CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in NPDS 4.8 and 5.0 allow remote attackers to execute arbitrary SQL commands via the thold parameter to (1) comments.php or (2) pollcomments.php.

SQL injection vulnerability in Sigmaweb.DLL in Sigma ISP Manager 6.6 allows remote attackers to execute arbitrary SQL commands via the username, password, or domain fields.

The (1) stopserver.sh and (2) startserver.sh scripts in Adobe Version Cue on Mac OS X use the current working directory to find and execute the productname.sh script, which allows local users to execute arbitrary code by copying and calling the scripts from a user-controlled directory.

Vulnerability in apage.cgi in WebAPP 0.9.9.2.1 and earlier versions allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.

SQL injection vulnerability in member.php in Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter.

In the Linux kernel 2.6.x, raw character devices (raw.c) call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space. This vulnerability is similar to CVE-2005-1589.

Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.

SQL injection vulnerability in catalog.php of CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in 'php.ns', which allows execution of arbitrary PHP code.

A mathematical flaw in the implementation of the El Gamal signature algorithm in LibTomCrypt versions 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data.

Fusion SBX 1.2 and earlier improperly use the extract function in index.php, allowing remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

The vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to read sensitive data via the postorder parameter, which is not properly handled in textdb.inc.php, possibly due to a SQL injection vulnerability.

Vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to obtain sensitive information by providing an invalid 'id' or 'postorder' parameter, which reveals the system path in an error message when a file cannot be opened.

SQL injection vulnerability in login.asp of Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

Vulnerability in phpBB before version 2.0.15 allows remote attackers to execute arbitrary script by injecting malicious code into BBcode tags. The bbencode_second_pass and make_clickable functions in bbcode.php do not properly filter URI schemes such as javascript:, applet:, about:, activex:, chrome:, or script:.

A buffer overflow vulnerability in Apple iTunes before version 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via 'dirname/../cgi-bin' in a URL.

Pico Server (pServ) version 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading slash (/) characters and ".." sequences.