CVE Vulnerability Catalog

PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in 'php.ns', which allows execution of arbitrary PHP code.

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

A buffer overflow vulnerability in Apple iTunes before version 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Vulnerability in phpBB before version 2.0.15 allows remote attackers to execute arbitrary script by injecting malicious code into BBcode tags. The bbencode_second_pass and make_clickable functions in bbcode.php do not properly filter URI schemes such as javascript:, applet:, about:, activex:, chrome:, or script:.

SQL injection vulnerability in catalog.php of CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the 'Acquire licenses automatically for protected content' setting is not enabled.

SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.

GeoVision Digital Video Surveillance System versions 6.04, 6.1 and 7.0 use a weak encryption scheme to protect passwords. This allows a remote attacker to obtain the password via network sniffing.

The Acrowave AAP-3100AR wireless router allows remote attackers to bypass authentication by pressing CTRL-C at the username or password prompt in a telnet session, which causes the shell to crash and restart, then leave the user in the new shell.

APG Technology ClassMaster does not properly restrict access to sensitive folders, which allows remote attackers to access folders via a network share.

A stack-based buffer overflow in libTIFF before version 3.7.2 allows remote attackers to execute arbitrary code via a TIFF file with a malformed BitsPerSample tag.

The vulnerability in easymsgb.pl in Easy Message Board allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the 'print' parameter.

SQL injection vulnerability in view_user.php in WowBB 1.6, 1.61, and 1.62 allows remote attackers to execute arbitrary SQL commands via the sort_by parameter.

A heap-based buffer overflow in the demo version of Bakbone Netvault, and possibly other versions, allows remote attackers to execute arbitrary commands via a large packet to port 20031.

A vulnerability in Bugzilla versions 2.10 through 2.18, 2.19.1, and 2.19.2 allows remote authenticated users to enter bugs into products that are closed for bug entry by modifying the URL to specify the product name.

Vulnerability in Firefox before 1.0.4 and Mozilla Suite before 1.7.8 due to improper privilege limitation of JavaScript eval and Script objects in the calling context, allowing remote attackers to perform unauthorized activities via non-DOM property overrides, a variant of CVE-2005-1160.

Vulnerability in Firefox before version 1.0.4 and Mozilla Suite before version 1.7.8 allows an attacker to execute script via specially crafted URLs with 'javascript:' prefix. The flaw results from improper implementation of security checks for script injection, allowing bypass of protection mechanisms.

SQL injection vulnerability in topic.php in DirectTopics 2.1 and 2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter.

Unknown vulnerability in the nfs_mount call in Mac OS X 10.3.9 and earlier allows local users to gain privileges via crafted arguments.