CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.

A directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing "../" or "..\" sequences.

PicoWebServer 1.0 contains a stack-based buffer overflow that can be exploited by a remote attacker via a long URL. This vulnerability may lead to application crash (denial of service) and potentially arbitrary code execution.

SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.

A vulnerability in zboard.php in Zeroboard versions 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code due to improper quoting when using the preg_replace function.

Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via parameters in various PHP scripts.

SQL injection vulnerability in login.asp of NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

The template-functions-category.php file in WordPress 1.5.1 contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the $cat_ID variable, for example by using the cat parameter in a request to index.php.

Multiple SQL injection vulnerabilities in NewLife Blogger before version 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.

Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.

Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.

Microsoft Terminal Server using RDP 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, allowing remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.

SQL injection vulnerability in ad/login.asp of ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.

SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter.

Buffer overflow in the Aavmker4 device driver in Avast! Antivirus 4.6 and possibly other versions allows local users to cause a denial of service (system crash) and possibly execute arbitrary code via certain signals combined with crafted input.

Buffer overflow vulnerability in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier. A remote attacker can send a long text string, leading to arbitrary code execution.

Unknown vulnerability in HP-UX trusted systems B.11.00 through B.11.23 allows remote attackers to gain unauthorized access, possibly involving remshd and/or telnet -t.

SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.

Multiple unknown vulnerabilities in L-Soft LISTSERV 14.3, 1.8e, and 1.8d allow remote attackers to execute arbitrary code or cause a denial of service. Technical details are not yet available.

A vulnerability in Sudo 1.6.8p7 on SuSE Linux 9.3 (and possibly other Linux distributions) allows a local user to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. The vendor and researchers have not been able to replicate this issue, stating that Sudo catches SIGINT and returns an empty string for the password.