CVE Vulnerability Catalog

The vulnerability in Uphotogallery involves storing the database file in the web document root, allowing remote attackers to directly request uphotogallery.mdb and obtain sensitive information.

Multiple SQL injection vulnerabilities in enVivo!CMS allow remote attackers to execute arbitrary SQL commands and gain privileges via the username or password parameters to admin_login.asp, or the searchstring and possibly ID parameters to default.asp.

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.

SQL injection vulnerability in the admin login panel of Ocean12 Mailing List Manager 1.06 allows remote attackers to execute arbitrary SQL commands via the Admin_id parameter.

Multiple stack-based buffer overflows in the nvd_exec function in HP Radia Notify Daemon 3.1.2.0 (formerly by Novadigm), and other versions including 2.x, 3.x, and 4.x, allows remote attackers to execute arbitrary code via a command with crafted parameters to a RADEXECD process.

SQL injection vulnerability in login.asp of WWWguestbook 1.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

A format string vulnerability in the client for Mtp-Target 1.2.2 and earlier allows remote attackers to execute arbitrary code via game messages or other text.

PHP remote file inclusion vulnerability in main.php of osTicket allows remote attackers to execute arbitrary PHP code via the include_dir parameter.

The media manager in Serendipity before version 0.8 allows remote attackers to upload and execute arbitrary .php or .shtml files.

Unknown vulnerability in the serendipity_config_local.inc.php file in Serendipity before version 0.8. The impact details are unknown.

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to perform administrator operations and cause a denial of service (server or camera shutdown) via a direct request to admin.html.

SQL injection vulnerability in search.php in PHP-Calendar before 0.10.3 allows remote attackers to execute arbitrary SQL commands via unknown vectors.

The BPFTPServer service in BulletProof FTP Server 2.4.0.31 does not properly drop privileges before opening files through the Help menu, which allows local users to gain privileges.

Vulnerability in PostgreSQL versions 7.3.x through 8.0.x grants public EXECUTE access to certain character conversion functions, allowing unprivileged users to call these functions with malicious values, with unknown impact.

Buffer overflow in the getConfig function in Aeon 0.2a and earlier allows local users to gain privileges via a long HOME environment variable.

A buffer overflow vulnerability in MailEnable IMAP server (MEIMAP.exe) allows remote attackers to execute arbitrary code by sending a long LOGIN command.

Unknown vulnerability in Veritas i3 Focalpoint Server 7.1 and earlier has unknown attack vectors and unknown but 'critical' impact.

Multiple SQL injection vulnerabilities were found in PostNuke 0.760-RC2 in index.php, modules.php, and admin.php. A remote attacker can manipulate the catid parameter to execute arbitrary SQL code.

The administration protocol in Kerio WinRoute Firewall 6.x up to 6.0.10, Personal Firewall 4.x up to 4.1.2, and MailServer up to 6.0.8 allows remote attackers to quickly obtain passwords that are 5 characters or less via brute force methods.

Vulnerability in Cisco IOS 12.2T, 12.3, and 12.3T involves improper processing of ISAKMP profile with XAUTH authentication after Phase 1 negotiation. A remote attacker can bypass XAUTH and proceed to Phase 2 negotiations.