CVE Vulnerability Catalog

SQL injection vulnerability in sql.cls.php in Id Board 1.1.3 allows remote attackers to modify SQL queries via the f parameter in index.php.

Grandstream BudgeTone (BT) 100 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the 'Messages waiting' message.

A vulnerability in probe.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the olddat parameter. It is unclear which product or vendor this program is associated with.

SQL injection vulnerability in the user profile edit module in profile.php for PunBB 1.2.5 and earlier allows remote attackers to execute arbitrary SQL statements via the temp array, which is not initialized before it is used and prevents the attacker-supplied portions of the array from being properly escaped.

The vulnerability in eRoom 6.x allows a remote attacker to attach .lnk files, enabling arbitrary command execution on the server.

Multiple SQL injection vulnerabilities in Comersus shopping cart allow remote attackers to execute arbitrary SQL commands via the email parameter to comersus_optAffiliateRegistrationExec.asp or idProduct parameter to comersus_optReviewReadExec.asp.

The vulnerability in the class.xmail.php script in PhpXmail versions 0.7 through 1.1 is due to improper handling of long passwords. As a result, no error message is returned, allowing a remote attacker to bypass authentication and gain unauthorized access.

A buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams.

Cisco 7940/7960 Voice over IP (VoIP) phones do not properly check the Call-ID, branch, and tag values in a NOTIFY message to verify a subscription, which allows remote attackers to spoof messages such as the 'Messages waiting' message.

The vulnerability in eRoom is due to the lack of an expiration date for cookies, allowing a remote attacker to capture cookies and conduct replay attacks.

Multiple unknown vulnerabilities in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128, 2636, and 3545, version 0.001.04.044 through 0.001.04.504, allow attackers to bypass authentication.

Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the idProduct parameter to tellAFriend.asp, sortType parameter to viewSupportTickets.asp, or the id parameter to updateCreditCards.asp or deleteCreditCards.asp.

Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL.

PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the config[ppa_root_path] variable.

Vulnerability in phpWishlist before version 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php, bypassing login.

The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.

The vulnerability in the McAfee IntruShield Security Management System involves obtaining the user ID from the URL, allowing remote attackers to guess the Manager account and potentially gain unauthorized privileges through a brute force attack.

SQL injection vulnerability in Covide Groupware-CRM allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article.

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter.