CVE List

Id CVE No. Status Description Phase Votes Comments Actions
14336  CVE-2005-3130  Candidate  SQL injection vulnerability in lucidCMS 1.0.11 allows remote attackers to execute arbitrary SQL commands via the login field.  Assigned (20051004)  None (candidate not yet proposed)    View
14337  CVE-2005-3131  Candidate  Multiple cross-site scripting (XSS) vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to blank.html, or the createdataCX parameter to (2) calendar_d.html, (3) calendar_m.html, or (4) calendar_w.html.  Assigned (20051004)  None (candidate not yet proposed)    View
14338  CVE-2005-3132  Candidate  MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to bwlist_inc.html, which reveals the path in an error message.  Assigned (20051004)  None (candidate not yet proposed)    View
14339  CVE-2005-3133  Candidate  Multiple directory traversal vulnerabilities in MERAK Mail Server 8.2.4r with Icewarp Web Mail 5.5.1, and possibly earlier versions, allows remote attackers to (1) delete arbitrary files or directories via a relative path to the id parameter to logout.html or (2) include arbitrary PHP files or other files via the helpid parameter to help.html.  Assigned (20051004)  None (candidate not yet proposed)    View
14340  CVE-2005-3134  Candidate  Citrix Metaframe Presentation Server 3.0 and 4.0 allows remote attackers to bypass policy restrictions by downloading the launch.ica file and changing the client device name (ClientName).  Assigned (20051004)  None (candidate not yet proposed)    View

Page 18861 of 20943, showing 5 records out of 104715 total, starting on record 94301, ending on 94305

Actions