CVE Vulnerability Catalog

SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the category parameter.

A memory leak exists in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2. A remote attacker can cause a denial of service (memory exhaustion) by performing a large number of RSA cryptographic operations.

SQL injection vulnerability in controlpanel/index.php in CMS Mundo before version 1.0 build 008. Remote attackers can execute arbitrary SQL commands via the username parameter.

Chipmailer 1.09 contains multiple SQL injection vulnerabilities in main.php. Remote attackers can execute arbitrary SQL commands through various parameters such as anfang, name, mail, anrede, vorname, nachname, gebtag, gebmonat, and gebjahr.

PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters to eight PHP scripts, including those adding and modifying VAT rates, discounts, countries, product categories, products, and clients.

iPostMX 2005 version 2.0 and earlier contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the 'forum' parameter in messagepost.cfm and the 'topic' parameter in topics.cfm.

Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hlink.dll). A remote attacker can cause a denial of service (crash) and possibly execute arbitrary code via a long hyperlink, as demonstrated using an Excel worksheet with a long link in Unicode.

PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the config[private] parameter in multiple files, as demonstrated by index.php, faq.php, and hardware.php. The issue has been disputed by multiple third-party researchers who state that config[private] is initialized in an include file before being used.

SQL injection vulnerability in the add_hit function in include/function.inc.php in Coppermine Photo Gallery (CPG) 1.4.8, when "Keep detailed hit statistics" is enabled. Remote attackers can execute arbitrary SQL commands via the referer and user-agent HTTP headers.

Multiple PHP remote file inclusion vulnerabilities exist in PictureDis Professional 1.33 Build 234 and earlier, and PictureDis Photoalbum 4.82 and earlier. Remote attackers can execute arbitrary PHP code by passing a malicious URL in the lang parameter to files in the photoalbum/ directory, including thumstbl.php, wpfiles.php, and wallpapr.php.

APBoard 2.2-r3 and earlier contain multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via the PHPSESSID parameter in board.php and the viewcatmod parameter in main.php.

SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a proc_reply action in the blog shard.

SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the login parameter in client/stats.php and admin/stats.php, or the pass parameter in client/stats.php.

Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors. This is a different vulnerability than CVE-2006-3086.

VBZooM 1.11 contains multiple SQL injection vulnerabilities in the sobjectID and MAINID parameters in show.php and the MainID parameter in subject.php. A remote attacker can execute arbitrary SQL commands.

Remote file inclusion (RFI) vulnerability in manage_songs.php in Foing 0.7.0e and earlier allows remote attackers to execute arbitrary PHP code by supplying a malicious URL in the foing_root_path parameter.

In PicoZip 4.01, the info tip shell extension (zipinfo.dll) has a stack-based buffer overflow. An attacker can remotely execute arbitrary code by placing a long filename in an ACE, RAR, or ZIP archive, triggered when the user hovers the mouse over the archive.

VBZooM 1.02 contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the QuranID, ShowByQuranID, or Action parameters in meaning.php.

TikiWiki 1.9.3.2 and possibly earlier versions contain an SQL injection vulnerability. Remote attackers can execute arbitrary SQL commands via unknown attack vectors.

A PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier was reported to allow remote attackers to execute arbitrary PHP code via the PHORUM[http_path] parameter. The vendor disputed the issue, stating that common.php checks on the very first line of non-comment code that it is not being called directly, as has been the case in all 5.x versions. CVE analysis concurs with the vendor.