CVE Vulnerability Catalog

The vulnerability in mod_channel.bas in ignitionServer 0.3.0 to 0.3.6 does not properly verify whether a host has the owner privileges required to delete IRC channel access entries, allowing remote attackers to bypass intended restrictions.

In the Linux kernel 2.6.x, raw character devices (raw.c) call the wrong function before passing an ioctl to the block device, which crosses security boundaries by making kernel address space accessible from user space. This vulnerability is similar to CVE-2005-1589.

Pico Server (pServ) 3.2 and earlier allows local users to read arbitrary files as the pServ user via a symlink to a file outside of the web document root.

Vulnerability in phpBB before version 2.0.15 allows remote attackers to execute arbitrary script by injecting malicious code into BBcode tags. The bbencode_second_pass and make_clickable functions in bbcode.php do not properly filter URI schemes such as javascript:, applet:, about:, activex:, chrome:, or script:.

PHP Advanced Transfer Manager (phpATM) 1.21 allows remote attackers to upload arbitrary files via filenames containing multiple file extensions, as demonstrated using a filename ending in 'php.ns', which allows execution of arbitrary PHP code.

A mathematical flaw in the implementation of the El Gamal signature algorithm in LibTomCrypt versions 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key.

SQL injection vulnerability in login.asp of Net56 Browser Based File Manager 1.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.

Vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to obtain sensitive information by providing an invalid 'id' or 'postorder' parameter, which reveals the system path in an error message when a file cannot be opened.

Multiple JavaScript vulnerabilities in BB code in BirdBlog before version 1.3.1 allow remote attackers to inject arbitrary JavaScript.

Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attackers to delete data.

A buffer overflow vulnerability in Apple iTunes before version 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Fusion SBX 1.2 and earlier improperly use the extract function in index.php, allowing remote attackers to bypass authentication by setting the is_logged parameter or execute arbitrary code via the maxname2 parameter.

Pico Server (pServ) 3.2 and earlier allows remote attackers to obtain the source code for CGI scripts via 'dirname/../cgi-bin' in a URL.

Pico Server (pServ) version 3.2 and earlier allows remote attackers to execute arbitrary commands via a URL with multiple leading slash (/) characters and ".." sequences.

The vulnerability in viewforum.php in Ultimate PHP Board (UPB) versions 1.8 through 1.9.6 allows remote attackers to read sensitive data via the postorder parameter, which is not properly handled in textdb.inc.php, possibly due to a SQL injection vulnerability.

SQL injection vulnerability in Invision Power Board (IPB) 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via a crafted cookie password hash (pass_hash) that modifies the internal $pid variable.

SQL injection vulnerability in catalog.php of CodeThat ShoppingCart 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.

SQL injection vulnerability in read.php in Open Bulletin Board (OpenBB) 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter.

Windows Media Player 9 and 10, in certain cases, allows content protected by Windows Media Digital Rights Management (WMDRM) to redirect the user to a web site to obtain a license, even when the 'Acquire licenses automatically for protected content' setting is not enabled.

SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter.