CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Remote file inclusion (RFI) vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package used by MyNewsGroups :) 0.6b and earlier. A remote attacker can execute arbitrary PHP code by supplying a URL in the myng_root parameter.

MiniBB Forum 1.5a contains multiple PHP remote file inclusion vulnerabilities. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the absolute_path parameter to news.php, search.php, or whosOnline.php.

SQL injection vulnerability in top.php in X-Scripts X-Poll, probably version 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter. The provenance of this information is unknown; details are obtained from third party information.

PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

A stack-based buffer overflow exists in EFS Software Easy File Sharing FTP Server 2.0. A remote attacker can send a long argument to the PASS command to execute arbitrary code. The provenance of this information is unknown and details come from third-party sources.

SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the username and password parameters.

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

Remote file inclusion (RFI) vulnerability in payment.php in BosDev BosDates. An attacker can supply a malicious URL via the insPath parameter, leading to arbitrary PHP code execution on the server.

Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and 6.0 allows local users to cause a denial of service (grid service shutdown) and possibly execute arbitrary code using buffer overflows via unknown vectors that cause (1) qmaster or (2) execd to terminate.

A vulnerability in WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML. The issue involves a memory management error in WebKit, possibly a buffer overflow, originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using JavaScript that changes document.body.innerHTML within a DIV tag.

The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message containing a string without null character termination, leading to a NULL dereference in the ExecuteTransaction function. The vulnerability is known as "Mailslot DOS", although the name is misleading and unrelated to mailslots.

ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication. Flaws in filter.php, access.php, edituser.php, settings.php, and index.php enable changing file type mode, protection method, user upload capabilities, admin information, and uploading arbitrary files.

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the 'ar' parameter in auction_room.php and the 'u' parameter in auction_store.php.

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions.

PhpProBid 5.24 contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the 'view' or 'start' parameters in viewfeedback.php and the 'orderType' parameter in categories.php.

The a6mambohelpdesk component for Mambo version 18RC1 and earlier contains a remote file inclusion (RFI) vulnerability in admin.a6mambohelpdesk.php. An attacker can supply a malicious URL via the mosConfig_live_site parameter, leading to arbitrary PHP code execution on the server.

Remote file inclusion (RFI) vulnerability in index.php in WMNews 0.2a and earlier. An attacker can execute arbitrary PHP code by supplying a malicious URL in the base_datapath parameter.

A remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled. A remote attacker can cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.