CVE Vulnerability Catalog

The vulnerability in Soti Pocket Controller-Professional 5.0 allows a remote attacker to turn off, reboot, or hard reset a PDA by sending a series of initialization, command, and reset packets to port 5492.

Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9) with magic_quotes_gpc disabled allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.

The vulnerability in registration.PHP in ATutor 1.5.1 pl2 allows a remote attacker to execute arbitrary SQL commands by providing an email address ending with a NULL character, which bypasses the PHP regular expression check. However, this may be a bug in PHP code rather than in ATutor itself.

Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.

Mailman versions 2.1.4 through 2.1.6 contain a denial of service vulnerability where a message with malformed date data causes a buffer overflow and server crash.

Vulnerability in Courier Mail Server 0.37.3–0.52.1 in the authpam.c file of the courier-authdaemon component. When pam_tally is used, the pam_acct_mgmt function is not called to verify that access should be granted. This allows attackers to authenticate to the server using accounts that have been disabled.

The web interface of Lyris ListManager 5.0 through 8.8b allows remote attackers to execute arbitrary list administration commands by injecting LFCR (%0A%0D) sequences in the pw parameter, exploiting a line wrap feature during new user subscription.

SQL injection vulnerability in Lyris ListManager versions 5.0 through 8.9a allows remote attackers to execute arbitrary SQL commands by sending SQL code after a numeric argument in the /read/attachment URL.

A stack-based buffer overflow in the dissect_ospf_v3_address_prefix function of the OSPF protocol dissector in Ethereal 0.10.12 and possibly other versions allows remote attackers to execute arbitrary code via crafted packets.

Vulnerability in Lyris ListManager versions 5.0 through 8.9a allows remote attackers to add ORDER BY columns to SQL queries using unusual whitespace characters such as newlines and 0xFF (ASCII 255), which are interpreted as whitespace.

SQL injection vulnerability in viewinvoice.php in DRZES HMS 3.2 allows remote attackers to execute arbitrary SQL commands via the invoiceID parameter.

Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via the 'harf' parameter in kullanicilistesi.asp and 'baslik' parameter in forum.asp.

SQL injection vulnerability in admin/login/index.php in Website Baker 2.6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter, as used by the user field.

Multiple SQL injection vulnerabilities in ThWboard before version 3 Beta 2.84 allow remote attackers to execute arbitrary SQL commands via the year parameter in calendar.php, the user parameter array in v_profile.php, and the userid parameter in misc.php.

A direct static code injection vulnerability in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header, which is written to data/topics.php.

In unspecified versions of RealNetworks RealPlayer there is an unverifiable vulnerability that may allow arbitrary code execution. The information about this issue is extremely vague and cannot be independently verified.

In unspecified versions of RealNetworks RealPlayer, there is an unverified vulnerability that allows a remote attacker to execute arbitrary code. The description is very vague and contains no verifiable information, and the CVE has been assigned solely for tracking purposes.

Unspecified security leak vulnerability in Contenido before version 4.6.4, occurring when register_globals and allow_url_fopen are enabled. It is likely a PHP remote file inclusion vulnerability.

SQL injection vulnerability in index.php in phpForumPro 2.2 allows remote attackers to execute arbitrary SQL commands via the parent and day parameters.

PHP remote file inclusion vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management (SugarCRM) 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter.