CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14938  CVE-2005-3734  Candidate  Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.  Assigned (20051121)  None (candidate not yet proposed)    View
14939  CVE-2005-3735  Candidate  Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.  Assigned (20051121)  None (candidate not yet proposed)    View
14940  CVE-2005-3736  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.  Assigned (20051121)  None (candidate not yet proposed)    View
14941  CVE-2005-3737  Candidate  Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.  Assigned (20051121)  None (candidate not yet proposed)    View
10972  CVE-2004-2546  Candidate  Multiple memory leaks in Samba before 3.0.6 allow attackers to cause a denial of service (memory consumption).  Assigned (20051121)  None (candidate not yet proposed)    View

Page 18700 of 20943, showing 5 records out of 104715 total, starting on record 93496, ending on 93500

Actions