CVE Vulnerability Catalog

PHP local file inclusion vulnerability in osTicket 1.3.1 beta and earlier allows remote attackers to include and possibly execute arbitrary local files via the inc parameter in view.php and open.php.

The vulnerability in read.cgi in GlobalNoteScript allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

The vulnerability in IMail stores usernames and passwords in cleartext in a cookie, allowing remote attackers to obtain sensitive information.

PHP remote file inclusion vulnerability in EasyPHPCalendar 6.1.5 and earlier allows remote attackers to execute arbitrary code via the serverPath parameter.

A regression error in the embedded HSQLDB in JBoss jBPM 2.0 allows remote attackers to execute arbitrary commands. This is a re-introduction of a vulnerability originally identified as CVE-2003-0845.

SQL injection vulnerability in news.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the prevnext parameter.

SQL injection vulnerability in class.ticket.php in osTicket 1.3.1 beta and earlier allows remote attackers to execute arbitrary SQL commands via the ticket variable.

SQL injection vulnerability in Geeklog before 1.3.11 allows remote attackers to execute arbitrary SQL commands via user comments for an article.

A vulnerability in zlib version 1.2 and later allows remote attackers to cause a denial of service (crash) by sending a crafted compressed stream with an incomplete code description of a length greater than 1, leading to a buffer overflow. This is demonstrated using a crafted PNG file.

Vulnerability in login.cgi in Community Link Pro Web Editor allows remote attackers to execute arbitrary commands via the file parameter.

SQL injection vulnerability in verify.asp in EtoShop Dynamic Biz Website Builder (QuickWeb) 1.0 allows remote attackers to execute arbitrary SQL commands via the T1 or T2 parameters.

Eval injection vulnerability in PEAR XML_RPC up to version 1.3.0 and PHPXMLRPC up to version 1.1 allows remote attackers to execute arbitrary PHP code via a crafted XML file that is not properly sanitized before being used in an eval statement. This flaw affects many popular CMS and applications such as WordPress, Drupal, Serendipity, eGroupware, TikiWiki, and others.

The helper scripts for crip 3.5 do not properly use temporary files, which allows local users to have an unknown impact with unknown attack vectors.

SQL injection vulnerability in XMLRPC server in WordPress 1.5.1.2 and earlier. Remote attackers can execute arbitrary SQL commands via unfiltered input in the HTTP_RAW_POST_DATA variable, which stores data in an XML file.

A vulnerability in Cisco IOS versions 12.2T through 12.4 allows remote attackers to bypass AAA RADIUS authentication, if the fallback method is set to none, via a long username.

SQL injection vulnerability in the loginUser function of the XMLRPC server in XOOPS 2.0.11 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via crafted values in an XML file, as demonstrated using the blogger.getPost method.

PHP remote file inclusion vulnerability in viewtopic.php in phpBB 2.0.15 and earlier allows remote attackers to execute arbitrary PHP code.

SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.

Multiple SQL injection vulnerabilities in ActiveBuyAndSell 6.2 allow remote attackers to execute arbitrary SQL commands via the catid parameter to (1) default.asp or (2) buyersend.asp, (3) Administrator ID field in admin.asp, E-mail field in (4) advertiserstart.asp or (5) buyer.asp, or Keyword field in search.asp.

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.