Cross-site scripting (XSS) vulnerability in PHPKIT 1.6.03 allows allows remote attackers to inject arbitrary web script or HTML via forum messages. Date published : 2005-05-10 http://www.securityfocus.com/bid/10013 http://marc.info/?l=bugtraq&m=108067894822358&w=2
LINBOX LIN:BOX allows remote attackers to bypass authentication, obtain sensitive information, or gain access via a direct request to admin/user.pl preceded by // (double leading slash). Date published : 2005-05-10 http://www.securityfocus.com/bid/10010 http://marc.info/?l=bugtraq&m=108067245401673&w=2
The p_submit_url value in the sample login form in the Oracle 9i Application Server (9iAS) Single Sign-on Administrators Guide, Release 2(9.0.2) for Oracle SSO allows remote attackers to spoof the login page, which could...
The "%f" feature in the VirusEvent directive in Clam AntiVirus daemon (clamd) before 0.70 allows local users to execute arbitrary commands via shell metacharacters in a file name. Date published : 2005-05-10 http://www.securityfocus.com/bid/10007 http://marc.info/?l=bugtraq&m=108066864608615&w=2
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 9.1.0-R85 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to testfile.html, (2) file parameter to erredit.html, (3) dns parameter to...
Multiple cross-site scripting (XSS) vulnerabilities in (1) deliver.asp and (2) billing.asp in A-CART Pro and A-CART 2.0 allow remote attackers to inject arbitrary web script or HTML via the user information forms. Date published...
SQL injection vulnerability in category.asp in A-CART Pro and A-CART 2.0 allows remote attackers to gain privileges via the catcode parameter. Date published : 2005-05-10 http://www.securityfocus.com/bid/9997 http://marc.info/?l=bugtraq&m=108057887008983&w=2
Cross-site scripting (XSS) vulnerability in WebCT Campus Edition 4.1.1.5 allows remote attackers to inject arbitrary web script or HTML via the @import URL function in a CSS style tag. Date published : 2005-05-10 http://www.securityfocus.com/bid/9999...
Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ppuser, (2) password, (3) stype, (4) perpage, (5) sort,...
Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users’ passwords via the (1) photo parameter to addfav.php, (2) photo parameter to comments.php, (3) credit parameter to...
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then...
Stack-based buffer overflow in WinSig.exe in eSignal 7.5 and 7.6 allows remote attackers to execute arbitrary code via a long STREAMQUOTE tag. Date published : 2005-05-10 http://www.securityfocus.com/bid/9978 http://marc.info/?l=bugtraq&m=108025234317408&w=2
Cross-site scripting (XSS) vulnerability in guest.cgi in Fresh Guest Book allows remote attackers to inject arbitrary web script or HTML via the Name field. Date published : 2005-05-10 http://www.securityfocus.com/bid/9995 http://marc.info/?l=bugtraq&m=108057935827431&w=2
nstxd in Nstx 1.1 beta3 and earlier allows remote attackers to cause a denial of service (crash) via a large packet, which triggers a null dereference. Date published : 2005-05-10 http://www.securityfocus.com/bid/9989 http://marc.info/?l=bugtraq&m=108034249916453&w=2