CVE Vulnerability Catalog

Jetbox CMS 2.1 SR1 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the frontsession cookie parameter, the view parameter in index.php, and the login parameter in admin/cms/index.php.

Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code. This is demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, also known as 'COM Object Instantiation Memory Corruption Vulnerability'.

Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section.

A vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using the document.getElementByID JavaScript function to access crafted Cascading Style Sheet (CSS) elements, and possibly other unspecified vectors involving certain layout positioning combinations in an HTML file.

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC5 through 9.40.xC7 and 10.00.TC1 through 10.00.xC3 allows attackers to execute arbitrary code via the SQLIDEBUG environment variable.

Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.

SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Other vectors are covered by CVE-2006-3139.

Symantec Brightmail AntiSpam (SBAS) before 6.0.4 contains multiple directory traversal vulnerabilities. When the Control Center is allowed to connect from any computer, a remote attacker can read and overwrite certain files via directory traversal sequences in DATABLOB-GET and DATABLOB-SAVE requests.

PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GB_PATH parameter.

PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter.

PHP remote file inclusion vulnerability in hsList.php in WoWRoster (World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.

Login.pm in Barracuda Spam Firewall (BSF) versions 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account. This allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.

PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.

Remote file inclusion (RFI) vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5. Attackers can execute arbitrary PHP code remotely by supplying a malicious URL in the mosConfig_absolute_path parameter.

A remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie (probably version 0.2) allows remote attackers to execute arbitrary PHP code by supplying a URL in the QUICK_PATH parameter.

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.

A remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code by supplying a URL in the pathtohomedir parameter.

PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter.

Savant2, a PHP templating library by Paul M. Jones, contains multiple remote file inclusion (RFI) vulnerabilities. The vulnerabilities occur possibly when used with the com_mtree component for Mambo and Joomla!, allowing remote attackers to execute arbitrary PHP code by manipulating the mosConfig_absolute_path parameter in multiple Savant2 files.

SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (extreme message board) 1.9.6 Alpha and earlier. The u2uid parameter passed to u2u.php is taken directly from $_POST, bypassing the protection scheme and allowing arbitrary SQL command execution.