CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in BroadBoard Instant ASP Message Board allow remote attackers to execute arbitrary SQL commands via the (1) keywords parameter to search.asp, (2) handle parameter to profile.asp, (3) txtUserHandle parameter to reg2.asp, or (4) txtUserEmail parameter to forgot.asp.

SQL injection vulnerability in aspWebCalendar allows remote attackers to execute arbitrary SQL statements via the username field on the login page or the eventid parameter to calendar.asp.

Unknown vulnerability in the management station in HP StorageWorks Command View XP 1.8B and earlier allows remote attackers to bypass access restrictions.

Format string vulnerability in wrapper.c in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16 allows remote attackers with CVSROOT commit access to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a wrapper line.

PHP remote file inclusion vulnerability in Mantis 0.19.0a allows remote attackers to execute arbitrary PHP code by modifying the t_core_path parameter to bug_api.php or t_core_dir parameter to relationship_api.php to reference a URL on a remote web server that contains the code.

The web interface of the Micronet Wireless Broadband Router SP916BM running firmware before version 1.9 dated 08/04/2004 resets the password to the default when the router is powered off, which could allow remote attackers to gain access.

The documentation for AJ-Fork 167 implies that users should set permissions for users.db.php to 777, which allows local users to execute arbitrary PHP code and gain privileges as the administrator.

SQL injection vulnerability in include.php in PHPKIT versions 1.6.03 through 1.6.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

The vulnerability in Tomcat before version 5.0.27-r3 on Gentoo Linux sets default permissions on init scripts to tomcat:tomcat, but executes them with root privileges, allowing local users in the tomcat group to execute arbitrary commands as root by modifying the scripts.

The vulnerability in BNC 2.9.0 allows remote attackers to access functions intended for authorized users because the system grants access even after an incorrect password is provided.

SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php.

The vulnerability in HP-UX B.11.00 and B.11.11 with B6848AB GTK+ Support Libraries installed is due to insecure directory permissions on /opt/gnome/src/GLib/. A local user can exploit this to gain elevated privileges by placing files in this directory.

Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving (1) admin/userlevelmembers-edit.asp and (2) admin/edit-groups.asp.

A buffer overflow vulnerability in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows a remote attacker to execute arbitrary code by sending a long command string or a long string to the MEIMAP service and then terminating the connection.

Multiple unspecified vulnerabilities were found in Gyach Enhanced (Gyach-E) before version 1.0.5, likely related to buffer overflows in HTTP server responses. Their impact and attack vectors are not precisely known.

Unspecified vulnerability in Journalness 3.0.7 and earlier allows remote attackers to create or modify posts via unknown attack vectors.

Unspecified vulnerability in IBM Tivoli SecureWay Policy Director 3.8, Access Manager for e-business 3.9 to 5.1, Access Manager Identity Manager Solution 5.1, Configuration Manager 4.2, Configuration Manager for Automated Teller Machines 2.1.0, and IBM WebSphere Everyplace Server, Service Provider Offering for Multi-platforms 2.1.3 to 2.15 allows remote attackers to hijack sessions of authenticated users via unknown attack vectors involving certain cookies, aka 'Potential Credential Impersonation Attack.'

A buffer overflow vulnerability in the strip_html_tags method in Gyach Enhanced (Gyach-E) before version 1.0.4 allows remote attackers to cause a denial of service and potentially execute arbitrary code via unknown vectors involving HTML tags.

Buffer overflow in queue.c and queued.c in queue before version 1.30.1 may allow remote attackers to execute arbitrary code.

The DecodeTCPOptions function in decode.c in Snort before 2.3.0, when printing TCP/IP options using FAST output or verbose mode, allows remote attackers to cause a denial of service (crash) via packets with invalid TCP/IP options, which trigger a null dereference.