CVE Vulnerability Catalog

A buffer overflow vulnerability in WinAce 2.6.0.5 and possibly earlier versions allows remote attackers to execute arbitrary code via a temporary (.tmp) file containing an entry with a long file name.

SQL injection vulnerability in search.php of MyBulletinBoard (MyBB) versions 1.00 Release Candidate 1 through 4. A remote attacker can execute arbitrary SQL commands via the uid parameter.

Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via '..' sequences in the SITE_Path parameter to menu_dx.php or CONTENTS_Dir parameter to menu_sx.php.

Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the addquery and subquery parameters in the newbb plus module, the forum parameter in newtopic.php, edit.php, and reply.php of the newbb plus module, and the msg_id parameter in print.php of the messages module.

SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package.

PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the SITE_Path parameter to menu_dx.php or CONTENTS_Dir parameter to menu_sx.php.

SQL injection vulnerability in the Downloads module of PostNuke 0.760-RC4b allows administrators to execute arbitrary SQL commands via the 'show' parameter in dl-viewdownload.php.

Vulnerability in Mantis 0.19.0a1 through 1.0.0a3 in core/database_api.php, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses.

The vulnerability in includes/common.php in RunCMS 1.2 and earlier uses the extract function with EXTR_OVERWRITE on HTTP POST variables, allowing remote attackers to overwrite arbitrary variables, potentially leading to arbitrary code execution.

A vulnerability in the gorum/prod.php script in Zorum 3.5 allows remote attackers to execute arbitrary code by injecting shell metacharacters into the argv parameter.

A buffer overflow in the mutt_decode_xbit function in Handler.c of Mutt 1.5.10 may allow remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.

Vulnerability in Computer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before build 220_13, and 1.11 before build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

A buffer overflow vulnerability in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.

A buffer overflow vulnerability in the Log-SCR function of WinFtp Server 1.6.8 allows a remote attacker to cause a denial of service (application crash) and potentially execute arbitrary code via a long request.

The vulnerability in EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 is due to improper verification of authentication tokens. A remote attacker can modify an authentication token to gain unauthorized privilege escalation.

The vulnerability in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 relies on AUTH_UNIX authentication, which uses user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.

Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the letter parameter in login/member.php or the im_receiver parameter in login/imcenter.php.

An unknown vulnerability in the Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.

Multiple PHP file inclusion vulnerabilities in PHPTB Topic Board 2.0 and earlier allow remote attackers to execute arbitrary PHP code via the absolutepath parameter.

A buffer overflow vulnerability in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.