CVE Vulnerability Catalog

Unknown vulnerability in the arshell tool in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.

An unknown vulnerability in F5 BIG-IP versions 9.0.2 through 9.1 allows attackers to subvert SSL transaction authentication, possibly involving NATIVE ciphers.

Buffer overflow vulnerability in the getlvname command in IBM AIX 5.1, 5.2 and 5.3. A local user can exploit long command line arguments to execute arbitrary code.

Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.

Multiple unknown vulnerabilities were discovered in Moodle before version 1.5.1. Their impact and attack vectors are unspecified.

PHP remote file inclusion vulnerability in gals.php of PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.

Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments.

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.

Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin registry key, allowing local users to gain administrator privileges.

Multiple SQL injection vulnerabilities in Dragonfly Commerce allow remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the key parameter to dc_Categoriesview.asp, dc_productslist_Clearance.asp, PID parameter to ratings.asp, dc_Productsview.asp, start, key_mp, searchtype, or psearch parameters to dc_forum_Postslist.asp. The vendor disputes this, claiming errors arise from invalid category and product numbers, but the issue still meets the CVE definition of exposure.

Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, allows local users to execute arbitrary code via long command line arguments.

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the idProduct parameter to tellAFriend.asp, sortType parameter to viewSupportTickets.asp, or the id parameter to updateCreditCards.asp or deleteCreditCards.asp.

The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

Vulnerability in phpWishlist before version 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php, bypassing login.

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.

Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL.

The vulnerability in the class.xmail.php script in PhpXmail versions 0.7 through 1.1 is due to improper handling of long passwords. As a result, no error message is returned, allowing a remote attacker to bypass authentication and gain unauthorized access.

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries via the f parameter in index.php.

Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.

SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.