# CVEs published 2005-09-19

12 CVEs were published on September 19, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-2979](https://cve.now/CVE-2005-2979.md): SQL injection vulnerability in index.php in phpoutsourcing Noah's classifieds allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2005-2980](https://cve.now/CVE-2005-2980.md): Cross-site scripting (XSS) vulnerability in index.php in phpoutsourcing Noah's classifieds 1.3 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2005-2981](https://cve.now/CVE-2005-2981.md): Cross-site scripting (XSS) vulnerability in Orion 1.3.8 and 1.4.5 allows remote attackers to inject arbitrary web script or HTML via the URL (no CVSS)
- [CVE-2005-2982](https://cve.now/CVE-2005-2982.md): Cross-site scripting (XSS) vulnerability in CompaqHTTPServer 2.1 allows remote attackers to inject arbitrary web script or HTML via the URL, (no CVSS)
- [CVE-2005-2983](https://cve.now/CVE-2005-2983.md): SQL injection vulnerability in Oracle Reports that use Lexical References allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-2984](https://cve.now/CVE-2005-2984.md): Avocent CCM console server running firmware 2.1 CCM4850 allows remote authenticated attackers to bypass port restrictions by connecting to t (no CVSS)
- [CVE-2005-2985](https://cve.now/CVE-2005-2985.md): SQL injection vulnerability in search\_result.php in AEwebworks aeDating Script 4.0 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2005-2986](https://cve.now/CVE-2005-2986.md): The v3flt2k.sys driver in AhnLab V3Pro 2004 Build 6.0.0.383, V3 VirusBlock 2005 Build 6.0.0.383, V3Net for Windows Server 6.0 Build 6.0.0.38 (no CVSS)
- [CVE-2005-2987](https://cve.now/CVE-2005-2987.md): SQL injection vulnerability in login.php in Digital Scribe 1.4 allows remote attackers to execute arbitrary SQL commands via the username pa (no CVSS)
- [CVE-2005-2988](https://cve.now/CVE-2005-2988.md): HP LaserJet 2430, and possibly other printers that use Jetdirect controls, stores information about recently printed documents without prope (no CVSS)
- [CVE-2005-2989](https://cve.now/CVE-2005-2989.md): Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) tid pa (no CVSS)
- [CVE-2005-2990](https://cve.now/CVE-2005-2990.md): AuthInfo.java in LineContol Java Client (jlc) before 0.8.1 stores sensitive information such as user passwords in log files. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-09-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.