264831
|
- |
|
phpmyadmin
|
phpmyadmin
|
The register_globals emulation layer in grab_globals.php for phpMyAdmin before 2.6.4-pl3 does not perform safety checks on values in the _FILES array for uploaded files, which allows remote attackers…
|
NVD-CWE-Other
|
CVE-2005-3300
|
2017-07-11 10:33 |
2005-10-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264832
|
- |
|
francisco_burzi
|
php-nuke
|
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url…
|
NVD-CWE-Other
|
CVE-2005-3304
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264833
|
- |
|
nuked-klan
|
nuked-klan
|
Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in…
|
NVD-CWE-Other
|
CVE-2005-3305
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264834
|
- |
|
zomplog
|
zomplog
|
Multiple cross-site scripting (XSS) vulnerabilities in Zomplog 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) comment parameter in detail.php, (3) the usern…
|
NVD-CWE-Other
|
CVE-2005-3308
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264835
|
- |
|
zomplog
|
zomplog
|
Multiple SQL injection vulnerabilities in Zomplog 3.4 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in detail.php and the catid parameter in (2) get.php and (3) in…
|
NVD-CWE-Other
|
CVE-2005-3309
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264836
|
- |
|
phpbb_group
|
phpbb
|
Interpretation conflict in phpBB 2.0.17, with remote avatars and avatar uploading enabled, allows remote authenticated users to inject arbitrary web script or HTML via an HTML file with a GIF or JPEG…
|
NVD-CWE-Other
|
CVE-2005-3310
|
2017-07-11 10:33 |
2005-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264837
|
- |
|
novell
|
netmail
|
Stack-based buffer overflow in the IMAP daemon in Novell Netmail 3.5.2 allows remote attackers to execute arbitrary code via "long verb arguments."
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2005-3314
|
2017-07-11 10:33 |
2005-11-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264838
|
- |
|
appindex
|
mwchat
|
SQL injection vulnerability in chat.php in MWChat 6.8 allows remote attackers to execute arbitrary SQL commands via the username parameter.
|
NVD-CWE-Other
|
CVE-2005-3324
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264839
|
- |
|
snoopy
|
snoopy
|
The _httpsrequest function in Snoopy 1.2, as used in products such as (1) MagpieRSS, (2) WordPress, (3) Ampache, and (4) Jinzora, allows remote attackers to execute arbitrary commands via shell metac…
|
CWE-20
Improper Input Validation
|
CVE-2005-3330
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
264840
|
- |
|
rogers_software_source
|
mgdiff_patch_viewer
|
viewpatch in mgdiff 1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
|
NVD-CWE-Other
|
CVE-2005-3331
|
2017-07-11 10:33 |
2005-10-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|