| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4557 | 5.0 | dir/include.html in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, allows remote attackers to include arbitrary local files via a null byte (%00) in the lang parameter, possibly due to a di | 2018-10-19 15:41:00 | 2005-12-28 11:03:00 |
| CVE-2005-4556 | 7.5 | PHP remote file include vulnerability in IceWarp Web Mail 5.5.1, as used by Merak Mail Server 8.3.0r and VisNetic Mail Server version 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP f | 2018-10-19 15:41:00 | 2005-12-28 11:03:00 |
| CVE-2005-4555 | 4.3 | Cross-site scripting (XSS) vulnerability in add.php in DEV web management system 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) ENTER_ARTICLE_TITLE, (2) SPECIFY_ZONE, (3) ENTER_ARTICLE_HEADER, and (4) ENTER | 2018-10-19 15:41:00 | 2005-12-28 11:03:00 |
| CVE-2005-4554 | 7.5 | Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter in an openforum action (openforum.php) in index.php, (2) cat parameter in getfile.p | 2018-10-19 15:41:00 | 2005-12-28 11:03:00 |
| CVE-2005-4534 | 7.5 | The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files. | 2018-10-19 15:41:00 | 2005-12-28 02:03:00 |
| CVE-2005-4526 | 5.0 | Clearswift MIMEsweeper For Web (a.k.a. WEBsweeper) 4.0 through 5.1 allows remote attackers to bypass filtering via a URL that does not include a .exe extension but returns an executable file. | 2018-10-19 15:41:00 | 2005-12-28 01:03:00 |
| CVE-2005-4525 | 4.6 | SmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management control over the agent by executing the GUI (SmcGui.exe) and then killing the process, which causes the privileged management GUI to launch. | 2018-10-19 15:41:00 | 2005-12-28 01:03:00 |
| CVE-2005-4517 | 7.5 | SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php. | 2018-10-19 15:41:00 | 2005-12-28 01:03:00 |
| CVE-2005-4516 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in PHP-Fusion 6.00.200 through 6.00.300 allow remote attackers to inject arbitrary web script or HTML via (1) the sortby parameter in members.php and (2) IMG tags. | 2018-10-19 15:41:00 | 2005-12-28 01:03:00 |
| CVE-2005-4503 | 5.0 | httprint v202, and possibly other versions before v301, allows remote attackers to cause a denial of service (crash) via a long Server field in an HTTP response. | 2018-10-19 15:41:00 | 2005-12-22 21:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: