CVE Vulnerability Catalog

CPA Lead Reward Script allows SQL Injection via the username parameter.

CVE-2017-15985 affects the Basic B2B script, allowing SQL Injection via the pid or id parameters in the product_view1.php file.

Creative Management System (CMS) Lite version 1.4 is vulnerable to SQL Injection via the S parameter in index.php.

MyMagazine Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

Dynamic News Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

Responsive Newspaper Magazine & Blog CMS version 1.0 allows SQL Injection via the id parameter in admin/admin_process.php for form editing.

US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.

Shareet - Photo Sharing Social Network version 1.0 allows SQL Injection via the photo parameter.

AROX School ERP PHP Script version 1.0 allows SQL Injection via the office_admin/id parameter.

Protected Links - Expiring Download Links version 1.0 allows SQL Injection via the username parameter.

Insecure default configuration in Progress Software OpenEdge 10.2x and 11.x allows unauthenticated remote attackers to specify arbitrary URLs from which to load and execute malicious Java classes via port 20931.

Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle Identity Manager. Affected versions are 11.1.1.7, 11.1.2.3, and 12.2.1.3.

The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin before version 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, allowing remote attackers to execute arbitrary JavaScript in the host page.

In Apache HttpClient versions 4.3.x before 4.3.1, it does not ensure that X509HostnameVerifier is not null, which may allow attackers to exploit vulnerabilities involving hostname verification.

Apache Hadoop versions before 0.23.4, 1.x before 1.0.4, and 2.x before 2.0.2 generate token passwords using a 20-bit secret when Kerberos security features are enabled. This makes it easier for attackers to crack secret keys via a brute-force attack.

An issue was discovered in Xen through 4.9.x related to grant copying code that relied on the incorrect assumption that any grant pin would have a suitable page reference. When such a grant copy operation is performed on a dying domain, this assumption proves wrong, potentially leading to hypervisor memory corruption.

The HTTP/2 experimental feature in Apache Traffic Server 5.3.x before 5.3.1 allows remote attackers to cause a denial of service (out-of-bounds access and daemon crash) or possibly execute arbitrary code via vectors related to the frame_handlers array or set_dynamic_table_size function.

Apache Traffic Server 5.1.x before 5.1.1 allows remote attackers to bypass access restrictions by leveraging failure to properly tunnel remap requests using CONNECT.

The XSLTCompiledTransform function in Ektron Content Management System (CMS) before version 8.02 SP5 configures the XSL with enableDocumentFunction set to true. This allows remote attackers to read arbitrary files, potentially bypassing authentication, modifying viewstate, causing denial of service, or having unspecified other impacts.

Ektron Content Management System (CMS) before version 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, allowing remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.