CVE Vulnerability Catalog

SQL injection vulnerability in pblguestbook.php in Pixelated By Lev (PBL) Guestbook 1.32 and earlier allows remote attackers to execute arbitrary SQL commands via the name, email, website, comments, rate, and private parameters.

SQL injection vulnerability in index.php in ATutor 1.5.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter. The vendor disputes the issue, but source code analysis suggests it may be legitimate, and the parameter is sanitized in version 1.5.3.1.

Unspecified vulnerability in Microsoft PowerPoint 2003 related to powerpnt.exe. Details of the impact and attack vectors are unknown, and exploitation requires user interaction. Possible links to CVE-2006-3655, CVE-2006-3656, and CVE-2006-3590 exist but are unconfirmed.

A vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2004 allows remote attackers to bypass file extension filters via a request with a trailing '#' character. As of July 15, 2006, this could not be reproduced by third parties.

A vulnerability in index.php in Orbitcoders OrbitMATRIX 1.0 allows remote attackers to trigger a SQL error via the page_name parameter, possibly due to a SQL injection vulnerability.

SQL injection vulnerability in the showtopic module in Koobi Pro CMS 5.6 allows remote attackers to execute arbitrary SQL commands via the toid parameter.

In LibVNCServer 0.7.1, a vulnerability in auth.c allows remote attackers to bypass authentication by sending a request with an insecure security type such as "Type 1 - None", which is accepted even if not offered by the server. This is a different issue from CVE-2006-2369.

passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory.

Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) admin/aindex.asp or (2) admin/aindex.html via a .. (dot dot) and encoded / (%2f) sequence in the URL.

The default configuration of the IOS HTTP server in Cisco Router Web Setup (CRWS) before version 3.3.0 build 31 does not require credentials. This allows remote attackers to access the server with arbitrary privilege levels (bug CSCsa78190).

An unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) reportedly allows remote attackers to gain privileges via unspecified vectors. Due to the lack of details and uncertainty about the affected product, the claim cannot be independently verified. No specific attack vectors or affected versions are provided.

The Nuke Advanced Classifieds module for PHP-Nuke contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the id_ads parameter in an EditAds operation.

The Sections module for PHP-Nuke contains an SQL injection vulnerability. A remote attacker can execute arbitrary SQL commands via the artid parameter in a viewarticle operation.

A buffer overflow vulnerability in Cisco Unified CallManager (CUCM) versions 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code by sending a SIP request with a long hostname. This vulnerability is known as bug CSCsd96542.

A vulnerability in Microsoft Excel 2000-2004 allows arbitrary code execution via a crafted .xls file with a malformed LABEL record that triggers memory corruption.

A vulnerability in Microsoft Excel 2000-2004 allows arbitrary code execution via a crafted .xls file with a malicious SELECTION record that causes memory corruption.

An unspecified vulnerability in Microsoft Excel 2000 through 2004 allows user-assisted attackers to execute arbitrary code via a crafted .xls file with a manipulated FNGROUPCOUNT value.

A buffer overflow vulnerability in Microsoft Excel 2000 through 2003 allows an attacker to execute arbitrary code via a specially crafted .xls file with a modified COLINFO record. The attack requires user interaction to open the malicious file.

CMS Mundo 1.0 build 008 (and possibly other versions) contains multiple SQL injection vulnerabilities. A remote attacker can execute arbitrary SQL commands via the news_id, searchstring, id, username parameters, and user profile fields (Name, Address, Zip, City, Country, Email).

A buffer overflow vulnerability in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a crafted .xls file with specific fields in a SELECTION record, causing memory corruption.