# CVEs published 2005-11-06

17 CVEs were published on November 6, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-3124](https://cve.now/CVE-2005-3124.md): syslogtocern in Acme thttpd before 2.23 allows local users to write arbitrary files via a symlink attack on a temporary file. (no CVSS)
- [CVE-2005-3507](https://cve.now/CVE-2005-3507.md): Directory traversal vulnerability in CuteNews 1.4.1 allows remote attackers to include arbitrary files, execute code, and gain privileges vi (no CVSS)
- [CVE-2005-3508](https://cve.now/CVE-2005-3508.md): SQL injection vulnerability in showGallery.php in Gallery (Galerie) 2.4 allows remote attackers to execute arbitrary SQL commands via the ga (no CVSS)
- [CVE-2005-3509](https://cve.now/CVE-2005-3509.md): Multiple SQL injection vulnerabilities in JPortal allow remote attackers to execute arbitrary SQL commands via (1) banner.php or the id para (no CVSS)
- [CVE-2005-3510](https://cve.now/CVE-2005-3510.md): Apache Tomcat 5.5.0 to 5.5.11 allows remote attackers to cause a denial of service (CPU consumption) via a large number of simultaneous requ (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2005-3511](https://cve.now/CVE-2005-3511.md): Multiple cross-site scripting (XSS) vulnerabilities in Spymac Web OS 4.0 allow remote attackers to inject arbitrary web script or HTML via ( (no CVSS)
- [CVE-2005-3512](https://cve.now/CVE-2005-3512.md): Cross-site scripting (XSS) vulnerability in index.php in VUBB alpha rc1 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2005-3513](https://cve.now/CVE-2005-3513.md): index.php in VUBB alpha rc1 allows remote attackers to obtain the installation path of the application via a viewforum action with the f par (no CVSS)
- [CVE-2005-3514](https://cve.now/CVE-2005-3514.md): Multiple cross-site scripting (XSS) vulnerabilities in Chipmunk Forum script allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2005-3515](https://cve.now/CVE-2005-3515.md): Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Topsites script allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2005-3516](https://cve.now/CVE-2005-3516.md): Cross-site scripting (XSS) vulnerability in recommend.php in Chipmunk Directory script allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2005-3517](https://cve.now/CVE-2005-3517.md): Chipmunk Scripts Guestbook allows remote attackers to obtain the installation path of the script via a URL that causes an error message to b (no CVSS)
- [CVE-2005-3518](https://cve.now/CVE-2005-3518.md): SQL injection vulnerability in search.php in PunBB 1.2.7 and 1.2.8 allows remote attackers to execute arbitrary SQL commands via the old\_sea (no CVSS)
- [CVE-2005-3519](https://cve.now/CVE-2005-3519.md): Multiple PHP file inclusion vulnerabilities in MySource 2.14.0 allow remote attackers to execute arbitrary PHP code and include arbitrary lo (no CVSS)
- [CVE-2005-3520](https://cve.now/CVE-2005-3520.md): Multiple cross-site scripting (XSS) vulnerabilities in MySource 2.14.0 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS)
- [CVE-2005-3521](https://cve.now/CVE-2005-3521.md): SQL injection vulnerability in resetcore.php in e107 0.617 through 0.6173 allows remote attackers to execute arbitrary SQL commands, bypass (no CVSS)
- [CVE-2005-3522](https://cve.now/CVE-2005-3522.md): Cross-site scripting (XSS) vulnerability in index.jsp in ManageEngine Netflow Analyzer 4.0.2 allows remote attackers to inject arbitrary web (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-11-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.