489 matches found
Sql injection
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
CVE-2006-0832
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
PT-2005-4231 · Archilles · Archilles Newsworld
Name of the Vulnerable Software and Affected Versions: Archilles Newsworld versions up to 1.3.0 Description: The issue allows attackers to bypass authentication by obtaining the password hash for another user and specifying the hash in the pwd argument. This can be achieved, for example, through...
CVE-2004-2388
The vulnerability CVE-2004-2388 affects the AIX 4.3.3 rexecd component. It stems from not properly using a local copy of the pwd structure when calling getpwnam, allowing the authenticate function to overwrite the pwd data and potentially assign privileges to the wrong user. This creates a privil...
CVE-2005-0746
The Mini FTP server in Novell iChain 2.2 and 2.3 SP2 and earlier allows remote unauthenticated attackers to obtain the full path of the server via the PWD command...
CVE-2004-2388
rexecd for AIX 4.3.3 does not properly use a local copy of the pwd structure when calling getpwnam, which may cause the structure to be overwritten by the authenticate function and assign privileges to the wrong user...
CVE-2003-1319
Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arbitrary code via 1 a long response to a PWD command, which triggers a stack-based overflow, and 2 a long line in a response to a file LIST command, which triggers a heap-based...