CVE Vulnerability Catalog

SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter. NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package.

The vulnerability in includes/common.php in RunCMS 1.2 and earlier uses the extract function with EXTR_OVERWRITE on HTTP POST variables, allowing remote attackers to overwrite arbitrary variables, potentially leading to arbitrary code execution.

SQL injection vulnerability in the Downloads module of PostNuke 0.760-RC4b allows administrators to execute arbitrary SQL commands via the 'show' parameter in dl-viewdownload.php.

PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the SITE_Path parameter to menu_dx.php or CONTENTS_Dir parameter to menu_sx.php.

The vulnerability in nquser.php in Virtual Edge Netquery 3.11 allows a remote attacker to execute arbitrary system commands by injecting shell metacharacters into the host parameter of a dig query.

A buffer overflow in the mutt_decode_xbit function in Handler.c of Mutt 1.5.10 may allow remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.

A vulnerability in the gorum/prod.php script in Zorum 3.5 allows remote attackers to execute arbitrary code by injecting shell metacharacters into the argv parameter.

A buffer overflow vulnerability in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.

Vulnerability in Computer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before build 220_13, and 1.11 before build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

SQL injection vulnerability in login_admin_mediabox404.php in mediabox404 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the User field.

Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via parameters in forums.php, list.php, journal.php, and links.php. The vendor has disputed this issue, stating that variables are properly sanitized.

Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7 allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.

A buffer overflow vulnerability in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.

Multiple SQL injection vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to execute arbitrary SQL commands via the Match or CatID parameter in SearchResults.php or the password in AccessControl.php.

SQL injection vulnerability in lib-view-direct.inc.php in phpAdsNew and phpPgAds before version 2.0.6 allows remote attackers to execute arbitrary SQL commands via the clientid parameter.

Unknown vulnerability in pam_ldap before version 180 improperly handles a new password policy control, which could allow attackers to gain privileges.

An integer overflow in pcre_compile.c in PCRE before version 6.2 allows attackers to execute arbitrary code via crafted quantifier values in regular expressions, leading to a heap-based buffer overflow.

The vulnerability in the SpellChecker plugin in DTLink AreaEdit before version 0.4.3 allows remote attackers to execute arbitrary system commands by injecting shell metacharacters into the 'dictionary' parameter (also known as the 'lang' variable) in the aspell_setup.php file.

An unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System versions 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.

Buffer overflow in Sysinternals Process Explorer 9.23 and earlier versions before 9.25 allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.