Search Results (29855 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2005-1296 1 Include.cgi 1 Include.cgi 2025-04-03 N/A
include.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
CVE-2005-1297 1 Include.cgi 1 Include.cgi 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in the include.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
CVE-2005-1298 1 Inserter.cgi 1 Inserter.cgi 2025-04-03 N/A
The inserter.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2005-1299 1 Inserter.cgi 1 Inserter.cgi 2025-04-03 N/A
The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
CVE-2005-1300 1 Inserter.cgi 1 Inserter.cgi 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in the inserter.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
CVE-2005-1301 1 Nprotect 1 Netizen 2025-04-03 N/A
nProtect:Netizen 2005.3.17.1 does not properly verify that the update module is downloaded from an authorized site, which allows remote malicious web sites to write arbitrary files.
CVE-2005-1308 1 Inter7 1 Sqwebmail 2025-04-03 N/A
SqWebMail allows remote attackers to inject arbitrary web script or HTML via CRLF sequences in the redirect parameter followed by the desired script or HTML.
CVE-2005-1303 1 Citat.pl 1 Citat.pl 2025-04-03 N/A
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2005-1304 1 Citat.pl 1 Citat.pl 2025-04-03 N/A
The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.
CVE-2005-1305 1 Hyper.cgi 1 Hyper.cgi 2025-04-03 N/A
The hyper.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2005-1307 2 Adobe, Apple 2 Version Cue, Mac Os X 2025-04-03 N/A
The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X uses the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.
CVE-2005-1309 1 Eaden Mckee 1 Bblog 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the (1) entry title field or (2) comment body text.
CVE-2005-1310 1 Eaden Mckee 1 Bblog 2025-04-03 N/A
SQL injection vulnerability in bBlog 0.7.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
CVE-2005-1312 1 Yappa-ng 1 Yappa-ng 2025-04-03 N/A
PHP remote file inclusion vulnerability in Yappa-NG before 2.3.2 allows remote attackers to execute arbitrary PHP code via unknown vectors.
CVE-2005-1313 1 Horde 1 Passwd 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Passwd module before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVE-2005-1314 1 Horde 1 Kronolith 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Kronolith module before 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVE-2005-1315 1 Horde 1 Turba 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Turba module before 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVE-2005-1316 1 Horde 1 Accounts 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Accounts module before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVE-2005-1317 1 Horde 1 Chora 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Chora module before 1.2.3 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.
CVE-2005-1318 1 Horde 1 Forwards 2025-04-03 N/A
Cross-site scripting (XSS) vulnerability in Horde Forwards E-Mail Forwarding Manager before 2.2.2 allows remote attackers to inject arbitrary web script or HTML via the parent's frame page title.