CVE Vulnerability Catalog

The myquiz.pl script in Dale Ray MyQuiz 1.01 allows remote attackers to execute arbitrary commands via shell metacharacters in the URL, which are not properly sanitized in the PATH_INFO environment variable.

In SPIP 1.8.2g and earlier, a SQL injection vulnerability exists in spip_acces_doc.php3. Remote attackers can execute arbitrary SQL commands via the file parameter.

Multiple buffer overflows in QNX Neutrino RTOS 6.2.0 in the su and passwd commands allow local users to execute arbitrary code via a long first argument.

SQL injection vulnerability in check.asp of Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

QNX Neutrino RTOS 6.3.0 ships /etc/rc.d/rc.local with world-writable permissions, allowing local users to modify the file and execute arbitrary code at system startup.

Multiple SQL injection vulnerabilities in 2200net Calendar system 1.2, with gpc_magic_quotes disabled, allow remote attackers to execute arbitrary SQL commands and bypass authentication via the fm_data[id] parameter in calendar.php and the $ad['acc'] variable in adminlogin.php.

A directory traversal vulnerability in compose.pl in @Mail 4.3 and earlier for Windows allows remote attackers to upload arbitrary files to arbitrary locations via a .. (dot dot) in the unique parameter.

SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

Multiple SQL injection vulnerabilities in Hinton Design phphd 1.0 allow remote attackers to execute arbitrary SQL commands via the username parameter to check.php or other unknown attack vectors in scripts displaying database information.

In check.php of Hinton Design phphd 1.0, passwords are not checked when certain cookies are provided, allowing remote attackers to bypass authentication.

Multiple SQL injection vulnerabilities were found in Hinton Design phphg Guestbook 1.2. An attacker can inject malicious input via the username parameter in check.php or the id parameter in several admin files, allowing arbitrary SQL command execution.

In check.php of Hinton Design phphg Guestbook 1.2, the user password is not verified during cookie-based authentication, allowing remote attackers to gain unauthorized access.

Multiple SQL injection vulnerabilities were found in Oracle 10g Release 1 before the January 2006 CPU in the SYS.KUPV$FT and SYS.KUPV$FT_INT packages. Remote attackers can execute arbitrary SQL commands via parameters in functions like ATTACH_JOB, HAS_PRIVS, OPEN_JOB, and others. Oracle's advisory lacks details, so it is unclear if these issues were fixed.

SQL injection vulnerability in search.php of MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid and keywords parameters.

SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.

A vulnerability in Blue Coat Proxy Security Gateway OS (SGOS) 4.1.2.1 allows bypassing CONNECT rules when Deep Content Inspection is enabled. Remote attackers can evade connection filters.

An unspecified vulnerability in the Lexmark Printer Sharing LexBce Server Service (LexPPS), possibly versions 8.29 and 9.41, allows remote attackers to execute arbitrary code via unknown vectors.

Multiple integer overflows in MPlayer 1.0pre7try2 and earlier in new_demux_packet (demuxer.h) and demux_asf_read_packet (demux_asf.c) allow remote attackers to execute arbitrary code via a crafted ASF file with a large packet length value.

The vulnerability in Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the 'Appearance' dialog and selecting the 'Additional styles (skins) are available on the Lexmark web site' option, which launches a web browser running with SYSTEM privileges.

Untrusted search path vulnerability in opcontrol in OProfile 0.9.1 and earlier allows local users to execute arbitrary commands via a modified PATH pointing to malicious 'which' or 'dirname' programs. Although opcontrol is not normally setuid, common sudo usage makes this a serious issue.