CVE List

Id CVE No. Status Description Phase Votes Comments Actions
13024  CVE-2005-1818  Candidate  Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.  Assigned (20050601)  None (candidate not yet proposed)    View
13025  CVE-2005-1819  Candidate  Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.  Assigned (20050601)  None (candidate not yet proposed)    View
13026  CVE-2005-1820  Candidate  zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.  Assigned (20050601)  None (candidate not yet proposed)    View
13027  CVE-2005-1821  Candidate  PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.  Assigned (20050601)  None (candidate not yet proposed)    View
13028  CVE-2005-1822  Candidate  Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.  Assigned (20050601)  None (candidate not yet proposed)    View

Page 19317 of 20943, showing 5 records out of 104715 total, starting on record 96581, ending on 96585

Actions