December 2005

260 results · Clear filters · Feed

• Unscored —
  CVE-2005-4218 Public exploit

  SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands …

  Dec 14, 2005
• Unscored —
  CVE-2005-4213 Public exploit

  SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via t…

  Dec 14, 2005
• Unscored —
  CVE-2005-4251 Public exploit

  Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL…

  Dec 14, 2005
• Unscored —
  CVE-2005-4250 Public exploit

  Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via …

  Dec 14, 2005
• Unscored —
  CVE-2005-4233 Public exploit

  SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to ex…

  Dec 14, 2005
• Unscored —
  CVE-2005-4247 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject a…

  Dec 14, 2005
• Unscored —
  CVE-2005-4211 Public exploit

  PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arb…

  Dec 14, 2005
• Unscored —
  CVE-2005-4246 Public exploit

  SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via…

  Dec 14, 2005
• Unscored —
  CVE-2005-4228 Public exploit

  Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary S…

  Dec 14, 2005
• Unscored —
  CVE-2005-4221 Public exploit

  SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL…

  Dec 14, 2005
• Unscored —
  CVE-2005-4216 Public exploit

  The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a…

  Dec 14, 2005
• Unscored —
  CVE-2005-4238 Public exploit

  Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attacker…

  Dec 14, 2005
• Unscored —
  CVE-2005-4244 Public exploit

  SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL command…

  Dec 14, 2005
• Unscored —
  CVE-2005-4234 Public exploit

  SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitr…

  Dec 14, 2005
• Unscored —
  CVE-2005-4245 Public exploit

  Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to in…

  Dec 14, 2005
• Unscored —
  CVE-2005-4239 Public exploit

  Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote a…

  Dec 14, 2005
• Unscored —
  CVE-2005-4226 Public exploit

  Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute …

  Dec 14, 2005
• Unscored —
  CVE-2005-4232 Public exploit

  SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitr…

  Dec 14, 2005
• Unscored —
  CVE-2005-4229 Public exploit

  Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inje…

  Dec 14, 2005
• Unscored —
  CVE-2005-4241 Public exploit

  Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inj…

  Dec 14, 2005
• Unscored —
  CVE-2005-4240 Public exploit

  SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL c…

  Dec 14, 2005
• Unscored —
  CVE-2005-2827 Public exploit

  The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify ke…

  Dec 14, 2005
• Unscored —
  CVE-2005-4196 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attack…

  Dec 13, 2005
• Unscored —
  CVE-2005-4208 Public exploit

  Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot…

  Dec 13, 2005
• Unscored —
  CVE-2005-4194 Public exploit

  Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to ca…

  Dec 13, 2005
• Unscored —
  CVE-2005-4195 Public exploit

  Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execut…

  Dec 13, 2005
• Unscored —
  CVE-2005-4202 Public exploit

  Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via …

  Dec 13, 2005
• Medium 6.1
  CVE-2005-4206 Public exploit

  Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allo…

  Dec 13, 2005
• Unscored —
  CVE-2005-4198 Public exploit

  SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via th…

  Dec 13, 2005
• Unscored —
  CVE-2005-4197 Public exploit EPSS 12%

  tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a par…

  Dec 13, 2005
• Unscored —
  CVE-2005-4207 Public exploit

  SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via th…

  Dec 13, 2005
• Unscored —
  CVE-2005-4209 Public exploit

  WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inbo…

  Dec 13, 2005
• Unscored —
  CVE-2005-4205 Public exploit

  Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inj…

  Dec 13, 2005
• Unscored —
  CVE-2005-4177 Public exploit

  Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attacker…

  Dec 12, 2005
• Unscored —
  CVE-2005-4176 Public exploit

  AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, whi…

  Dec 11, 2005
• Unscored —
  CVE-2005-4169 Public exploit

  Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the…

  Dec 11, 2005
• Unscored —
  CVE-2005-4167 Public exploit

  Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script…

  Dec 11, 2005
• Unscored —
  CVE-2005-4171 Public exploit

  The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows r…

  Dec 11, 2005
• Unscored —
  CVE-2005-4166 Public exploit

  Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject…

  Dec 11, 2005
• Unscored —
  CVE-2005-4170 Public exploit

  SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid param…

  Dec 11, 2005