CVE Vulnerability Catalog

SQL injection vulnerability in index.php of PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php within the espace_membre module. The provenance of this information is unknown; details are obtained solely from third party sources.

In check.php of Hinton Design phpht Topsites 1.3, passwords are not validated when using cookies, allowing remote attackers to bypass authentication via unspecified cookies.

Multiple SQL injection vulnerabilities were found in Hinton Design phpht Topsites 1.3. An attacker can remotely execute arbitrary SQL commands by manipulating the username parameter.

Double free vulnerability in the authentication and authentication token alteration code in PAM-MySQL 0.6.x before 0.6.2 and 0.7.x before 0.7pre3. Remote attackers can cause a denial of service (application crash) and possibly execute arbitrary code via crafted passwords, which lead to a double free of a pointer created by the pam_get_item function.

The squid_redirect script in adzapper before 2006-01-29 allows remote attackers to cause a denial of service (CPU consumption) via a URL with a large number of trailing forward slashes, which might produce inefficient regular expressions.

A buffer overflow vulnerability exists in elogd.c in elog before version 2.5.7 r1558-4. Attackers can execute arbitrary code via unspecified variables when writing to the log file.

SQL injection vulnerability in index.php of vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition page.

Unspecified vulnerability in query_store.php and manage_proj_create.php in Mantis before 1.0.0. Attack details and impact are unknown, information obtained solely from third parties.

Multiple stack-based buffer overflows in elogd.c in elog before 2.5.7 r1558-4 allow attackers to cause a denial of service (application crash) and possibly execute code via long revision attributes.

The Tiny ASN.1 Library (libtasn1) before version 0.2.18, used by GnuTLS 1.2.x before 1.2.10 and 1.3.x before 1.3.4, and GNU Shishi, contains a vulnerability that crashes the DER decoder and potentially allows arbitrary code execution via out-of-bounds access caused by invalid input.

The myquiz.pl script in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly sanitized in the PATH_INFO environment variable.

In eyeOS 0.8.9 and earlier, the desktop.php file checks for the existence of the _SESSION variable before calling session_start, allowing remote attackers to modify critical assumed-immutable variables. This enables arbitrary PHP code execution and potentially other attacks, as demonstrated by injecting PHP code into the _SESSION[apps][eyeOptions.eyeapp][wrapup] variable.

Multiple directory traversal vulnerabilities in install.php of CPG-Nuke Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a null character (%00) in the newlang and installlang parameters in a cookie.

A buffer overflow vulnerability in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument.

In SPIP 1.8.2g and earlier, a SQL injection vulnerability exists in spip_acces_doc.php3. Remote attackers can execute arbitrary SQL commands via the file parameter.

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 in the su and passwd commands allow local users to execute arbitrary code via a long first argument.

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, allowing local users to modify the file and execute arbitrary code at system startup.

SQL injection vulnerability in check.asp of Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via the fm_data[id] parameter in calendar.php and the $ad['acc'] variable in adminlogin.php.

A directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter.