CVE Vulnerability Catalog

Leif M. Wright's Blog 3.5 fails to verify the password when authenticating an administrator via a cookie, allowing remote attackers to bypass login by setting the 'blogAdmin' cookie. This grants unauthorized access to the admin panel.

SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries via the tabls parameter, potentially causing a denial of service (inaccessible database).

The Uniden UIP1868P VoIP Telephone and Router has a default password of 'admin' for the web-based configuration utility. A remote attacker can exploit this to obtain sensitive information such as dialed phone numbers and potentially connect to other hosts.

Multiple SQL injection vulnerabilities exist in admin.asp of WPC.easy via the uid and pwd parameters. Remote attackers can execute arbitrary SQL commands.

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in JavaScript or VBScript, which consumes the stack, as demonstrated by resetting the 'location' variable within the loop.

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via absolute paths in unspecified parameters and the language cookie, as demonstrated using error.log.

Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 contain SQL injection vulnerabilities in the userid variable (users.php) and sessid variable (lib-sessions.php). Remote attackers can execute arbitrary SQL commands.

Multiple unspecified vulnerabilities in ESS/Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and WorkCentre running software versions 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain unauthorized network access via unknown attack vectors.

PHP remote file inclusion vulnerability in index.php of Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the 'sayfaadi' or 'sayfa' parameter.

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter.

Multiple SQL injection vulnerabilities were found in Skate Board 0.9. Remote attackers can execute arbitrary SQL commands via the usern parameter in sendpass.php, the usern and passwd parameters in login.php and logged.php, and the sf_cookie cookie.

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent header. This allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.

In TIN 1.8.0 and earlier, an off-by-one error might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow.

A PHP remote file inclusion vulnerability in index.php of DreamCost HostAdmin allows attackers to include arbitrary files via the uninitialized $path variable. This can lead to remote code execution.

A vulnerability in the Nokia N70 cell phone allows a remote attacker to cause a denial of service (reboot or shutdown) via a malformed Bluetooth L2CAP packet where the length field is less than the actual packet length, potentially triggering a buffer overflow.

Certain Kyocera printers have a default "admin" account with a blank password, allowing remote attackers to access the administrative menu via a Telnet session.

An unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and potentially execute arbitrary code via improper handling of the reply, name, and body parameters.

BirthSys 3.1 contains an SQL injection vulnerability in show.php, allowing remote attackers to execute arbitrary SQL commands via the $month variable.

The DB_eSession library version 1.0.2 and earlier contains an SQL injection vulnerability in the deleteSession() function. Attackers can remotely execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID.

SQL injection vulnerability in Hitachi Business Logic - Container allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function.