CVE-2022-4089: Improper Neutralization

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnerability affects unknown code of the file /pages/processlogin.php. The manipulation of the argument user leads to cross site scripting. The attack can be initiated remotely. The exploit has...

The vulnerability of the processlogin.php implementation in the ERP system allows a perpetrator to execute arbitrary code.

The vulnerability of the processlogin.php implementation in the ERP system is related to the lack of measures taken to protect the SQL query structure during the processing of the user argument. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

CVE-2020-11240

Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2019-2246

Thread start can cause invalid memory writes to arbitrary memory location since the argument is passed by user to kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9205, MDM9640, MSM8996AU, QCA6574,...

Command injection

icewind1991 SMB before 1.0.3 allows remote authenticated users to execute arbitrary SMB commands via shell metacharacters in the user argument in the 1 listShares function in Server.php or the 2 connect or 3 read function in Share.php...

PT-2015-6964

Name of the Vulnerable Software and Affected Versions Drupal me aliases module versions 6.x-2.x before 6.x-2.10 Drupal me aliases module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote attackers to access Views by substituting 'me' for a user id in a URL, using the 'me' user...

CVE-2002-1658: Undefined Security Weakness

Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless...

CVE-2003-0471: Undefined Security Weakness

Buffer overflow in WebAdmin.exe for WebAdmin allows remote attackers to execute arbitrary code via an HTTP request to WebAdmin.dll with a long USER argument...

CVE-2003-0271

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...

CVE-2003-0271: Undefined Security Weakness

Buffer overflow in Personal FTP Server allows remote attackers to execute arbitrary code via a long USER argument...

CVE-2002-1522: Undefined Security Weakness

Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument...

CVE-2002-0799: Undefined Security Weakness

Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument...

SmartMax MailMax 4.8 - Popmax Buffer Overflow

SmartMax MailMax 4.8 - Popmax Buffer Overflow // source: https://www.securityfocus.com/bid/5285/info Reportedly, MailMax is vulnerable to buffer overflow attacks against its POP3 daemon, popmax. The vulnerability occurs due to improper bounds checking of the 'USER' argument. It is possible for an...

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow (1)

Youngzsoft CMailServer 3.304.0 - Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a...

Youngzsoft CMailServer 3.30/4.0 - Remote Buffer Overflow (1)

// source: https://www.securityfocus.com/bid/4789/info CMailServer is vulnerable to a buffer overflow condition. It has been reported that the CMailServer does not perform proper bounds checking on the USER argument. It is possible for a remote malicious attacker to craft a request that will resu...