CVE-2005-1006

Multiple cross-site scripting (XSS) vulnerabilities in SonicWALL SOHO 5.1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) the user login name, which is not filtered when the administrator views the log file.

• CWE-79

• http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.htmlBroken Link, Exploit
• http://secunia.com/advisories/14823Not Applicable
• http://securitytracker.com/id?1013638Broken Link, Third Party Advisory, VDB Entry
• http://www.oliverkarow.de/research/SonicWall.txtExploit, Third Party Advisory
• http://www.osvdb.org/15261Broken Link
• http://www.osvdb.org/15262Broken Link
• http://www.securityfocus.com/bid/12984Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19958Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19960Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2005-04/0041.htmlBroken Link, Exploit
• http://secunia.com/advisories/14823Not Applicable
• http://securitytracker.com/id?1013638Broken Link, Third Party Advisory, VDB Entry
• http://www.oliverkarow.de/research/SonicWall.txtExploit, Third Party Advisory
• http://www.osvdb.org/15261Broken Link
• http://www.osvdb.org/15262Broken Link
• http://www.securityfocus.com/bid/12984Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19958Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19960Third Party Advisory, VDB Entry

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-10004Cacti versions prior to 0.8.6-d contain a remote command exe…8.8
• CVE-2005-1001PHP-Nuke 7.6 allows remote attackers to obtain sensitive inf…
• CVE-2005-1002logwebftbs2000.exe in Logics Software File Transfer (LOG-FT)…
• CVE-2005-1003Directory traversal vulnerability in index.php for ProfitCod…
• CVE-2005-1004Cross-site scripting (XSS) vulnerability in usrdetails.php i…
• CVE-2005-1005ProfitCode PayProCart 3.0 allows remote attackers to bypass …
• CVE-2005-1007Unknown vulnerability in the LIST functionality in CommuniGa…
• CVE-2005-1008Cross-site scripting (XSS) vulnerability in posts.asp for AS…
• CVE-2005-1009Multiple buffer overflows in BakBone NetVault 6.x and 7.x al…
• CVE-2005-1010Cross-site scripting (XSS) vulnerability in Comersus Cart 6 …
• CVE-2005-1011SQL injection vulnerability in content.asp in SiteEnable all…
• CVE-2005-1012Cross-site scripting (XSS) vulnerability in Iatek SiteEnable…