CVE Vulnerability Catalog

TikiWiki before version 1.8.4.1 does not properly verify uploaded images, allowing remote attackers to upload and execute arbitrary PHP scripts. This is a different vulnerability than CVE-2005-0200.

PHP remote file inclusion vulnerability in main.inc in KorWeblog 1.6.2-cvs and earlier allows remote attackers to execute arbitrary PHP code by modifying the G_PATH parameter to reference a URL on a remote web server that contains the code, as demonstrated in index.php when using .. (dot dot) sequences in the lng parameter to cause main.inc to be loaded.

Multiple unknown vulnerabilities have been discovered in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series version 5.0. These vulnerabilities have unknown attack vectors and unknown impact.

Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via a long username.

An unspecified vulnerability exists in SurgeMail before version 2.2c10 related to a Webmail security bug. The impact and attack vectors are unknown.

Buffer overflow in Vypress Messenger 3.5.1 and earlier allows remote attackers to execute arbitrary code via a message with a long first field.

SQL injection vulnerability in index.php of CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.

Unknown vulnerability in IBM Parallel Environment (PE) 3.2 and 4.1 allows attackers to execute arbitrary commands as root via unknown vectors in the sample code.

A buffer overflow vulnerability exists in the vsybase.c library of vpopmail version 5.4.2 and earlier. This could allow an attacker to cause a denial of service or execute arbitrary code.

Stack-based buffer overflow in xvbmp.c in XV allows remote attackers to execute arbitrary code via a crafted image file.

Multiple stack-based buffer overflows in YPOPs! (aka YahooPOPS) 0.4 through 0.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) POP3 USER command or (2) SMTP request.

SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.

The exit_thread function in Linux kernel 2.6 through 2.6.5 does not invalidate the per-TSS io_bitmap pointers if a process obtains IO access permissions from the ioperm function but does not drop those permissions when it exits, which allows other processes to access the per-TSS pointers, access restricted memory locations, and possibly gain privileges.

Multiple buffer overflows in sharutils 4.2.1 and earlier may allow attackers to execute arbitrary code via long output from wc to shar, or unknown vectors in unshar.

Vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypass authentication by sending an HTTP request to home.asp with a trailing slash.

The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows remote attackers to cause a denial of service (service availability loss) via a large number of POST requests to /Search.

Unknown vulnerability in IlohaMail before version 0.8.14-rc1 has unknown impact and attack vectors.

Serv-U FTP server before version 5.1.0.0 has a default account and password for local administration. A local user can use this account to create a new user, log in as that user, and then execute arbitrary commands using the SITE EXEC command.

SQL injection vulnerability in GoSmart Message Board allows remote attackers to execute arbitrary SQL code via the QuestionNumber and Category parameters to Forum.asp or the Username and Password parameters to Login_Exec.asp.

phpMyAdmin versions 2.5.1 through 2.5.7 contain a vulnerability that allows remote attackers to modify configuration settings by manipulating $cfg['Servers'] variables, potentially leading to unauthorized access to MySQL servers.