CVE Vulnerability Catalog

Miraserver 1.0 RC4 and earlier versions contain multiple SQL injection vulnerabilities in the page, id, and cat parameters, allowing remote attackers to execute arbitrary SQL commands.

SQL injection vulnerability in printer_friendly.cfm in e-publish CMS 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in index.php in Marwel 2.7 and earlier allows remote attackers to execute arbitrary SQL commands via the show parameter.

SQL injection vulnerability in Page.asp of Baseline CMS version 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the sort_mode, post_id, and blog_id parameters, which are not properly sanitized by the convert_sortmode function in kernel/BitDb.php.

SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.

SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the nodeID, pageID, ID, and parentid parameters in index.cfm, and the documentFormatId parameter in document/docWindow.cfm.

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. The provenance of this information is unknown; the details are obtained solely from third party information.

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to '.dll' followed by arguments such as '~0' through '~9', which causes ntdll.dll to produce a return value that is not correctly handled by IIS, potentially leading to code execution rather than just a denial of service as originally believed.

An unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors.

In toendaCMS 0.6.2.1, configured to use a SQL database, a SQL injection vulnerability exists in index.php. Remote attackers can execute arbitrary SQL commands via the id parameter.

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a '/' in the encoded_pw parameter.

The vulnerability in Adobe ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, allowing local developers to obtain the hash and gain privileges.

The vulnerability in the ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to bypass security controls.

Vulnerability in the announcement.pl script of Blackboard Learning and Community Portal System in Academic Suite versions 6.3.1.424, 6.2.3.23, and earlier before version 6 allows a remote attacker to gain administrator privileges by setting the context parameter to 'admin'.

Vulnerability in Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows a remote attacker to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including admin/uploadclient.jsp, apply_firmware_action.jsp, and file.jsp.

A vulnerability in Hitachi Groupmax Mail SMTP versions 06-50 through 06-52-/A and 07-00 through 07-20 allows a remote attacker to stop the service by sending an email message with an invalid format.

A vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html.

Vulnerability in HP-UX versions B.11.00, B.11.04, B.11.11, and B.11.23 allows a remote attacker to perform a 'Rose Attack' by sending small IP fragments that do not form a complete packet, resulting in a denial of service (DoS).

SQL injection vulnerability in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter in index.php, which modifies the underlying $_SERVER variable.