| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2005-4083 | 5.0 | Directory traversal vulnerability in xs_edit.php in the eXtreme Styles phpBB module 2.2.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the edit parameter. | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4082 | 4.6 | The dhcp.client program for QNX 4.25 vmware is setuid, possibly by default, which allows local users to modify the NIC configuration and conduct other attacks. | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4081 | 7.5 | Multiple SQL injection vulnerabilities in Alisveristr E-commerce allow remote attackers to bypass authentication and possibly execute arbitrary SQL commands via the username and password parameters in (1) the user login and (2) administrator login pa | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4080 | 4.3 | Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Inte | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4079 | 5.0 | The register_globals emulation in phpMyAdmin 2.7.0 rc1 allows remote attackers to exploit other vulnerabilities in phpMyAdmin by modifying the import_blacklist variable in grab_globals.php, which can then be used to overwrite other variables. | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4077 | 4.6 | Multiple off-by-one errors in the cURL library (libcurl) 7.11.2 through 7.15.0 allow local users to trigger a buffer overflow and cause a denial of service or bypass PHP security restrictions via certain URLs that (1) are malformed in a way that prev | 2018-10-19 15:40:00 | 2005-12-08 01:03:00 |
| CVE-2005-4053 | 4.3 | Cross-site scripting (XSS) vulnerability in coWiki 0.3.4 allows remote attackers to inject arbitrary web script or HTML via the q parameter, as demonstrated using 26.html. | 2018-10-19 15:40:00 | 2005-12-07 11:03:00 |
| CVE-2005-4052 | 5.0 | e107 0.6174 allows remote attackers to redirect users to other web sites via the download parameter in rate.php, which is used after a user submits a file download rating. NOTE: in the default installation, the e_BASE variable restricts the redirect | 2018-10-19 15:40:00 | 2005-12-07 11:03:00 |
| CVE-2005-4051 | 5.0 | e107 0.6174 allows remote attackers to vote multiple times for a download via repeated requests to rate.php. | 2018-10-19 15:40:00 | 2005-12-07 11:03:00 |
| CVE-2005-4050 | 7.5 | Buffer overflow in multiple Multi-Tech Systems MultiVOIP devices with firmware before x.08 allows remote attackers to execute arbitrary code via a long INVITE field in a Session Initiation Protocol (SIP) packet. | 2018-10-19 15:40:00 | 2005-12-07 11:03:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: