Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
260 results · Clear filters · Feed
-
Unscored —CVE-2005-4168 Public exploit
Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-4161 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to injec…
-
Unscored —CVE-2005-4160 Public exploit
Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "…
-
Unscored —CVE-2005-4155 Public exploit
registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address th…
-
Unscored —CVE-2005-4158 Public exploit
Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT …
-
Unscored —CVE-2005-3533 Public exploit
Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory …
-
Unscored —CVE-2005-4143 Public exploit
SQL injection vulnerability in Lyris ListManager 5.0 through 8.9a allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The MSDE version of Lyris ListManager 5.0 through 8.9b configures the sa account in the database to use a password with…
-
Unscored —CVE-2005-4140 Public exploit
SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-4141 Public exploit
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —CVE-2005-4135 Public exploit
Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attacker…
-
Unscored —CVE-2005-4139 Public exploit
Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2005-4136 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web …
-
Unscored —
Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of se…
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2000, 2002, and 2003, in Microsoft Office 2000 SP3 and other packages, all…
-
Unscored —CVE-2005-4091 Public exploit
Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbi…
-
Unscored —CVE-2005-4086 Public exploit
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (Sug…
-
Unscored —CVE-2005-4093 Public exploit
Check Point VPN-1 SecureClient NG with Application Intelligence R56, NG FP1, 4.0, and 4.1 allows remote attackers to by…
-
Unscored —CVE-2005-4095 Public exploit
Directory traversal vulnerability in connector.php in the fckeditor2rc2 addon in DoceboLMS 2.0.4 allows remote attacker…
-
Unscored —CVE-2005-4087 Public exploit
PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management …
-
Unscored —CVE-2005-4076 Public exploit
Buffer overflow in Appfluent Technology Database IDS 2.0 allows local users to execute arbitrary code via a long APPFLU…
-
Unscored —CVE-2005-4071 Public exploit
Multiple SQL injection vulnerabilities in CFMagic Magic Forum Personal 2.5 and earlier allow remote attackers to execut…
-
Unscored —CVE-2005-4075 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in CF_Nuke 4.6 and earlier allow remote attackers to i…
-
Unscored —CVE-2005-4074 Public exploit
Directory traversal vulnerability in index.cfm in CF_Nuke 4.6 and earlier, when Sandbox Security is disabled, allows re…
-
Unscored —CVE-2005-4080 Public exploit
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers t…
-
Unscored —CVE-2005-4081 Public exploit
Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and po…
-
Unscored —CVE-2005-4073 Public exploit
SQL injection vulnerability in view_archive.cfm in CFMagic Magic List Pro 2.5 allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4047 Public exploit
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject a…
-
Unscored —CVE-2005-4054 Public exploit
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2005-4049 Public exploit
Multiple SQL injection vulnerabilities in Blog System 1.2 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2005-4055 Public exploit
SQL injection vulnerability in index.php in Cars Portal 1.1 and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2005-4053 Public exploit
Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —CVE-2005-4063 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject …
-
Unscored —CVE-2005-4060 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in rwAuction Pro 4.0 and 5.0 allows remote attackers to inject a…
-
Unscored —CVE-2005-4065 Public exploit
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2005-4064 Public exploit
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1…
-
Unscored —CVE-2005-4034 Public exploit
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2005-4032 Public exploit
Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to…
-
Unscored —CVE-2005-4039 Public exploit
Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to r…
-
Unscored —CVE-2005-4037 Public exploit
SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attacker…