CVE Vulnerability Catalog

Vulnerability in apage.cgi in WebAPP 0.9.9.2.1 and earlier versions allows remote attackers to execute arbitrary commands via shell metacharacters in the f parameter.

Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.

Multiple buffer overflows in handlers.c for Pico Server (pServ) before 3.3 may allow attackers to execute arbitrary code.

SQL injection vulnerability in catalog.php of CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in 'php.ns', which allows execution of arbitrary PHP code.

Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data.

SQL injection vulnerability in login.asp of Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

A mathematical flaw in the implementation of the El Gamal signature algorithm in LibTomCrypt versions 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

A buffer overflow vulnerability in Apple iTunes before version 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Vulnerability in phpBB before version 2.0.15 allows remote attackers to execute arbitrary script by injecting malicious code into BBcode tags. The bbencode_second_pass and make_clickable functions in bbcode.php do not properly filter URI schemes such as javascript:, applet:, about:, activex:, chrome:, or script:.

The vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to read sensitive data via the postorder parameter, which is not properly handled in textdb.inc.php, possibly due to a SQL injection vulnerability.

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via 'dirname/../cgi-bin' in a URL.

Multiple JavaScript vulnerabilities in BB code in BirdBlog before version 1.3.1 allow remote attackers to inject arbitrary JavaScript.

Pico Server (pServ) version 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading slash (/) characters and ".." sequences.

Vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to obtain sensitive information by providing an invalid 'id' or 'postorder' parameter, which reveals the system path in an error message when a file cannot be opened.

Fusion SBX 1.2 and earlier improperly use the extract function in index.php, allowing remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the 'Acquire licenses automatically for protected content' setting is not enabled.