CVE Vulnerability Catalog

PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.

A remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie (probably version 0.2) allows remote attackers to execute arbitrary PHP code by supplying a URL in the QUICK_PATH parameter.

Savant2, a PHP templating library by Paul M. Jones, contains multiple remote file inclusion (RFI) vulnerabilities. The vulnerabilities occur possibly when used with the com_mtree component for Mambo and Joomla!, allowing remote attackers to execute arbitrary PHP code by manipulating the mosConfig_absolute_path parameter in multiple Savant2 files.

PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter.

PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.

A remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code by supplying a URL in the pathtohomedir parameter.

Remote file inclusion (RFI) vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5. Attackers can execute arbitrary PHP code remotely by supplying a malicious URL in the mosConfig_absolute_path parameter.

Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.

PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.

SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (extreme message board) 1.9.6 Alpha and earlier. The u2uid parameter passed to u2u.php is taken directly from $_POST, bypassing the protection scheme and allowing arbitrary SQL command execution.

An unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files. Technical details of the vulnerability are not specified.

A vulnerability in CA eTrust Antivirus WebScan before version 1.1.0.1048 involves improper processing of outdated WebScan components. Technical details are unspecified, and the impact is unknown. The vulnerability may be exploited remotely by attackers.

A vulnerability in CA eTrust Antivirus WebScan is caused by improper bounds checking when processing certain user input. This allows remote attackers to execute arbitrary code.

An unspecified vulnerability in the custom tag support for the TIFF library (libtiff) before 3.8.2 allows remote attackers to cause a denial of service (instability or crash) and execute arbitrary code via unknown vectors.

Heap-based buffer overflow in the PixarLog decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via unknown vectors.

A vulnerability in the dynamic linker (dyld) in Apple Mac OS X 10.4.7 allows local users to execute arbitrary code via an improperly handled condition that leads to the use of dangerous paths, probably related to an untrusted search path vulnerability.

The EstimateStripByteCounts function in the TIFF library (libtiff) before 3.8.2 uses a 16-bit unsigned short when iterating over an unsigned 32-bit value, which allows context-dependent attackers to cause a denial of service via a large td_nstrips value, triggering an infinite loop.

Multiple stack-based buffer overflows in the TIFF library (libtiff) before 3.8.2, including in the TIFFFetchShortPair function in tif_dirread.c, where a large tdir_count value can trigger an overflow. The vulnerability also affects products using this library, such as Adobe Reader 9.3.0.

A vulnerability in WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated.

Heap-based buffer overflow in the NeXT RLE decoder in the TIFF library (libtiff) before 3.8.2 might allow context-dependent attackers to execute arbitrary code via decoding large RLE images.