CVE Vulnerability Catalog

A buffer overflow vulnerability exists in RITLabs The Bat! 3.60.07 in the email subject field. A remote attacker can exploit this to execute arbitrary code on the victim's system.

A vulnerability in Bugzilla 2.16.10 involves improper handling of characters in the maxpatchsize and maxattachmentsize parameters in attachment.cgi, allowing a remote attacker to trigger a SQL error.

A vulnerability in Bugzilla 2.19.3 through 2.20 improperly handles "//" sequences in URLs when redirecting a user from the login form. This could cause it to generate a partial URL in a form action that leads to sending form data to another domain.

SQL injection vulnerability in Oi! Email Marketing System 3.0 allows remote attackers to execute arbitrary SQL commands via the Username and Password fields on the login page.

SQL injection vulnerability in PHP-Nuke before version 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, bypassing regular expressions intended to protect against SQL injection, as demonstrated via the kala parameter.

PHP-Nuke 7.8 Patched 3.2 contains a vulnerability that allows bypassing SQL injection protection. An attacker can use /%2a (/*) sequences with the "ad_click" word in the query string, e.g., via the kala parameter.

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in fastlinks.php and catogary.php.

A stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.

An unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows attackers to cause a system panic (denial of service) or execute arbitrary code.

A vulnerability in nfsd in the FreeBSD 6.0 kernel allows a remote attacker to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite.

A directory traversal vulnerability was found in index.php in 4Images 1.7.1 and earlier. Attackers can read and include arbitrary files using ".." sequences in the template parameter.

NOCC Webmail 1.0 stores email attachments in temporary files with predictable filenames, making it easier for remote attackers to execute arbitrary code by accessing the email attachment via directory traversal vulnerabilities.

Eval injection vulnerability in sessions.inc of PHP Base Library (PHPLib) before 7.4a. When index.php3 from the PHPLib distribution is available on the server, remote attackers can execute arbitrary PHP code by including a base64-encoded representation of the code in a cookie.

SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQL commands via the UpdateID0 parameter to Service_Requests.asp. The vendor disputes the issue, claiming a complex state management system with JavaScript and server-side session state protects against SQL injection, and that errors may be due to invalid field values rather than actual injection.

The WYSIWYG rendering engine (rich mail editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass JavaScript security settings. By sending an email containing a JavaScript URI in the SRC attribute of an IFRAME tag, the code executes when the user edits the email, potentially leading to sensitive information disclosure or a crash.

Multiple PHP remote file include vulnerabilities exist in Noah's Classifieds 1.3 in gorum/gorumlib.php. When register_globals is enabled, an attacker can use the upperTemplate and lowerTemplate parameters to include arbitrary PHP files from remote sources.

SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.

Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before version 2.2 have unknown vectors and impact, addressed by 'Urgent secure fixes'. Note: this might be a duplicate of CVE-2006-0854, but the vendor announcement is too vague to confirm.

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to falsify authentication credentials.

SQL injection vulnerability in pages.asp of Mini-Nuke CMS System version 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Later versions, including 2.3, are also reported as vulnerable.