CVE Vulnerability Catalog

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

Vulnerability in WpQuiz versions 2.60b1 through 2.60b8 allows remote attackers to gain elevated privileges by directly requesting the adminrestore.php file in the extras directory.

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the linpha_userid or linpha_password cookies.

SQL injection vulnerability in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL queries and bypass authentication via the user, password, or crypted_password parameters.

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.

SQL injection vulnerability in the Search module of Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter in index.php.

A vulnerability in Microsoft Internet Explorer 6.0.2800.1106 on Windows XP SP2 and versions 5.01 and 5.5 allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name. Known as the 'Similar Method Name Redirection Cross Domain Vulnerability'.

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.

Vulnerability in Opera 7.51 for Windows and 7.50 for Linux allows a frame from one domain to inject content into a frame belonging to another domain. This issue can be exploited for website spoofing and other attacks.

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

An unknown vulnerability in the administrative controls of Bugzilla versions 2.17.1 through 2.17.7 allows users with 'grant membership' privileges to grant memberships to groups they do not control.

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.

The vulnerability in Internet Explorer for Mac 5.2.3 and Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain. This facilitates web site spoofing and other attacks, known as the frame injection vulnerability.

Vulnerability in Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the 'page' parameter.

A format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers directly provided to the OutputDebugString function call.

Konqueror versions 3.1.3, 3.2.2, and possibly others do not properly prevent a frame in one domain from injecting content into a frame belonging to another domain, enabling web site spoofing and other attacks, known as the frame injection vulnerability.

SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

The vulnerability in Safari 1.2.2 allows a frame from one domain to inject content into a frame belonging to another domain. This issue, known as the frame injection vulnerability, can be exploited for website spoofing and other attacks.

Buffer overflow in Medal of Honor: Allied Assault 1.11v9 and earlier, Breakthrough 2.40b and earlier, and Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as the getinfo query, the connect packet, and other unknown vectors.