CVE-2005-0735

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

newsscript.pl for NewsScript allows remote attackers to gain privileges by setting the mode parameter to admin.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
May 2, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-07362.1Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large nCVE-2005-07377.5Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.CVE-2005-07385.0Stack consumption vulnerability in Microsoft Exchange Server 2003 SP1 allows users to cause a denial of service (hang) by deleting or movingCVE-2005-07395.0The IAPP dissector (packet-iapp.c) for Ethereal 0.9.1 to 0.10.9 does not properly use certain routines for formatting strings, which could lCVE-2005-07405.0The TCP stack (tcp_input.c) in OpenBSD 3.5 and 3.6 allows remote attackers to cause a denial of service (system panic) via crafted values inCVE-2005-07414.3Cross-site scripting (XSS) vulnerability in YaBB.pl for YaBB 2.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the CVE-2005-07424.3Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HCVE-2005-07437.5The custom avatar uploading feature (uploader.php) for XOOPS 2.0.9.2 and earlier allows remote attackers to upload arbitrary PHP scripts, whCVE-2005-074410.0The web GUI for Novell iChain 2.2 and 2.3 SP2 and SP3 allows attackers to hijack sessions and gain administrator privileges by (1) sniffing CVE-2005-07454.6UTStarcom iAN-02EX VoIP Analog Terminal Adaptor (ATA) allows local users to bypass ATA access restrictions by dialing "*#26845#" and causingCVE-2005-07465.0The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the servCVE-2005-07475.0ApplyYourself i-Class allows remote attackers to obtain sensitive information about their own applications by reusing the hidden ID field, a
CVE-2005-0735: Critical severity, CVSS 10.0 | Vulnix