# CVEs published 2005-12-06

15 CVEs were published on December 6, 2005: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4030](https://cve.now/CVE-2005-4030.md): SQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute arbitrary SQL commands via the HTTP\_USER\_A (no CVSS)
- [CVE-2005-4031](https://cve.now/CVE-2005-4031.md): Eval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute arbitrary PHP code via the "user language op (no CVSS)
- [CVE-2005-4032](https://cve.now/CVE-2005-4032.md): Cross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2005-4033](https://cve.now/CVE-2005-4033.md): Nodezilla 0.4.13-corno-fulgure does not properly protect the evl\_data directory, which could allow them to be shared when they are not prote (no CVSS)
- [CVE-2005-4034](https://cve.now/CVE-2005-4034.md): Multiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2005-4035](https://cve.now/CVE-2005-4035.md): Multiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2005-4036](https://cve.now/CVE-2005-4036.md): Cross-site scripting (XSS) vulnerability in index.cgi in Web4Future KeyWord Frequency Counter 1.0 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2005-4037](https://cve.now/CVE-2005-4037.md): SQL injection vulnerability in functions.php in Web4Future Affiliate Manager PRO 4.1 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2005-4038](https://cve.now/CVE-2005-4038.md): SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2005-4039](https://cve.now/CVE-2005-4039.md): Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2005-4040](https://cve.now/CVE-2005-4040.md): SQL injection vulnerability in FileLister 0.51 and earlier allows remote attackers to execute arbitrary SQL commands via the search paramete (no CVSS)
- [CVE-2005-4041](https://cve.now/CVE-2005-4041.md): Cross-site scripting (XSS) vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to (no CVSS)
- [CVE-2005-4042](https://cve.now/CVE-2005-4042.md): Cross-site scripting (XSS) vulnerability in Warm Links 1.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2005-4043](https://cve.now/CVE-2005-4043.md): SQL injection vulnerability in view.php in Hobosworld HobSR 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2005-4044](https://cve.now/CVE-2005-4044.md): Cross-site scripting (XSS) vulnerability in search.cgi in Amazon Search Directory 1.0.0 and earlier allows remote attackers to inject arbitr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2005-12-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.