Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
260 results · Clear filters · Feed
-
Unscored —CVE-2005-4468 Public exploit
PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows rem…
-
Unscored —CVE-2005-4462 Public exploit
PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to exec…
-
Unscored —CVE-2005-4461 Public exploit
SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-4460 Public exploit
Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary…
-
Unscored —CVE-2005-4454 Public exploit
Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss opti…
-
Unscored —CVE-2005-4456 Public exploit
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attacke…
-
Unscored —
Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP…
-
Unscored —CVE-2005-4449 Public exploit
verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the fi…
-
Unscored —CVE-2005-4435 Public exploit
Cross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary …
-
Unscored —CVE-2005-4429 Public exploit
SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the (1) sort…
-
Unscored —CVE-2005-4430 Public exploit
SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-4432 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PlaySMS 0.8 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-4427 Public exploit
Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2005-4417 Public exploit
The default configuration of Widcomm Bluetooth for Windows (BTW) 4.0.1.1500 and earlier, as installed on Belkin Bluetoo…
-
Unscored —CVE-2005-4390 Public exploit
SQL injection vulnerability in index.php in ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-4416 Public exploit
SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2005-4415 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-4423 Public exploit
Unrestricted file upload vulnerability in PHPFM before 0.2.3 allows remote authenticated users to execute arbitrary cod…
-
Unscored —CVE-2005-4402 Public exploit
Buffer overflow in MailEnable Professional 1.71 and earlier, and Enterprise 1.1 and earlier, allows remote authenticate…
-
Unscored —CVE-2005-4400 Public exploit
Cross-site scripting (XSS) vulnerability in downloads/portal_ent in Liferay Portal Enterprise 3.6.1 and earlier allows …
-
Unscored —CVE-2005-4403 Public exploit
SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long req…
-
Unscored —CVE-2005-4399 Public exploit
Cross-site scripting (XSS) vulnerability in search/index.php in Libertas Enterprise CMS 3.0 and earlier allows remote a…
-
Unscored —CVE-2005-4408 Public exploit
Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-4419 Public exploit
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0…
-
Unscored —CVE-2005-4381 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Caravel CMS 3.0 Beta 1 and earlier allow remote attackers to inj…
-
Unscored —CVE-2005-4371 Public exploit
Acidcat 2.1.13 and earlier stores the database under the web root with insufficient access control, which allows remote…
-
Unscored —CVE-2005-4380 Public exploit
Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-4370 Public exploit
SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4378 Public exploit
SQL injection vulnerability in Page.asp in Baseline CMS 1.95 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject a…
-
Unscored —CVE-2005-4375 Public exploit
Cross-site scripting (XSS) vulnerability in Amaxus 3 and earlier allows remote attackers to inject arbitrary web script…
-
Unscored —CVE-2005-4374 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Allinta 2.3.2 and earlier allow remote attackers to inject arbit…
-
Unscored —
The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attack…
-
Unscored —CVE-2005-4361 Public exploit
Cross-site scripting (XSS) vulnerability in search.html in Magnolia Content Management Suite 2.1 allows remote attacker…
-
Unscored —CVE-2005-4364 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote atta…
-
Unscored —CVE-2005-4365 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in FLIP 0.9.0.1029 allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2005-4363 Public exploit
Cross-site scripting (XSS) vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbit…
-
Unscored —
The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verb…