Vuldb Updates

A vulnerability has been found in Alexander Palmo Simple PHP Blog 0.4.0 and classified as critical. This impacts an unknown function of the file comment_delete_cgi.php. Performing manipulation of the argument Comment results in improper privilege management. This vulnerability is identified as CVE-2005-2787. The attack can be initiated remotely. Additionally, an exploit exists. The affected component should be upgraded.

A vulnerability has been found in Cafuego Simple Document Management System up to 2.0-cvs and classified as critical. Affected by this issue is some unknown functionality of the file list.php of the component Management System. The manipulation of the argument mid leads to sql injection. This vulnerability is traded as CVE-2005-3877. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in Sourceshock ShockBoard 3.0/4.0. This affects an unknown function of the file topic.php. This manipulation of the argument offset causes sql injection. This vulnerability is registered as CVE-2005-3873. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in SourceCodester AC Repair and Services System 1.0. It has been classified as critical. The affected element is the function save_users/delete_users of the file /classes/Users.php. Performing manipulation of the argument ID results in sql injection. This vulnerability is cataloged as CVE-2025-2655. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. Other parameters might be affected as well.

A vulnerability was found in SPIP up to 4.1.15/4.2.12/4.3.0-alpha1. It has been declared as critical. This vulnerability affects unknown code of the component porte_plume Plugin. The manipulation results in improper access controls. This vulnerability is reported as CVE-2024-7954. The attack can be launched remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Sangfor Next-Gen Application Firewall 8.0.17. The affected element is an unknown function of the file /cgi-bin/login.cgi of the component HTTP POST Request Handler. Executing manipulation can lead to os command injection. This vulnerability is registered as CVE-2023-30806. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in Netgear FVS336Gv3 and FVS336Gv2 up to 4.3. It has been classified as critical. Affected by this vulnerability is the function backup_configuration of the component Telnet. The manipulation leads to os command injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2024-23690. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability, which was classified as critical, was found in Commvault up to 11.32.59/11.34.33/11.36.7 on Windows. Impacted is an unknown function. The manipulation results in improper privilege management. This vulnerability was named CVE-2024-13975. The attack needs to be approached locally. There is no available exploit. You should upgrade the affected component.

A vulnerability has been found in Commvault up to 11.20.201/11.28.123/11.32.64/11.34.36/11.36.14 on Windows and classified as problematic. The affected element is an unknown function of the component Installation. This manipulation causes uncontrolled search path. The identification of this vulnerability is CVE-2024-13976. The attack can only be executed locally. There is no exploit available. The affected component should be upgraded.

A vulnerability, which was classified as critical, was found in Four-Faith F3x24 and F3x36 2.0. Affected by this issue is some unknown functionality of the file apply.cgi. The manipulation results in os command injection. This vulnerability is known as CVE-2024-12856. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Rejetto HTTP File Server up to 2.3m. It has been rated as very critical. This affects an unknown part of the component HTTP Request Handler. Performing manipulation results in improper neutralization of special elements used in a template engine. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability was named CVE-2024-23692. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in Asus ExpertWiFi, RT-AX55, RT-AX58U, RT-AC67U, RT-AC68R, RT-AC68U, RT-AX86 Series, RT-AC86U, RT-AX88U and RT-AX3000 and classified as critical. This vulnerability affects unknown code of the component Custom OpenVPN Profile Handler. The manipulation results in os command injection. This vulnerability is known as CVE-2024-0401. It is possible to launch the attack remotely. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability classified as critical was found in Maplesoft Maple up to 13. Affected by this issue is some unknown functionality of the component Maplet File Handler. Executing manipulation can lead to code injection. This vulnerability is tracked as CVE-2010-20120. The attack can be launched remotely. No exploit exists.

A vulnerability classified as critical has been found in InterSystems Caché up to 2009.1. This affects an unknown part of the file UtilConfigHome.csp of the component HTTP GET Request Handler. The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2009-20005. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in ProjectSend up to r1719. It has been rated as critical. Affected by this issue is some unknown functionality of the file options.php of the component HTTP Request Handler. This manipulation causes improper authentication. This vulnerability is handled as CVE-2024-11680. The attack can be initiated remotely. Additionally, an exploit exists. Upgrading the affected component is advised.

A vulnerability was found in Sockso Project Music Host Server up to 1.5. It has been rated as critical. This affects an unknown part of the file /file/ of the component HTTP Interface. Performing manipulation results in path traversal. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is reported as CVE-2012-10061. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability was found in Artica Pandora FMS up to 5.0 SP2 and classified as critical. This impacts an unknown function of the file mobile/index.php of the component File Manager Component. Such manipulation of the argument loginhash_data leads to sql injection. This vulnerability is listed as CVE-2014-125115. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in iGENUS iGENUS Webmail up to 2.02. This affects an unknown part of the file config/config_inc.php. Performing manipulation of the argument SG_HOME results in code injection. This vulnerability is identified as CVE-2006-1031. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability identified as problematic has been detected in iFoto 0.20. The affected element is an unknown function. Performing manipulation of the argument File results in basic cross site scripting. This vulnerability is known as CVE-2006-3006. Remote exploitation of the attack is possible. Furthermore, an exploit is available. You should upgrade the affected component.

A vulnerability identified as critical has been detected in IDevSpot PhpLinkExchange 1.0. The impacted element is an unknown function of the file index.php. Performing manipulation of the argument page results in code injection. This vulnerability is reported as CVE-2006-3777. The attack is possible to be carried out remotely. Moreover, an exploit is present.