CVE Vulnerability Catalog

Vulnerability in Hired Team: Trial 2.0 and earlier and version 2.200 allows game players to kick other players off the server, including the administrator, without any restrictions.

SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via the sif parameter in the Comments module or the timezoneoffset parameter in the Your_Account module.

Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.

SQL injection vulnerability in index.cfm of CFWebstore 5.0 allows remote attackers to execute arbitrary SQL commands via category_id, product_id, or feature_id parameters.

WHM AutoPilot 2.4.6.5 and earlier contain multiple PHP remote file inclusion vulnerabilities in step_one.php, step_one_tables.php, and step_two_tables.php. These flaws allow an attacker to execute arbitrary PHP code by modifying the server_inc parameter to reference a URL on a remote server containing malicious code.

Unknown vulnerability in F-Secure Anti-Virus (FSAV) 4.52 for Linux before Hotfix 3 allows the Sober.D worm to bypass FASV.

SQL injection vulnerability in PD9 Software MegaBBS 2 and 2.1 allows remote attackers to execute arbitrary SQL commands via the sortdir or criteria parameter to ladder-log.asp or the memberid or teamid parameter to view-profile.asp.

SQL injection vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the eid or cid parameters.

SQL injection vulnerability in the ibProArcade module for Invision Power Board (IPB) versions 1.x and 2.x. Remote attackers can execute arbitrary SQL commands via the 'cat' parameter in index.php.

The vulnerability in init.php of WebCalendar allows remote attackers to execute arbitrary local PHP scripts via the user_inc parameter.

SQL injection vulnerability in ikonboard.cgi in Ikonboard 3.1.0 through 3.1.3 allows remote attackers to inject arbitrary SQL commands via the st or keywords parameter.

SQL injection vulnerability in post.php in Invision Power Board (IPB) versions 2.0.0 through 2.0.2 allows remote attackers to execute arbitrary SQL commands via the qpid parameter.

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary SQL commands via the FID parameter in board.php, sortorder/perpage/id parameters in member.php, forums parameter in search.php, and PID/FID parameters in post.php.

PHP remote file inclusion vulnerability in admin_cash.php for the Cash Mod module for phpBB allows remote attackers to execute arbitrary PHP code by modifying the phpbb_root_path parameter to reference a URL on a remote web server that contains the code.

A buffer overflow vulnerability in blaxxun 3D 7.0 allows remote attackers to execute arbitrary code via a long URL property inside an object tag.

A buffer overflow vulnerability in ascontrol.dll in Panda ActiveScan 5.0 allows remote attackers to execute arbitrary code via the Internacional property followed by a long string.

Buffer overflow vulnerability in the KSDWRTB function of the dbms_system package in Oracle Database 9i and 8i. A remote authorized user can exploit a long second argument to execute arbitrary code on the database server.

SQL injection vulnerability in NukeCalendar 1.1.a used in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in modules.php.

Heap-based buffer overflow in in_mod.dll in Nullsoft Winamp 2.91 through 5.02 allows remote attackers to execute arbitrary code via a Fasttracker 2 (.xm) mod media file.

SQL injection vulnerability in aspWebAlbum allows remote attackers to execute arbitrary SQL statements via the username field on the login page or the cat parameter in album.asp.