CVE Vulnerability Catalog

IBM WebSphere Application Server before 6.1.0.1 contains multiple unspecified vulnerabilities involving (1) SOAP requests and responses, (2) mbean, (3) ThreadIdentitySupport, and possibly others. Technical details, impact, and attack vectors have not been publicly disclosed.

A reported PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier was said to allow remote attackers to execute arbitrary PHP code via the calpath parameter. However, the report was disputed by a third party, and CVE concurs that the initial report is invalid because the affected $calpath variable is set to a constant value at the beginning of the script.

Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier. A remote attacker can cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, triggering the overflow during error message construction when the _snprintf function returns a negative value used in a memcpy operation.

ArcSoft MMS Composer versions 1.5.5.6 and 2.0.0.13 (and possibly earlier) contain multiple buffer overflows in the M-Notification.ind, M-Retrieve.conf (Header and Body), and SMIL parsers. A remote attacker can cause a denial of service (crash) or execute arbitrary code by sending a crafted MMS message.

PHP remote file inclusion vulnerability in admin.webring.docs.php in the Webring Component (com_webring) 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the component_dir parameter.

A stack-based buffer overflow exists in main.c in DConnect Daemon 0.7.0 and earlier. A remote attacker can send an overly long nickname that is not properly handled by the listen_thread_udp function, leading to arbitrary code execution.

A PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter.

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.

Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.

An unspecified vulnerability in the dependency resolution mechanism in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a specially crafted URL that is not properly handled in the routing code. This leads to a denial of service (application hang) or data loss.

SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idsite parameter.

The Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal contains a SQL injection vulnerability. Remote attackers can execute arbitrary SQL commands via job or resume search.

The decompress function in compress42.c in ncompress 4.2.4 and liblzw contains a buffer underflow vulnerability. Remote attackers can cause a denial of service or potentially execute arbitrary code via crafted data.

The Bibliography module (biblio.module) for Drupal, in versions 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5, contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via unspecified vectors.

PHP remote file inclusion vulnerability in article-raw.php in phNNTP 1.3 and earlier. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the file_newsportal parameter.

Remote file inclusion vulnerability in tpl.inc.php in SQLiteWebAdmin 0.1 and earlier. An attacker can execute arbitrary PHP code by supplying a malicious URL in the conf[classpath] parameter.

PHP remote file inclusion (RFI) vulnerability in The Search Engine Project (TSEP) 0.942 and earlier. An attacker can execute arbitrary PHP code by supplying a malicious URL in the tsep_config[absPath] parameter to pagenavigation.php.

Barracuda Spam Firewall (BSF), possibly version 3.3.03.053, contains a hardcoded password for the admin account used for logins from 127.0.0.1 (localhost). This allows local users to gain administrative privileges.

phpAutoMembersArea (phpAMA) before 3.2.4 contains an unspecified vulnerability related to a potential critical security exploit. Technical details, impact, and attack vectors are not disclosed in the CVE description.

A PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via the myevent_path parameter. This is a different vector than CVE-2006-4040. The provenance of this information is unknown; details are from third-party sources.