CVE Vulnerability Catalog

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows attackers to execute arbitrary SQL commands via crafted multibyte encodings (SJIS, BIG5, GBK) that are not properly handled by the mysql_real_escape function.

Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id, hid, e, yid, bid, kid, tur, s, and id parameters in various scripts.

SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier. Remote attackers can execute arbitrary SQL commands via the yas_1, yas_2, and yas_3 parameters.

A stack-based buffer overflow in ZipCentral 4.01 allows remote attackers to execute arbitrary code via a ZIP archive with a long filename, requiring user interaction.

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5. An attacker can execute arbitrary PHP code by sending a crafted URL in the l parameter.

The vulnerability in Open-Xchange 0.8.2 and earlier versions uses a static default username and password with a valid login shell in the LDAP server initfile. This allows remote attackers to access any server where the default credentials have not been changed.

A remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows attackers to include arbitrary files from external servers via the config[fsBase] parameter in multiple scripts.

In home/register.php in Eggblog before version 3.0, a vulnerability allows remote attackers to change the password of administrators and possibly other users by modifying the username parameter.

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the count and from variables in database.mysql.inc, database.pgsql.inc, and database.mysqli.inc.

In Nukedit 4.9.6 and earlier, the file utilities/register.asp allows remote attackers to create new users in arbitrary groups, including the administrative group, by modifying the groupid parameter during the addDB action.

SQL injection vulnerability in news.php of VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.

SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The provenance of this information is unknown; details are obtained solely from third party sources.

The Administration Console in Secure Elements Class 5 AVR (C5 EVM) before version 2.8.1 does not enforce access control, allowing remote attackers to gain access to servers via the console.

The Secure Elements Class 5 AVR server (aka C5 EVM) before version 2.8.1 uses a hard-coded user ID and password, allowing remote attackers to gain access to the server.

A buffer overflow vulnerability exists in the addnewword function of typespeed version 0.4.4 and earlier. This flaw may allow remote attackers to execute arbitrary code via unknown vectors.

An unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows versions 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes (bug ID CSCsd79265).

Geeklog 1.4.0sr2 and earlier versions contain an SQL injection vulnerability in the story submission mechanism. It allows a remote attacker to execute arbitrary SQL commands via unknown vectors.

A directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, with register_globals enabled, allows remote attackers to read arbitrary files via a '..' sequence in the phpEx parameter.

Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request or invalid arguments to layout/professional/functions.php or getimage.php.

Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code by supplying a malicious URL in the 'path' parameter to form.php, customize.php, and initialize.php.