CVE Vulnerability Catalog

SQL injection vulnerability in MidiCart allows remote attackers to execute arbitrary SQL commands via the code_no parameter to Item_Show.asp or search_list.asp.

Unknown vulnerability in session.php in EQdkp before version 1.3.0, possibly involving auto_login_id. Details about impact and attack vectors are unknown.

A direct code injection vulnerability in WordPress 1.5.1.3 and earlier allows remote attackers to execute arbitrary PHP code via the cache_lastpostdate[server] cookie.

Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without using encryption.

The vulnerability in VERITAS Backup Exec and NetBackup for Windows and NetWare servers involves the use of a static password during NDMP agent authentication with the server. A remote attacker can exploit this to read and write arbitrary files with backup server privileges.

AOL Client Software 9.0 uses insecure permissions for its installation path, which allows local users to execute arbitrary code with SYSTEM privileges by replacing ACSD.exe with a malicious program.

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing '.php.rar' or other multiple extensions that include .php.

MySQL on Windows allows authenticated users with insert privileges on the mysql.func table to cause a denial of service (server hang) and possibly execute arbitrary code via requests for non-library files or functions in libraries not tailored for MySQL, blocking the LoadLibraryEx function.

Direct static code injection vulnerability in editcss.php in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary PHP code, HTML, and script via the csscontent parameter, which is directly inserted into the gbxfinal.css file.

Eval injection vulnerability in the template engine for SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via a string containing the code within curly brackets, which are processed by the PHP eval function.

Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which allows local users to gain access.

Nortel Contivity VPN Client V05_01.030 does not properly drop system privileges when configuring a certificate for authentication. A local user can exploit the File Open dialog box to run a program with elevated privileges.

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in index.php or member.php, action parameter in search.php or member.php, or polloptions parameter in polls.php.

The ePing plugin 1.02 and earlier for e107 portal contains a vulnerability in doping.php that allows remote attackers to execute arbitrary code or overwrite files. The issue stems from improper filtering of the eping_count and eping_host parameters, which are susceptible to shell metacharacter injection.

Multiple SQL injection vulnerabilities in Open Bulletin Board (OpenBB) allow remote attackers to execute arbitrary SQL commands via the FID parameter in board.php or UID parameter in member.php.

SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter.

The web administration interface in Mentor ADSL-FR4II router running firmware 2.00.0111 does not set a default password, which allows local users to gain access.

SQL injection vulnerability in u2u.inc.php in XMB Forum 1.9.1 allows remote attackers to execute arbitrary SQL commands via certain values that are inserted into the $in variable.

SQL injection vulnerability in Gravity Board X (GBX) 1.1 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the login field.

PHP remote file inclusion vulnerability in SysCP 1.2.10 and earlier allows remote attackers to execute arbitrary PHP code via the language parameter.