[CLOSE] OSVDB ID : 16944 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'cat' and 'printable' variables in the home.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16945 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'productid' and 'mode' variables in the product.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16946 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'id' variable in the error_message.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16947 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'section' variable in the help.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16948 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'mode' variable in the orders.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16949 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'mode' variable in the register.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16950 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'mode' variable in the search.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16951 - Disclosed: 2005-05-30

Description:

X-Cart Gold contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the 'gcid' and 'gcindex' variables in the giftcert.php script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 16976 - Disclosed: 2005-05-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 16934 - Disclosed: 2005-05-30

Description:

MyBulletinBoard (MyBB) contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'website' field upon submission to the User Profile script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16935 - Disclosed: 2005-05-30

Description:

(Description Provided by CVE) : The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service (infinite loop leading to memory and CPU consumption) via a long header field.

[CLOSE] OSVDB ID : 16952 - Disclosed: 2005-05-30

Description:

PowerDownload contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to downloads.php not properly sanitizing user input supplied to the incdir variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

[CLOSE] OSVDB ID : 91635 - Disclosed: 2005-05-30

Description:

Libxslt contains a flaw in libxslt/extensions.c related to handling of xmlHashTable structures that is triggered when a stylesheet is concurrently loaded by multiple threads. This allows an attacker to crash an application linked against the library or potentially execute arbitrary code.

[CLOSE] OSVDB ID : 17128 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : Directory traversal vulnerability in ServersCheck Monitoring Software 5.9.0 to 5.10.0 allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.

[CLOSE] OSVDB ID : 17127 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : SQL injection vulnerability in SignIn.asp in India Software Solution shopping cart allows remote attackers to execute arbitrary SQL commands via the password.

[CLOSE] OSVDB ID : 17223 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : xmysqladmin 1.0 and earlier allows local users to delete arbitrary files via a symlink attack on a database backup file in /tmp.

[CLOSE] OSVDB ID : 16909 - Disclosed: 2005-05-29

Description:

JAWS Glossary Gadget contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate the 'term' parameter upon submission to the 'index.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 16917 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

[CLOSE] OSVDB ID : 16960 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.

[CLOSE] OSVDB ID : 16907 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) via an invalid Debug Message pointer.

[CLOSE] OSVDB ID : 16970 - Disclosed: 2005-05-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 21278 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : Linux kernel before 2.6.12 allows remote attackers to poison the bridge forwarding table using frames that have already been dropped by filtering, which can cause the bridge to forward spoofed packets.

[CLOSE] OSVDB ID : 58830 - Disclosed: 2005-05-29

Description:

The Includer contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'index.php' script not properly sanitizing user input supplied to the 'page' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 63455 - Disclosed: 2005-05-29

Description:

(Description Provided by CVE) : The match_component function in smtp-tls.c in libESMTP 1.0.3.r1, and possibly other versions including 1.0.4, treats two strings as equal if one is a substring of the other, which allows remote attackers to spoof trusted certificates via a crafted subjectAltName.

[CLOSE] OSVDB ID : 16912 - Disclosed: 2005-05-28

Description:

os4e contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the "Password" variable in the "login.asp" script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.

[CLOSE] OSVDB ID : 20495 - Disclosed: 2005-05-28

Description:

(Description Provided by CVE) : Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters.

[CLOSE] OSVDB ID : 16991 - Disclosed: 2005-05-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 16910 - Disclosed: 2005-05-28

Description:

A remote overflow exists in PicoWebServer. The application fails to perform proper bounds checking resulting in a buffer overflow. With an overly long HTTP GET request, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 16911 - Disclosed: 2005-05-28

Description:

(Description Provided by CVE) : Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.

[CLOSE] OSVDB ID : 16916 - Disclosed: 2005-05-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 17131 - Disclosed: 2005-05-28

Description:

Microsoft Windows Remote Desktop Protocol contains a flaw that may lead to an unauthorized information disclosure. The issue is due to a private key used to sign the Terminal Server public key being hardcoded in a program library (mstlsapi.dll). This may allow an attacker to disclose the key and calculate a valid signature to carry out a man in the middle (MITM) attack.

[CLOSE] OSVDB ID : 17968 - Disclosed: 2005-05-28

Description:

A code execution flaw exists in multiple Mozilla-based web browsers. The InstallVersion.compare() method fails to validate input. With a specially crafted website, a context-dependent attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 16906 - Disclosed: 2005-05-28

Description:

(Description Provided by CVE) : Format string vulnerability in PeerCast 0.1211 and earlier allows remote attackers to execute arbitrary code via format strings in the URL.

[CLOSE] OSVDB ID : 16919 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'language' variables upon submission to the 'admin.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16920 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'language' variable upon submission to the 'powerpack_f.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16921 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'sitename' variable upon submission to the 'sdv_infos.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16922 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'lettre' variable upon submission to the 'modules.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16923 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'title' variable upon submission to the 'reviews.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16924 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'image_subject' variable upon submission to the reply.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 16925 - Disclosed: 2005-05-28

Description:

NPDS contains a flaw that may allow an attacker to inject arbitrary SQL queries. The issue is due to the "terme" variable in the "modules.php" script not being properly sanitized and may allow an attacker to inject or manipulate SQL queries.