|
349901
|
7.5 |
HIGH
|
vortex_portal
|
vortex_portal
|
PHP remote file include vulnerability in (1) content.php and (2) index.php for Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.
|
NVD-CWE-Other
|
CVE-2005-0879
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349902
|
5.0 |
MEDIUM
|
vortex_portal
|
vortex_portal
|
content.php in Vortex Portal allows remote attackers to obtain sensitive information via an invalid act parameter, which leaks the full pathname in a PHP error message.
|
NVD-CWE-Other
|
CVE-2005-0880
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349903
|
4.3 |
MEDIUM
|
interspire
|
articlelive
|
Cross-site scripting (XSS) vulnerability in articles.newcomment for Interspire ArticleLive 2005 allows remote attackers to inject arbitrary web script or HTML via the Articleld parameter.
|
NVD-CWE-Other
|
CVE-2005-0881
|
2017-07-11 10:32 |
2005-03-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349904
|
7.5 |
HIGH
|
birdblog
|
birdblog
|
SQL injection vulnerability in admincore.php in BirdBlog before 1.2.0 allows remote attackers to execute arbitrary SQL commands via the (1) userid or (2) userpw parameters.
|
NVD-CWE-Other
|
CVE-2005-0882
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349905
|
4.3 |
MEDIUM
|
digitalhive
|
digitalhive
|
Multiple cross-site scripting (XSS) vulnerabilities in base.php for DigitalHive 2.0 allow remote attackers to inject arbitrary web script or HTML via (1) the mt parameter to the membres.php page or (…
|
NVD-CWE-Other
|
CVE-2005-0883
|
2017-07-11 10:32 |
2005-03-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349906
|
7.5 |
HIGH
|
digitalhive
|
digitalhive
|
DigitalHive 2.0 allows remote attackers to re-install the product by directly accessing the install script.
|
NVD-CWE-Other
|
CVE-2005-0884
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349907
|
7.5 |
HIGH
|
michael_dean
|
double_choco_latte
|
Eval injection vulnerability in Double Choco Latte before 0.9.4.3 allows remote attackers to execute arbitrary PHP code via the menuAction variable in (1) functions.inc.php or (2) main.php, which cau…
|
NVD-CWE-Other
|
CVE-2005-0887
|
2017-07-11 10:32 |
2005-03-24 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349908
|
4.3 |
MEDIUM
|
michael_dean
|
double_choco_latte
|
Multiple cross-site scripting (XSS) vulnerabilities in functions.inc.php for Double Choco Latte 0.9.4.3 allow remote attackers to inject arbitrary web script or HTML via the (1) class or (2) method n…
|
NVD-CWE-Other
|
CVE-2005-0888
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349909
|
2.1 |
LOW
|
microsoft
|
windows_xp
|
Remote Desktop in Windows XP SP1 does not verify the "Force shutdown from a remote system" setting, which allows remote attackers to shut down the system by executing TSShutdn.exe.
|
CWE-20
不適切な入力確認
|
CVE-2005-0904
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349910
|
7.5 |
HIGH
|
smarty
|
smarty
|
Unknown vulnerability in the regex_replace modifier (modifier.regex_replace.php) in Smarty before 2.6.8 allows attackers to execute arbitrary PHP code.
|
NVD-CWE-Other
|
CVE-2005-0913
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349911
|
4.3 |
MEDIUM
|
adventia
|
adventia_chat
adventia_server_pro
|
Adventia Chat 3.1 and Server Pro 3.0 allows remote attackers to inject arbitrary web script or HTML into the chat space, which leaves other users vulnerable to cross-site scripting (XSS) attacks.
|
NVD-CWE-Other
|
CVE-2005-0919
|
2017-07-11 10:32 |
2005-03-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349912
|
4.3 |
MEDIUM
|
adventia
|
e-data
|
Cross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword.
|
NVD-CWE-Other
|
CVE-2005-0924
|
2017-07-11 10:32 |
2005-03-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349913
|
4.3 |
MEDIUM
|
asp_press
|
acs_blog
|
Cross-site scripting (XSS) vulnerability in ACS Blog 1.1.1 allows remote attackers to inject arbitrary web script or HTML via onmouseover or onload events in (1) img, (2) link, or (3) mail tags.
|
NVD-CWE-Other
|
CVE-2005-0945
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349914
|
7.5 |
HIGH
|
coinsoft_technologies
|
phpcoin
|
Directory traversal vulnerability in auxpage.php in phpCoin 1.2.1b and earlier allows remote attackers to read and execute arbitrary files via a .. (dot dot) in the page parameter.
|
NVD-CWE-Other
|
CVE-2005-0947
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349915
|
7.5 |
HIGH
|
iatek
|
portalapp
|
SQL injection vulnerability in ad_click.asp for PortalApp allows remote attackers to execute arbitrary SQL commands via the banner_id parameter.
|
NVD-CWE-Other
|
CVE-2005-0948
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349916
|
4.3 |
MEDIUM
|
iatek
|
portalapp
|
Multiple cross-site scripting (XSS) vulnerabilities in content.asp in Iatek PortalApp allow remote attackers to inject arbitrary web script or HTML via the (1) contenttype or (2) keywords parameter.
|
NVD-CWE-Other
|
CVE-2005-0949
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349917
|
5.0 |
MEDIUM
|
faststone
|
4in1_browser
|
Directory traversal vulnerability in FastStone 4in1 Browser 1.2 allows remote attackers to read arbitrary files via a (1) ... (triple dot) or (2) ..\ (dot dot backslash) in the URL.
|
NVD-CWE-Other
|
CVE-2005-0950
|
2017-07-11 10:32 |
2005-03-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349918
|
7.5 |
HIGH
|
bay_technical_associates
|
rpc3_telnet
|
Bay Technical Associates RPC-3 Telnet Host 3.05 allows remote attackers to bypass authentication by pressing the escape and enter keys at the username prompt.
|
NVD-CWE-Other
|
CVE-2005-0957
|
2017-07-11 10:32 |
2005-03-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349919
|
7.5 |
HIGH
|
lighthouse_development
|
squirrelcart
|
SQL injection vulnerability in index.php for Lighthouse Squirrelcart allows remote attackers to execute arbitrary SQL commands via the (1) crn parameter in a show action or (2) rn parameter in a show…
|
NVD-CWE-Other
|
CVE-2005-0962
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349920
|
2.1 |
LOW
|
toshiba
|
acpi_flash_bios
|
An error in the Toshiba ACPI BIOS 1.6 causes the BIOS to only examine the first slot in the Master Boot Record (MBR) table for an active partition, which prevents the system from booting even though …
|
NVD-CWE-Other
|
CVE-2005-0963
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349921
|
4.6 |
MEDIUM
|
kerio
|
personal_firewall
|
Unknown vulnerability in Kerio Personal Firewall 4.1.2 and earlier allows local users to bypass firewall rules via a malicious process that impersonates a legitimate process that has fewer restrictio…
|
NVD-CWE-Other
|
CVE-2005-0964
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349922
|
2.1 |
LOW
|
apple
opendarwin
|
mac_os_x
mac_os_x_server
darwin_kernel
|
Integer signedness error in the parse_machfile function in the mach-o loader (mach_loader.c) for the Darwin Kernel as used in Mac OS X 10.3.7, and other versions before 10.3.9, allows local users to …
|
NVD-CWE-Other
|
CVE-2005-0975
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349923
|
5.0 |
MEDIUM
|
ivt
|
bluesoleil
|
Directory traversal vulnerability in the Object Push service in IVT BlueSoleil 1.4 allows remote attackers to upload arbitrary files via a .. (dot dot) in a PUSH command.
|
NVD-CWE-Other
|
CVE-2005-0978
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349924
|
7.5 |
HIGH
|
netmanage
|
rumba
|
Multiple buffer overflows in RUMBA 7.3 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via crafted values in a profile file, as demonstrated using …
|
NVD-CWE-Other
|
CVE-2005-0979
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349925
|
4.3 |
MEDIUM
|
phpmyadmin
|
phpmyadmin
|
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin before 2.6.2-rc1 allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter.
|
NVD-CWE-Other
|
CVE-2005-0992
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349926
|
4.3 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid parameter to the EmailStats op in banners.pgp, (2) th…
|
NVD-CWE-Other
|
CVE-2005-1000
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349927
|
5.0 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the…
|
NVD-CWE-Other
|
CVE-2005-1001
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349928
|
7.5 |
HIGH
|
profitcode
|
payprocart
|
Directory traversal vulnerability in index.php for ProfitCode PayProCart 3.0 allows remote attackers to include arbitrary PHP files via .. (dot dot) sequences in the modID parameter.
|
NVD-CWE-Other
|
CVE-2005-1003
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349929
|
4.3 |
MEDIUM
|
profitcode
|
payprocart
|
Cross-site scripting (XSS) vulnerability in usrdetails.php in ProfitCode PayProCart 3.0 allows remote attackers to inject arbitrary web script or HTML via the sgnuptype parameter.
|
NVD-CWE-Other
|
CVE-2005-1004
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349930
|
7.5 |
HIGH
|
profitcode
|
payprocart
|
ProfitCode PayProCart 3.0 allows remote attackers to bypass authentication and gain administrative privileges to the admin control panel, as demonstrated via a direct request to adminshop/index.php w…
|
NVD-CWE-Other
|
CVE-2005-1005
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349931
|
5.0 |
MEDIUM
|
stalker
|
communigate_pro
|
Unknown vulnerability in the LIST functionality in CommuniGate Pro before 4.3c3 allows remote attackers to cause a denial of service (server crash) via certain multipart messages.
|
NVD-CWE-Other
|
CVE-2005-1007
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349932
|
10.0 |
HIGH
|
bakbone
|
netvault
|
Multiple buffer overflows in BakBone NetVault 6.x and 7.x allow (1) remote attackers to execute arbitrary code via a modified computer name and length that leads to a heap-based buffer overflow, or (…
|
NVD-CWE-Other
|
CVE-2005-1009
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349933
|
4.3 |
MEDIUM
|
comersus_open_technologies
|
comersus_cart
|
Cross-site scripting (XSS) vulnerability in Comersus Cart 6 allows remote attackers to inject arbitrary web script or HTML via the account username.
|
NVD-CWE-Other
|
CVE-2005-1010
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349934
|
4.3 |
MEDIUM
|
iatek
|
siteenable
|
Cross-site scripting (XSS) vulnerability in Iatek SiteEnable allows remote attackers to inject arbitrary web script or HTML via (1) the contenttype parameter to content.asp, (2) the title, or (3) the…
|
NVD-CWE-Other
|
CVE-2005-1012
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349935
|
5.0 |
MEDIUM
|
mailenable
|
mailenable_enterprise
mailenable_professional
|
The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode str…
|
NVD-CWE-Other
|
CVE-2005-1013
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349936
|
7.5 |
HIGH
|
mailenable
|
mailenable_enterprise
mailenable_professional
|
Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.
|
NVD-CWE-Other
|
CVE-2005-1014
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349937
|
4.3 |
MEDIUM
|
maxwebportal
|
maxwebportal
|
Cross-site scripting (XSS) vulnerability in links_add_form.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL.
|
NVD-CWE-Other
|
CVE-2005-1016
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349938
|
7.5 |
HIGH
|
maxwebportal
|
maxwebportal
|
SQL injection vulnerability in the Update_Events function in events_functions.asp in MaxWebPortal 1.33 and earlier allows remote attackers to execute arbitrary SQL commands via the EVENT_ID parameter…
|
CWE-89
SQLインジェクション
|
CVE-2005-1017
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349939
|
7.2 |
HIGH
|
aeon
|
aeon
|
Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.
|
NVD-CWE-Other
|
CVE-2005-1019
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349940
|
4.3 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the catego…
|
NVD-CWE-Other
|
CVE-2005-1023
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349941
|
5.0 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error…
|
NVD-CWE-Other
|
CVE-2005-1024
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349942
|
4.3 |
MEDIUM
|
francisco_burzi
|
php-nuke
|
Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module…
|
NVD-CWE-Other
|
CVE-2005-1027
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349943
|
7.5 |
HIGH
|
active_web_softwares
|
active_auction_house
|
Multiple SQL injection vulnerabilities in Active Auction House allow remote attackers to execute arbitrary SQL commands via the (1) catid, (2) SortDir, or (3) Sortby parameter to default.asp, (4) ite…
|
NVD-CWE-Other
|
CVE-2005-1029
|
2017-07-11 10:32 |
2005-04-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349944
|
4.3 |
MEDIUM
|
active_web_softwares
|
active_auction_house
|
Multiple cross-site scripting (XSS) vulnerabilities in Active Auction House allow remote attackers to inject arbitrary web script or HTML via the (1) ReturnURL, (2) password, (3) username parameter, …
|
NVD-CWE-Other
|
CVE-2005-1030
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349945
|
5.0 |
MEDIUM
|
e-xoops
runcms
|
e-xoops
runcms
|
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbi…
|
NVD-CWE-Other
|
CVE-2005-1031
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349946
|
5.0 |
MEDIUM
|
netwin
|
surgeftp
|
SurgeFTP 2.2m1 allows remote attackers to cause a denial of service (application hang) via the LEAK command.
|
NVD-CWE-Other
|
CVE-2005-1034
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349947
|
7.5 |
HIGH
|
centrinity
|
centrinity_firstclass_desktop_client
|
OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a …
|
NVD-CWE-Other
|
CVE-2005-1045
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349948
|
7.5 |
HIGH
|
postnuke_software_foundation
|
postnuke
|
SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter. NOTE: the vendor reports that they could not repro…
|
NVD-CWE-Other
|
CVE-2005-1048
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349949
|
2.6 |
LOW
|
postnuke_software_foundation
|
postnuke
|
Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2) op parameter to user…
|
NVD-CWE-Other
|
CVE-2005-1049
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349950
|
5.0 |
MEDIUM
|
postnuke_software_foundation
|
postnuke
|
The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.
|
NVD-CWE-Other
|
CVE-2005-1050
|
2017-07-11 10:32 |
2005-05-2 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
