CVE Vulnerability Catalog

IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.

PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter. NOTE: another researcher was unable to find a way to execute code after including it via a URL. CVE analysis as of 20060816 was inconclusive.

Remote file inclusion (RFI) vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. However, a third party claims the researcher is incorrect because template.php defines pathtotemplate before big.php uses it; CVE has not verified either claim.

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.

PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter.

Multiple PHP remote file inclusion vulnerabilities exist in Chaussette 080706 and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the _BASE parameter to scripts in the Classes/ directory, including Evenement.php, Event.php, Event_for_month.php, Event_for_week.php, My_Log.php, My_Smarty.php, and possibly Event_for_month_per_day.php.

MVCnPHP 3.0 contains multiple PHP remote file inclusion vulnerabilities. An attacker can supply a malicious URL in the glConf[path_library] parameter to BaseCommand.php, BaseLoader.php, and BaseView.php, leading to arbitrary PHP code execution.

An unspecified vulnerability in func_topic_threaded.php (threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to access posts outside the topic.

A vulnerability in Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) by sending TCP packets with bad checksums.

IBM WebSphere Application Server before 6.1.0.1 contains multiple unspecified vulnerabilities involving (1) SOAP requests and responses, (2) mbean, (3) ThreadIdentitySupport, and possibly others. Technical details, impact, and attack vectors have not been publicly disclosed.

SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the sortby and sortorder parameters.

SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.

A reported PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier was said to allow remote attackers to execute arbitrary PHP code via the calpath parameter. However, the report was disputed by a third party, and CVE concurs that the initial report is invalid because the affected $calpath variable is set to a constant value at the beginning of the script.

Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.

A PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter.

A stack-based buffer overflow exists in main.c in DConnect Daemon 0.7.0 and earlier. A remote attacker can send an overly long nickname that is not properly handled by the listen_thread_udp function, leading to arbitrary code execution.

PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the component_dir parameter.

ArcSoft MMS Composer versions 1.5.5.6 and 2.0.0.13 (and possibly earlier) contain multiple buffer overflows in the M-Notification.ind, M-Retrieve.conf (Header and Body), and SMIL parsers. A remote attacker can cause a denial of service (crash) or execute arbitrary code by sending a crafted MMS message.

Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier. A remote attacker can cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, triggering the overflow during error message construction when the _snprintf function returns a negative value used in a memcpy operation.