Export limit exceeded: 29916 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (29916 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2005-4279 | 1 Gentoo | 1 Qt-unixodbc | 2026-04-16 | N/A |
| Untrusted search path vulnerability in Qt-UnixODBC before 3.3.4-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH. | ||||
| CVE-2005-4281 | 1 Zaygo | 1 Hostingcart | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in Zaygo HostingCart 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via certain search module parameters, possibly the root parameter to zaygo.cgi. | ||||
| CVE-2005-4283 | 1 Nightmedia | 1 The City Shop | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in The CITY Shop 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via parameters to the search module, possibly SKey to store.cgi. | ||||
| CVE-2005-4285 | 1 Dick Copits | 1 Pdestore | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in pdestore.cgi in Dick Copits PDEstore 1.8 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the search module parameter or the (2) product and (3) cart_id parameters. | ||||
| CVE-2005-4286 | 1 Phplogcon | 1 Phplogcon | 2026-04-16 | N/A |
| Unspecified vulnerability in PhpLogCon before 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving "'smart' values for userid and password," probably involving an SQL injection vulnerability in the (1) pass and (2) usr parameters in submit.php. | ||||
| CVE-2005-4287 | 1 Marmaraweb | 1 Marmaraweb E-commerce | 2026-04-16 | N/A |
| PHP remote file include vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the page parameter to index.php. | ||||
| CVE-2005-4288 | 1 Marmaraweb | 1 Marmaraweb E-commerce | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in index.php in MarmaraWeb E-commerce allows remote attackers to inject arbitrary web script or HTML via the page parameter to index.php. NOTE: this might be resultant from CVE-2005-4287. | ||||
| CVE-2005-4289 | 1 Edatcat | 1 Edatcat Shopping Cart System | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in EDCstore.pl in eDatCat 0.3 allows remote attackers to inject arbitrary web script or HTML via the user_action parameter. | ||||
| CVE-2005-4290 | 1 Soft4e | 1 Ecw-cart | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) kword, (2) max, (3) min, (4) comp, and (5) f parameters. | ||||
| CVE-2005-4292 | 1 Internet Express Products | 1 Commercesql | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in CommerceSQL 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keywords parameter in the Quick Find feature. | ||||
| CVE-2005-4293 | 1 Kryptronic | 1 Clickcartpro | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in cp-app.cgi in ClickCartPro (CCP) 5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the affl parameter. | ||||
| CVE-2005-4294 | 1 Alkacon | 1 Opencms | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the username in the login page. | ||||
| CVE-2005-4295 | 1 Xigla | 1 Absolute Image Gallery Xe | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.x allows remote attackers to inject arbitrary web script or HTML via the text parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. | ||||
| CVE-2005-4296 | 1 Appserv Open Project | 1 Appserv | 2026-04-16 | N/A |
| AppServ Open Project 2.5.3 allows remote attackers to cause a denial of service via a large HTTP request. | ||||
| CVE-2005-4297 | 1 Bbboard | 1 Bbboard | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in bbBoard 2.56 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly via the "keys" parameter. | ||||
| CVE-2005-4298 | 1 Atlantpro.com | 1 Atlantforum | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in atl.cgi in AtlantForum 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) sch_allsubct, (2) before, and (3) ct parameters. | ||||
| CVE-2005-4299 | 1 Atlantpro.com | 1 Atlant Pro | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in atl.cgi in Atlant Pro 4.02 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) before and (2) ct parameters. | ||||
| CVE-2005-4301 | 1 Phpxplorer | 1 Phpxplorer | 2026-04-16 | N/A |
| Cross-site scripting (XSS) vulnerability in phpXplorer 0.9.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the address bar field. | ||||
| CVE-2005-4302 | 1 Indexcor | 1 Ezdatabase | 2026-04-16 | N/A |
| Directory traversal vulnerability in index.php in ezDatabase 2.1.2 and earlier allows remote attackers to include arbitrary local files via ".." sequences in the p parameter. | ||||
| CVE-2005-4303 | 1 Indexcor | 1 Ezdatabase | 2026-04-16 | N/A |
| SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter. | ||||