CVE Vulnerability Catalog

A CRLF injection vulnerability in index.php of Christoph Roeder's phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.

A vulnerability in Microsoft Internet Explorer 5.01 through 6 involves incorrect return of IOleClientSite information when dynamically creating an embedded object. This can cause the object to run in the wrong security context or zone, allowing remote attackers to execute arbitrary code.

A buffer overflow in URLMON.DLL of Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS).

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code by instantiating the Mdt2gddr.dll, Mdt2dd.dll, and Mdt2gddo.dll COM objects as ActiveX controls, leading to memory corruption.

In DNGuestbook 2.0, the admin.php file contains an SQL injection vulnerability. An attacker can send crafted requests via the email and id parameters, allowing arbitrary SQL commands to be executed.

SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier. Remote attackers can execute arbitrary SQL commands via the id parameter.

The vulnerability in Buy.php of Aweb Scripts Seller uses predictable cookies for authentication based on time and script number. This allows a remote attacker to bypass authentication.

SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter in unsubscribe.php.

A remote file inclusion vulnerability in lire.php of Sire 2.0 nws allows attackers to execute arbitrary PHP code by supplying a malicious URL in the rub parameter.

SQL injection vulnerability in member.php of Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page request to index.php.

A heap-based buffer overflow in zgv before version 5.8 and xzgv before version 0.8 may allow user-assisted attackers to execute arbitrary code via a crafted JPEG image with more than 3 output components, such as CMYK or YCCK color space, which causes less memory to be allocated than required.

Multiple SQL injection vulnerabilities were found in MWNewsletter 1.0.0b. An attacker can send crafted user_email or user_name parameters to subscribe.php and unsubscribe.php scripts, allowing arbitrary SQL commands to be executed.

In SPIP 1.8.3, the file spip_login.php3 contains a PHP remote file inclusion vulnerability. An attacker can exploit the url parameter to execute arbitrary PHP code from an external source.

Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the itemID parameter to login.php and memo.php, and via itemgr, brandID, and album parameters to index.php. Invalid SQL queries also result in full path disclosure.

An unspecified vulnerability in the su program in HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access.

Multiple SQL injection vulnerabilities exist in the modules.php file of APT-webshop-system versions 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT. Remote attackers can execute arbitrary SQL commands via the group, seite, and id parameters, likely in the artikel functionality. Additionally, invalid SQL queries may lead to path disclosure.

SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name field.

SQuery 4.5 and earlier contain multiple PHP remote file inclusion vulnerabilities. An attacker can use the libpath parameter in scripts in the lib directory to execute arbitrary PHP code.

The vulnerability in NOD32 2.5 GUI (nod32.exe) causes it to run with SYSTEM privileges during scheduled on-demand scans, allowing local users to execute arbitrary code via unspecified attack vectors.

The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", allowing remote attackers to execute arbitrary code on a CTC workstation.