CVE Vulnerability Catalog

Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a long message handled by the recvTextMessage function in multiplay.c or a long filename handled by the NETrecvFile function in netplay/netplay.c.

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Krusader versions 1.50-beta1 through 1.70.0 store passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml). Anyone with access to this file can read the passwords.

SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.c_str function.

Unspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial of service (panic) via unspecified vectors involving the event port API.

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character. This allows remote authenticated users to login as the "space" user, post as the guest user, and block an administrator's ability to ban the "space" user.

SQL injection vulnerability in the Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. The vendor has disputed this issue, stating that any SQL injection code would never be queried.

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the i_cat or method parameters.

SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER['HTTP_CLIENT_IP'] variable), as utilized by index.php.

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif (aka caller or CallerID) file into the folder, and then using a pcAnywhere client to login as a local administrator.

Remote file inclusion (RFI) vulnerability in order/index.php in IDevSpot PhpHostBot 1.0 and AutoHost 3.0. A remote attacker can execute arbitrary PHP code by supplying a URL in the page parameter.

DeluxeBB 1.07 and earlier contains a vulnerability that allows remote attackers to bypass SQL injection protection mechanisms. The flaw arises because the protection does not account for lowercase statements like "union select", enabling manipulation of SQL queries.

PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Multiple buffer overflows exist in multiplay.cpp in UFO2000 svn 1057. A remote attacker can execute arbitrary code via a long unit name, large values passed to network functions, or a large mapdata GEODATA structure.

Multiple array index errors in the recv_rules, recv_select_unit, recv_options, and recv_unit_data functions in multiplay.cpp in UFO2000 svn 1057 allow remote attackers to execute arbitrary code and cause a denial of service (opponent crash) via certain packet data that specifies an out-of-bounds index.

Multiple PHP remote file inclusion vulnerabilities exist in component.php in iManage CMS 4.0.12 and earlier. A remote attacker can supply a malicious URL in the absolute_path parameter, leading to arbitrary PHP code execution.

Multiple SQL injection vulnerabilities exist in class.php in Professional Home Page Tools Guestbook. A remote attacker can execute arbitrary SQL commands via the hidemail, name, mail, ip, or text parameters.

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

Eskolar CMS 0.9.0.0 contains multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the gr_1_id, gr_2_id, gr_3_id, and doc_id parameters in index.php, the uid and pwd parameters in php/esa.php, and possibly other vectors in files under php/lib/.