CVE Vulnerability Catalog

BosClassifieds Classified Ads contains multiple PHP Remote File Inclusion (RFI) vulnerabilities. A remote attacker can execute arbitrary PHP code by supplying a malicious URL in the insPath parameter to index.php, recent.php, account.php, classified.php, or search.php.

SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field value in an INVITE message.

PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.

SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parameter.

SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters.

FreeHost contains multiple SQL injection vulnerabilities in the readme parameter (misc.php) and index parameter (news.php), allowing remote attackers to execute arbitrary SQL commands.

A heap-based buffer overflow in the Server Service (SRV.SYS driver) of Microsoft Windows allows a remote attacker to execute arbitrary code by sending crafted first-class Mailslot messages that cause memory corruption and bypass size restrictions on second-class Mailslot messages.

A buffer overflow vulnerability in the GIFIMP32.FLT library, used in Microsoft Office 2003 SP1/SP2, Office XP SP3, Office 2000 SP3, and other products, allows remote code execution via a crafted GIF image. The attack requires user interaction to open the malicious file.

The DHCP Client service in Microsoft Windows 2000 SP4, Windows XP SP1 and SP2, and Server 2003 up to SP1 contains a buffer overflow vulnerability that allows a remote attacker to execute arbitrary code via a crafted DHCP response.

An unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths. This is a different vulnerability than CVE-2006-1316.

An unspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products allows user-assisted attackers to execute arbitrary code via a crafted PNG image that triggers memory corruption when parsed.

An unspecified vulnerability in Microsoft Office 2003 SP1/SP2, Office XP SP3, Office 2000 SP3, and other products allows user-assisted attackers to execute arbitrary code via a crafted Office file with a malformed string that triggers memory corruption related to record lengths. This issue is known as the "Microsoft Office Parsing Vulnerability" and is distinct from CVE-2006-2389.

Kaillera Server 0.86 and earlier contains a stack-based buffer overflow. A remote attacker can exploit this vulnerability by sending a long nickname, potentially leading to arbitrary code execution.

Multiple SQL injection vulnerabilities in AstroDog Press Some Chess 1.5-RC2 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly including the gameID parameter in board.php.

Multiple SQL injection vulnerabilities in Belchior Foundry vCard PRO allow remote attackers to execute arbitrary SQL commands via the cat_id parameter in gbrowse.php, the card_id parameter in rating.php and create.php, and the event_id parameter in search.php.

Wiele podatności typu SQL injection w Joomla! przed wersją 1.0.10 umożliwia zdalnym atakującym wykonywanie dowolnych poleceń SQL poprzez nieokreślone parametry związane z funkcją 'Zapamiętaj mnie', modułem 'Powiązane elementy' oraz przesyłaniem 'Linków internetowych'.

Remote file inclusion vulnerability in styles/default/global_header.php in MyPHP CMS 0.3 and earlier. When register_globals is enabled, a remote attacker can execute arbitrary PHP code by supplying a URL in the domain parameter.

Multiple PHP remote file inclusion (RFI) vulnerabilities in free QBoard 1.1 allow remote attackers to execute arbitrary PHP code by supplying a URL in the qb_path parameter to index.php, about.php, contact.php, delete.php, faq.php, features.php, and history.php. This is a different set of vectors than CVE-2006-2998.

CRLF injection vulnerability in the form_mail Drupal module before 1.8.2.2 allows remote attackers to inject email headers, facilitating spam sending. This is a different issue than CVE-2006-1225.