CVE-2005-0463

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Unknown "major security flaws" in Ulog-php before 1.0, related to input validation, have unknown impact and attack vectors, probably related to SQL injection vulnerabilities in (1) host.php, (2) port.php, and (3) index.php.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/14321Patch, Vendor Advisory
http://securitytracker.com/id?1013220Patch, Vendor Advisory
http://www.inl.fr/article.php3?id_article=7Patch, Vendor Advisory
http://www.osvdb.org/13853Vendor Advisory
http://www.securityfocus.com/bid/12610Patch
http://secunia.com/advisories/14321Patch, Vendor Advisory
http://securitytracker.com/id?1013220Patch, Vendor Advisory
http://www.inl.fr/article.php3?id_article=7Patch, Vendor Advisory
http://www.osvdb.org/13853Vendor Advisory
http://www.securityfocus.com/bid/12610Patch

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-04642.1gr_osview in SGI IRIX 6.5.22, and possibly other 6.5 versions, does not drop privileges when opening description files while in debug mode, CVE-2005-04652.1gr_osview in SGI IRIX does not drop privileges before opening files, which allows local users to overwrite arbitrary files via the -s option CVE-2005-04677.5Multiple integer overflows in the (1) sftp_pkt_getstring and (2) fxp_readdir_recv functions in the PSFTP and PSCP clients for PuTTY 0.56, an CVE-2005-04687.5Heap-based buffer overflow in the env_opt_add function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute a CVE-2005-04697.5Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attacker CVE-2005-04705.0Buffer overflow in wpa_supplicant before 0.2.7 allows remote attackers to cause a denial of service (segmentation fault) via invalid EAPOL-K CVE-2005-04715.0Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style sho CVE-2005-04725.0Gaim before 1.1.3 allows remote attackers to cause a denial of service (infinite loop) via malformed SNAC packets from (1) AIM or (2) ICQ.CVE-2005-04735.0The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service (application crash) via malformed HTML t CVE-2005-04746.4SQL injection vulnerability in the user_valid_crypt function in user.php in WebCalendar 0.9.45 allows remote attackers to execute arbitrary CVE-2005-04756.4SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) o CVE-2005-04764.3Cross-site scripting (XSS) vulnerability in hpm_guestbook.cgi allows remote attackers to inject arbitrary web script or HTML by posting a me