CVE Vulnerability Catalog

SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable.

The savesettings.php file in phpGB version 1.20 and earlier does not require authentication, allowing remote attackers to cause a denial of service or execute arbitrary PHP code by modifying config.php.

In Cacti before version 0.6.8, the graphs.php file allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.

The scponly program does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls.

CafeLog b2 Weblog Tool version 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.

Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.

CVE-2002-1482 describes an SQL injection vulnerability in login.php for phpGB version 1.20 and earlier, when magic_quotes_gpc is not enabled. This allows remote attackers to gain administrative privileges by injecting SQL code into the password field.

Google Toolbar version 1.1.58 and earlier allows remote websites to perform unauthorized toolbar operations, including script execution and file reading in other zones such as 'My Computer'. This is possible by opening a window to tools.google.com or the res: protocol, then modifying the window's location to the toolbar's configuration URL, bypassing the origin verification check.

The vsftpd FTP daemon in Red Hat Linux 9 is not compiled with TCP wrappers, which prevents it from restricting access as intended.

The Gateway GS-400 server has a default root password of '0001n' that cannot be changed via the administrative interface, allowing attackers to gain root privileges.

Easy Guestbook CGI programs do not authenticate the administrator, allowing remote attackers to delete entries or reconfigure the Guestbook via direct access to the respective scripts.

Buffer overflow in gds_lock_mgr of Interbase Database 6.x allows local users to gain privileges via a long ISC_LOCK_ENV environment variable (INTERBASE_LOCK).

Buffer overflow in moxftp 2.2 and earlier allows remote malicious FTP servers to execute arbitrary code via a long FTP banner.

CVE-2002-0690 describes a format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 that allows remote attackers to execute arbitrary code via an HTTP GET request with a URI containing format strings.

Belkin F5D5230-4 4-Port Cable/DSL Gateway Router version 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server. This allows remote attackers to hide which host is being used to access the web server.

The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, allowing remote attackers to modify home pages of other users.

HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.

Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter.

In dotProject version 0.2.1.5, there is a vulnerability that allows remote attackers to bypass authentication using a cookie or URL with the user_cookie parameter set to 1.

FUDforum versions before 2.2.0 have SQL injection vulnerabilities that allow remote attackers to perform unauthorized database operations via report.php, selmsg.php, and showposts.php.