Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-16 | CVE-2005-1615 | SQL Injection vulnerability in Ultimate PHP Board ViewForum.PHP viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 may allow remote attackers to read sensitive data via the postorder parameter, which is not properly handled by textdb.inc.php, possibly due to a SQL injection vulnerability. | 7.5 |
| 2005-05-16 | CVE-2005-1614 | Cross-Site Scripting vulnerability in Ultimate PHP Board Cross-site scripting (XSS) vulnerability in viewforum.php in Ultimate PHP Board (UPB) 1.8 through 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the postorder parameter. network ultimate-php-board | 6.8 |
| 2005-05-16 | CVE-2005-1613 | Cross-Site Scripting vulnerability in Openbb 1.0.8 Cross-site scripting (XSS) vulnerability in member.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to inject arbitrary web script or HTML via the reverse parameter in a list action. network openbb | 6.8 |
| 2005-05-16 | CVE-2005-1612 | SQL Injection vulnerability in Openbb 1.0.8 SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter. | 7.5 |
| 2005-05-16 | CVE-2005-1611 | Cross-Site Scripting vulnerability in web Crossing INC web Crossing 5.X Cross-site scripting (XSS) vulnerability in WebX in Web Crossing 5.x allows remote attackers to inject arbitrary web script or HTML via a URL with an "@" followed by the desired script. network web-crossing-inc | 6.8 |
| 2005-05-16 | CVE-2005-1610 | Cross-Site Scripting vulnerability in NukeET Base64 Codigo Variable Cross-site scripting (XSS) vulnerability in security.php for Tru-Zone NukeET 3.0 and 3.1 allows remote attackers to inject arbitrary web script or HTML via a base64 encoded Codigo parameter. network tru-zone | 6.8 |
| 2005-05-16 | CVE-2005-1609 | Unspecified vulnerability in SUN Storedge 6130 Arrays Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data. | 7.5 |
| 2005-05-16 | CVE-2005-1608 | Multiple Unspecified vulnerability in AutoTheme PostNuke Module Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact. | 5.0 |
| 2005-05-16 | CVE-2005-1607 | Unspecified vulnerability in Remote Cart Remote Cart Cross-site scripting (XSS) vulnerability in shop.cgi in Remote Cart allows remote attackers to inject arbitrary web script or HTML via the (1) merchant or (2) demo parameters. network remote-cart | 6.8 |
| 2005-05-16 | CVE-2005-1606 | Unspecified vulnerability in Positive Software H-Sphere Winbox 2.4.2Patch4/2.4.3Rc1 H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain privileges. | 4.6 |