273941
|
- |
|
alexander_palmo
|
simple_php_blog
|
Cross-site scripting (XSS) vulnerability in search.php for Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
NVD-CWE-Other
|
CVE-2005-1135
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273942
|
- |
|
sphpblog
|
sphpblog
|
Simple PHP Blog (sphpBlog) 0.4.0 stores the (1) password.txt and (2) config.txt files under the web document root, which allows remote attackers to obtain sensitive information and crack passwords vi…
|
NVD-CWE-Other
|
CVE-2005-1136
|
2016-10-18 12:17 |
2005-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273943
|
- |
|
alexander_palmo
|
simple_php_blog
|
Simple PHP Blog (sphpBlog) 0.4.0 allows remote attackers to obtain sensitive information via a direct request to sb_functions.php, which leaks the full pathname in a PHP error message.
|
NVD-CWE-Other
|
CVE-2005-1137
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273944
|
- |
|
gocr
|
optical_character_recognition_utility
|
Heap-based buffer overflow in the readpgm function in pnm.c for GOCR 0.40, when it is not using netpbm, allows remote attackers to execute arbitrary code via a P3 format PNM file with more data than …
|
NVD-CWE-Other
|
CVE-2005-1142
|
2016-10-18 12:17 |
2005-04-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273945
|
- |
|
dameware_development
|
dameware_nt_utilities miniremote_control
|
The DNTUS26 process in Dameware NT Utilities and the DWRCS process in MiniRemote Control 4.9 and earlier stores the username and password in cleartext in memory, which could allow attackers to obtain…
|
NVD-CWE-Other
|
CVE-2005-1166
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273946
|
- |
|
musicmatch
|
jukebox
|
Musicmatch 10.00.2047 and earlier store log files in the Program Files directory instead of the user profile, which may allow local users to obtain sensitive information.
|
NVD-CWE-Other
|
CVE-2005-1167
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273947
|
- |
|
musicmatch
|
jukebox
|
DiagCollectionControl.dll in Musicmatch 10.00.2047 and earlier allows remote attackers to overwrite arbitrary files via the bstrSavePath argument.
|
NVD-CWE-Other
|
CVE-2005-1168
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273948
|
- |
|
mafia
|
mafia_blog
|
Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.
|
NVD-CWE-Other
|
CVE-2005-1169
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273949
|
- |
|
datenbank_module
|
datenbank_module
|
SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
NVD-CWE-Other
|
CVE-2005-1170
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
273950
|
- |
|
coppermine
|
coppermine_photo_gallery
|
Cross-site scripting (XSS) vulnerability in init.inc.php in Coppermine Photo Gallery 1.3.x allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For parameter.
|
NVD-CWE-Other
|
CVE-2005-1172
|
2016-10-18 12:17 |
2005-05-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|