CVE Vulnerability Catalog

SQL injection vulnerability in aeDating Script 4.0 and earlier. An attacker can inject arbitrary SQL statements via the Country parameter in search_result.php.

Multiple SQL injection vulnerabilities in DeluxeBB 1.0 and 1.0.5 allow remote attackers to execute arbitrary SQL commands via the tid, uid, and fid parameters in various scripts.

The default configuration on OpenSSL before 0.9.8 uses MD5 for creating message digests instead of a more cryptographically strong algorithm, which makes it easier for remote attackers to forge certificates with a valid certificate authority signature.

Stack-based buffer overflow in AVIRA Desktop for Windows version 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remote attackers to execute arbitrary code via a long filename in an ACE archive.

Directory traversal vulnerability in security.inc.php in AzDGDatingLite 2.1.3 and possibly earlier versions allows remote attackers to execute arbitrary PHP commands via ".." sequences and "%00" (trailing null byte) characters in the l parameter, which is used in an include_once statement.

The vulnerability in pam_per_user before version 0.4 does not verify if the username changes between authentication attempts and uses the same subrequest handle, allowing remote or local attackers to log in as other users by using applications that allow username changes during authentication, such as /bin/login.

SQL injection vulnerability in password_reminder.php in ATutor before version 1.5.1 pl1. A remote attacker can execute arbitrary SQL commands via the email field.

The history (revision control) function in TWiki 02-Sep-2004 and earlier allows remote attackers to execute arbitrary code via shell metacharacters, as demonstrated via the rev parameter to TWikiUsers.

Buffer overflow vulnerability in apply.cgi in Linksys WRT54G routers versions 3.01.03, 3.03.6, and possibly others before 4.20.7. A remote attacker can exploit a long HTTP POST request to execute arbitrary code on the device.

A buffer overflow in utility.cpp in Turquoise SuperStat (turqstat) 2.2.4 and earlier might allow remote NNTP servers to execute arbitrary code via a date with a long month.

The vulnerability in the ezconfig.asp file of the Linksys WRT54G router (versions 3.01.03, 3.03.6, and some configurations of 2.04.4) is due to the lack of an authentication initialization function. A remote attacker can obtain encrypted configuration information and, if the key is known, modify the configuration.

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) Preview Release 2 allow remote attackers to execute arbitrary SQL commands via the fid parameter in misc.php or the Content-Disposition field in the HTTP header in newreply.php.

The vulnerability in Check Point NGX R60 allows remote attackers to bypass firewall rules for the predefined CIFS service group. The system does not properly verify packets against this rule, enabling attackers to circumvent intended restrictions.

A direct static code injection vulnerability in setcookie.php of PBLang 4.65 allows remote attackers to inject arbitrary PHP code via the 'u' parameter, which is later executed upon login.

The Downloads page in MAXdev MD-Pro 1.0.73, and possibly earlier versions, uses an incomplete blacklist to check for dangerous file extensions, which could allow remote attackers to bypass file extension checks and execute arbitrary commands by uploading a file with a different extension, as demonstrated using .inc files.

SQL injection vulnerability in WEB//NEWS 1.4 allows remote attackers to execute arbitrary SQL commands via the wn_userpw parameter in startup.php, cat, id, or stof parameters in news.php, and id parameter in print.php.

phpCommunityCalendar 4.0.3 allows remote attackers to bypass authentication and gain unauthorized access via a direct request to the admin directory.

A heap-based buffer overflow in NOD32 2.5 with active scanning enabled allows remote attackers to execute arbitrary code via an ARJ archive containing a file with a long filename.

Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via the login field in login.php or the LocationID parameter in week.php.

SQL injection vulnerability in class-1 Forum Software 0.24.4 allows remote attackers to execute arbitrary SQL commands and bypass the file extension check via SQL code in the file extension of an uploaded file.