CVE Vulnerability Catalog

Multiple SQL injection vulnerabilities in index.php in phpFaber TopSites 2.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the i_cat or method parameters.

Multiple buffer overflows exist in multiplay.cpp in UFO2000 svn 1057. A remote attacker can execute arbitrary code via a long unit name, large values passed to network functions, or a large mapdata GEODATA structure.

SQL injection vulnerability in DeluxeBB 1.07 and earlier allows remote attackers to bypass authentication, spoof users, and modify settings via the (1) memberpw and (2) membercookie cookies.

SQL injection vulnerability in the Amazing Flash AFCommerce Shopping Cart allows remote attackers to execute arbitrary SQL commands via the search field. The vendor has disputed this issue, stating that any SQL injection code would never be queried.

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif (aka caller or CallerID) file into the folder, and then using a pcAnywhere client to login as a local administrator.

Remote file inclusion (RFI) vulnerability in order/index.php in IDevSpot PhpHostBot 1.0 and AutoHost 3.0. A remote attacker can execute arbitrary PHP code by supplying a URL in the page parameter.

PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

DeluxeBB 1.07 and earlier contains a vulnerability that allows remote attackers to bypass SQL injection protection mechanisms. The flaw arises because the protection does not account for lowercase statements like "union select", enabling manipulation of SQL queries.

Oracle Database versions 9.2.0.6 and 10.1.0.4 contain multiple unspecified vulnerabilities with unknown impact and attack vectors. They affect Web Distributed Authoring and Versioning (DAV) and XMLDB components, identified as Oracle Vuln# DB04 and DB23.

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that the myadmindir variable is set before any GET variables are processed.

MiniBB Forum 1.5a and earlier contains multiple PHP remote file inclusion vulnerabilities. An attacker can execute arbitrary PHP code by supplying a malicious URL in the absolute_path parameter to components/com_minibb.php or components/minibb/index.php.

A stack-based buffer overflow exists in the Universal Plug and Play (UPnP) service of multiple D-Link routers (including DI-524, DI-604, DI-624, DI-784, WBR-1310, WBR-2310, EBR-2310). A remote attacker can send a long M-SEARCH request to UDP port 1900 to execute arbitrary code.

A PHP remote file inclusion vulnerability in calendar.php in SoftComplex PHP Event Calendar 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_calendar parameter, which overwrites the $path_to_calendar variable from an extract function call.

VBZooM 1.11 and earlier contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the UserID parameter in ignore-pm.php, sendmail.php, reply.php, or sub-join.php.

PHP remote file inclusion vulnerability in poll.php in Flipper Poll 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

Multiple format string vulnerabilities in Wireshark (formerly Ethereal) versions 0.10.x through 0.99.0 exist in the ANSI MAP, Checkpoint FW-1, MQ, XML, and NTP dissectors. A remote attacker can exploit these flaws to cause a denial of service (application crash) and possibly execute arbitrary code.

Multiple off-by-one errors exist in Wireshark (formerly Ethereal) versions 0.9.7 through 0.99.0 within the NCP NMAS and NDPS dissectors. The vulnerability can be exploited remotely, but the exact impact is unknown.

Buffer overflow in Wireshark (formerly Ethereal) versions 0.8.16 through 0.99.0. A remote attacker can exploit this via the NFS dissector, causing a denial of service and possibly executing arbitrary code.

Unspecified vulnerability in the Oracle ODBC Driver for Oracle Database 10.1.0.4 has unknown impact and attack vectors, aka Oracle Vuln# 10.1.0.4.

Integer overflow in FreeType before 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PCF file, as demonstrated by the Red Hat bad1.pcf test file, due to a partial fix of CVE-2006-1861.