# CVEs published 2005-06-08

25 CVEs were published on June 8, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-1887](https://cve.now/CVE-2005-1887.md): Unknown vulnerability in the Sun Solaris C library (libc and libproject) in Solaris 10 allows local users to gain privileges. (no CVSS)
- [CVE-2005-1888](https://cve.now/CVE-2005-1888.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attribute (no CVSS)
- [CVE-2005-1889](https://cve.now/CVE-2005-1889.md): Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files. (no CVSS)
- [CVE-2005-1890](https://cve.now/CVE-2005-1890.md): Unknown vulnerability in Mortiforo before 0.9.1 allows users to access private forums via unknown attack vectors. (no CVSS)
- [CVE-2005-1891](https://cve.now/CVE-2005-1891.md): The GIF parser in ateimg32.dll in AOL Instant Messenger (AIM) 5.9.3797 and earlier allows remote attackers to cause a denial of service (cra (no CVSS)
- [CVE-2005-1892](https://cve.now/CVE-2005-1892.md): FlatNuke 2.5.3 allows remote attackers to cause a denial of service or obtain sensitive information via (1) a direct request to foot\_news.ph (no CVSS)
- [CVE-2005-1893](https://cve.now/CVE-2005-1893.md): FlatNuke 2.5.3 allows remote attackers to obtain sensitive information via invalid parameters to certain scripts, which leaks the web docume (no CVSS)
- [CVE-2005-1894](https://cve.now/CVE-2005-1894.md): Direct code injection vulnerability in FlatNuke 2.5.3 allows remote attackers to execute arbitrary PHP code by placing the code into the Ref (no CVSS)
- [CVE-2005-1895](https://cve.now/CVE-2005-1895.md): Cross-site scripting (XSS) vulnerability in FlatNuke 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the border or (no CVSS)
- [CVE-2005-1896](https://cve.now/CVE-2005-1896.md): Directory traversal vulnerability in thumb.php in FlatNuke 2.5.3 allows remote attackers to read arbitrary images or obtain the installation (no CVSS)
- [CVE-2005-1897](https://cve.now/CVE-2005-1897.md): Unknown vulnerability in FlexCast Audio Video Streaming Server before 2.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2005-1898](https://cve.now/CVE-2005-1898.md): The passthrough functionality in phpThumb.php in phpThumb() before 1.5.4 allows remote attackers to read files that are not images. (no CVSS)
- [CVE-2005-1899](https://cve.now/CVE-2005-1899.md): Rakkarsoft RakNet network library 2.33 and earlier, when released before 30 May 2005, and as used in multiple products including nFusion Eli (no CVSS)
- [CVE-2005-1900](https://cve.now/CVE-2005-1900.md): Sawmill before 7.1.6 allows remote attackers to bypass authentication and (1) gain administrative privileges or (2) add a license. (no CVSS)
- [CVE-2005-1901](https://cve.now/CVE-2005-1901.md): Multiple cross-site scripting (XSS) vulnerabilities in Sawmill before 7.1.6 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2005-1902](https://cve.now/CVE-2005-1902.md): Directory traversal vulnerability in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to read other users' (no CVSS)
- [CVE-2005-1903](https://cve.now/CVE-2005-1903.md): Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CR (no CVSS)
- [CVE-2005-1904](https://cve.now/CVE-2005-1904.md): SQL injection vulnerability in login.asp in JiRo's Upload System (JUS) 1 allows remote attackers to execute arbitrary SQL commands via the p (no CVSS)
- [CVE-2005-1905](https://cve.now/CVE-2005-1905.md): The klif.sys driver in Kaspersky Labs Anti-Virus 5.0.227, 5.0.228, and 5.0.335 on Windows 2000 allows local users to gain privileges by modi (no CVSS)
- [CVE-2005-1906](https://cve.now/CVE-2005-1906.md): SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. (no CVSS)
- [CVE-2005-1907](https://cve.now/CVE-2005-1907.md): The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2005-1908](https://cve.now/CVE-2005-1908.md): Perception LiteWeb allows remote attackers to bypass access controls for files via an extra leading / (slash) or leading \\ (backslash) in th (no CVSS)
- [CVE-2005-1909](https://cve.now/CVE-2005-1909.md): The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions o (no CVSS)
- [CVE-2005-1910](https://cve.now/CVE-2005-1910.md): SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-1911](https://cve.now/CVE-2005-1911.md): The fetchnews NNTP client in leafnode 1.11.2 and earlier can hang while waiting for input that never arrives, which allows remote NNTP serve (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.