CVE Vulnerability Catalog

SQL injection vulnerability in forum.php of PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter. This is a different vulnerability than CVE-2005-3585.

Vulnerability in Perl in Apple Mac OS X Server 10.3.9 improperly drops privileges when using the "$<" variable to set uid, allowing attackers to gain privileges.

Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.

A vulnerability in the kernel of Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows a local user to modify kernel memory and execution flow through a thread termination routine that causes Asynchronous Procedure Call (APC) entries to free the wrong data.

Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before version 1.0 have unknown impact and attack vectors. These are distinct from the vulnerabilities identified by CVE-2005-4199.

Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the ParentId, ResourceId, ResourceOffset, F_UserName, and F_Password parameters.

SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. The provenance of this issue is unknown; the details were obtained solely from third party sources.

Multiple SQL injection vulnerabilities in MyBB before 1.0 allow remote attackers to execute arbitrary SQL commands via the month, day, and year parameters in an addevent action in calendar.php; threadmode and showcodebuttons in an options action in usercp.php; list parameter in an editlists action to usercp.php; rating parameter in a rate action in member.php; and rating parameter in either showthread.php or ratethread.php.

SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute arbitrary SQL commands via the Username and Password fields.

LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command.

The vulnerability in tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the 'a' parameter, which is executed with elevated privileges in a cryptographically signed Java Applet.

A vulnerability in eFiction 1.0, 1.1, and 2.0 in unspecified environments may allow remote attackers to perform unauthorized operations by directly accessing install.php or upgrade.php. It is unclear whether this is a flaw in eFiction itself or the result of incorrect system administration, such as not removing utility scripts after use.

In eFiction 1.1, the 'Upload new image' command in 'Manage Images' allows remote attackers to upload a file with a .php extension containing a GIF header, bypassing image validation and executing arbitrary PHP code.

Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the 'let' parameter in authors.php and 'sid' parameter in viewstory.php.

SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.

Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the 'Search For' field in search.asp.

Multiple SQL injection vulnerabilities in eFiction versions 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via the 'let' parameter in a viewlist action to titles.php and via the 'username' parameter.

SQL injection vulnerability in view.php of PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter. Note: this issue has been disputed by the vendor and third parties, stating that only one character can be modified, which does not lead to SQL injection but only to an invalid SQL syntax error.

Mailman versions 2.1.4 through 2.1.6 contain a denial of service vulnerability where a message with malformed date data causes a buffer overflow and server crash.