CVE Vulnerability Catalog

ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication. Flaws in filter.php, access.php, edituser.php, settings.php, and index.php enable changing file type mode, protection method, user upload capabilities, admin information, and uploading arbitrary files.

Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via the 'ar' parameter in auction_room.php and the 'u' parameter in auction_store.php.

Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions.

Remote file inclusion (RFI) vulnerability in index.php in WMNews 0.2a and earlier. An attacker can execute arbitrary PHP code by supplying a malicious URL in the base_datapath parameter.

PhpProBid 5.24 contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the 'view' or 'start' parameters in viewfeedback.php and the 'orderType' parameter in categories.php.

The a6mambohelpdesk component for Mambo version 18RC1 and earlier contains a remote file inclusion (RFI) vulnerability in admin.a6mambohelpdesk.php. An attacker can supply a malicious URL via the mosConfig_live_site parameter, leading to arbitrary PHP code execution on the server.

A remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.

Off-by-one error in the ldap scheme handling in the Rewrite module (mod_rewrite) in Apache 1.3 from 1.3.28, 2.0.46 and other versions before 2.0.59, and 2.2, when RewriteEngine is enabled. A remote attacker can cause a denial of service (application crash) and possibly execute arbitrary code via crafted URLs that are not properly handled using certain rewrite rules.

PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter.

SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the news_id, tid, and page_id parameters.

Buffer overflow vulnerability in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier. A remote attacker can cause a denial of service (crash) and possibly execute arbitrary code by manipulating packet values such as a negative chunk_length, a large chunk->offset, or a large packet->length.

A remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code by supplying a URL in the css_path parameter in (1) help.php and (2) setup/header.php.

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.

SQL injection vulnerability in Webland MyBloggie 2.1.3 allows remote attackers to execute arbitrary SQL commands via the post_id parameter in index.php and the search function.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.

A vulnerability in Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on a privileged object.

Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via JavaScript leading to memory corruption. The vulnerabilities include buffer overflows in the string class, issues with table row and column groups, stale references to removed nodes, and running the crypto.generateCRMFRequest callback on a deleted context.

A vulnerability in the JavaScript engine of Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code. The exploit involves garbage collection that deletes a temporary object still in use.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 involves improper clearing of a JavaScript reference to a frame or window. This leaves a pointer to a deleted object, allowing remote attackers to execute arbitrary native code.

A vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges. This may lead to code execution or access to sensitive data by reading into a privileged context.