|
355551
|
7.5 |
HIGH
|
landshop
|
real_estate_commerce_system
|
SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) sear…
|
NVD-CWE-Other
|
CVE-2005-4018
|
2011-03-8 11:27 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355552
|
7.5 |
HIGH
|
widget_press
|
widget_imprint
|
SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter.
|
NVD-CWE-Other
|
CVE-2005-4020
|
2011-03-8 11:27 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355553
|
4.3 |
MEDIUM
|
interspire
|
fastfind
|
Cross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
|
NVD-CWE-Other
|
CVE-2005-4024
|
2011-03-8 11:27 |
2005-12-5 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355554
|
5.1 |
MEDIUM
|
quicksilver_forums
|
quicksilver_forums
|
SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP_USER_AGENT header.
|
NVD-CWE-Other
|
CVE-2005-4030
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355555
|
7.5 |
HIGH
|
mediawiki
|
mediawiki
|
Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language option," which is used as part of a dynamic class name that i…
|
NVD-CWE-Other
|
CVE-2005-4031
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355556
|
7.5 |
HIGH
|
mediawiki
|
mediawiki
|
This vulnerability is addressed in the following product release:
MediaWiki, MediaWiki, 1.5.3
|
NVD-CWE-Other
|
CVE-2005-4031
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355557
|
4.3 |
MEDIUM
|
-
|
-
|
Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
NVD-CWE-Other
|
CVE-2005-4032
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355558
|
5.0 |
MEDIUM
|
ali_bousahid
|
nodezilla
|
Nodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could allow them to be shared when they are not protected by PRIVATEDATADIR in nodezilla.ini, which allows remot…
|
NVD-CWE-Other
|
CVE-2005-4033
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355559
|
7.5 |
HIGH
|
web4future
|
edating_professional
|
Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) pg, and (3) sortb parameters to (a) index.php; …
|
NVD-CWE-Other
|
CVE-2005-4034
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355560
|
7.5 |
HIGH
|
-
|
-
|
Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) prod, and (2) brid parameters to…
|
NVD-CWE-Other
|
CVE-2005-4035
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355561
|
4.3 |
MEDIUM
|
web4future
|
keyword_frequency_counter
|
Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrary web script or HTML via the "remote URL."
|
NVD-CWE-Other
|
CVE-2005-4036
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355562
|
4.3 |
MEDIUM
|
mr._cgi_guy
|
hot_links_pro
hot_links_sql
|
Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string.
|
NVD-CWE-Other
|
CVE-2005-4041
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355563
|
4.3 |
MEDIUM
|
mr._cgi_guy
|
warm_links
|
Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via a parameter to search.cgi.
|
NVD-CWE-Other
|
CVE-2005-4042
|
2011-03-8 11:27 |
2005-12-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355564
|
4.0 |
MEDIUM
|
sun
|
java_system_application_server
one_application_server
|
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Serv…
|
NVD-CWE-Other
|
CVE-2005-4046
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355565
|
4.3 |
MEDIUM
|
iisworks
|
aspknowledgebase
|
Cross-site scripting (XSS) vulnerability in kb.asp in IISWorks ASPKnowledgeBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the a parameter.
|
NVD-CWE-Other
|
CVE-2005-4047
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355566
|
7.5 |
HIGH
|
pluggedout
|
pluggedout_blog
|
SQL injection vulnerability in index.php in PluggedOut Blog 1.9.5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categoryid, (2) entryid, (3) year, (4) month, and (…
|
NVD-CWE-Other
|
CVE-2005-4054
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355567
|
7.5 |
HIGH
|
jonathan_beckett
|
pluggedout_nexus
|
SQL injection vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the (1) Location, (2) Last Name, and (3) First Name parameters.
|
NVD-CWE-Other
|
CVE-2005-4056
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355568
|
4.3 |
MEDIUM
|
jonathan_beckett
|
pluggedout_nexus
|
Cross-site scripting (XSS) vulnerability in search.php in PluggedOut Nexus 0.1 allows remote attackers to inject arbitrary web script or HTML via the (1) Location, (2) Last Name, and (3) First Name p…
|
NVD-CWE-Other
|
CVE-2005-4057
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355569
|
7.5 |
HIGH
|
locazo
|
locazolist
|
SQL injection vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to execute arbitrary SQL commands via the q parameter.
|
NVD-CWE-Other
|
CVE-2005-4059
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355570
|
4.3 |
MEDIUM
|
-
|
-
|
Cross-site scripting (XSS) vulnerability in PASearch.asp in XcPhotoAlbum 1.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.
|
NVD-CWE-Other
|
CVE-2005-4061
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355571
|
4.3 |
MEDIUM
|
xcent
|
xcclassified
|
Cross-site scripting (XSS) vulnerability in CPSearch.asp in XcClassified 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameters.
|
NVD-CWE-Other
|
CVE-2005-4062
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355572
|
4.3 |
MEDIUM
|
netauctionhelp
|
netauctionhelp
|
Multiple cross-site scripting (XSS) vulnerabilities in NetAuctionHelp 3.0 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) L, (2) sort, (3) category, (4) categor…
|
NVD-CWE-Other
|
CVE-2005-4063
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355573
|
7.5 |
HIGH
|
alan_ward
|
a-faq
|
Multiple SQL injection vulnerabilities in A-FAQ 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) faqid parameter to faqDspItem.asp and (2) catcode parameter to faqDsp.asp.
|
NVD-CWE-Other
|
CVE-2005-4064
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355574
|
7.5 |
HIGH
|
edgewall_software
|
trac
|
SQL injection vulnerability in the search module in Edgewall Trac before 0.9.2 allows remote attackers to execute arbitrary SQL commands via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-4065
|
2011-03-8 11:27 |
2005-12-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355575
|
7.2 |
HIGH
|
ibm
|
aix
|
Unspecified "absolute path vulnerability" in umountall in IBM AIX 5.1 through 5.3 allows local users to cause unknown impact via unknown vectors.
|
NVD-CWE-Other
|
CVE-2005-4068
|
2011-03-8 11:27 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355576
|
4.3 |
MEDIUM
|
cfmagic
|
magic_forum_personal
|
Cross-site scripting (XSS) vulnerability in CFMagic Magic Forum Personal 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the Words parameter in search_forums.cfm, a…
|
NVD-CWE-Other
|
CVE-2005-4072
|
2011-03-8 11:27 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355577
|
7.5 |
HIGH
|
bluecoat
|
webproxy
proxyav
|
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4.2.3 allows remote attackers to execute arbitrary code via a long Host: header.
|
NVD-CWE-Other
|
CVE-2005-4085
|
2011-03-8 11:27 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355578
|
5.0 |
MEDIUM
|
sugarcrm
|
sugar_suite
|
Directory traversal vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to include arbitrary local f…
|
NVD-CWE-Other
|
CVE-2005-4086
|
2011-03-8 11:27 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355579
|
7.5 |
HIGH
|
w2b
|
phpforumpro
|
SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the (1) parent and (2) day parameters.
|
NVD-CWE-Other
|
CVE-2005-4088
|
2011-03-8 11:27 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355580
|
4.3 |
MEDIUM
|
1-script
|
1-search
|
Cross-site scripting (XSS) vulnerability in 1search.cgi in 1-Script 1-Search 1.8 allows remote attackers to inject arbitrary web script or HTML via the q parameter.
|
NVD-CWE-Other
|
CVE-2005-4091
|
2011-03-8 11:27 |
2005-12-8 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355581
|
7.5 |
HIGH
|
contenido
|
contendio
|
Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this …
|
NVD-CWE-Other
|
CVE-2005-4132
|
2011-03-8 11:27 |
2005-12-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355582
|
2.1 |
LOW
|
sun
|
solaris
|
Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files.
|
NVD-CWE-Other
|
CVE-2005-4133
|
2011-03-8 11:27 |
2005-12-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355583
|
5.0 |
MEDIUM
|
milky
|
captcha_php
|
Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter.
|
NVD-CWE-Other
|
CVE-2005-4163
|
2011-03-8 11:27 |
2005-12-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355584
|
4.3 |
MEDIUM
|
-
|
-
|
Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter.
|
NVD-CWE-Other
|
CVE-2005-4166
|
2011-03-8 11:27 |
2005-12-12 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355585
|
3.5 |
LOW
|
horde
|
kronolith_h3
|
Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when cre…
|
NVD-CWE-Other
|
CVE-2005-4189
|
2011-03-8 11:27 |
2005-12-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355586
|
3.5 |
LOW
|
horde
|
nag_task_list_manager_h3
|
Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script…
|
NVD-CWE-Other
|
CVE-2005-4191
|
2011-03-8 11:27 |
2005-12-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355587
|
3.5 |
LOW
|
-
|
-
|
Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or H…
|
NVD-CWE-Other
|
CVE-2005-4192
|
2011-03-8 11:27 |
2005-12-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355588
|
5.0 |
MEDIUM
|
innovateware
|
sights_n_sounds_streaming_media_server
|
Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string.
|
NVD-CWE-Other
|
CVE-2005-4194
|
2011-03-8 11:27 |
2005-12-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355589
|
4.3 |
MEDIUM
|
php_web_scripts
|
link_up_gold
|
Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] paramet…
|
NVD-CWE-Other
|
CVE-2005-4231
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355590
|
7.5 |
HIGH
|
powerdev
|
encapsgallery
|
SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
|
NVD-CWE-Other
|
CVE-2005-4234
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355591
|
4.3 |
MEDIUM
|
whmcompletesolution
|
whmcompletesolution
|
Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters.
|
NVD-CWE-Other
|
CVE-2005-4235
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355592
|
4.3 |
MEDIUM
|
cartkeeper
|
ckgold_shopping_cart
|
Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters.
|
NVD-CWE-Other
|
CVE-2005-4236
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355593
|
4.3 |
MEDIUM
|
servers-r-us
|
mysqlauction
|
Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword…
|
NVD-CWE-Other
|
CVE-2005-4237
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355594
|
4.3 |
MEDIUM
|
mantis
|
mantis
|
Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
|
NVD-CWE-Other
|
CVE-2005-4238
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355595
|
4.3 |
MEDIUM
|
php_jackknife
|
php_jackknife
|
Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sK…
|
NVD-CWE-Other
|
CVE-2005-4239
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355596
|
4.3 |
MEDIUM
|
vcd-db
|
vcd-db
|
Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter.
|
NVD-CWE-Other
|
CVE-2005-4241
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355597
|
4.3 |
MEDIUM
|
horde
|
turba_h3
|
Multiple cross-site scripting (XSS) vulnerabilities in Horde Turba H3 2.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the address book and (2) contact data.
|
NVD-CWE-Other
|
CVE-2005-4242
|
2011-03-8 11:27 |
2005-12-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355598
|
7.5 |
HIGH
|
quickpaypro
|
quickpaypro
|
Multiple SQL injection vulnerabilities in QuickPayPro 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) popupid parameter in popups.edit.php; (2) so, (3) sb, and (4) nr paramet…
|
NVD-CWE-Other
|
CVE-2005-4243
|
2011-03-8 11:27 |
2005-12-15 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355599
|
7.5 |
HIGH
|
snipegallery
|
snipe_gallery
|
SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to ima…
|
CWE-89
SQLインジェクション
|
CVE-2005-4244
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
355600
|
4.3 |
MEDIUM
|
snipegallery
|
snipe_gallery
|
Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2005-4245
|
2011-03-8 11:27 |
2005-12-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
