|
344851
|
6.8 |
MEDIUM
|
openbb
|
openbb
|
Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse parameter in a list action.
|
NVD-CWE-Other
|
CVE-2005-1613
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344852
|
6.8 |
MEDIUM
|
ultimate_php_board
|
ultimate_php_board
|
Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter.
|
NVD-CWE-Other
|
CVE-2005-1614
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344853
|
7.5 |
HIGH
|
ultimate_php_board
|
ultimate_php_board
|
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly du…
|
NVD-CWE-Other
|
CVE-2005-1615
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344854
|
7.5 |
HIGH
|
ultimate_php_board
|
ultimate_php_board
|
viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to obtain sensitive information via an invalid (1) id or possibly (2) postorder parameter, which reveals the path i…
|
NVD-CWE-Other
|
CVE-2005-1616
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344855
|
2.1 |
LOW
|
willings
|
webcam
webcam_lite
|
Willings WebCam and WebCam Lite 2.8 and earlier stores the password in memory in plaintext, which allows local users to gain sensitive information.
|
NVD-CWE-Other
|
CVE-2005-1617
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344856
|
5.0 |
MEDIUM
|
yahoo
|
messenger
|
The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a room join request packet with a third : (colon) and a…
|
NVD-CWE-Other
|
CVE-2005-1618
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344857
|
4.3 |
MEDIUM
|
soren_boysen
|
skull-splitter_guestbook
|
Cross-site scripting (XSS) vulnerability in Skull-Splitter Guestbook 1.0, 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via the (1) title or (2) content of a message.
|
NVD-CWE-Other
|
CVE-2005-1620
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344858
|
5.0 |
MEDIUM
|
postnuke_software_foundation
|
postnuke
|
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. (dot dot) in the func parameter t…
|
NVD-CWE-Other
|
CVE-2005-1621
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344859
|
4.3 |
MEDIUM
|
metalinks
|
metacart_e-shop
|
Cross-site scripting (XSS) vulnerability in productsByCategory.asp in MetaCart e-Shop allows remote attackers to inject arbitrary web script or HTML via the strCatalog_NAME parameter.
|
NVD-CWE-Other
|
CVE-2005-1622
|
2016-10-18 12:21 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344860
|
7.5 |
HIGH
|
jgs-xa
|
jgs-portal
|
Multiple SQL injection vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) anzahl_beitraege parameter to jgs_portal.php, 2) yea…
|
NVD-CWE-Other
|
CVE-2005-1633
|
2016-10-18 12:21 |
2005-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344861
|
4.3 |
MEDIUM
|
jgs-xa
|
jgs-portal
|
Multiple cross-site scripting (XSS) vulnerabilities in JGS-XA JGS-Portal 3.0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) anzahl_beitraege parameter to jgs_…
|
NVD-CWE-Other
|
CVE-2005-1634
|
2016-10-18 12:21 |
2005-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344862
|
5.0 |
MEDIUM
|
jgs-xa
|
jgs-portal
|
JGS-XA JGS-Portal 3.0.2 and earlier allows remote attackers to obtain the full server path via direct requests to (1) jgs_portal_ref.php, (2) jgs_portal_land.php, (3) jgs_portal_log.php, (4) jgs_port…
|
NVD-CWE-Other
|
CVE-2005-1635
|
2016-10-18 12:21 |
2005-05-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344863
|
2.1 |
LOW
|
yahoo
|
messenger
|
The Logfile feature in Yahoo! Messenger 5.x through 6.0 can be activated by a YMSGR: URL and writes all output to a single ypager.log file, even when there are multiple users, and does not properly w…
|
NVD-CWE-Other
|
CVE-2005-1671
|
2016-10-18 12:21 |
2005-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344864
|
5.1 |
MEDIUM
|
timo_rossi
|
picasm
|
Stack-based buffer overflow in the error directive in picasm 1.12b and earlier allows attackers to execute arbitrary code via a long error message.
|
NVD-CWE-Other
|
CVE-2005-1679
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344865
|
7.5 |
HIGH
|
d-link
|
dsl-502t
dsl-504t
dsl-562t
dsl-g604t
|
D-Link DSL-502T, DSL-504T, DSL-562T, and DSL-G604T, when /cgi-bin/firmwarecfg is executed, allows remote attackers to bypass authentication (1) if their IP address already exists in /var/tmp/fw_ip or…
|
NVD-CWE-Other
|
CVE-2005-1680
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344866
|
7.5 |
HIGH
|
bugada_andrea
|
php_advanced_transfer_manager
|
PHP remote file inclusion vulnerability in common.php in phpATM 1.21, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the include_location parameter …
|
NVD-CWE-Other
|
CVE-2005-1681
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344867
|
2.6 |
LOW
|
microsoft
|
word
|
Buffer overflow in winword.exe 10.2627.6714 and earlier in Microsoft Word for the Macintosh, before SP3 for Word 2002, allows remote attackers to cause a denial of service and possibly execute arbitr…
|
NVD-CWE-Other
|
CVE-2005-1683
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344868
|
4.3 |
MEDIUM
|
episodex
|
episodex_guestbook
|
Cross-site scripting (XSS) vulnerability in default.asp for episodex guestbook allows remote attackers to inject arbitrary web script or HTML via the Name field and other fields.
|
NVD-CWE-Other
|
CVE-2005-1684
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344869
|
7.5 |
HIGH
|
wordpress
|
wordpress
|
SQL injection vulnerability in wp-trackback.php in Wordpress 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.
|
NVD-CWE-Other
|
CVE-2005-1687
|
2016-10-18 12:21 |
2005-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344870
|
7.5 |
HIGH
|
postnuke_software_foundation
|
postnuke
|
Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2) module parameter.
|
NVD-CWE-Other
|
CVE-2005-1694
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344871
|
2.6 |
LOW
|
postnuke_software_foundation
|
postnuke
|
Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) rss_url paramete…
|
NVD-CWE-Other
|
CVE-2005-1695
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344872
|
2.6 |
LOW
|
postnuke_software_foundation
|
postnuke
|
Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid parameter to demo.ph…
|
NVD-CWE-Other
|
CVE-2005-1696
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344873
|
4.0 |
MEDIUM
|
postnuke_software_foundation
|
postnuke
|
Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a .. (dot dot) in the skin parameter.
|
NVD-CWE-Other
|
CVE-2005-1699
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344874
|
7.5 |
HIGH
|
postnuke_software_foundation
|
postnuke
|
SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary SQL commands via the riga[0] parameter.
|
NVD-CWE-Other
|
CVE-2005-1700
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344875
|
7.5 |
HIGH
|
portailphp
|
portailphp
|
SQL injection vulnerability in PortailPHP 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to the (1) News, (2) File, (3) Liens, or (4) Faq modules.
|
NVD-CWE-Other
|
CVE-2005-1701
|
2016-10-18 12:21 |
2005-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344876
|
7.5 |
HIGH
|
cj
|
ultra_plus
|
SQL injection vulnerability in out.php in CJ Ultra (CJUltra) Plus 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via the perm parameter.
|
NVD-CWE-Other
|
CVE-2005-1506
|
2016-10-18 12:20 |
2005-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344877
|
7.5 |
HIGH
|
pwsphp
|
pwsphp
|
PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message.
|
NVD-CWE-Other
|
CVE-2005-1510
|
2016-10-18 12:20 |
2005-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344878
|
7.5 |
HIGH
|
bakbone
|
netvault
|
Heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031.
|
NVD-CWE-Other
|
CVE-2005-1547
|
2016-10-18 12:20 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344879
|
7.5 |
HIGH
|
advanced_guestbook
|
advanced_guestbook
|
SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.
|
NVD-CWE-Other
|
CVE-2005-1548
|
2016-10-18 12:20 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344880
|
5.0 |
MEDIUM
|
colored_scripts
|
easy_message_board
|
Directory traversal vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to read arbitrary files via a .. (dot dot) in the print parameter.
|
NVD-CWE-Other
|
CVE-2005-1549
|
2016-10-18 12:20 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344881
|
7.5 |
HIGH
|
colored_scripts
|
easy_message_board
|
easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary commands via shell metacharacters in the print parameter.
|
NVD-CWE-Other
|
CVE-2005-1550
|
2016-10-18 12:20 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344882
|
5.0 |
MEDIUM
|
mozilla
|
bugzilla
|
Bugzilla 2.10 through 2.18, 2.19.1, and 2.19.2 displays a different error message depending on whether a product exists or not, which allows remote attackers to determine hidden products.
|
NVD-CWE-Other
|
CVE-2005-1563
|
2016-10-18 12:20 |
2005-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344883
|
5.0 |
MEDIUM
|
leif_m._wright
|
ad.cgi
|
The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
|
NVD-CWE-Other
|
CVE-2005-1350
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344884
|
7.5 |
HIGH
|
leif_m._wright
|
ad.cgi
|
The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
|
NVD-CWE-Other
|
CVE-2005-1351
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344885
|
4.3 |
MEDIUM
|
leif_m._wright
|
ad.cgi
|
Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
|
NVD-CWE-Other
|
CVE-2005-1352
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344886
|
5.0 |
MEDIUM
|
forum.pl
|
forum.pl
|
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
|
NVD-CWE-Other
|
CVE-2005-1353
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344887
|
7.5 |
HIGH
|
forum.pl
|
forum.pl
|
The forum.pl script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
|
NVD-CWE-Other
|
CVE-2005-1354
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344888
|
5.0 |
MEDIUM
|
includer.cgi
|
includer.cgi
|
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.
|
NVD-CWE-Other
|
CVE-2005-1355
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344889
|
4.3 |
MEDIUM
|
includer.cgi
|
includer.cgi
|
Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.
|
NVD-CWE-Other
|
CVE-2005-1356
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344890
|
5.0 |
MEDIUM
|
text.cgi
|
text.cgi
|
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
|
NVD-CWE-Other
|
CVE-2005-1357
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344891
|
7.5 |
HIGH
|
text.cgi
|
text.cgi
|
text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
|
NVD-CWE-Other
|
CVE-2005-1358
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344892
|
4.3 |
MEDIUM
|
text.cgi
|
text.cgi
|
Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
|
NVD-CWE-Other
|
CVE-2005-1359
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344893
|
7.5 |
HIGH
|
metalinks
|
metacart2
|
Multiple SQL injection vulnerabilities in MetaCart 2.0 for Paypal allow remote attackers to execute arbitrary SQL commands via the (1) intProdID parameter to product.asp, (2) intCatalogID or (3) strS…
|
NVD-CWE-Other
|
CVE-2005-1362
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344894
|
7.5 |
HIGH
|
metalinks
|
metacart2
|
Multiple SQL injection vulnerabilities in MetaCart 2.0 for PayFlow allow remote attackers to execute arbitrary commands via (1) intCatalogID, (2) strSubCatalogID, or (3) strSubCatalog_NAME parameter …
|
NVD-CWE-Other
|
CVE-2005-1363
|
2016-10-18 12:19 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344895
|
10.0 |
HIGH
|
pico_server
|
pico_server
|
Pico Server (pServ) 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading "/" (slash) characters and ".." sequences.
|
NVD-CWE-Other
|
CVE-2005-1365
|
2016-10-18 12:19 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344896
|
7.5 |
HIGH
|
pico_server
|
pico_server
|
Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via "dirname/../cgi-bin" in a URL.
|
NVD-CWE-Other
|
CVE-2005-1366
|
2016-10-18 12:19 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344897
|
7.5 |
HIGH
|
pico_server
|
pico_server
|
Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.
|
NVD-CWE-Other
|
CVE-2005-1367
|
2016-10-18 12:19 |
2005-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344898
|
4.6 |
MEDIUM
|
mandrakesoft
|
mandrake_lam-runtime
|
The LAM runtime environment package (lam-runtime-7.0.6-2mdk) on Mandrake Linux installs the mpi user without a password, which allows local users to gain privileges.
|
NVD-CWE-Other
|
CVE-2005-1379
|
2016-10-18 12:19 |
2005-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344899
|
2.6 |
LOW
|
apple
|
safari
|
Safari 1.3 allows remote attackers to cause a denial of service (application crash) via a long https URL that triggers a NULL pointer dereference.
|
NVD-CWE-Other
|
CVE-2005-1385
|
2016-10-18 12:19 |
2005-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344900
|
5.0 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php…
|
NVD-CWE-Other
|
CVE-2005-1386
|
2016-10-18 12:19 |
2005-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
