| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2005-2311 | 0.00 | — | 0.00 | Jul 19, 2005 | SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files. | |||
| CVE-2005-2312 | 0.00 | — | 0.02 | Jul 19, 2005 | management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter. | |||
| CVE-2005-2313 | 0.00 | — | 0.00 | Jul 19, 2005 | Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors. | |||
| CVE-2005-2314 | 0.00 | — | 0.02 | Jul 19, 2005 | inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do_login parameter and performing an edit action using user.php, which causes the login check to be bypassed and leaks the password in the… | |||
| CVE-2005-2317 | 0.00 | — | 0.02 | Jul 19, 2005 | Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies. | |||
| CVE-2005-2318 | 0.03 | — | 0.01 | Jul 19, 2005 | Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. | |||
| CVE-2005-2319 | 0.00 | — | 0.01 | Jul 19, 2005 | PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter. | |||
| CVE-2005-2320 | 0.00 | — | 0.01 | Jul 19, 2005 | WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges. | |||
| CVE-2005-2321 | 0.00 | — | 0.03 | Jul 19, 2005 | PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php. | |||
| CVE-2005-2322 | 0.00 | — | 0.01 | Jul 19, 2005 | Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php. | |||
| CVE-2005-2323 | 0.03 | — | 0.03 | Jul 19, 2005 | Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum… | |||
| CVE-2005-2324 | 0.03 | — | 0.03 | Jul 19, 2005 | Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php. | |||
| CVE-2005-2325 | 0.00 | — | 0.02 | Jul 19, 2005 | Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9)… | |||
| CVE-2005-2326 | 0.03 | — | 0.03 | Jul 19, 2005 | Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php. | |||
| CVE-2005-1174 | 0.03 | — | 0.05 | Jul 18, 2005 | MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory. | |||
| CVE-2005-1175 | 0.04 | — | 0.08 | Jul 18, 2005 | Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request. | |||
| CVE-2005-1689 | Cri | 0.68 | 9.8 | 0.11 | Jul 18, 2005 | Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions. | ||
| CVE-2005-1914 | 0.00 | — | 0.00 | Jul 18, 2005 | CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file. | |||
| CVE-2005-2195 | 0.00 | — | 0.02 | Jul 18, 2005 | Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than… | |||
| CVE-2005-2278 | 0.09 | — | 0.85 | Jul 18, 2005 | Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name. | |||
| CVE-2005-2279 | 0.00 | — | 0.02 | Jul 18, 2005 | Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data. | |||
| CVE-2005-2280 | 0.00 | — | 0.01 | Jul 18, 2005 | Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet. | |||
| CVE-2005-2281 | Hig | 0.49 | 7.5 | 0.01 | Jul 18, 2005 | WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords. | ||
| CVE-2005-2282 | 0.00 | — | 0.01 | Jul 18, 2005 | Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary web script and HTML via unknown vectors. | |||
| CVE-2005-2283 | 0.00 | — | 0.00 | Jul 18, 2005 | WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file. | |||
| CVE-2005-2284 | 0.00 | — | 0.01 | Jul 18, 2005 | Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unknown attack vectors. | |||
| CVE-2005-2285 | 0.00 | — | 0.01 | Jul 18, 2005 | WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration. | |||
| CVE-2005-2286 | 0.00 | — | 0.02 | Jul 18, 2005 | WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource. | |||
| CVE-2005-2287 | 0.09 | — | 0.57 | Jul 18, 2005 | SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow. | |||
| CVE-2005-2288 | 0.00 | — | 0.01 | Jul 18, 2005 | Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter. | |||
| CVE-2005-2289 | 0.00 | — | 0.01 | Jul 18, 2005 | PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message. | |||
| CVE-2005-2290 | 0.00 | — | 0.03 | Jul 18, 2005 | wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables. | |||
| CVE-2005-2291 | 0.00 | — | 0.01 | Jul 18, 2005 | Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information. | |||
| CVE-2005-2292 | 0.00 | — | 0.01 | Jul 18, 2005 | Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information. | |||
| CVE-2005-2293 | Med | 0.36 | 5.5 | 0.02 | Jul 18, 2005 | Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information. | ||
| CVE-2005-2294 | 0.00 | — | 0.01 | Jul 18, 2005 | Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers. | |||
| CVE-2005-2295 | 0.04 | — | 0.05 | Jul 18, 2005 | NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero datablock size. | |||
| CVE-2005-2296 | 0.00 | — | 0.01 | Jul 18, 2005 | YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path. | |||
| CVE-2005-2277 | 0.04 | — | 0.13 | Jul 15, 2005 | Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command. | |||
| CVE-2005-2095 | 0.04 | — | 0.04 | Jul 13, 2005 | options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files. | |||
| CVE-2005-2248 | 0.00 | — | 0.01 | Jul 13, 2005 | Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder. | |||
| CVE-2005-2249 | 0.00 | — | 0.01 | Jul 13, 2005 | Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability. | |||
| CVE-2005-2250 | 0.04 | — | 0.10 | Jul 13, 2005 | Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share. | |||
| CVE-2005-2251 | 0.00 | — | 0.05 | Jul 13, 2005 | PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468. | |||
| CVE-2005-2252 | 0.00 | — | 0.01 | Jul 13, 2005 | PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID. | |||
| CVE-2005-2253 | 0.00 | — | 0.01 | Jul 13, 2005 | SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description. | |||
| CVE-2005-2254 | 0.00 | — | 0.01 | Jul 13, 2005 | Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php. NOTE: there is evidence that… | |||
| CVE-2005-2255 | 0.00 | — | 0.02 | Jul 13, 2005 | Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php. | |||
| CVE-2005-2256 | 0.04 | — | 0.05 | Jul 13, 2005 | Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter. | |||
| CVE-2005-2257 | 0.00 | — | 0.03 | Jul 13, 2005 | The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter. |
- CVE-2005-2311Jul 19, 2005risk 0.00cvss —epss 0.00
SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.
- CVE-2005-2312Jul 19, 2005risk 0.00cvss —epss 0.02
management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter.
- CVE-2005-2313Jul 19, 2005risk 0.00cvss —epss 0.00
Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors.
- CVE-2005-2314Jul 19, 2005risk 0.00cvss —epss 0.02
inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do_login parameter and performing an edit action using user.php, which causes the login check to be bypassed and leaks the password in the…
- CVE-2005-2317Jul 19, 2005risk 0.00cvss —epss 0.02
Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
- CVE-2005-2318Jul 19, 2005risk 0.03cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
- CVE-2005-2319Jul 19, 2005risk 0.00cvss —epss 0.01
PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.
- CVE-2005-2320Jul 19, 2005risk 0.00cvss —epss 0.01
WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges.
- CVE-2005-2321Jul 19, 2005risk 0.00cvss —epss 0.03
PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php.
- CVE-2005-2322Jul 19, 2005risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.
- CVE-2005-2323Jul 19, 2005risk 0.03cvss —epss 0.03
Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum…
- CVE-2005-2324Jul 19, 2005risk 0.03cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.
- CVE-2005-2325Jul 19, 2005risk 0.00cvss —epss 0.02
Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9)…
- CVE-2005-2326Jul 19, 2005risk 0.03cvss —epss 0.03
Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php.
- CVE-2005-1174Jul 18, 2005risk 0.03cvss —epss 0.05
MIT Kerberos 5 (krb5) 1.3 through 1.4.1 Key Distribution Center (KDC) allows remote attackers to cause a denial of service (application crash) via a certain valid TCP connection that causes a free of unallocated memory.
- CVE-2005-1175Jul 18, 2005risk 0.04cvss —epss 0.08
Heap-based buffer overflow in the Key Distribution Center (KDC) in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain valid TCP or UDP request.
- risk 0.68cvss 9.8epss 0.11
Double free vulnerability in the krb5_recvauth function in MIT Kerberos 5 (krb5) 1.4.1 and earlier allows remote attackers to execute arbitrary code via certain error conditions.
- CVE-2005-1914Jul 18, 2005risk 0.00cvss —epss 0.00
CenterICQ 4.20.0 and earlier creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack on the gg.token.PID temporary file.
- CVE-2005-2195Jul 18, 2005risk 0.00cvss —epss 0.02
Apple Darwin Streaming Server 5.5 and earlier allows remote attackers to cause a denial of service (application crash) via a URL with a filename containing a .cgi extension and an MS-DOS device name such as AUX, CON, PRN, COM1, or LPT1, a different vulnerability than…
- CVE-2005-2278Jul 18, 2005risk 0.09cvss —epss 0.85
Stack-based buffer overflow in the IMAP daemon (imapd) in MailEnable Professional 1.54 allows remote authenticated users to execute arbitrary code via the status command with a long mailbox name.
- CVE-2005-2279Jul 18, 2005risk 0.00cvss —epss 0.02
Cisco ONS 15216 Optical Add/Drop Multiplexer (OADM) running firmware 2.2.2 and earlier allows remote attackers to cause a denial of service (management plane session loss) via crafted telnet data.
- CVE-2005-2280Jul 18, 2005risk 0.00cvss —epss 0.01
Cisco Security Agent (CSA) 4.5 allows remote attackers to cause a denial of service (system crash) via a crafted IP packet.
- risk 0.49cvss 7.5epss 0.01
WebEOC before 6.0.2 uses a weak encryption scheme for passwords, which makes it easier for attackers to crack passwords.
- CVE-2005-2282Jul 18, 2005risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in WebEOC before 6.0.2 allow remote attackers to inject arbitrary web script and HTML via unknown vectors.
- CVE-2005-2283Jul 18, 2005risk 0.00cvss —epss 0.00
WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service (system and database resource consumption) via a large file.
- CVE-2005-2284Jul 18, 2005risk 0.00cvss —epss 0.01
Multiple SQL injection vulnerabilities in WebEOC before 6.0.2 allow remote attackers to modify SQL statements via unknown attack vectors.
- CVE-2005-2285Jul 18, 2005risk 0.00cvss —epss 0.01
WebEOC before 6.0.2 stores sensitive information in locations such as URIs, web pages, and configuration files, which allows remote attackers to obtain information such as Usernames, Passwords, Emergency information, medical information, and system configuration.
- CVE-2005-2286Jul 18, 2005risk 0.00cvss —epss 0.02
WebEOC before 6.0.2 does not properly check user authorization, which allows remote attackers to gain privileges via a direct request to a resource.
- CVE-2005-2287Jul 18, 2005risk 0.09cvss —epss 0.57
SoftiaCom wMailServer 1.0 and 2.0 allows remote attackers to cause a denial of service (application crash) via a large TCP packet with a leading space, possibly triggering a buffer overflow.
- CVE-2005-2288Jul 18, 2005risk 0.00cvss —epss 0.01
Cross-site scripting (XSS) vulnerability in PHPCounter 7.2 allows remote attackers to inject arbitrary web script or HTML via the EpochPrefix parameter.
- CVE-2005-2289Jul 18, 2005risk 0.00cvss —epss 0.01
PHPCounter 7.2 allows remote attackers to obtain sensitive information via a direct request to prelims.php, which reveals the path in an error message.
- CVE-2005-2290Jul 18, 2005risk 0.00cvss —epss 0.03
wps_shop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) art and (2) cat variables.
- CVE-2005-2291Jul 18, 2005risk 0.00cvss —epss 0.01
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 passes the cleartext password as a parameter when starting sqlplus, which allows local users to gain sensitive information.
- CVE-2005-2292Jul 18, 2005risk 0.00cvss —epss 0.01
Oracle JDeveloper 9.0.4, 9.0.5, and 10.1.2 stores cleartext passwords in (1) IDEConnections.xml, (2) XSQLConfig.xml and (3) settings.xml, which allows local users to obtain sensitive information.
- risk 0.36cvss 5.5epss 0.02
Oracle Formsbuilder 9.0.4 stores database usernames and passwords in a temporary file, which is not deleted after it is used, which allows local users to obtain sensitive information.
- CVE-2005-2294Jul 18, 2005risk 0.00cvss —epss 0.01
Oracle Forms 4.5, 6.0, 6i, and 9i on Unix, when a large number of records are retrieved by an Oracle form, stores a copy of the database tables in a world-readable temporary file, which allows local users to gain sensitive information such as credit card numbers.
- CVE-2005-2295Jul 18, 2005risk 0.04cvss —epss 0.05
NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (infinite loop) via a packet with a zero datablock size.
- CVE-2005-2296Jul 18, 2005risk 0.00cvss —epss 0.01
YabbSE 1.5.5c allows remote attackers to obtain sensitive information via a direct request to ssi_examples.php, which reveals the path.
- CVE-2005-2277Jul 15, 2005risk 0.04cvss —epss 0.13
Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename argument of a PUT command.
- CVE-2005-2095Jul 13, 2005risk 0.04cvss —epss 0.04
options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
- CVE-2005-2248Jul 13, 2005risk 0.00cvss —epss 0.01
Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder.
- CVE-2005-2249Jul 13, 2005risk 0.00cvss —epss 0.01
Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability.
- CVE-2005-2250Jul 13, 2005risk 0.04cvss —epss 0.10
Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share.
- CVE-2005-2251Jul 13, 2005risk 0.00cvss —epss 0.05
PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.
- CVE-2005-2252Jul 13, 2005risk 0.00cvss —epss 0.01
PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.
- CVE-2005-2253Jul 13, 2005risk 0.00cvss —epss 0.01
SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description.
- CVE-2005-2254Jul 13, 2005risk 0.00cvss —epss 0.01
Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php. NOTE: there is evidence that…
- CVE-2005-2255Jul 13, 2005risk 0.00cvss —epss 0.02
Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".." sequences in the lan parameter to (1) index.php or (2) admin/index.php.
- CVE-2005-2256Jul 13, 2005risk 0.04cvss —epss 0.05
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" (encoded dot dot) sequences in the formLanguage parameter.
- CVE-2005-2257Jul 13, 2005risk 0.00cvss —epss 0.03
The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.