CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the iCat, iSub, iPro, and iType parameters in various ASP scripts.

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the iChannel, iData, iMem, iCat, offset, and iChannel parameters.

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the iMsg parameter to messages.asp, iFor parameter to post.asp or forums.asp, or id parameter to userEdit.asp. Vectors 1 and 3 were later reported to affect version 3.0.

Multiple SQL injection vulnerabilities in DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the iCat, iPro, and iSub parameters.

SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username or password to logon.asp, (2) WeeklyNotesDisplay.asp, or (3) the Search page.

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the ci, d, or m parameter to index.asp, or the bi parameter to blog_comment.asp.

The XMLRPC server in the Ruby library (libruby) 1.8 sets an invalid default value that prevents security protection using handlers, allowing remote attackers to execute arbitrary commands.

Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the username or id parameters.

Stack-based buffer overflow in VERITAS Backup Exec Remote Agent for Windows and Netware. An attacker can remotely execute arbitrary code by sending a specially crafted CONNECT_CLIENT_AUTH request with a long password.

The vulnerability in amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file.

The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.

PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter.

Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter.

The vulnerability in Enterasys Vertical Horizon VH-2402S switches before firmware version 2.05.05.09 consists of a hard-coded debugging account and password, allowing a remote attacker to gain elevated privileges.

Vulnerability in Symantec pcAnywhere 10.5x and 11.x before 11.5, with 'Launch with Windows' enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions.

SQL injection vulnerability in login.asp of Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

The eping_validaddr function in the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.

Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via various parameters in HTTP requests.