CVE Vulnerability Catalog

A PHP remote file inclusion vulnerability in toplist.php of phpBB TopList 1.3.8 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via the phpbb_root_path parameter.

EMC Retrospect for Windows does not drop privileges before opening files, allowing local users to execute arbitrary code via the File>Open dialog.

Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before version 0.5.8 may allow remote attackers to execute arbitrary code via cookies or the query string.

SQL injection vulnerability exists in news.php of AZNEWS. Remote attackers can execute arbitrary SQL commands via the ID parameter.

SQL injection vulnerability in login.php of Ruperts News allows remote attackers to execute arbitrary SQL commands via the username parameter.

A PHP remote file inclusion vulnerability in master.php of OpenPHPNuke version 2.3.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

SQL injection vulnerability in index.php of BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the link_dir_target and link_id_target parameters, likely in the link_edit functionality.

Pro Publish 2.0 contains multiple SQL injection vulnerabilities in the email, password, find_str, artid, and catid parameters, allowing remote attackers to execute arbitrary SQL commands.

JMK's Picture Gallery contains a vulnerability that allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the 'add' action.

PlanetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.

A format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call.

A buffer overflow vulnerability in SWS Web Server 0.1.7 allows remote attackers to execute arbitrary code by sending a long HTTP request.

A directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files by using a '..' (dot dot) sequence in a filename within an ISO image.

Multiple SQL injection vulnerabilities exist in misc.php of MySmartBB 1.1.x. Remote attackers can manipulate the id and username parameters to execute arbitrary SQL commands.

A directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files by using a '..' sequence in a filename within an ISO image.

A buffer overflow vulnerability in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code by sending a long argument to the EHLO, MAIL FROM, and RCPT TO commands.

A vulnerability in parser.exe of Océ 3121/3122 printers allows remote attackers to cause a denial of service (crash or reboot) via a long request, potentially triggering a buffer overflow.

SQL injection vulnerability in func_msg.php in Invision Power Board (IPB) 2.1.4 allows remote attackers to execute arbitrary SQL commands via the from_contact field in a private message (PM).

A buffer overflow vulnerability in JuniperSetupDLL.dll, loaded by JuniperSetup.ocx in the Juniper SSL-VPN Client when connecting to a Juniper NetScreen IVE device running vulnerable IVE OS versions, allows remote attackers to execute arbitrary code via a long ProductName parameter.

A PHP remote file inclusion vulnerability in Thumbnail AutoIndex before version 2.0 allows an attacker to execute arbitrary PHP code via README.html or HEADER.html parameters.