CVE Vulnerability Catalog

SQL injection vulnerability in browse.ihtml in iHTML Merchant Mall allows remote attackers to execute arbitrary SQL commands via the id, store, and step parameters.

SQL injection vulnerability in ZixForum 1.12 allows remote attackers to execute arbitrary SQL commands via the H_ID parameter in forum.asp, Headforums.asp, and Subject.asp scripts.

SQL injection vulnerability in Limbo CMS 1.0.4.2 and earlier, with register_globals off, allows remote attackers to execute arbitrary SQL commands via the _SERVER[REMOTE_ADDR] parameter in index.php, which modifies the underlying $_SERVER variable.

The IKEv1 implementation in Apani Networks EpiForce 1.9 and earlier with IPSec enabled allows remote attackers to cause a denial of service (crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. Due to lack of details, it is unclear which of CVE-2005-3666, CVE-2005-3667, or CVE-2005-3668 applies.

An unspecified vulnerability in Hitachi Cosminexus Collaboration Portal, Groupmax Collaboration Portal, and Groupmax Collaboration Web Client allows a remote attacker to cause a denial of service by sending repeated invalid requests to the Schedule component.

Multiple unspecified vulnerabilities in Driverse before version 0.56b have unknown impact and attack vectors, related to (1) a 'ptrace exploit' and (2) 'some other potential security problems.'

SSH Tectia Server 5.0.0 (A, F, and T), when allowing host-based authentication only, allows users to log in with the wrong credentials.

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the s_itemname and s_orderby parameters to plexcart.pl.

SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the db_id parameter.

Vulnerability in index.php of ezUpload Pro 2.2 and earlier allows remote attackers to include files via the mode parameter.

SQL injection vulnerability in index.php of AlmondSoft Almond Personals 4.05 allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in ezUpload Pro 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified search module parameters.

SQL injection vulnerability in index.php of AlmondSoft Almond Classifieds 5.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.

Format string vulnerability in the lire_pop function in pop.c in libremail 1.1.0 and earlier, when compiled with the debug option, allows remote attackers to execute arbitrary code via a crafted e-mail or POP server response.

A heap-based buffer overflow in Citrix Program Neighborhood client version 9.0 and earlier allows remote attackers to execute arbitrary code by sending a long name value in an Application Set response.

The vulnerability in Qt-UnixODBC before version 3.3.4-r1 on Gentoo Linux is due to an untrusted search path. A local user in the portage group can exploit a malicious shared object placed in the Portage temporary build directory, which is part of the RUNPATH, leading to privilege escalation.

A vulnerability in the Westell Versalink 327W router allows a remote attacker to cause a denial of service (device crash) by sending an IP packet with the same source and destination IP addresses and ports, with the SYN flag set (known as a Land attack).

Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage group to gain privileges via a malicious shared object in the Portage temporary build directory, which is part of the RUNPATH.

PHP remote file inclusion vulnerability in MarmaraWeb E-commerce allows remote attackers to execute arbitrary code via the 'page' parameter in index.php.

Unspecified vulnerability in PhpLogCon before version 1.2.2 allows remote attackers to use arbitrary profiles via unknown vectors involving 'smart' values for userid and password, probably related to an SQL injection vulnerability in the pass and usr parameters in submit.php.