CVE Vulnerability Catalog

SQL injection vulnerability in FlexCustomer 0.0.4 and earlier (also 0.0.6) allows remote attackers to bypass authentication and execute arbitrary SQL commands via the checkuser, checkpass, username, and password parameters in the admin and ordinary user interface.

A PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the statitpath parameter.

Multiple SQL injection vulnerabilities exist in Creative Community Portal 1.1 and earlier. Remote attackers can execute arbitrary SQL commands via various HTTP parameters.

A PHP remote file inclusion vulnerability in day.php of ACal 2.2.6 allows remote attackers to execute arbitrary PHP code by supplying a malicious URL in the path parameter.

A buffer overflow vulnerability exists in the Quake 3 Engine, used by ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, in the remapShader command. A remote attacker can send a long string, leading to arbitrary code execution.

A vulnerability in Simple Poll 1.0 by CodeMunkyX (free-php.net) allows remote attackers to gain administrative privileges by appending /admin/ to the top-level URI when authentication is not required for the admin directory.

A buffer overflow vulnerability in BankTown Client Control (BtCxCtl20Com) version 1.4.2.51817 and possibly 1.5.2.50209. A remote attacker can execute arbitrary code by sending a long string as the first argument to the SetBannerUrl function.

A buffer overflow vulnerability in XM Easy Personal FTP Server 4.3 and earlier, triggered by a long username in the USER command, allows remote attackers to execute arbitrary code.

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in top.php and member.php.

An unspecified vulnerability in Internet Explorer 6.0 on Microsoft Windows XP SP2 allows remote attackers to execute arbitrary code via exceptional conditions that trigger memory corruption. The attack uses an exception handler and nested object tags, being a variant of CVE-2006-1992.

SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL commands via the pid parameter in a reputation action. The details are obtained solely from third party information.

The MS-Logon authentication scheme in UltraVNC 1.0.1 uses weak XOR encryption for challenge/response, allowing remote attackers to sniff and decrypt passwords.

A buffer overflow vulnerability in Gene6 FTP Server 3.1.0 affects the MKD and XMKD commands. A remote authenticated attacker can send a long argument, causing a denial of service (crash) and potentially arbitrary code execution.

Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via category_id and prod_id parameters. Invalid SQL queries also result in full path disclosure.

A vulnerability in Truecrypt 4.1 on Linux, running with setuid root privileges, allows a local user to execute arbitrary commands and escalate privileges by manipulating the PATH environment variable to point to a malicious mount command.

FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication by setting a cookie with an Admin value of 1.

CyberBuild contains SQL injection vulnerabilities in the SessionID parameter (login.asp) and ProductIndex parameter (browse0.htm), allowing remote attackers to execute arbitrary SQL commands.

SQL injection vulnerability in search.php in sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. It can also lead to path disclosure.

EMC Retrospect for Windows does not drop privileges before opening files, allowing local users to execute arbitrary code via the File>Open dialog.

A PHP remote file inclusion vulnerability in toplist.php of phpBB TopList 1.3.8 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.