CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

Eval injection vulnerability in PEAR XML_RPC up to version 1.3.0 and PHPXMLRPC up to version 1.1 allows remote attackers to execute arbitrary PHP code via a crafted XML file that is not properly sanitized before being used in an eval statement. This flaw affects many popular CMS and applications such as WordPress, Drupal, Serendipity, eGroupware, TikiWiki, and others.

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

A vulnerability in Cisco IOS versions 12.2T through 12.4 allows remote attackers to bypass AAA RADIUS authentication, if the fallback method is set to none, via a long username.

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier. Remote attackers can execute arbitrary SQL commands via unfiltered input in the HTTP_RAW_POST_DATA variable, which stores data in an XML file.

SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the T1 or T2 parameters.

Vulnerability in login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter.

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.

Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server.

In Solaris 8, 9, and 10, the runtime linker (ld.so) trusts the LD_AUDIT environment variable in setuid or setgid programs, allowing local users to gain privileges by modifying LD_AUDIT to reference malicious code or using a long value for LD_AUDIT.

Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp.

SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.

SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.

A buffer overflow vulnerability in the VERITAS Backup Exec Web Administration Console (BEWAC) versions 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code.

A vulnerability in VERITAS Backup Exec 9.0 through 10.0 for Windows Servers and 9.0.4019 through 9.1.307 for Netware allows a remote attacker to cause a denial of service (Remote Agent crash) by sending a crafted packet to the NDMLSRVR.DLL library or a packet with an invalid (non-zero) 'Error Status' value, leading to a null pointer dereference.

Vulnerability in VERITAS Backup Exec Server (beserver.exe) versions 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the User Name field (sUserName parameter) or Password (sPassword parameter).

Multiple SQL injection vulnerabilities in DUware DUclassmate 1.2 allow remote attackers to execute arbitrary SQL commands via the iState parameter in default.asp or the iPro parameter in edit.asp.

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the iChannel, iData, iMem, iCat, offset, and iChannel parameters.

Multiple SQL injection vulnerabilities in DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the iCat, iPro, and iSub parameters.