Archive
December 2005
Vulnerabilities first published in this month (UTC), newest first.
260 results · Clear filters · Feed
-
Unscored —CVE-2005-4035 Public exploit
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attacker…
-
Unscored —CVE-2005-4043 Public exploit
SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2005-4016 Public exploit
SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2005-4011 Public exploit
SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier…
-
Unscored —CVE-2005-4019 Public exploit
SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to ex…
-
Unscored —CVE-2005-4018 Public exploit
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers…
-
Unscored —CVE-2005-4005 Public exploit
SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information a…
-
Unscored —CVE-2005-4001 Public exploit
Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execu…
-
Unscored —CVE-2005-4003 Public exploit
Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d an…
-
Unscored —CVE-2005-4000 Public exploit
Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attack…
-
Unscored —CVE-2005-3998 Public exploit
Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inj…
-
Unscored —CVE-2005-3995 Public exploit
Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, whe…
-
Unscored —CVE-2005-3996 Public exploit
SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to e…
-
Unscored —CVE-2005-3992 Public exploit
Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2005-3991 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2004-2640 Public exploit
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary file…
-
Unscored —CVE-2004-2646 Public exploit
The addUser function in UserManager.java in Free Web Chat 2.0 allows remote attackers to cause a denial of service (unc…
-
Unscored —CVE-2004-2649 Public exploit
Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of cha…
-
Unscored —CVE-2004-2636 Public exploit
TinyWeb 1.9 allows remote attackers to read source code of scripts via "/./" in the URL.
-
Unscored —CVE-2004-2647 Public exploit
Free Web Chat 2.0 allows remote attackers to cause a denial of service (CPU consumption) via multiple connections from …
-
Unscored —CVE-2004-2628 Public exploit
Multiple directory traversal vulnerabilities in thttpd 2.07 beta 0.4, when running on Windows, allow remote attackers t…
-
Unscored —CVE-2004-2631 Public exploit
Eval injection vulnerability in left.php in phpMyAdmin 2.5.1 up to 2.5.7, when LeftFrameLight is FALSE, allows remote a…
-
Unscored —CVE-2004-2625 Public exploit
Cross-site scripting (XSS) vulnerability in Outblaze Email allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2004-2626 Public exploit
GUI overlay vulnerability in the Java API in Siemens S55 cellular phones allows remote attackers to send unauthorized S…
-
Unscored —CVE-2005-3988 Public exploit
SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbi…
-
Unscored —CVE-2005-3986 Public exploit
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitra…
-
Unscored —CVE-2004-2617 Public exploit
Directory traversal vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to read files outside of the…
-
Unscored —CVE-2004-2618 Public exploit
Cross-site scripting (XSS) vulnerability in Pegasi Web Server (PWS) 0.2.2 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2004-2614 Public exploit
Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar…
-
Unscored —CVE-2005-3982 Public exploit
CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP head…
-
Unscored —CVE-2005-3981 Public exploit
NOTE: this issue has been disputed by third parties. Microsoft Windows XP, 2000, and 2003 allows local users to kill a …
-
Unscored —CVE-2005-3980 Public exploit
SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attacker…
-
Unscored —CVE-2005-3968 Public exploit
SQL injection vulnerability in auth.inc.php in PHPX 3.5.9 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2005-3978 Public exploit
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Ed…
-
Unscored —CVE-2005-3972 Public exploit
Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allow…
-
Unscored —CVE-2005-3966 Public exploit
Cross-site scripting (XSS) vulnerability in search.jsp in Java Search Engine (JSE) 0.9.34 allows remote attackers to in…
-
Unscored —CVE-2005-3963 Public exploit
SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2005-3953 Public exploit
SQL injection vulnerability in Bedeng PSP 1.1 allows remote attackers to execute arbitrary SQL commands via the cwhere …
-
Unscored —CVE-2005-3935 Public exploit
SQL injection vulnerability in SocketKB 1.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2005-3956 Public exploit
Multiple SQL injection vulnerabilities in index.php in DMANews 0.904 and 0.910 allow remote attackers to execute arbitr…