266481
|
- |
|
mantis debian gentoo
|
mantis debian_linux linux
|
Cross-site scripting (XSS) vulnerability in view_all_set.php in Mantis 0.19.0a1 through 1.0.0a3 allows remote attackers to inject arbitrary web script or HTML via the dir parameter, as identified by …
|
NVD-CWE-Other
|
CVE-2005-2557
|
2017-07-11 10:32 |
2005-09-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266482
|
- |
|
gravity_board_x_development_team
|
gravity_board_x
|
SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the login field.
|
NVD-CWE-Other
|
CVE-2005-2562
|
2017-07-11 10:32 |
2005-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266483
|
- |
|
gravity_board_x_development_team
|
gravity_board_x
|
Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary PHP code, HTML, and script via the csscontent parameter, which is d…
|
NVD-CWE-Other
|
CVE-2005-2564
|
2017-07-11 10:32 |
2005-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266484
|
- |
|
gravity_board_x_development_team
|
gravity_board_x
|
Gravity Board X (GBX) 1.1 allows remote attackers to obtain sensitive information via (1) a 1 in the perm parameter to deletethread.php or a direct request to (2) ban.php, (3) addnews.php, (4) banned…
|
NVD-CWE-Other
|
CVE-2005-2565
|
2017-07-11 10:32 |
2005-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266485
|
- |
|
phptb
|
topic_boards
|
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter.
|
NVD-CWE-Other
|
CVE-2005-2587
|
2017-07-11 10:32 |
2005-08-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266486
|
- |
|
parlano
|
mindalign
|
Cross-site scripting (XSS) vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-2590
|
2017-07-11 10:32 |
2005-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266487
|
- |
|
parlano
|
mindalign
|
Parlano MindAlign 5.0 and later versions allows remote attackers to list valid users via unknown vectors, aka the "User Enumeration" vulnerability.
|
NVD-CWE-Other
|
CVE-2005-2591
|
2017-07-11 10:32 |
2005-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266488
|
- |
|
parlano
|
mindalign
|
Unknown vulnerability in Parlano MindAlign 5.0 and later versions allows remote attackers to bypass authentication via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-2592
|
2017-07-11 10:32 |
2005-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266489
|
- |
|
parlano
|
mindalign
|
Parlano MindAlign 5.0 and later versions uses weak encryption, with unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2005-2593
|
2017-07-11 10:32 |
2005-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
266490
|
- |
|
aol
|
aol_client_software
|
AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.
|
NVD-CWE-Other
|
CVE-2005-2597
|
2017-07-11 10:32 |
2005-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|