cve.nowby Sazabi

CVEs published March 7, 2005

33 CVEs were published on March 7, 2005: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 33
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 33
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 33

CVE-2003-1088Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML…UnratedMar 7, 2005
CVE-2003-1089index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the…UnratedMar 7, 2005
CVE-2005-0397Format string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a…UnratedMar 7, 2005
CVE-2005-0652Unknown vulnerability in HP OpenVMS VAX 7.x and 6.x and OpenVMS Alpha 7.x or 6.x allows local users to access privileged files.UnratedMar 7, 2005
CVE-2005-0653phpMyAdmin 2.6.1 does not properly grant permissions on tables with an underscore in the name, which grants remote authenticated users…UnratedMar 7, 2005
CVE-2005-0654gifload.exe in GIMP 2.0.5, 2.2.3, and possibly 2.2.4 allows remote attackers or local users to cause a denial of service (application…UnratedMar 7, 2005
CVE-2005-0655auraCMS 1.5 allows remote attackers to obtain sensitive information via an HTTP request with an invalid id parameter to (1) teman.php, (2)…UnratedMar 7, 2005
CVE-2005-0656Multiple cross-site scripting (XSS) vulnerabilities in auraCMS 1.5 allow remote attackers to inject arbitrary web script or HTML via the…UnratedMar 7, 2005
CVE-2005-0657Directory traversal vulnerability in Computalynx CProxy 3.3.x and 3.4.x through 3.4.4 allows remote attackers to read arbitrary files or…UnratedMar 7, 2005
CVE-2005-0658SQL injection vulnerability in a third party extension to TYPO3 allows remote attackers to execute arbitrary SQL commands via the…UnratedMar 7, 2005
CVE-2005-0659phpBB 2.0.13 and earlier allows remote attackers to obtain sensitive information via a direct request to oracle.php, which reveals the…UnratedMar 7, 2005
CVE-2005-0660Multiple cross-site scripting (XSS) vulnerabilities in D-Forum 1.11 allows remote attackers to inject arbitrary web script or HTML via…UnratedMar 7, 2005
CVE-2005-0661SQL injection vulnerability in the getwbbuserdata function in session.php for Woltlab Burning Board 2.0.3 through 2.3.0 allows remote…UnratedMar 7, 2005
CVE-2005-0662Cross-site scripting (XSS) vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary web script or…UnratedMar 7, 2005
CVE-2005-0663SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f…UnratedMar 7, 2005
CVE-2005-0665Format string vulnerability in xv before 3.10a allows remote attackers to execute arbitrary code via format string specifiers in a filename.UnratedMar 7, 2005
CVE-2005-0666Unknown vulnerability in PaX from the September 2003 release to 2.2 before 2005.03.05, related to SEGMEXEC or RANDEXEC and VMA mirroring…UnratedMar 7, 2005
CVE-2005-0667Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code via an e-mail…UnratedMar 7, 2005
CVE-2005-0668Unknown vulnerability in HTTP Anti Virus Proxy (HAVP) before 0.51 prevents viruses from being properly detected in certain files such as…UnratedMar 7, 2005
CVE-2005-0669Multiple SQL injection vulnerabilities in mod.php for phpCOIN 1.2.0 through 1.2.1b allow remote attackers to execute arbitrary SQL…UnratedMar 7, 2005
CVE-2005-0670Cross-site scripting (XSS) vulnerability in phpCOIN 1.2.0 through 1.2.1b allows remote attackers to inject arbitrary web script or HTML…UnratedMar 7, 2005
CVE-2005-0671Format string vulnerability in Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary…UnratedMar 7, 2005
CVE-2005-0672Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are…UnratedMar 7, 2005
CVE-2005-0673Cross-site scripting (XSS) vulnerability in usercp_register.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or…UnratedMar 7, 2005
CVE-2005-0674Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject arbitrary web script or HTML…UnratedMar 7, 2005

Show all 33 entriesShow fewer entries