CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in contentpublisher.php in the contentpublisher component (com_contentpublisher) for Mambo. Remote attackers can execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. The issue has been disputed by third parties who state that contentpublisher.php protects against direct request in the most recent version.

Buffer overflow in Sony VAIO Media Server 2.x, 3.x, 4.x, and 5.x before 20060626 allows remote attackers to execute arbitrary code via unspecified vectors.

A PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code by supplying a URL in the mainnav parameter.

Podatność CVE-2006-4280 dotyczy zdalnego włączenia pliku w PHP w pliku anjel.index.php komponentu ANJEL dla Mambo. Umożliwia to zdalnym atakującym wykonanie dowolnego kodu PHP poprzez manipulację parametrem mosConfig_absolute_path.

Podatność CVE-2006-4281 dotyczy modułu AkoComment 1.1 dla Mambo 4.5, który umożliwia zdalnym atakującym wykonanie dowolnego kodu PHP poprzez manipulację parametrem mosConfig_absolute_path. Wykorzystanie tej luki może prowadzić do poważnych naruszeń bezpieczeństwa.

Tutti Nova 1.6 and earlier contains multiple PHP remote file inclusion vulnerabilities. An attacker can supply a malicious URL in the TNLIB_DIR parameter to include/novalib/class.novaAdmin.mysql.php and novalib/class.novaRead.mysql.php, allowing arbitrary PHP code execution on the server.

Remote file inclusion (RFI) vulnerability in catalogshop.php in the CatalogShop component for Mambo (com_catalogshop). An attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

SQL injection vulnerability in topic_post.php in XennoBB 2.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the icon_topic parameter.

PHP remote file inclusion vulnerability in Tutti Nova 1.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the TNLIB_DIR parameter to novalib/class.novaEdit.mysql.php.

Jelsoft vBulletin 3.5.4 allows remote attackers to register multiple arbitrary users by sending a large number of requests to register.php, leading to resource consumption and denial of service. The vendor disputed this vulnerability, stating that with CAPTCHA enabled registrations won't go through and that flooding should be handled at the server level.

Multiple PHP remote file inclusion vulnerabilities in the Product Scroller Module and other modules of the mambo-phpshop (com_phpshop) extension for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code by supplying a URL in the mosConfig_absolute_path parameter in eight module files.

CubeCart 3.0.11 and earlier contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the oid parameter in modules/gateway/Protx/confirmed.php and the x_invoice_num parameter in modules/gateway/Authorize/confirmed.php.

Multiple PHP remote file inclusion vulnerabilities exist in the lmtg_myhomepage Component (com_lmtg_myhomepage) for Mambo. A remote attacker can execute arbitrary PHP code by manipulating the mosConfig_absolute_path parameter in install.lmtg_homepage.php and mtg_homepage.php. The issue has been disputed by a third party, who states that the variable is only used within a function definition; CVE source code analysis on 20060824 is not conclusive but tends to concur with the dispute.

Remote file inclusion (RFI) vulnerability in admin.x-shop.php in the x-shop component (com_x-shop) 1.7 and earlier for Mambo and Joomla!. A remote attacker can execute arbitrary PHP code by manipulating the mosConfig_absolute_path parameter. The issue has been disputed by third-party researchers, who state that neither the mosConfig_absolute_path parameter nor the admin.x-shop.php file exists in the reported package.

PHP remote file inclusion vulnerability in install/upgrade_301.php in Jelsoft vBulletin 3.5.4 allows remote attackers to execute arbitrary PHP code via the step parameter. The vendor has disputed this vulnerability, stating that the default vBulletin requires authentication prior to using the upgrade system.

Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.

Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple JavaScript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, leading to a concurrency failure that causes structures to be freed incorrectly. Netscape 8.1 and K-Meleon 1.0.1 are also affected, and later Firefox 2.0 RC2 and 1.5.0.7 were reported as affected.

SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'cat' parameter in category mode.

PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_inc parameter.