CVE-2006-3580

CVE-2006-3580 describes an SQL injection in pages.asp of the ASP Stats Generator before 2.1.2. Remote attackers can execute arbitrary SQL commands via the order parameter. The CVSS data (base 7.5, HIGH) indicates Potential impact to confidentiality, integrity, and availability (partial for each)....

CVE-2005-3580

QDBM before 1.8.33-r2 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime...

CVE-2005-3580

CVE-2005-3580 affects QDBM prior to 1.8.33-r2. Local users in the portage group can escalate privileges by placing a malicious shared object in the Portage temporary build directory, which is added to the runtime search path and loaded by dependent executables. The issue is confirmed in Gentoo GL...