266791
|
- |
|
phpbb_group
|
phpbb
|
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG…
|
NVD-CWE-Other
|
CVE-2005-3310
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266792
|
- |
|
novell
|
netmail
|
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2005-3314
|
2017-07-11 10:33 |
2005-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266793
|
- |
|
appindex
|
mwchat
|
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
NVD-CWE-Other
|
CVE-2005-3324
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266794
|
- |
|
snoopy
|
snoopy
|
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metac…
|
CWE-20
Improper Input Validation
|
CVE-2005-3330
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266795
|
- |
|
rogers_software_source
|
mgdiff_patch_viewer
|
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
|
NVD-CWE-Other
|
CVE-2005-3331
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266796
|
- |
|
ebase
|
ebaseweb
|
SQL injection vulnerability in eBASEweb 3.0 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2005-3333
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266797
|
- |
|
flyspray
|
flyspray
|
Cross-site scripting (XSS) vulnerability in index.php in Flyspray 0.9.7 through 0.9.8 (devel) allows remote attackers to inject arbitrary web script or HTML via the (1) PHPSESSID, (2) task, (3) strin…
|
NVD-CWE-Other
|
CVE-2005-3334
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266798
|
- |
|
mantis
|
mantis
|
PHP file inclusion vulnerability in bug_sponsorship_list_view_inc.php in Mantis 1.0.0RC2 and 0.19.2 allows remote attackers to execute arbitrary PHP code and include arbitrary local files via the t_c…
|
NVD-CWE-Other
|
CVE-2005-3335
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266799
|
- |
|
dhis_tools
|
dns_package
|
DHIS tools DNS package (dhis-tools-dns) before 5.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files created by (1) register-q.sh and (2) register-p.sh.
|
NVD-CWE-Other
|
CVE-2005-3341
|
2017-07-11 10:33 |
2005-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266800
|
- |
|
tkdiff
|
tkdiff
|
tkdiff before 4.1.1 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
|
NVD-CWE-Other
|
CVE-2005-3343
|
2017-07-11 10:33 |
2005-12-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|