CVE Vulnerability Catalog

SQL injection vulnerability in events.php of Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the month and year parameters.

X.Org server (xorg-server) versions 1.0.0 and later, X11R6.9.0, and X11R7.0 incorrectly treat the address of the geteuid function as the return value of a call to geteuid. This allows local users to bypass intended restrictions and execute arbitrary code via the -modulepath option or overwrite arbitrary files via -logfile.

Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter in friend.php or article.php.

A heap-based buffer overflow in cURL and libcURL versions 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path.

In SoftBB 0.1, the reg.php file contains an SQL injection vulnerability via the mail parameter. This allows a remote attacker to execute arbitrary SQL commands on the database.

In rssh 2.3.0 on Debian GNU/Linux, the util.c file lacks braces to form a code block, causing the CVS check to always succeed. This allows rsync and rdist to bypass intended access restrictions defined in rssh.conf.

A vulnerability in Beagle 0.2.2.1 due to an untrusted search path may allow a local user to gain privileges by placing a malicious beagle-info program in the current working directory or in directories specified in the PATH.

Multiple SQL injection vulnerabilities were found in Milkeyway Captive Portal 0.1 and 0.1.1. An attacker can inject malicious SQL code through parameters in auth.php, authuser.php, utils.php, traffic.php, userstatistics.php, and chgpwd.php scripts.

Multiple SQL injection vulnerabilities were found in Invision Power Board (IPB) versions 2.0.4 and 2.1.4 before 20060105. Remote attackers can execute arbitrary SQL commands via cookies by manipulating arrays of id/stamp pairs, keys in key/value arrays in ipsclass.php, the topics variable in usercp.php, and the topicsread cookie in topics.php, search.php, and forums.php.

PHP remote file inclusion vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter.

PHP iCalendar 2.21 and earlier do not require authentication for write access to the calendars directory, allowing remote attackers to upload and execute arbitrary PHP scripts via a WebDAV PUT request with a filename containing a .php extension and a trailing null character.

CGI::Session 4.03-1 does not set proper permissions on temporary files created by Driver::File and Driver::db_file. A local user can read these files and obtain sensitive information such as session keys.

Mozilla Firefox 1.0.7 and 1.5.0.1 may crash (denial of service) when viewing the page source of an HTML tag with a large number of script event handlers like onload and onmouseover. Red Hat and Mozilla disputed this issue, suggesting it may be caused by the IE Tab extension rather than Firefox itself.

The vulnerability in Classic Planer of AntiVir PersonalEdition Classic 7 is that it does not drop privileges before executing external programs. This allows a local user to gain privileges via notepad.exe, which is used to display scan reports.

PHP SimpleNEWS 1.0.0 contains a vulnerability in admin.php that allows a remote attacker to bypass authentication by setting the admin parameter in a cookie.

SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter.

Multiple SQL injection vulnerabilities were found in ASPPortal 3.00. Their exact impact and attack vectors are unknown.

The Internet Key Exchange implementation in Funkwerk X2300 7.2.1 is vulnerable to a remote attack that can cause denial of service and possibly arbitrary code execution via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite.

SQL injection vulnerability in index.php of OxyNews allows remote attackers to execute arbitrary SQL commands via the oxynews_comment_id parameter.

In Microsoft Commerce Server 2002 before SP2, sample files in the authfiles directory allow authentication bypass. An attacker can log in to authfiles/login.asp with a valid username and any password, then navigate to the main site twice to gain access without proper authorization.