CVE Vulnerability Catalog

Multiple unspecified vulnerabilities in Oracle Database versions 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 have unknown impact and attack vectors, identified as Oracle Vuln# DB06, DB08-DB14, DBC01, DB16-DB20, DBC02-DBC04. They affect components Export, OCI, Query Rewrite/Summary Mgmt, RPC, and Semantic Analysis. DB06 is suspected to be related to SQL injection via DBMS_EXPORT_EXTENSION.

SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.

An unspecified vulnerability in PeopleSoft Enterprise Portal for Oracle PeopleSoft Enterprise Portal 8.8 with Enforcer Portal Pack Bundle #10 and 8.9 Bundle #3. The impact and attack vectors are unknown, referred to as Oracle Vuln# PSE02.

Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.

Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706. Its impact and attack vectors are unknown, but remote exploitation is possible.

SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the name, email, website, comments, rate, and private parameters.

Stack-based buffer overflow in Winlpd 1.26 allows remote attackers to execute arbitrary code via a long string in a request to TCP port 515.

A vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing '#' character. As of July 15, 2006, this could not be reproduced by third parties.

Unspecified vulnerability in Microsoft PowerPoint 2003 related to powerpnt.exe. Details of the impact and attack vectors are unknown, and exploitation requires user interaction. Possible links to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590 exist but are unconfirmed.

SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. The vendor disputes the issue, but source code analysis suggests it may be legitimate, and the parameter is sanitized in version 1.5.3.1.

SQL injection vulnerability in AjaxPortal 3.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the 'Search' field. This is a different vulnerability than CVE-2006-3515.

A heap-based buffer overflow exists in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier, and current CVS as of 20060716, including libdumb. A user-assisted attacker can execute arbitrary code via a crafted .it (Impulse Tracker) file with an envelope containing a large number of nodes.

A vulnerability in nNetObject.cpp in Armagetron Advanced 2.8.2 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a large number handled by the id_req_handler function.

A vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability.

SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter.

In LibVNCServer 0.7.1, a vulnerability in auth.c allows remote attackers to bypass authentication by sending a request with an insecure security type such as "Type 1 - None", which is accepted even if not offered by the server. This is a different issue from CVE-2006-2369.

An unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) reportedly allows remote attackers to gain privileges via unspecified vectors. Due to the lack of details and uncertainty about the affected product, the claim cannot be independently verified. No specific attack vectors or affected versions are provided.

The default configuration of the IOS HTTP server in Cisco Router Web Setup (CRWS) before version 3.3.0 build 31 does not require credentials. This allows remote attackers to access the server with arbitrary privilege levels (bug CSCsa78190).

The Nuke Advanced Classifieds module for PHP-Nuke contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the id_ads parameter in an EditAds operation.

The Sections module for PHP-Nuke contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the artid parameter in a viewarticle operation.