Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2005
December

CVEs published in December 2005

1,010 vulnerabilities, 37 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

No product listedMultiple SQL injection vulnerabilities in Web4Future eCommerce Enterprise Edition 2.1 and earlier...CVE-2005-4035Public exploit7.5 HighDecember 6, 2005
web4future edating professionalMultiple SQL injection vulnerabilities in Web4Future eDating Professional 5 allow remote...CVE-2005-4034Public exploit7.5 HighDecember 6, 2005
ali bousahid nodezillaNodezilla 0.4.13-corno-fulgure does not properly protect the evl_data directory, which could...CVE-2005-40335.0 MediumDecember 6, 2005
No product listedCross-site scripting (XSS) vulnerability in search.cgi in Easy Search System 1.1 and earlier...CVE-2005-4032Public exploit4.3 MediumDecember 6, 2005
mediawikiEval injection vulnerability in MediaWiki 1.5.x before 1.5.3 allows remote attackers to execute...CVE-2005-40317.5 HighDecember 6, 2005
quicksilver forums forumsSQL injection vulnerability in Quicksilver Forums before 1.5.1 allows remote attackers to execute...CVE-2005-40305.1 MediumDecember 6, 2005
esi products webeocWebEOC before 6.0.2 allows remote attackers to obtain valid usernames via the HTML source of the...CVE-2005-40295.0 MediumDecember 5, 2005
amemberMultiple cross-site scripting (XSS) vulnerabilities in aMember allow remote attackers to inject...CVE-2005-40284.3 MediumDecember 5, 2005
simplemedia simplebbsSQL injection vulnerability in SimpleBBS 1.1 allows remote attackers to execute arbitrary SQL...CVE-2005-40277.5 HighDecember 5, 2005
geeklogsearch.php in Geeklog 1.4.x before 1.4.0rc1, and 1.3.x before 1.3.11sr3, allows remote attackers...CVE-2005-40265.0 MediumDecember 5, 2005
No product listedHelp Desk Reloaded Free Help Desk does not remove or protect install.php once installation is...CVE-2005-40257.5 HighDecember 5, 2005
interspire fastfindCross-site scripting (XSS) vulnerability in Interspire FastFind 2004 and 2005 allows remote...CVE-2005-40244.3 MediumDecember 5, 2005
gallery project galleryUnspecified vulnerability in the zipcart module in Gallery 2.0 before 2.0.2 allows remote...CVE-2005-40235.0 MediumDecember 5, 2005
No product listedCross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0...CVE-2005-40224.3 MediumDecember 5, 2005
gallery project galleryThe installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root...CVE-2005-40215.0 MediumDecember 5, 2005
widget press imprintSQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote...CVE-2005-40207.5 HighDecember 5, 2005
No product listedSQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows...CVE-2005-4019Public exploit7.5 HighDecember 5, 2005
landshop real estate commerce systemSQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier...CVE-2005-4018Public exploit7.5 HighDecember 5, 2005
No product listedproperty.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via...CVE-2005-40175.0 MediumDecember 5, 2005
widget press propertySQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute...CVE-2005-4016Public exploit7.5 HighDecember 5, 2005
php web statistikPHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field,...CVE-2005-40155.0 MediumDecember 5, 2005
php web statistikstat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU...CVE-2005-40147.8 HighDecember 5, 2005
php web statistikPHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access...CVE-2005-40135.0 MediumDecember 5, 2005
php web statistikMultiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote...CVE-2005-40124.3 MediumDecember 5, 2005
codewalkers ltwcalendarSQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4...CVE-2005-4011Public exploit7.5 HighDecember 5, 2005
sensation designs kbase expressSQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute...CVE-2005-40107.5 HighDecember 5, 2005
php lite calendar expressMultiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote...CVE-2005-40097.5 HighDecember 5, 2005
jax calendar calendarSQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to...CVE-2005-40087.5 HighDecember 5, 2005
redgraphic sapid cmsMultiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered...CVE-2005-400710.0 HighDecember 5, 2005
redgraphic sapid cmsSAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to...CVE-2005-40067.5 HighDecember 5, 2005
php fusion fusionSQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to...CVE-2005-4005Public exploit7.5 HighDecember 5, 2005
trackballs Debiantrackballs - symlink attackDTSA-26-1Fix availableNo scoreDecember 5, 2005
infinetsoftware mytemplatesiteCross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows...CVE-2005-40044.3 MediumDecember 5, 2005
asps shopping cartMultiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping...CVE-2005-4003Public exploit7.5 HighDecember 5, 2005
esi products webeocWebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with...CVE-2005-40024.0 MediumDecember 5, 2005
phpyellow phpyellowtm pro, phpyellowtm lite +1 moreMultiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow...CVE-2005-4001Public exploit7.5 HighDecember 5, 2005
No product listedCross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and...CVE-2005-4000Public exploit4.3 MediumDecember 5, 2005
sitebeater mp3 catalogCross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier...CVE-2005-39994.3 MediumDecember 5, 2005
solupress newsCross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows...CVE-2005-3998Public exploit4.3 MediumDecember 5, 2005
zen cart cartZen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain...CVE-2005-39972.6 LowDecember 5, 2005
zen-cart zen cartSQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows...CVE-2005-3996Public exploit5.1 MediumDecember 5, 2005
sobexsrvFormat string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv...CVE-2005-3995Public exploit5.1 MediumDecember 5, 2005
mailenable enterprise, professional +1 moreMultiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1...CVE-2005-39937.8 HighDecember 5, 2005
wineggdropshellMultiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote...CVE-2005-3992Public exploit7.5 HighDecember 4, 2005
phpheaven phpmychatMultiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to...CVE-2005-3991Public exploit4.3 MediumDecember 4, 2005
avaya tn2602ap ip media resource 320 circuit packMemory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows...CVE-2005-39897.8 HighDecember 4, 2005
pineapple technologies loreSQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote...CVE-2005-3988Public exploit7.5 HighDecember 4, 2005
tradesoft cmsMultiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute...CVE-2005-39877.5 HighDecember 4, 2005
verosky media instant photo galleryMultiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote...CVE-2005-3986Public exploit7.5 HighDecember 4, 2005
astaro security linuxThe Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102...CVE-2005-39857.8 HighDecember 4, 2005
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open