CVE Vulnerability Catalog

Ektron Content Management System (CMS) before version 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, allowing remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.

Dulwich before version 0.18.5, when using an SSH subprocess, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname.

In the 'NQ Contacts Backup & Restore' application version 1.1 for Android, HTTPS is not used for transmitting login and synced user data. The username is transmitted in cleartext along with an SHA-1 hash of the password.

Rsync 3.1.3-development before 2017-10-24 mishandles archaic checksums, which makes it easier for remote attackers to bypass intended access restrictions.

ZeeBuddy 2x allows SQL Injection via the groupid parameter in admin/editadgroup.php, which is a different vulnerability than CVE-2008-3604.

Vastal I-Tech Dating Zone version 0.9.9 allows SQL Injection via the 'product_id' parameter in add_to_cart.php. This is a different vulnerability than CVE-2008-4461.

tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.

Sokial Social Network Script version 1.0 is vulnerable to SQL Injection via the id parameter in admin/members_view.php.

SoftDatepro Dating Social Network version 1.3 is vulnerable to SQL Injection via the profid parameter in viewprofile.php, the sender_id parameter in viewmessage.php, and the Email field in the admin panel.

Same Sex Dating Software Pro version 1.0 is vulnerable to SQL Injection via the profid parameter in viewprofile.php, the sender_id parameter in viewmessage.php, and the Email field in the admin section.

PHP CityPortal version 2.0 is vulnerable to SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.

PG All Share Video version 1.0 allows SQL Injection via manipulation of the PATH_INFO parameter in several endpoints, such as search/tag, friends/index, users/profile, and video_catalog/category.

MyBuilder Clone version 1.0 allows SQL Injection via the subcategory parameter in the phpsqlsearch_genxml.php file.

Mailing List Manager Pro version 3.0 is vulnerable to SQL Injection via the edit parameter in the sort=login action or the edit parameter in admin/template.

The Zh YandexMap component version 6.1.1.0 for Joomla! is vulnerable to SQL Injection via the placemarklistid parameter in index.php.

The NS Download Shop component version 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.

Job Board Script Software is vulnerable to SQL Injection via the PATH_INFO to a /job-details URI.

iTech Gigs Script version 1.21 allows SQL Injection via the sc parameter in browse-scategory.php or the ser parameter in service-provider.php.

iStock Management System 1.0 allows Arbitrary File Upload via user/profile.

iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.