CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _sysSessionPath parameter.

A remote file inclusion (RFI) vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.

A buffer overflow vulnerability in the import project functionality of Sony SonicStage Mastering Studio versions 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file.

AOL 9.0 Security Edition revision 4184.2340, and probably other versions, sets insecure permissions (Everyone/Full Control) on the "America Online 9.0" directory. A local user can replace critical files and escalate privileges.

A stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before version 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter passed to the RunEgatherer method.

PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.

The mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! contains a remote file inclusion vulnerability in archive.php. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the mosConfig_absolute_path parameter.

Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the lizge or bade parameters.

A vulnerability in Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface.

The Terminal Services COM object (tsuserex.dll) can be instantiated as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN. This allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code.

Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.

WEBInsta CMS 0.3.1 contains a remote file inclusion (RFI) vulnerability in modules/usersonline/users.php. An attacker can supply a malicious URL in the module_dir parameter, leading to arbitrary PHP code execution on the server.

PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolute_path parameter.

Zen Cart 1.3.0.2 and earlier contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via GPC data to the ipn_get_stored_session function in ipn_main_handler.php, and remote authenticated users can do so via a session id in a cookie, the quantity field, an id[] parameter, or a redemption code.

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation.

Multiple PHP remote file inclusion vulnerabilities exist in WebDynamite ProjectButler 0.8.4. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the rootdir parameter to scripts in the /classes/ directory, including Cache.class.php, Customer.class.php, Performance.class.php, Project.class.php, Representative.class.php, User.class.php, and common.php.

Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php.

SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.