 Public exploit

    Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacke…

  • Unscored —
    CVE-2005-4267 Public exploit EPSS 67%

    Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP…

  • Unscored —
    CVE-2005-4449 Public exploit

    verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the fi…

  • Unscored —
    CVE-2005-4435 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2005-4429 Public exploit

    SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort…

  • Unscored —
    CVE-2005-4430 Public exploit

    SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2005-4432 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web sc…