| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4142 | 7.5 | The web interface for subscribing new users in Lyris ListManager 5.0 through 8.8b, in combination with a line wrap feature, allows remote attackers to execute arbitrary list administration commands via LFCR (%0A%0D) sequences in the pw parameter. NO | 2018-10-19 15:40:00 | 2005-12-10 11:03:00 |
| CVE-2005-4140 | 7.5 | SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field. | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4139 | 7.5 | Multiple SQL injection vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the (1) year parameter in calendar.php, (2) user parameter array in v_profile.php, and (3) the userid parameter in misc | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4138 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in ThWboard before 3 Beta 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) Wohnort and (2) Beruf fields in editprofile.php, (3) user parameter array in v_profile.php, a | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4137 | 7.5 | SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter. | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4136 | 4.3 | Cross-site scripting (XSS) vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter. | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4135 | 7.5 | Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is the | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4134 | 5.0 | Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service (CPU consumption and delayed application startup) via a web site with a large title, which is recorded in history.dat but not | 2018-10-19 15:40:00 | 2005-12-09 15:03:00 |
| CVE-2005-4092 | 7.5 | Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource at | 2018-10-19 15:40:00 | 2005-12-08 11:03:00 |
| CVE-2005-4084 | 5.0 | xs_edit.php in the phpBB eXtreme Styles module 2.2.1 and earlier allows remote attackers to obtain the installation path of the application via an invalid viewbackup parameter. | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: