CVE Vulnerability Catalog

SQL injection vulnerability in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL via the referer field in an HTTP request.

Buffer overflow vulnerability in the KSDWRTB function of the dbms_system package in Oracle Database 9i and 8i. A remote authorized user can exploit a long second argument to execute arbitrary code on the database server.

A buffer overflow vulnerability in pop3.c in gnubiff before version 2.0.0 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code.

An unspecified vulnerability in Hitachi Web Page Generator and Web Page Generator Enterprise version 4.01 and earlier allows remote attackers to cause a denial of service (DoS) via unknown attack vectors when a web site is improperly accessed.

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action.

SQL injection vulnerability in antiboard.php in AntiBoard 0.7.2 and earlier allows remote attackers to execute arbitrary SQL via the thread_id, parent_id, or mode parameters.

Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code by using a document with a draggable file type (e.g., .xml, .doc, .py, .cdf, .css, .pdf, .ppt) and ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

CSRF vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.

An unspecified vulnerability exists in SurgeMail before version 2.2c10 related to a Webmail security bug. The impact and attack vectors are unknown.

The control panel in ASP Calendar does not require authentication to access, which allows remote attackers to gain unauthorized access via a direct request to main.asp.

A vulnerability in LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a server crash and client CPU consumption by sending a username starting with a percent sign (%) followed by a null character.

The vulnerability in edituser.php3 in PHPMyChat 0.14.5 allows remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.

Unknown vulnerability in newgrp in HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain elevated privileges.

A vulnerability in NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the 'autorized=admin; root=admin' value.

A vulnerability in Check Point Firewall-1 versions 4.1 through NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an IKE packet with a specific Vendor ID payload, causing the firewall to respond with version and other details.

The MIME transformation system in phpMyAdmin versions 2.5.0 through 2.6.0-pl1 contains a vulnerability that allows remote attackers to execute arbitrary commands by injecting shell metacharacters in unspecified vectors.

Unknown vulnerability in Rippy the Aggregator before version 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the user-controlled filter.

ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted.

Buffer overflow in paginit in AIX 5.1 through 5.3 allows local users to execute arbitrary code via a long username.

phpMyAdmin versions 2.5.1 through 2.5.7 contain a vulnerability that allows remote attackers to modify configuration settings by manipulating $cfg['Servers'] variables, potentially leading to unauthorized access to MySQL servers.