Vulnerabilities > Medium

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-1359 Cross-Site Scripting vulnerability in Text.Cgi
Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
network
text-cgi
4.3
2005-05-02 CVE-2005-1357 Remote Security vulnerability in Text.Cgi
text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
network
low complexity
text-cgi
5.0
2005-05-02 CVE-2005-1356 Cross-Site Scripting vulnerability in Includer.Cgi
Cross-site scripting (XSS) vulnerability in includer.cgi script in The Includer allows remote attackers to inject arbitrary web script or HTML via the argument.
network
includer-cgi
4.3
2005-05-02 CVE-2005-1355 Remote Security vulnerability in Includer.Cgi 1.1
includer.cgi in The Includer allows remote attackers to read arbitrary files via a full pathname in the argument, a similar vulnerability to CVE-2005-0801.
network
low complexity
includer-cgi
5.0
2005-05-02 CVE-2005-1353 Remote Security vulnerability in Forum.Pl
The forum.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
network
low complexity
forum-pl
5.0
2005-05-02 CVE-2005-1352 Cross-Site Scripting vulnerability in ad.cgi
Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
network
leif-m-wright
4.3
2005-05-02 CVE-2005-1350 Remote Security vulnerability in ad.cgi
The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
network
low complexity
leif-m-wright
5.0
2005-05-02 CVE-2005-1327 Cross-Site Scripting vulnerability in WoltLab Burning Board
Cross-site scripting (XSS) vulnerability in pms.php for Woltlab Burning Board 2.3.1 PL2 and earlier allows remote attackers to inject arbitrary web script or HTML via the folderid parameter.
network
woltlab
4.3
2005-05-02 CVE-2005-1326 Denial-Of-Service vulnerability in Voodoo Circle
Buffer overflow in VooDoo cIRCle BOTNET before 1.0.33 allows remote authenticated attackers to cause a denial of service (client crash) via a crafted packet.
network
low complexity
voodoo-circle
5.0
2005-05-02 CVE-2005-1325 Unspecified vulnerability in Matthieu Aubry PHPmyvisites 1.3
set_lang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter.
network
low complexity
matthieu-aubry
5.0