CVE Vulnerability Catalog

SQL injection vulnerability in admin_default.asp of OzzyWork Galeri allows remote attackers to execute arbitrary SQL commands via the Login or password fields.

In Sophos Anti-Virus products before versions 5.2.1 and 4.05, when cabinet file inspection is enabled, a remote attacker can execute arbitrary code via a CAB file with invalid folder count values, leading to heap corruption.

A directory traversal vulnerability in the Quake 3 engine allows remote attackers to read arbitrary files from the server. The issue occurs when the sv_allowdownload cvar is enabled and an attacker sends a .pk3 file request containing ".." sequences.

Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions. Local users and remote administrators can decrypt these passwords by using Microsoft's cryptographic API functions to obtain the plaintext version of the master key.

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files by providing an absolute path in the pfad parameter to index.php and galerie.php.

A critical vulnerability in Microsoft Distributed Transaction Coordinator (MSDTC) allows remote attackers to execute arbitrary code by sending a crafted request with a long fifth argument to the BuildContextW or BuildContext opcode. The heap-based buffer overflow in msdtcprx.dll enables remote code execution without authentication.

Multiple PHP remote file inclusion vulnerabilities in phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter in auth.php and auth_phpbb when phpBB portal is enabled, and via the smf_root_path parameter in auth.php and auth_SMF when SMF portal is enabled.

Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via the Find parameter in search.php and the LID and Rate parameters in misc.php.

The vulnerability in X-Scripts X-Poll (xpoll) 2.30 allows a remote attacker to upload an arbitrary PHP file via admin/images/add.php and then execute it by accessing the uploaded file.

An unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via email messages with crafted vCal or iCal calendar properties.

A vulnerability in the Linux SCTP (lksctp) implementation before version 2.6.17 allows a remote attacker to cause a denial of service (deadlock) by sending a large number of small messages to a receiver application that cannot process them quickly enough. This leads to spillover of the receive buffer and system lockup.

Adobe Dreamweaver 8 before version 8.0.2 and MX 2004 generate code vulnerable to SQL injection attacks in the ColdFusion, PHP mySQL, ASP, ASP.NET, and JSP server models.

A vulnerability in the Linux SCTP implementation (lksctp) before version 2.6.17 allows a remote attacker to cause a kernel panic by sending an unexpected ECNE chunk when the session is in the CLOSED state.

A vulnerability in the Linux SCTP (lksctp) implementation before version 2.6.17 allows a remote attacker to cause a kernel panic by sending IP fragmented SCTP control chunks of type COOKIE_ECHO or HEARTBEAT.

Multiple SQL injection vulnerabilities exist in Creative Community Portal 1.1 and earlier. Remote attackers can execute arbitrary SQL commands via various HTTP parameters.

SQL injection vulnerability in Logon.asp of MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands via the txtLogon parameter.

A PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the statitpath parameter.

SQL injection vulnerability in FlexCustomer 0.0.4 and earlier (also 0.0.6) allows remote attackers to bypass authentication and execute arbitrary SQL commands via the checkuser, checkpass, username, and password parameters in the admin and ordinary user interface.

A PHP remote file inclusion vulnerability in day.php of ACal 2.2.6 allows remote attackers to execute arbitrary PHP code by supplying a malicious URL in the path parameter.

A PHP remote file inclusion vulnerability in includes/config.php of Jetbox CMS 2.1 allows remote attackers to execute arbitrary code by supplying a malicious URL in the relative_script_path parameter.