CVE Vulnerability Catalog

Vulnerability in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 involves improper verification of DOM node name types within the context of their namespaces. This allows a remote attacker to modify tag properties, potentially leading to arbitrary script or code execution, as demonstrated using an XHTML document with IMG tags with custom properties.

The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including USANet Shopping Mall Software, Domain Name Auction Software, Standard Classified Ads Software, and MakeBid Reverse Auction, allows remote attackers to execute arbitrary code via shell metacharacters in the DISPCLOSED parameter.

Vulnerability in Firefox before version 1.0.5 allows remote attackers to steal information and potentially execute arbitrary code by using standalone applications such as Flash and QuickTime to open a javascript: URL, which is run in the context of the previous page, and may lead to code execution if the standalone application loads a privileged chrome: URL.

The vulnerability in Firefox before version 1.0.5 and Mozilla before version 1.7.9 is due to improper cloning of base objects. A remote attacker can exploit the prototype chain to access a privileged object and execute arbitrary code.

The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly distinguish between user-generated events and untrusted synthetic events, which makes it easier for remote attackers to perform dangerous actions that normally could only be performed manually by the user.

PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter.

The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by modifying the author_id parameter.

SQL injection vulnerability in PhpAuction 2.5 allows remote attackers to modify SQL queries via the 'category' parameter in adsearch.php.

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

Multiple unknown vulnerabilities have been discovered in Jinzora 2.0.1, with unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability.

Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments.

Unknown vulnerability in the arshell tool in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.

A buffer overflow vulnerability in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

PHP remote file inclusion vulnerability in gals.php of PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.

Buffer overflow vulnerability in the getlvname command in IBM AIX 5.1, 5.2 and 5.3. A local user can exploit long command line arguments to execute arbitrary code.

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the data or torrents directories with insufficient access control, allowing remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers.

A buffer overflow vulnerability exists in multiple 'p' commands in IBM AIX 5.1, 5.2, and 5.3. A local user can exploit long command line arguments to execute arbitrary code via commands such as penable, pdisable, pstart, phold, pdelay, or pshare.

A stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.