CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in DEV web management system 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via the cat parameter in openforum.php and getfile.php, and the target parameter in download_now.php.

SQL injection vulnerability in the user area of RWS Statistics Counter before version 2.4.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

A remote file inclusion vulnerability in IceWarp Web Mail 5.5.1, used by Merak Mail Server 8.3.0r and VisNetic Mail Server 8.3.0 build 1, when register_globals is enabled, allows remote attackers to include arbitrary local and remote PHP files via the lang_settings and language parameters in accounts/inc/include.php and admin/inc/include.php.

A buffer overflow vulnerability exists in Golden FTP Server 1.92 when handling the APPE command. Remote attackers can exploit this to execute arbitrary code on the server.

In eggblog 2.0, the search.php file mishandles the q parameter, allowing an attacker to disclose the full server path. This issue may be related to an SQL injection vulnerability.

The slsmgr and slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, allowing local users to gain privileges.

The shadow database feature (syncshadowdb) in Bugzilla 2.9 through 2.16.10 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

A vulnerability in scponlyc (scponly 4.1 and earlier) allows a local user to execute arbitrary code with root privileges by creating a chroot directory in their home directory, hard linking to a system setuid application, and using a modified LD_PRELOAD to alter expected function calls in the setuid application.

SQL injection vulnerability in PHP-Fusion 6.00.200 through 6.00.300 allows remote attackers to execute arbitrary SQL commands via the ratings parameter in multiple scripts, such as ratings_include.php.

Multiple SQL injection vulnerabilities were found in Mantis 1.0.0rc3 and earlier in the manage user page. Remote attackers can execute arbitrary SQL commands via the 'prefix' and 'sort' parameters in manage_user_page.php and the 'sort' parameter in view_all_set.php.

Multiple SQL injection vulnerabilities in Direct News 4.9 allow remote attackers to execute arbitrary SQL commands via the setLang parameter in index.php and unspecified search module parameters.

The Chatspot 2.0.0a7 module for phpBB might allow remote attackers to impersonate other users via unknown vectors. This vulnerability could lead to unauthorized access to accounts and data.

SQL injection vulnerability in the Chatspot 2.0.0a7 module for phpBB allows remote attackers to execute arbitrary SQL commands via unknown vectors.

An argument injection vulnerability in scponlyc in scponly 4.1 and earlier, when both scp and rsync compatibility are enabled, allows local users to execute arbitrary applications via getopt-style argument specifications that are not filtered.

A vulnerability in Mantis before version 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the max_file_size parameter in bug_file_add.php, bug_report.php, bug_report_advanced_page.php, and proj_doc_add_page.php.

A buffer overflow vulnerability in KETM 0.0.6 allows local users to execute arbitrary code via unknown vectors.

WebDB 1.1 and earlier contain an SQL injection vulnerability via unspecified search parameters (possibly Search0). The vendor disputes this, stating the code was added for a specific client and has been removed, with all clients receiving updates automatically.

SQL injection vulnerability in index.asp in pTools allows remote attackers to execute arbitrary SQL commands via the docID parameter. The provenance of this information is unknown; details are obtained solely from third party information.

An unquoted Windows search path vulnerability in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5) allows local users to gain privileges by placing a malicious "program.exe" file in the C: folder, which is executed by naPrdMgr.exe when it attempts to run EntVUtil.EXE.

A vulnerability in the khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, used by Safari and TextEdit, allows remote attackers to cause a denial of service (memory consumption and application crash) via HTML files with a large ROWSPAN attribute in a TD tag.