CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the (1) cartid parameter to upstnt.php or (2) psku parameter to display.php. NOTE: the vendor disputes this report, claiming they are forced SQL errors; the original researcher is known to be unreliable.

SQL injection vulnerability in jgs_portal.php in JGS-Portal 3.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

The SSH module in Neteyes Nexusway allows remote attackers to execute arbitrary commands via shell metacharacters in arguments to certain commands, as demonstrated using ping and traceroute.

The Admin panel in PwsPHP 1.2.2 does not properly verify uploaded picture files, which allows remote attackers to upload and possibly execute arbitrary files.

The new account wizard in Mail.app 2.0 in Mac OS 10.4, when configuring an IMAP mail account and checking the credentials, does not prompt the user to use SSL until after the password has already been sent, which causes the password to be sent in plaintext.

Vulnerability in MidiCart PHP Shopping Cart allows a remote attacker to obtain sensitive information by directly requesting search_list.php, item_list.php, or item_show.php files. The response includes a PHP error message revealing the system path.

A format string vulnerability in dSMTP (dsmtp.exe) in DMail 3.1a allows remote attackers to execute arbitrary code via format string specifiers in the xtellmail command.

Heap-based buffer overflow in RSA SecurID Web Agent 5, 5.2, and 5.3 allows remote attackers to execute arbitrary code via crafted chunked-encoding data.

A double free vulnerability in the ICEP dissector in Ethereal before 0.10.11 may allow remote attackers to execute arbitrary code.

Multiple format string vulnerabilities in the DHCP and ANSI A dissectors in Ethereal before version 0.10.11 may allow remote attackers to execute arbitrary code.

Multiple buffer overflows in various protocol dissectors in Ethereal before 0.10.11 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code.

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands.

In Mac OS X 10.3.9, an unknown vulnerability in chfn, chpass, and chsh programs uses external helper programs in an insecure manner, allowing local users to gain privileges.

The HTTP proxy service in Server Admin for Mac OS X 10.3.9 does not restrict access when it is enabled, which allows remote attackers to use the proxy.

lukemftpd in Mac OS X 10.3.9 allows remote authenticated users to escape the chroot environment by logging in with their full name.

Vulnerability in Apple Help Viewer 2.0.7 and 3.0.0 on Mac OS X 10.3.9 allows remote attackers to read and execute arbitrary scripts with less restrictive privileges via a help:// URI.

In Mac OS X 10.3.9, the Bluetooth file exchange service is enabled by default, allowing remote attackers to access files without user notification, and local users to access files via the default directory.

Buffer overflow in the Netinfo Setup Tool (NeST) allows local users to execute arbitrary code.

The vulnerability in index.php of Zorum 3.5 allows a remote attacker to trigger an SQL error and potentially inject arbitrary SQL commands via the search functionality.

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the username or password parameters to admin_login.asp, or the searchstring and possibly ID parameters to default.asp.