Sid

The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.

The issue allows local users to obtain sensitive information by reading log files with world-readable permissions, where local administrator credentials are stored. This is due to the storage of credentials in log files by VeeamVixProxy.

The issue is related to insufficient input validation, allowing remote attackers to cause a denial of service via a specially crafted request containing a zero-length client ID. This can lead to a server exit.

Name of the Vulnerable Software and Affected Versions: WordPress versions 2.1.2 and earlier Description: A SQL injection issue exists, allowing remote authenticated users to execute arbitrary SQL commands. This is related to the `post id` variable in an XML RPC `mt.setPostCategories` method call. Recommendations: For WordPress versions 2.1.2 and earlier, update to a version that contains a fix for this issue.