CVE Vulnerability Catalog

Multiple integer overflows exist in the JavaScript engine of Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3. The vulnerability can be exploited remotely via long strings in the toSource method of Object, Array, and String objects, and unspecified string function arguments, potentially leading to arbitrary code execution.

A vulnerability in Mozilla Firefox, Thunderbird, and SeaMonkey allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to a privileged object and calling named JavaScript functions that use the constructor.

A vulnerability in Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window.navigator object that are accessed when Java starts up, causing a crash that leads to code execution.

Multiple stack-based buffer overflows exist in Tumbleweed Email Firewall (EMF). The vulnerability can be exploited remotely by sending an email attachment containing an LHA archive with a file or directory with a long LHA extended header, a "temporary pathname" field longer than 2 bytes, or a long filename. This allows arbitrary code execution.

Multiple SQL injection vulnerabilities exist in links.php in Gonafish LinksCaffe 3.0. Remote attackers can execute arbitrary SQL commands via the offset, limit, newdays, and link_id parameters, and can also disclose paths or modify PHP files using OUTFILE.

Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF".

SQL injection vulnerability in Shalwan MusicBox 2.3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'page' parameter in a 'viewgallery' action in a request for the top-level URI.

Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including Sidewinder, iPolicy Security Manager, Astaro Report Manager, Fortinet FortiReporter, and Top Layer Network Security Analyzer. A remote attacker can execute arbitrary code via long commands sent to the Syslog daemon (syslogserver.exe), Topology server (Topology.exe), License Manager (EnterpriseSecurityAnalyzer.exe), and Monitoring agent (Monitoring.exe).

Calendar Mambo Module 1.5.7 and earlier contains a remote file inclusion vulnerability in com_calendar.php. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the absolute_path parameter.

Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a long message handled by the recvTextMessage function in multiplay.c or a long filename handled by the NETrecvFile function in netplay/netplay.c.

SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the old_prefix parameter.

Stack-based buffer overflow in lzh.fmt in WinRAR versions 3.00 through 3.60 beta 6. A remote attacker can execute arbitrary code by providing an LHA archive with an overly long filename.

SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Krusader versions 1.50-beta1 through 1.70.0 store passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml). Anyone with access to this file can read the passwords.

SQL injection vulnerability in ServerClientUfo::recv_packet in server_protocol.cpp in UFO2000 svn 1057 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving the packet.c_str function.

PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

Remote file inclusion (RFI) vulnerability in order/index.php in IDevSpot PhpHostBot 1.0 and AutoHost 3.0. A remote attacker can execute arbitrary PHP code by supplying a URL in the page parameter.

SQL injection vulnerability in the init function in class_session.php in MyBB (aka MyBulletinBoard) 1.1.5 allows remote attackers to execute arbitrary SQL commands via the CLIENT-IP HTTP header ($_SERVER['HTTP_CLIENT_IP'] variable), as utilized by index.php.

DeluxeBB 1.07 and earlier does not properly handle a username composed of a single space character. This allows remote authenticated users to login as the "space" user, post as the guest user, and block an administrator's ability to ban the "space" user.