CVE Vulnerability Catalog

SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.

A SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier was reported to allow remote attackers to execute arbitrary SQL commands via the page parameter. The vendor disputed this report, stating that using a non-positive or non-integer value for the page parameter causes the search query to use a negative number in the LIMIT clause, breaking the query and showing no results, but it is not a SQL injection error.

Multiple SQL injection vulnerabilities exist in thinkWMS 1.0 and earlier. Remote attackers can execute arbitrary SQL commands via the 'id' parameter in index.php and printarticle.php, and the 'catid' parameter in index.php.

FineShop 3.0 and earlier contains multiple SQL injection vulnerabilities in index.php. Remote attackers can execute arbitrary SQL commands via the produkt, id_produc, and id_kat parameters.

SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.

IBM WebSphere Application Server before 6.0.2.11 contains an unspecified vulnerability due to improper use of the UserNameToken cache. Technical details, impact, and attack vectors have not been publicly disclosed.

The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode. This can lead to unauthorized file access.

Buffer overflow in in_midi.dll for Winamp versions 2.90 up to 5.23, including 5.21. A remote attacker can execute arbitrary code by providing a crafted MIDI (.mid) file.

Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session. This allows remote attackers to bypass authentication via various methods, known as the "ACS Weak Session Management Vulnerability".

BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a request for a .cfm file whose name contains an MS-DOS device name such as con, aux, com1, and com2.

SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.

SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.

SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.

SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.

SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yeni_host.asp.

The Task scheduler (at.exe) on Microsoft Windows XP spawns each scheduled process with SYSTEM permissions, which may allow local users to gain privileges. The issue is disputed by third parties who state that the Task scheduler is limited to the Administrators group by default upon installation.

A vulnerability in Clearswift MAILsweeper for SMTP and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass text analysis, potentially bypassing SPAM and other filters, by sending an email specifying a non-existent or unrecognized character set.

The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password. This allows remote attackers to gain privileges.

The Lanap BotDetect ASP.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page. This makes it easier for remote attackers to conduct automated attacks by replaying the ViewState for a known number.

Integer overflow in Opera 8.54 and earlier allows remote attackers to execute arbitrary code via a JPEG image with large height and width values, which causes less memory to be allocated than intended.