CVE Vulnerability Catalog

In Claroline 1.5.3 through 1.6 Release Candidate 1 and possibly Dokeos, the scripts document.php and insertMyDoc.php contain directory traversal vulnerabilities. This allows remote project administrators to upload arbitrary files.

Multiple SQL injection vulnerabilities in index.php in Dream4 Koobi CMS 4.2.3 allow remote attackers to execute arbitrary SQL commands via the q or p parameters.

Claroline versions 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, contain multiple PHP remote file inclusion vulnerabilities. These flaws allow remote attackers to execute arbitrary PHP code on the server via unknown vectors.

A format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text.

SQL injection vulnerability in login.asp of WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Multiple SQL injection vulnerabilities in phpCoin 1.2.2 allow remote attackers to execute arbitrary SQL commands via the search parameter in index.php, phpcoinsessid in login.php, and id, dtopic_id, or dcat_id in mod.php.

SQL injection vulnerability in the admin login panel of Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.

Multiple SQL injection vulnerabilities in osTicket allow remote attackers to execute arbitrary SQL commands via the id parameter to admin.php or cat parameter to view.php.

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the username or password parameters to admin_login.asp, or the searchstring and possibly ID parameters to default.asp.

The vulnerability in the edit_image.asp script of Uapplication Uphotogallery allows remote attackers to upload arbitrary files to the server.

A directory traversal vulnerability in attachments.php in osTicket allows remote attackers to read arbitrary files via .. sequences in the file parameter.

A vulnerability in SitePanel 2.6.1 and earlier allows remote attackers to upload and execute arbitrary files such as PHP scripts via an attachment to a trouble ticket.

Vulnerability in Serendipity before version 0.8 allows Chief users to hide plugins installed by other users.

SQL injection vulnerability in verify.asp of Ecomm Professional Guestbook 3.x allows remote attackers to execute arbitrary SQL commands via the AdminPWD parameter.

PHP remote file inclusion vulnerability in main.php of osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

Vulnerability in PostgreSQL versions 7.3.x through 8.0.x grants public EXECUTE access to certain character conversion functions, allowing unprivileged users to call these functions with malicious values, with unknown impact.

Open WebMail (OWM) before version 2.51 dated 2005-04-30 allows remote authenticated users to execute arbitrary commands by including shell metacharacters in a filename.

Stack-based buffer overflow in the VPN daemon (vpnd) for Mac OS X before 10.3.9 allows local users to execute arbitrary code via a long -i (Server_id) argument.

The BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.