CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Zen Cart 1.3.0.2 and earlier contains multiple SQL injection vulnerabilities. Remote attackers can execute arbitrary SQL commands via GPC data to the ipn_get_stored_session function in ipn_main_handler.php, and remote authenticated users can do so via a session id in a cookie, the quantity field, an id[] parameter, or a redemption code.

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Multiple buffer overflows exist in libmusicbrainz (aka mb_client or MusicBrainz Client Library) version 2.1.2 and earlier, and SVN 8406 and earlier. A remote attacker can cause a denial of service (crash) or execute arbitrary code via a long Location header from an HTTP server, or a long URL in RDF data.

PHProjekt 5.1 and possibly earlier versions contain multiple PHP remote file inclusion vulnerabilities. An attacker can execute arbitrary PHP code by supplying a malicious URL in the path_pre parameter in lib/specialdays.php or the lib_path parameter in lib/dbman_filter.inc.php.

Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5 when running on Windows allows remote attackers to execute arbitrary code via a long username, causing an overflow in vsprintf when displaying the resulting error message. This issue is due to an incomplete fix for CVE-2006-3853.

A vulnerability in Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including imskdic.dll, chtskdic.dll, and msoe.dll, leading to memory corruption. It is uncertain whether the issue resides in Internet Explorer or the individual DLL files.

IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.

PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter. NOTE: another researcher was unable to find a way to execute code after including it via a URL. CVE analysis as of 20060816 was inconclusive.

PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter.

PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.

Remote file inclusion (RFI) vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. However, a third party claims the researcher is incorrect because template.php defines pathtotemplate before big.php uses it; CVE has not verified either claim.

Multiple PHP remote file inclusion vulnerabilities exist in Chaussette 080706 and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the _BASE parameter to scripts in the Classes/ directory, including Evenement.php, Event.php, Event_for_month.php, Event_for_week.php, My_Log.php, My_Smarty.php, and possibly Event_for_month_per_day.php.

MVCnPHP 3.0 contains multiple PHP remote file inclusion vulnerabilities. An attacker can supply a malicious URL in the glConf[path_library] parameter to BaseCommand.php, BaseLoader.php, and BaseView.php, leading to arbitrary PHP code execution.

An unspecified vulnerability in func_topic_threaded.php (threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to access posts outside the topic.

A vulnerability in Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) by sending TCP packets with bad checksums.

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.

A stack-based buffer overflow exists in main.c in DConnect Daemon 0.7.0 and earlier. A remote attacker can send an overly long nickname that is not properly handled by the listen_thread_udp function, leading to arbitrary code execution.

ArcSoft MMS Composer versions 1.5.5.6 and 2.0.0.13 (and possibly earlier) contain multiple buffer overflows in the M-Notification.ind, M-Retrieve.conf (Header and Body), and SMIL parsers. A remote attacker can cause a denial of service (crash) or execute arbitrary code by sending a crafted MMS message.