CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter.

SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands via the lid parameter.

An unspecified vulnerability in the mkdir utility in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors.

SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the offset, tid, fromid, sortby, fromfrommethod, and fromfromlist parameters.

Buffer overflow vulnerability in the png_decompress_chunk function in pngrutil.c in libpng before version 1.2.12. A context-dependent attacker can cause a denial of service and possibly execute arbitrary code via unspecified vectors related to chunk error processing, possibly involving the chunk_name.

PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. The same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script.

SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter.

An unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via crafted applets in OpenOffice documents.

OpenOffice.org (aka StarOffice) versions 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allow user-assisted attackers to execute malicious BASIC macros without prompting the user. Opening a crafted document triggers the exploit.

Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."

Remote file inclusion (RFI) vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the pageid parameter.

PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop. Remote attackers can execute arbitrary PHP code by supplying a malicious URL in the osCsid parameter.

Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters in php/comment.php and (2) the getpartialmatches method in php/aolbonics.php.

Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS).

Remote file inclusion (RFI) vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the ROOT_PATH parameter.

SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter.

SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter.

SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter.

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field).

The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password in plaintext within unspecified files. This allows remote authenticated users to access the database (aka bug CSCsd15951).