CVE Vulnerability Catalog

Cross-site scripting (XSS) vulnerability in error.asp for Plumtree Corporate Portal versions 3.5 through 4.5 allows remote attackers to execute arbitrary script on other clients via the 'Description' parameter.

The index.php file in PHP-Nuke version 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.

Microsoft Outlook 2000 and 2002, when configured to use Microsoft Word as the email editor, does not block scripts that are used while editing email messages in HTML or RTF. This could allow remote attackers to execute arbitrary scripts via an email that the user forwards or replies to.

The retrieve_password.pl script in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, allowing remote attackers to request a new password on behalf of another user.

Infopop UBB.Threads version 5.4 and Wired Community Software WWWThreads versions 5.0 through 5.0.9 allow remote attackers to upload arbitrary files by using a filename that contains an accepted extension but ends in a different extension.

Buffer overflow in Real Networks RealPlayer 8.0 and earlier allows remote attackers to execute arbitrary code via a header length value that exceeds the actual length of the header.

PhpSmsSend version 1.0 has a vulnerability that allows remote attackers to execute arbitrary commands via an SMS message containing shell metacharacters.

The vulnerability in TOLIS Group's Backup and Restore Utility (BRU) 17.0 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/brutest.$$ temporary file.

Format string vulnerability in (1) sastcpd in SAS/Base 8.0 and 8.1 or (2) objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via format specifiers in a command line argument.

Buffer overflow in mIRC 5.91 and earlier allows a remote server to execute arbitrary code on the client via a long nickname.

Etype Eserv 2.97 allows remote attackers to redirect traffic to other sites via the PORT command.

Buffer overflow in sastcpd in SAS/Base 8.0 and 8.1 or in objspawn in SAS/Integration Technologies 8.0 and 8.1 allows local users to execute arbitrary code via large command line argument.

The Safe Mode feature (safe_mode) in PHP from version 3.0 to 4.1.0 allows attackers with access to the MySQL database to bypass Safe Mode access restrictions and read arbitrary files using 'LOAD DATA INFILE LOCAL' SQL statements.

Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

Funk Software Proxy Host versions 3.x before 3.09A creates a Named Pipe that does not require authentication and is installed with insecure access control. This allows local and possibly remote users to use the Proxy Host's configuration utilities and gain privileges.

Buffer overflow in the chunked encoding transfer mechanism in Internet Information Server (IIS) 4.0 and 5.0 Active Server Pages allows attackers to cause a denial of service or execute arbitrary code.

Buffer overflow in the ASP data transfer mechanism in Internet Information Server (IIS) 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service or execute code.

Buffer overflow in the ism.dll ISAPI extension that implements HTR scripting in Internet Information Server (IIS) 4.0 and 5.0 allows attackers to cause a denial of service or execute arbitrary code via HTR requests with long variable names.

Cross-site scripting vulnerability in analog before version 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is logged in web logfiles and not properly filtered by analog during display.

Buffer overflow in the ASP Server-Side Include Function in IIS 4.0, 5.0, and 5.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via long file names.