CVE Vulnerability Catalog

Vulnerability in dbsnmp and nmo programs in Oracle 8i, 9i, and Oracle IAS 9.0.2.0.1 on Unix systems uses a default path to find and execute library files while operating at raised privileges, allowing certain Oracle user accounts to gain root privileges via a modified libclntsh.so.9.0.

Fusion News 3.6.1 allows remote attackers to add user accounts, if the administrator is logged in, via a comment that contains an img bbcode tag that calls index.php with the signup action, which is executed when the administrator's browser loads the page with the img tag.

Vulnerability in WpQuiz versions 2.60b1 through 2.60b8 allows remote attackers to gain elevated privileges by directly requesting the adminrestore.php file in the extras directory.

SQL injection vulnerability in session.php in LinPHA 0.9.4 allows remote attackers to execute arbitrary SQL code and bypass authentication via the linpha_userid or linpha_password cookies.

SQL injection vulnerability in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to execute arbitrary SQL queries and bypass authentication via the user, password, or crypted_password parameters.

A buffer overflow vulnerability in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long filename.

Integer overflow in imgbmp.cxx in Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.

The vulnerability in HP OpenView Select Access versions 5.0 through 6.0 is due to incorrect decoding of UTF-8 encoded Unicode characters in a URL. This allows a remote attacker to bypass access restrictions.

The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ parameters.

The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.

Multiple cross-site scripting vulnerabilities were found in the Search module of Php-Nuke in index.php. A remote attacker can inject arbitrary web script or HTML via the sid, max, sel1-5, match, mod1-3 parameters.

SQL injection vulnerability in the Search module of Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter in index.php.

A vulnerability in Microsoft Internet Explorer 6.0.2800.1106 on Windows XP SP2 and versions 5.01 and 5.5 allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name. Known as the 'Similar Method Name Redirection Cross Domain Vulnerability'.

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.

Vulnerability in Opera 7.51 for Windows and 7.50 for Linux allows a frame from one domain to inject content into a frame belonging to another domain. This issue can be exploited for website spoofing and other attacks.

MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

An unknown vulnerability in the administrative controls of Bugzilla versions 2.17.1 through 2.17.7 allows users with 'grant membership' privileges to grant memberships to groups they do not control.

Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.