Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2005-05-02 | CVE-2005-1170 | Unspecified vulnerability in Datenbank Module Datenbank Module SQL injection vulnerability in mod.php in the datenbank module for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter. | 7.5 |
| 2005-05-02 | CVE-2005-1169 | Authentication Bypass vulnerability in Mafia Blog 4Beta Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php. | 7.5 |
| 2005-05-02 | CVE-2005-1159 | Unspecified vulnerability in Mozilla Firefox and Mozilla The native implementations of InstallTrigger and other functions in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 do not properly verify the types of objects being accessed, which causes the Javascript interpreter to continue execution at the wrong memory address, which may allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code by passing objects of the wrong type. | 7.5 |
| 2005-05-02 | CVE-2005-1157 | Remote Script Code Execution vulnerability in Mozilla Suite And Firefox Search Plug-In Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to replace existing search plugins with malicious ones using sidebar.addSearchEngine and the same filename as the target engine, which may not be displayed in the GUI, which could then be used to execute malicious script, aka "Firesearching 2." | 7.5 |
| 2005-05-02 | CVE-2005-1156 | Remote Script Code Execution vulnerability in Mozilla Suite And Firefox Search Plug-In Firefox before 1.0.3, Mozilla Suite before 1.7.7, and Netscape 7.2 allows remote attackers to execute arbitrary script and code via a new search plugin using sidebar.addSearchEngine, aka "Firesearching 1." | 7.5 |
| 2005-05-02 | CVE-2005-1155 | Code Injection vulnerability in Mozilla Firefox and Mozilla The favicon functionality in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary code via a <LINK rel="icon"> tag with a javascript: URL in the href attribute, aka "Firelinking." | 7.5 |
| 2005-05-02 | CVE-2005-1154 | Cross-Site Scripting vulnerability in Mozilla Suite And Firefox Global Scope Pollution Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to execute arbitrary script in other domains via a setter function for a variable in the target domain, which is executed when the user visits that domain, aka "Cross-site scripting through global scope pollution." | 7.5 |
| 2005-05-02 | CVE-2005-1153 | Multiple vulnerability Fixed in SCO OpenServer Release 5.0.7 Maintenance Pack 4 Released - Firefox before 1.0.3 and Mozilla Suite before 1.7.7, when blocking a popup, allows remote attackers to execute arbitrary code via a javascript: URL that is executed when the user selects the "Show javascript" option. | 7.5 |
| 2005-05-02 | CVE-2005-1128 | SQL-Injection vulnerability in Virtual Hosting Control System Virtual Hosting Control System 2.2 Multiple SQL injection vulnerabilities in VHCS 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via certain inputs from HTTP POST queries. | 7.5 |
| 2005-05-02 | CVE-2005-1117 | Remote File Include vulnerability in All4Www All4Www-Homepagecreator 1.0A PHP remote file inclusion vulnerability in index.php in All4WWW-Homepagecreator 1.0a allows remote attackers to execute arbitrary PHP code by modifying the site parameter to reference a URL on a remote web server that contains the code. | 7.5 |