CVE List
Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
---|---|---|---|---|---|---|---|
13772 | CVE-2005-2566 | Candidate | Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the (1) FID parameter to board.php or (2) UID parameter to member.php. | Assigned (20050816) | None (candidate not yet proposed) | View | |
13773 | CVE-2005-2567 | Candidate | PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via the language parameter. | Assigned (20050816) | None (candidate not yet proposed) | View | |
13774 | CVE-2005-2568 | Candidate | Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via a string containing the code within "{" and "}" (curly bracket) characters, which are processed by the PHP eval function. | Assigned (20050816) | None (candidate not yet proposed) | View | |
13775 | CVE-2005-2569 | Candidate | Multiple cross-site scripting (XSS) vulnerabilities in FunkBoard 0.66CF, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the fbusername or fbpassword parameter to (1) editpost.php, (2) prefs.php, (3) newtopic.php, (4) reply.php, or (5) profile.php, the (6) fbusername, (7) fmail, (8) www, (9) icq, (10) yim, (11) location, (12) sex, (13) interebbies, (14) sig or (15) aim parameter to register.php, or (16) subject parameter to newtopic.php. | Assigned (20050816) | None (candidate not yet proposed) | View | |
13776 | CVE-2005-2570 | Candidate | FunkBoard 0.66CF, and possibly earlier versions, allows remote attackers to obtain sensitive information via a direct request to forums.php, which reveals the path in an error message. | Assigned (20050816) | None (candidate not yet proposed) | View |
Page 19008 of 20943, showing 5 records out of 104715 total, starting on record 95036, ending on 95040