CVE Vulnerability Catalog

A buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.

SQL injection vulnerability in index.php of ContentServ 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the StoryID parameter.

SQL injection vulnerability in CitySoft Community Enterprise 4.x allows remote attackers to execute arbitrary SQL commands via the nodeID, pageID, ID, and parentid parameters in index.cfm, and the documentFormatId parameter in document/docWindow.cfm.

Multiple SQL injection vulnerabilities in Bitweaver 1.1 and 1.1.1 beta allow remote attackers to execute arbitrary SQL commands via the sort_mode, post_id, and blog_id parameters, which are not properly sanitized by the convert_sortmode function in kernel/BitDb.php.

SQL injection vulnerability in Page.asp of Baseline CMS version 1.95 and earlier allows remote attackers to execute arbitrary SQL commands via the SiteNodeID parameter.

SQL injection vulnerability in main_content.asp in Acidcat 2.1.13 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter to default.asp.

SQL injection vulnerability in UStore allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields. The provenance of this information is unknown; the details are obtained solely from third party information.

The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to '.dll' followed by arguments such as '~0' through '~9', which causes ntdll.dll to produce a return value that is not correctly handled by IIS, potentially leading to code execution rather than just a denial of service as originally believed.

In toendaCMS 0.6.2.1, configured to use a SQL database, a SQL injection vulnerability exists in index.php. Remote attackers can execute arbitrary SQL commands via the id parameter.

An unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors.

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified user_id parameter and a '/' in the encoded_pw parameter.

Vulnerability in the announcement.pl script of Blackboard Learning and Community Portal System in Academic Suite versions 6.3.1.424, 6.2.3.23, and earlier before version 6 allows a remote attacker to gain administrator privileges by setting the context parameter to 'admin'.

The vulnerability in Adobe ColdFusion MX 7.0 exposes the password hash of the Administrator in an API call, allowing local developers to obtain the hash and gain privileges.

The vulnerability in the ColdFusion Sandbox on Adobe (formerly Macromedia) ColdFusion MX 6.0, 6.1, 6.1 with JRun, and 7.0 does not throw an exception if the SecurityManager is disabled, which might allow remote attackers to bypass security controls.

A vulnerability in Hitachi Groupmax Mail SMTP versions 06-50 through 06-52-/A and 07-00 through 07-20 allows a remote attacker to stop the service by sending an email message with an invalid format.

Vulnerability in HP-UX versions B.11.00, B.11.04, B.11.11, and B.11.23 allows a remote attacker to perform a 'Rose Attack' by sending small IP fragments that do not form a complete packet, resulting in a denial of service (DoS).

A vulnerability in ProjectForum 4.7.0 and earlier allows remote attackers to cause a denial of service (crash) via a crafted pageid parameter to admin/versions.html.

Vulnerability in Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows a remote attacker to bypass authentication and cause a denial of service or upload files via direct requests to obsolete JSP files including admin/uploadclient.jsp, apply_firmware_action.jsp, and file.jsp.

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter in forum.asp, Headforums.asp, and Subject.asp scripts.

SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid and id parameters.