CVE Vulnerability Catalog

A vulnerability in the Guardian language-system allows an unauthenticated remote attacker to execute arbitrary OS commands by injecting shell metacharacters into the id parameter, which is passed unsanitized to the exec() function in text.php.

A vulnerability in the Guardian language-system allows an unauthenticated attacker to execute arbitrary OS commands remotely by injecting shell metacharacters into the 'id' parameter in translate.php.

A vulnerability in the Guardian language system allows an unauthenticated attacker to execute arbitrary OS commands remotely by injecting shell metacharacters into the 'id' parameter in subtitles.php. The parameter is passed directly to the PHP exec() function without any sanitization.

SQL Injection vulnerability in Guardian language-system allows an authenticated attacker to inject SQL code via the id parameter in translate_text.php. Lack of input sanitization enables extraction of database contents.

An SQL injection vulnerability in Guardian language-system allows an authenticated attacker to inject malicious SQL via the 'name' GET parameter in designer.php. Unsanitized input enables arbitrary SQL execution and extraction of database contents.

An SQL injection vulnerability in the Guardian language-system allows an authenticated attacker to inject malicious SQL code via the GET parameter 'id' in subtitles.php. Lack of input sanitization enables error-based SQL injection to extract database contents.

An SQL injection vulnerability in Guardian language-system allows an authenticated attacker to inject malicious SQL via the 'id' parameter in job_info_get.php. Unsanitized input enables error-based SQL injection to extract database contents.

An SQL injection vulnerability in the Guardian language-system component allows an authenticated attacker to inject malicious SQL code via the 'id' parameter in text_file.php. Lack of input sanitization enables extraction of database contents.

An SQL injection vulnerability in Guardian language-system allows an authenticated attacker to inject malicious SQL via the id parameter in media.php. Lack of input sanitization enables error-based extraction of database contents.

An SQL injection vulnerability in Guardian language-system allows an unauthenticated attacker to inject SQL code via the id parameter in job_info.php. Lack of input sanitization enables extraction of database version, current user, schema names, and table contents.

A vulnerability in the Guardian language-system fails to sanitize the 'id' GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session.

The vulnerability in the Guardian language-system is due to the lack of sanitization of the GET parameter 'id' before inserting it into HTML form action attributes in text_file.php. An authenticated attacker can craft a URL that injects script tags executing in the victim's browser session.

An XSS vulnerability in the Guardian language-system fails to sanitize the 'name' GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker can craft a URL containing script tags that execute in the victim's browser session.

The Webba Booking WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects versions from n/a through 6.4.13.

A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or other impacts from memory corruption. The issue is due to improper boundary checks in DMG scanning, leading to integer overflow on 32-bit platforms only.

A vulnerability in the ALZ file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or other impacts due to memory corruption. The issue stems from improper boundary checks in ALZ content, leading to an out-of-bounds buffer write.

A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or other impacts due to memory corruption. The issue stems from improper boundary checks in PESpin files during scanning, potentially leading to an out-of-bounds buffer write.

A vulnerability in the InstallShield file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This is due to improper handling of temporary resources during file scanning.

A vulnerability in the 7z file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or other impacts due to memory corruption. It is caused by improper boundary checks in 7z files during scanning, leading to an out-of-bounds buffer write.

A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other impacts from memory corruption, on an affected device. It is due to improper boundary checks for content in FSG files during scanning, which may result in an out-of-bounds buffer write.