CVE Vulnerability Catalog

A vulnerability in Mozilla Firefox and Thunderbird before version 1.5.0.4 allows a remote attacker to execute code with higher privileges than intended by exploiting privileged UI code calling content-defined setters on an object prototype.

SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter.

SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows attackers to execute arbitrary SQL commands via crafted multibyte encodings (SJIS, BIG5, GBK) that are not properly handled by the mysql_real_escape function.

Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the id, hid, e, yid, bid, kid, tur, s, and id parameters in various scripts.

SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier. Remote attackers can execute arbitrary SQL commands via the yas_1, yas_2, and yas_3 parameters.

A remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows attackers to include arbitrary files from external servers via the config[fsBase] parameter in multiple scripts.

PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5. An attacker can execute arbitrary PHP code by sending a crafted URL in the l parameter.

The vulnerability in Open-Xchange 0.8.2 and earlier versions uses a static default username and password with a valid login shell in the LDAP server initfile. This allows remote attackers to access any server where the default credentials have not been changed.

In Nukedit 4.9.6 and earlier, the file utilities/register.asp allows remote attackers to create new users in arbitrary groups, including the administrative group, by modifying the groupid parameter during the addDB action.

SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the count and from variables in database.mysql.inc, database.pgsql.inc, and database.mysqli.inc.

In home/register.php in Eggblog before version 3.0, a vulnerability allows remote attackers to change the password of administrators and possibly other users by modifying the username parameter.

A stack-based buffer overflow in ZipCentral 4.01 allows remote attackers to execute arbitrary code via a ZIP archive with a long filename, requiring user interaction.

SQL injection vulnerability in news.php of VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter.

SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. The provenance of this information is unknown; details are obtained solely from third party sources.

The Secure Elements Class 5 AVR server (aka C5 EVM) before version 2.8.1 uses a hard-coded user ID and password, allowing remote attackers to gain access to the server.

The Administration Console in Secure Elements Class 5 AVR (C5 EVM) before version 2.8.1 does not enforce access control, allowing remote attackers to gain access to servers via the console.

A buffer overflow vulnerability exists in the addnewword function of typespeed version 0.4.4 and earlier. This flaw may allow remote attackers to execute arbitrary code via unknown vectors.

Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code by supplying a malicious URL in the 'path' parameter to form.php, customize.php, and initialize.php.

In EVA-Web 2.1.2 and earlier, an unspecified script (probably index.php) reveals the full web server path when invalid 'perso' or 'aide' parameters are passed.

Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request or invalid arguments to layout/professional/functions.php or getimage.php.