CVE Vulnerability Catalog

SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the T1 or T2 parameters.

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier. Remote attackers can execute arbitrary SQL commands via unfiltered input in the HTTP_RAW_POST_DATA variable, which stores data in an XML file.

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

SQL injection vulnerability in the loginUser function of the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.

SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.

SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.

Unknown vulnerability in Remote Agent for Windows Servers (RAWS) in VERITAS Backup Exec 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for NetWare, allows remote attackers to gain privileges by copying the handle for the server.

Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp.

In Solaris 8, 9, and 10, the runtime linker (ld.so) trusts the LD_AUDIT environment variable in setuid or setgid programs, allowing local users to gain privileges by modifying LD_AUDIT to reference malicious code or using a long value for LD_AUDIT.

A buffer overflow vulnerability in the VERITAS Backup Exec Web Administration Console (BEWAC) versions 9.0 4367 through 10.0 rev. 5484 allows remote attackers to execute arbitrary code.

A vulnerability in VERITAS Backup Exec 9.0 through 10.0 for Windows Servers and 9.0.4019 through 9.1.307 for Netware allows a remote attacker to cause a denial of service (Remote Agent crash) by sending a crafted packet to the NDMLSRVR.DLL library or a packet with an invalid (non-zero) 'Error Status' value, leading to a null pointer dereference.

Vulnerability in VERITAS Backup Exec Server (beserver.exe) versions 9.0 through 10.0 for Windows allows remote unauthenticated attackers to modify the registry by calling methods to the RPC interface on TCP port 6106.

Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the iCat, iSub, iPro, and iType parameters in various ASP scripts.

PHP remote file inclusion vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary PHP code via the config[include_path] parameter.

SQL injection vulnerability in config_settings.php in Cacti before 0.8.6e allows remote attackers to execute arbitrary SQL commands via the id parameter.

Multiple SQL injection vulnerabilities in DUware DUportal PRO 3.4.3 allow remote attackers to execute arbitrary SQL commands via the iChannel, iData, iMem, iCat, offset, and iChannel parameters.

Multiple SQL injection vulnerabilities in DUpaypal Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the iCat, iPro, and iSub parameters.

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the iMsg parameter to messages.asp, iFor parameter to post.asp or forums.asp, or id parameter to userEdit.asp. Vectors 1 and 3 were later reported to affect version 3.0.