CVE Vulnerability Catalog

SQL injection vulnerability in cosmicshop/search.php of CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter.

A vulnerability in newsadmin.asp of Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to "xY1zZoPQ".

A remote file inclusion vulnerability in Plume 1.0.3 via the _PX_config[manager_path] parameter in manager/frontinc/prepend.php allows attackers to execute arbitrary PHP code.

An untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.

A buffer overflow vulnerability exists in Alt-N MDaemon, possibly version 9.0.1 and earlier. A remote attacker can exploit a long A0001 argument starting with a double quote (") to execute arbitrary code.

Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, distinct from CVE-2006-2480.

A stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.

The ping.php script in Russcom.Ping allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the domain parameter.

SQL injection vulnerability in the search script of AlstraSoft Web Host Directory 1.2 (also known as HyperStop WebHost Directory 1.2) allows remote attackers to execute arbitrary SQL commands via the uri parameter.

In Vixie cron 4.1, the do_command.c file does not check the return code of a setuid call. If setuid fails (e.g., due to PAM errors or resource limits), a local user could potentially gain root privileges.

In RWiki versions 2.1.0pre1 through 2.1.0, the editing form contains a vulnerability allowing remote execution of arbitrary Ruby code. Attackers can exploit unknown attack vectors to take control of the server.

In DSChat 1.0, the Nickname field is not sanitized before creating a file in a user directory, allowing a remote attacker to execute arbitrary PHP code. The vulnerability was reported by a third party and details are unknown.

The snmp_trap_decode function in the SNMP NAT helper in Linux kernel before 2.6.16.18 allows remote attackers to cause a denial of service (crash) via unspecified remote attack vectors that trigger failures in snmp_trap_decode, leading to frees of random memory or double-free by snmp_trap_decode and its calling function, as demonstrated by certain test cases of the PROTOS SNMP test suite.

SQL injection vulnerability in links.php of 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board. Remote attackers can execute arbitrary SQL commands via the cat parameter.

PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to reconfig.php and srxclr.php. This may be due to a globals overwrite issue.

Multiple unspecified vulnerabilities in Software Distributor on HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.

Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) versions 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors.

A stack-based buffer overflow in PDF Form Filling and Flattening Tool before version 3.1.0.12 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long field names.

An unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown vectors.

SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via the author_id parameter in profile.php and the aut_id parameter in userarticles.php. Invalid SQL manipulation via the aut_id vector may also result in path disclosure.