CVE Vulnerability Catalog

CSRF vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, using the dbname and checkprivs parameters.

An unspecified vulnerability in the Software Distributor component of HP-UX B.11.11 allows remote attackers to gain access to the system. The attack vectors are not disclosed.

A vulnerability in MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code by sending several triple dot sequences ("...") in a UID FETCH command.

FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, allowing attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long LIST, LSUB, and UID FETCH commands.

A stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command ending with a '}' character, demonstrated using long LIST, LSUB, SEARCH TEXT, STATUS INBOX, AUTHENTICATE, FETCH, SELECT, and COPY commands.

A vulnerability in OpenLDAP before version 2.2.28-r3 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

A vulnerability in Gauche before version 0.8.6-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

SQL injection vulnerability in articles/articles_funcs.php in phpCOIN 1.2.2 allows remote attackers to modify SQL syntax and potentially execute queries in limited circumstances via the rec_next parameter. Although the injection occurs after an ORDER BY clause, a syntax error may disclose error paths in some environments.

A buffer overflow vulnerability in ELOG elogd 2.6.0-beta4 in the cmd and mode URL parameters allows remote attackers to cause a denial of service (application crash) and potentially execute arbitrary code.

A vulnerability in the EIGRP implementation in Cisco IOS after versions 12.3(2), 12.3(3)B, and 12.3(2)T and other products allows a remote attacker to cause a denial of service (DoS) by sending a spoofed neighbor announcement with mismatched k values or a goodbye message TLV.

The vulnerability in MD5 Neighbor Authentication in EIGRP (Cisco IOS 11.3 and later) does not include the Message Authentication Code (MAC) in the checksum. This allows an attacker to sniff message hashes and replay HELLO packets or cause a denial of service by sending spoofed neighbor announcements, resulting in an ARP storm on the local network.

A heap-based buffer overflow in Dec2Rar.dll version 3.2.14.3, distributed in the Symantec Antivirus Library and used by various Symantec products, allows remote attackers to execute arbitrary code via RAR archives with sub-block headers containing incorrect values in the length field.

SQL injection vulnerability in LogicBill 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the __mode and __id parameters in helpdesk.php.

SQL injection vulnerability in WowBB 1.65 allows remote attackers to execute arbitrary SQL commands via the q parameter in search.php.

A vulnerability in fetchmail before versions 6.3.1 and 6.2.5.5, when configured in multidrop mode, allows remote attackers to cause a denial of service (application crash) by sending messages without headers from upstream mail servers.

SQL injection vulnerability in CS-Cart 1.3.0 allows remote attackers to execute arbitrary SQL commands via the sort_by and sort_order parameters in index.php.

Multiple SQL injection vulnerabilities in Cerberus Helpdesk allow remote attackers to execute arbitrary SQL commands via parameters in various scripts.

In TML CMS 0.5, the index.php file is vulnerable to SQL injection via the id parameter. This allows a remote attacker to execute arbitrary SQL commands.

SQL injection vulnerability in index.cfm of Mercury CMS 4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.