CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
14336 | CVE-2005-3130 | Candidate | SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field. | Assigned (20051004) | None (candidate not yet proposed) | View | |
14337 | CVE-2005-3131 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to (2) calendar_d.html, (3) calendar_m.html, or (4) calendar_w.html. | Assigned (20051004) | None (candidate not yet proposed) | View | |
14338 | CVE-2005-3132 | Candidate | MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message. | Assigned (20051004) | None (candidate not yet proposed) | View | |
14339 | CVE-2005-3133 | Candidate | Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html. | Assigned (20051004) | None (candidate not yet proposed) | View | |
14340 | CVE-2005-3134 | Candidate | Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName). | Assigned (20051004) | None (candidate not yet proposed) | View |
Page 18861 of 20943, showing 5 records out of 104715 total, starting on record 94301, ending on 94305