CVE Vulnerability Catalog

Vulnerability in picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the $CONFIG['impath'] or $CONFIG['jpeg_qual'] parameters.

PHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows remote attackers to execute arbitrary PHP code by modifying the THEME_DIR parameter to reference a URL on a remote web server that contains user_list_info_box.inc.

SMC Barricade broadband routers 7008ABR and 7004VBR have remote administration enabled by default, allowing remote attackers to gain access by connecting to port 1900.

SQL injection vulnerability in Video Gallery Module 0.1 Beta 5 for PHP-Nuke. An attacker can inject arbitrary SQL code via clipid or catid parameters in viewclip, viewcat, or voteclip actions.

The Samsung SmartEther SS6215S switch, and possibly other Samsung switches, allows remote attackers and local users to gain administrative access by providing the admin username followed by a password that is the maximum allowed length, then pressing the enter key after the resulting error message.

Stack-based buffer overflow in the client for Citrix Program Neighborhood Agent for Win32 8.00.24737 and earlier and Citrix MetaFrame Presentation Server client for WinCE before 8.33 allows remote attackers to execute arbitrary code via a long cached icon filename in the InName XML element.

Cross-site request forgery (CSRF) vulnerabilities in Open Bulletin Board (OpenBB) 1.0.6 and earlier allow remote attackers to execute arbitrary code by including the code in an image tag or a link.

The avatar upload capability in Open Bulletin Board (OpenBB) 1.0.6 and earlier allows remote attackers to execute arbitrary script by uploading files that include scripting code such as Javascript.

In the blocker.php script of Protector System 1.15b1, a vulnerability was found that allows bypassing SQL injection protection. An attacker can use URL-encoded apostrophe characters (%27) to execute limited SQL commands.

SQL injection vulnerability in Advanced Guestbook 2.2 allows remote attackers to execute arbitrary SQL commands and gain privileges via the password parameter.

A buffer overflow vulnerability in Kinesphere eXchange POP3 allows remote attackers to execute arbitrary code via a long MAIL FROM field.

Solaris 9 patches 113579-02 through 113579-05 and 114342-02 through 114342-05 fail to properly restrict access to secure NIS maps, allowing local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.

PHP remote file inclusion vulnerability in album_portal.php of phpBB modified by Przemo 1.8 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.

SQL injection vulnerability in userlogin.php in Phorum 3.4.7 allows remote attackers to execute arbitrary SQL commands via doubly hex-encoded characters such as "%2527", which is translated to "'", as demonstrated using the phorum_uriauth parameter to list.php.

Multiple buffer overflows in iso2022jp.c and shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code when a Unicode character is out of BMP range.

CVE-2004-0121 in Microsoft Outlook 2002 has an argument injection vulnerability that insufficiently filters parameters of mailto: URLs. This allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, allowing remote attackers to execute arbitrary programs via the LaunchURL method.

Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, causing Internet Explorer to send the cookie outside the specified URL subsets.

Apple Safari allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Safari to send the cookie outside the specified URL subsets.

Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets.