CVE Vulnerability Catalog

An unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, contains an SQL injection vulnerability in the password parameter. This allows remote attackers to execute arbitrary SQL commands.

Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary commands via the notify script (versions 4.2.0-4.2.3) or crafted CallID parameters to the faxrcvd script (versions 4.2.2-4.2.3).

A direct static code injection vulnerability in YaPIG 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a mod_info action to modify_gallery.php, which inserts the code into guid_info.php. A separate CSRF vulnerability makes exploitation easier.

Segue CMS before version 1.3.6 has an unrestricted file upload vulnerability that allows remote attackers to upload and execute arbitrary PHP code by placing .phtml files in the userfiles/ directory, when Apache HTTP Server handles .phtml files with the PHP interpreter.

A buffer overflow vulnerability in the decompression algorithm of BlackBerry Enterprise Server 4.0 SP1 and earlier versions before 20050607 may allow a remote attacker to execute arbitrary code via specially crafted data packets.

Multiple SQL injection vulnerabilities were found in Sysbotz Systems Panel 1.0.6 and earlier. Remote attackers can execute arbitrary SQL commands via the cid, aid, letter, mid, and tid parameters in various PHP scripts.

SQL injection vulnerability in index.php of Appalachian State University phpWebSite 0.10.1 and earlier allows remote attackers to execute arbitrary SQL commands via the module parameter. The details are obtained solely from third party information.

VirtueMart before version 1.0.1 improperly handles errors when a user is forbidden to read a requested page. This vulnerability may have unknown impact and can be exploited remotely.

A CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.

The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, allowing remote attackers to read JSP source files and obtain sensitive information.

Unspecified vulnerability in Spey 0.3.3 related to multiple security holes that could lead to compromise. This issue is distinct from CVE-2005-4846.

The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.

In IBM DB2 8.1 with Satellite Administration (SATADMIN) enabled, the SATENCRYPT function has a stack-based buffer overflow. A remote attacker can execute arbitrary code via a long parameter.

TYPO3 version 3.8.0 and earlier allows remote attackers to obtain sensitive information by directly requesting the misc/phpcheck/ directory, which invokes the phpinfo function and prints values of unspecified environment variables.

BugPort 1.147 contains an SQL injection vulnerability in index.php. Remote attackers can execute arbitrary SQL commands via the devWherePair[0], orderBy, and where parameters.

An unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors.

Geeklog before version 1.3.11sr3 allows remote attackers to bypass intended access restrictions and comment on an arbitrary story or topic by guessing the story ID.

A vulnerability in BEA WebLogic Server and WebLogic Express versions 9.0, 8.1, and 7.0 locks out the admin account after multiple incorrect password guesses. A remote attacker who knows or guesses the admin account name can cause a denial of service (DoS) by blocking admin logins.

SQL injection vulnerability in the Additional Images module for osCommerce before version 1.14. Remote attackers can execute arbitrary SQL commands via the products_id parameter in product_info.php.

A heap-based buffer overflow in Novell Open Enterprise Server Remote Manager (novell-nrm) for Novell SUSE Linux Enterprise Server 9 allows remote attackers to execute arbitrary code via an HTTP POST request with a negative Content-Length parameter.