CVE Vulnerability Catalog

Wielokrotne podatności na zdalne włączenie pliku w PHP w Bigace 1.8.2 pozwalają zdalnym atakującym na wykonanie dowolnego kodu PHP poprzez URL w parametrach GLOBALS[_BIGACE][DIR][admin] oraz GLOBALS[_BIGACE][DIR][libs]. Atakujący mogą wykorzystać te luki w różnych plikach systemowych.

Wersje PHP przed 4.4.3 oraz 5.x przed 5.1.4 nie ograniczają zestawu znaków identyfikatora sesji (PHPSESSID) dla zewnętrznych obsługiwaczy sesji. Może to ułatwić zdalnym atakującym wykorzystanie innych podatności poprzez wstrzykiwanie kodu PHP do PHPSESSID, który jest przechowywany w pliku sesji.

W podatności CVE-2006-4417 występuje luka typu SQL injection w pliku edituser.php w systemie Xoops przed wersją 2.0.15. Umożliwia ona zdalnym atakującym wykonywanie dowolnych poleceń SQL poprzez parametr user_avatar.

Podatność SQL injection w pliku note.php w ProManager 0.73 umożliwia zdalnym atakującym wykonywanie dowolnych poleceń SQL poprzez parametr note_id.

Podatność w poleceniu mkvg w systemach IBM AIX 5.2 i 5.3 umożliwia lokalnym użytkownikom uzyskanie uprawnień poprzez modyfikację ścieżki, aby wskazywała na złośliwe programy, takie jak chdev, mkboot, varyonvg lub varyoffvg.

The Drupal Easylinks module (easylinks.module) 4.7 before 1.5.2.1 (2006/08/19) contains a SQL injection vulnerability. An unauthenticated remote attacker can execute arbitrary SQL commands via unspecified vectors.

PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mambo. Remote attackers can execute arbitrary PHP code by supplying a malicious URL in the cropimagedir parameter.

PHP remote file inclusion vulnerability in e/class/CheckLevel.php in Phome Empire CMS 3.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the check_path parameter.

A remote file inclusion (RFI) vulnerability exists in clients/index.php in Diesel Smart Traffic. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the src parameter.

Remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the phpbb_root_path parameter.

A vulnerability in Alt-N WebAdmin 3.2.3 and 3.2.4 (running with MDaemon 9.0.5 and possibly earlier) allows a remote authenticated domain administrator to change a global administrator's password via the userlist.wdm file, leading to privilege escalation.

The Lurm Constructor component (com_lurm_constructor) 0.6b and earlier for Mambo contains a remote file inclusion (RFI) vulnerability in admin.lurm_constructor.php. An attacker can execute arbitrary PHP code by supplying a malicious URL in the lm_absolute_path parameter.

A PHP remote file inclusion (RFI) vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. The provenance of this information is unknown; details are from third-party sources.

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.

Multiple PHP remote file inclusion vulnerabilities exist in the Rssxt component for Joomla! (com_rssxt), possibly in versions 2.0 Beta 1, 1.0 and earlier. A remote attacker could execute arbitrary PHP code via the mosConfig_absolute_path parameter in pinger.php, RPC.php, or rssxt.php. However, another researcher has disputed this issue, stating the attacker cannot control this parameter, and the original researcher has been unreliable in other reports.

The Eichhorn Portal from Guder und Koch Netzwerktechnik contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via unspecified vectors, possibly including the profil_nr, sprache, suchstring, GaleryKey, Breadcrumbs, and GGBNSaction parameters.

Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/functions_mod_user.php or (2) includes/functions_portal.php.

SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter.

PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (com_contxtd) component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined.

Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.