CVE Vulnerability Catalog

In w-Agora 4.1.6a, the file redir_url.php contains an SQL injection vulnerability in the 'key' parameter. A remote attacker can exploit this flaw to execute arbitrary SQL commands on the database.

Vulnerability in profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator.

PHP remote file inclusion vulnerability in BlackBoard 1.5.1 allows remote attackers to execute arbitrary PHP code by modifying the libpath parameter (incorrectly called "libpach") to reference a URL on a remote web server that contains _more.php, as demonstrated using checkdb.inc.php.

Buffer overflow vulnerability in the sh_hash_compdata function in Samhain versions 1.8.9 through 2.0.1, when running in update mode ("-t update"), may allow attackers to execute arbitrary code.

A buffer overflow vulnerability in the MSN module of Trillian 0.74i allows remote MSN servers to execute arbitrary code by sending a long string ending with a newline character.

A vulnerability in Zone Labs IMsecure and IMsecure Pro before version 1.5 allows remote attackers to bypass Active Link Filtering by sending an instant message containing a URL with hex encoded file extensions.

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access.

SQL injection vulnerability in the ReMOSitory Server add-on module for Mambo Portal 4.5.1 (1.09) and earlier allows remote attackers to execute arbitrary SQL commands via the filecatid parameter in the com_remository option.

Vulnerability in Baal Smart Forms before version 3.2 allows remote attackers to bypass authentication and obtain system access via a direct request to regadmin.php.

Off-by-one buffer overflow in ModSecurity (mod_security) 1.7.4 for Apache 2.x, when SecFilterScanPost is enabled, allows remote attackers to execute arbitrary code via crafted POST requests.

Unknown vulnerability in Sysbotz SimpleData 4.0.1 and possibly earlier versions allows remote attackers to gain access via a crafted URL and a certain cookie.

Stack-based and heap-based buffer overflows in ProxyNow! 2.75 and earlier allow remote attackers to execute arbitrary code via a GET request with a long ftp:// URL.

SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

Multiple SQL injection vulnerabilities in QuadComm Q-Shop allow remote attackers to execute arbitrary SQL commands via certain parameters to multiple ASP scripts.

SQL injection vulnerability in iWebNegar allows remote attackers to execute arbitrary SQL commands via the string parameter in index.php, comments.php, or the administrator login page.

Finjan SurfinGate 6.0 and 7.0 in proxy mode do not authenticate FHTTP commands on TCP port 3141, allowing remote attackers to restart the service, view log information, or force a policy update from the database server.

Vulnerability in Macallan Mail Solution 2.8.4.6 (Build 260) and earlier versions allows a remote attacker to bypass authentication in the web interface by sending an HTTP GET request with two slashes ("//") after the server name.

The Altiris Client Service for Windows 5.6 SP1 Hotfix E (5.6.181) allows local users to execute arbitrary commands by opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2005-1590.

The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

eSeSIX Thintune thin clients running firmware 2.4.38 and earlier accept any password that begins with the actual password, which makes it easier for users to conduct brute force password guessing.