CVE Vulnerability Catalog

SQL injection vulnerability in vb_board_functions.php in MKPortal 1.1, as used with vBulletin 3.5.4 and earlier, allows remote attackers to execute arbitrary SQL commands via the userid parameter.

SQL injection vulnerability in save.php in PHPSurveyor 0.995 and earlier allows remote attackers to execute arbitrary SQL commands via the surveyid cookie. This issue can be leveraged to execute arbitrary PHP code by inserting directory traversal sequences into the database, which are then processed by the thissurvey['language'] variable.

The na-img-4.0.34.bin software for the IP3 Networks NetAccess NA75 has a default administrative account with username and password set to 'admin'.

Multiple SQL injection vulnerabilities were found in ampleShop 2.1 and earlier. An attacker can remotely execute arbitrary SQL commands via the RecordID, solus, and cat parameters in various .cfm files.

Multiple SQL injection vulnerabilities were found in the osTicket module in Help Center Live before version 2.1.0. They allow remote attackers to execute arbitrary SQL commands via unknown vectors.

SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands and view all usernames and passwords via the id parameter to the showprofile page in index.php.

A buffer overflow vulnerability in the parse_url function of the RTSP module in Fenice 1.10 and earlier allows remote attackers to execute arbitrary code via a long URL.

The vulnerability in Asterisk Recording Interface (ARI) in Asterisk@Home before version 2.8 stores the recordings/includes/main.conf file under the web document root with insufficient access control, allowing remote attackers to obtain password information.

A PHP remote file inclusion vulnerability in agenda.php3 of phpMyAgenda 3.0 Final and earlier allows attackers to execute arbitrary PHP code by supplying a URL in the rootagenda parameter. This can lead to full server compromise.

A vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code by injecting a URL into the DFORUM_PATH parameter across multiple scripts. Attackers can upload a malicious PHP file from an external server and execute it on the victim's server.

An eval injection vulnerability in index.php of ClanSys 1.1 allows remote attackers to execute arbitrary PHP code by injecting PHP code into the 'page' parameter. The attack can involve injecting an 'include' statement, leading to code execution.

RI Blog 1.1 is vulnerable to SQL injection in the username and password fields. Remote attackers can execute arbitrary SQL commands, leading to unauthorized database access.

An off-by-one error in the OID printing routine in Ethereal 0.10.x up to 0.10.14 has unknown impact and remote attack vectors.

In SL_site 1.0, the page.php file is vulnerable to SQL injection via the id_page parameter, allowing remote attackers to execute arbitrary SQL commands. This issue can also lead to reflected XSS through error messages.

SQL injection vulnerability in calendar.php in vBulletin 3.0.x allows remote attackers to execute arbitrary SQL commands via the eventid parameter. The affected version is disputed by the vendor, who states the issue was fixed in version 2.3.4.

PHP remote file inclusion vulnerability in movie_cls.php of Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter.

A heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code by sending long strings to certain commands on the file transfer port.

Multiple SQL injection vulnerabilities in check_login.asp in Bloggage allow remote attackers to execute arbitrary SQL commands via the acc_name and password parameters.

A vulnerability in Symantec Scan Engine 5.0.0.24 and earlier versions before 5.1.0.7 uses client-side password verification. A remote attacker can bypass authentication and gain administrator privileges by sending modified XML requests.

An argument injection vulnerability in Beagle before version 0.2.5 allows attackers to execute arbitrary commands via crafted filenames. When Beagle launches external helper applications during indexing, injected command line arguments are processed.