Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-16 | CVE-2005-1605 | HTML Injection vulnerability in Positive Software Corporation SiteStudio Cross-site scripting (XSS) vulnerability in the guestbook for SiteStudio 1.6 allows remote attackers to inject arbitrary web script or HTML via the name field to (1) psoft.guestbook.GuestBookServ in Standalone Site Studio or (2) E-Guest_sign.pl in Integrated Site Studio with H-Sphere. network positive-software | 6.8 |
| 2005-05-16 | CVE-2005-1604 | Unspecified vulnerability in Bugada Andrea PHP Advanced Transfer Manager 1.21 PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in "php.ns", which allows execution of arbitrary PHP code. | 7.5 |
| 2005-05-16 | CVE-2005-1603 | Remote File Manager Denial of Service vulnerability in Niteenterprises Remote File Manager 1.0 NiteEnterprises Remote File Manager 1.0 allows remote attackers to cause a denial of service (crash) via a crafted string to TCP port 7080. | 5.0 |
| 2005-05-16 | CVE-2005-1602 | SQL Injection Authentication Bypass vulnerability in Net56 File Manager 1.0 SQL injection vulnerability in login.asp for Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field. | 7.5 |
| 2005-05-16 | CVE-2005-1601 | Unspecified vulnerability in MRO Software Maximo Self Service 4.0/5.0 MRO Maximo Self Service 4 and 5 stores certain information under the web document root using file extensions that are not processed by Tomcat, which allows remote attackers to obtain sensitive information via a direct request for the file, such as MXServer.properties. | 5.0 |
| 2005-05-16 | CVE-2005-1600 | Unspecified vulnerability in Libtomcrypt 1.0/1.0.1/1.0.2 A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key. | 7.5 |
| 2005-05-16 | CVE-2005-1599 | HTML Injection vulnerability in Kryloff Technologies Subject Search Server 1.1 Cross-site scripting (XSS) vulnerability in Kryloff Technologies Subject Search Server (SSServer) 1.1 allows remote attackers to inject arbitrary web script or HTML via the "Search For" field. network kryloff-technologies | 4.3 |
| 2005-05-16 | CVE-2005-1598 | SQL Injection vulnerability in Invision Power Board Login.PHP SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable. | 7.5 |
| 2005-05-16 | CVE-2005-1597 | Cross-Site Scripting vulnerability in Invision Power Board Topics.PHP Highlite Parameter Cross-site scripting (XSS) vulnerability in (1) search.php and (2) topics.php for Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlite parameter. network invision-power-services | 4.3 |
| 2005-05-16 | CVE-2005-1595 | Input Validation vulnerability in Codethat Shoppingcart 1.3.1 CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request. | 5.0 |