Vulnerabilities
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-02 | CVE-2005-0270 | Cross-Site Scripting vulnerability in Photopost Reviewpost PHP PRO 1.0.2/2.5/2.5.1 Multiple cross-site scripting (XSS) vulnerabilities in ReviewPost PHP Pro before 2.84 allow remote attackers to inject arbitrary web script or HTML via the (1) si parameter to showcat.php, (2) cat or (3) page parameter to showproduct.php, or (4) report parameter to reportproduct.php. network photopost | 4.3 |
| 2005-05-02 | CVE-2005-0269 | Improper Handling of Case Sensitivity vulnerability in SIR Gnuboard 3.40 The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters. | 9.8 |
| 2005-05-02 | CVE-2005-0267 | Unspecified vulnerability in Flatnuke 2.5.1 index.php in FlatNuke 2.5.1 allows remote attackers to create an administrator account via carriage returns and #10 in the url_avatar field, which is interpreted as a sensitive directive. | 7.5 |
| 2005-05-02 | CVE-2005-0265 | Cross-Site Scripting and SQL Injection vulnerability in OWL Intranet Engine 0.7/0.8 Multiple SQL injection vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to execute arbitrary SQL commands via the (1) parent or (2) sortposted parameter. | 7.5 |
| 2005-05-02 | CVE-2005-0264 | Cross-Site Scripting and SQL Injection vulnerability in Owl Intranet Engine Multiple cross-site scripting (XSS) vulnerabilities in browse.php in OWL 0.7 and 0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) expand or (2) order parameter. network owl | 4.3 |
| 2005-05-02 | CVE-2005-0263 | Local Buffer Overflow vulnerability in IBM AIX 5.1/5.2/5.3 Buffer overflow in netpmon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -O argument. | 7.2 |
| 2005-05-02 | CVE-2005-0262 | Local Buffer Overflow vulnerability in IBM AIX 5.1/5.2/5.3 Buffer overflow in ipl_varyon on AIX 5.1, 5.2, and 5.3 allows local users to execute arbitrary code via a long -d argument. | 7.2 |
| 2005-05-02 | CVE-2005-0260 | Unspecified vulnerability in Broadcom Brightstor Arcserve Backup 11.1 Stack-based buffer overflow in the Discovery Service for BrightStor ARCserve Backup 11.1 and earlier allows remote attackers to execute arbitrary code via a long packet to UDP port 41524, which is not properly handled in a recvfrom call. | 10.0 |
| 2005-05-02 | CVE-2005-0256 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Washington University Wu-Ftpd 2.6.1/2.6.2 The wu_fnmatch function in wu_fnmatch.c in wu-ftpd 2.6.1 and 2.6.2 allows remote attackers to cause a denial of service (CPU exhaustion by recursion) via a glob pattern with a large number of * (wildcard) characters, as demonstrated using the dir command. | 5.0 |
| 2005-05-02 | CVE-2005-0255 | Remote vulnerability in Mozilla Firefox, Mozilla and Thunderbird String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstring_CharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execute arbitrary code by forcing an out-of-memory state that causes a reallocation to fail and return a pointer to a fixed address, which leads to heap corruption. | 5.0 |