CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the lcat, doc, or uid parameters to index.php, or (2) the mid or bid parameters to forums.php.

A buffer overflow vulnerability in the decode_post function in ELOG before version 2.5.7 allows remote attackers to execute arbitrary code via attachments with long file names.

A buffer overflow vulnerability in the URL processor of Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL with a long hostname, also known as the 'URL Parsing Memory Corruption Vulnerability.'

Trend Micro Control Manager 3.0 Enterprise Edition is vulnerable to a replay attack where an attacker can capture and resend encrypted username and password, allowing unauthorized privilege escalation.

The citat.pl script allows remote attackers to execute arbitrary files via shell metacharacters in the argument.

PHP remote file inclusion vulnerability in shoutact.php for TKai's Shoutbox allows remote attackers to execute arbitrary PHP code via the query parameter.

Multiple buffer overflows in Cain & Abel before version 2.67 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via (1) an IKE packet with a large ID field that is not properly handled by the PSK sniffer filter, (2) the HTTP sniffer filter, or the (3) POP3, (4) SMTP, (5) IMAP, (6) NNTP, or (7) TDS sniffer filters.

PHP remote file inclusion vulnerability in content.php and index.php of Vortex Portal allows remote attackers to execute arbitrary PHP code via a URL in the act parameter.

Vulnerability in AS/400 Telnet 5250 terminal emulation clients (IBM Client Access, Bosanova, PowerTerm, Mochasoft, and others) allows malicious AS/400 servers to execute arbitrary commands on the client workstation. The attack uses a STRPCO (Start PC Organizer) command followed by STRPCCMD (Start PC Command), e.g., to create a backdoor account via REXEC.

SQL injection vulnerability in NotifyLink before version 3.0 allows remote attackers to execute arbitrary SQL commands via the URL.

Vulnerability in ADP Elite System Max 9000 allows remote authenticated users to gain privileges by uploading a .profile that sets the ADPROOT environment variable to the root directory.

Buffer overflow vulnerability in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter.

An unknown high-risk vulnerability in DB2 Universal Database 8.1 and earlier has unknown impact and attack vectors. Due to delayed disclosure of details, this candidate may be split in the future or may be a duplicate of other issues reported by the vendor.

The vulnerability in the animated cursor (ANI) handling in Windows NT, 2000 through SP4, XP through SP1, and 2003 allows a remote attacker to execute arbitrary code via a stack-based buffer overflow by manipulating the length field in the animation header block.

A vulnerability in CVS 1.12 and earlier on Debian GNU/Linux, when using the repouid patch, allows remote attackers to bypass authentication via the pserver access method.

Multiple SQL injection vulnerabilities in MyPHP Forum 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the fid in forum.php, (2) the member parameter in member.php, (3) the email parameter in forgot.php, or (4) the nbuser or nbpass parameters in include.php. NOTE: it was later reported that vector 2 exists in 3.0 and earlier.

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Multiple heap-based buffer overflows in 3Com 3CServer allow remote authenticated users to execute arbitrary code via long FTP commands, as demonstrated using the STAT command.

SQL injection vulnerability in post.php in MercuryBoard 1.1.1 allows remote attackers to execute arbitrary SQL commands via the t or qu parameter in a reply post action on index.php.