CVE Vulnerability Catalog

A heap-based buffer overflow exists in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier. Remote attackers can execute arbitrary code via crafted UTF-8 encoded HTML that causes size discrepancies during Unicode conversion.

An unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when saved as a multipart HTML (.mht) file.

A buffer overflow vulnerability exists in the Routing and Remote Access service (RRAS) on Microsoft Windows 2000 SP4, XP SP1/SP2, and Server 2003 SP1 and earlier. Remote unauthenticated or authenticated attackers can execute arbitrary code via crafted RPC requests.

An integer overflow in the PolyPolygon function of the Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted WMF or EMF image. The flaw occurs when the sum of entries in the vertex counts array and the number of polygons triggers a heap-based buffer overflow.

PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. The details are obtained solely from third party information.

PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dir[data] parameter.

SQL injection vulnerability in index.php of IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded apostrophe characters in the STYLE_URL parameter.

Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in footer.php and admin/footer.php.

WebprojectDB 0.1.3 and earlier contains multiple PHP remote file inclusion vulnerabilities. An attacker can execute arbitrary PHP code by supplying a malicious URL in the INCDIR parameter in include/nav.php and include/lang.php.

Multiple SQL injection vulnerabilities exist in Dominios Europa PICRATE (also known as TAL RateMyPic) version 1.0. A remote attacker can execute arbitrary SQL commands via the id, voteid, and vfiel parameters in index.php, and via the nick, email, city, messen, and message form field parameters in add.php.

PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter.

My Photo Scrapbook 1.0 and earlier contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the key parameter in Displayview.asp and Details_Photo_bv.asp.

In MyBulletinBoard (MyBB) 1.1.2, the domecode function in inc/functions_post.php allows remote attackers to execute arbitrary PHP code via the username field, which is used in a preg_replace call with the /e (executable) modifier.

SQL injection vulnerability in vs_search.php of Arantius Vice Stats before version 1.0.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors. This issue is distinct from CVE-2006-2972.

SQL injection vulnerability in block_forum_topic_new.php of ViArt Shop Free 2.5.5 and other distributions (Light, Standard, Enterprise) allows remote attackers to execute arbitrary SQL commands via unknown vectors, likely involving the forum_id parameter.

SQL injection vulnerability in big.php of Mafia Moblog 0.6M1 and earlier. Remote attackers can execute arbitrary SQL commands via the img parameter.

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before version 1.4.7. It may allow remote attacks with unknown impact, possibly related to authorization or authentication errors.

Multiple SQL injection vulnerabilities in month.php of PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the catid and cid parameters.

SQL injection vulnerability in vs_resource.php of Arantius Vice Stats versions 0.5b and 1.0. Remote attackers can execute arbitrary SQL commands via the ID parameter.

SQL injection vulnerability in inc_header.asp in Snitz Forum 3.4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the %strCookieURL%.GROUP parameter in a cookie.