CVE Vulnerability Catalog

The sondages module in PwsPHP 1.2.3 contains an SQL injection vulnerability. Remote attackers can execute arbitrary SQL commands via the id parameter in requests to index.php.

A vulnerability in Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create user accounts that cannot be deleted by the administrator. This is achieved by injecting script code into the '31' parameter of the NewUser function, which is not filtered during account creation but is sanitized in the admin interface, preventing deletion.

SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the id or action parameter in basket.php, or id or page parameter in cat.php.

ShoutLIVE 1.1.0 contains multiple direct static code injection vulnerabilities in savesettings.php. Remote attackers can write arbitrary PHP code to settings.php via request variables.

Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

A vulnerability in Bugzilla 2.16.10 involves improper handling of characters in the maxpatchsize and maxattachmentsize parameters in attachment.cgi, allowing a remote attacker to trigger a SQL error.

A buffer overflow vulnerability exists in RITLabs The Bat! 3.60.07 in the email subject field. A remote attacker can exploit this to execute arbitrary code on the victim's system.

A vulnerability in Bugzilla 2.19.3 through 2.20 improperly handles "//" sequences in URLs when redirecting a user from the login form. This could cause it to generate a partial URL in a form action that leads to sending form data to another domain.

SQL injection vulnerability in Oi! Email Marketing System 3.0 allows remote attackers to execute arbitrary SQL commands via the Username and Password fields on the login page.

SQL injection vulnerability in PHP-Nuke before version 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, bypassing regular expressions intended to protect against SQL injection, as demonstrated via the kala parameter.

PHP-Nuke 7.8 Patched 3.2 contains a vulnerability that allows bypassing SQL injection protection. An attacker can use /%2a (/*) sequences with the "ad_click" word in the query string, e.g., via the kala parameter.

SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in fastlinks.php and catogary.php.

A stack-based buffer overflow in the pam_micasa PAM authentication module in CASA on Novell Linux Desktop 9 and Open Enterprise Server 1 allows remote attackers to execute arbitrary code via unspecified vectors.

A vulnerability in nfsd in the FreeBSD 6.0 kernel allows a remote attacker to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite.

A directory traversal vulnerability was found in index.php in 4Images 1.7.1 and earlier. Attackers can read and include arbitrary files using ".." sequences in the template parameter.

An unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows attackers to cause a system panic (denial of service) or execute arbitrary code.

NOCC Webmail 1.0 stores email attachments in temporary files with predictable filenames, making it easier for remote attackers to execute arbitrary code by accessing the email attachment via directory traversal vulnerabilities.

Eval injection vulnerability in sessions.inc of PHP Base Library (PHPLib) before 7.4a. When index.php3 from the PHPLib distribution is available on the server, remote attackers can execute arbitrary PHP code by including a base64-encoded representation of the code in a cookie.

SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQL commands via the UpdateID0 parameter to Service_Requests.asp. The vendor disputes the issue, claiming a complex state management system with JavaScript and server-side session state protects against SQL injection, and that errors may be due to invalid field values rather than actual injection.

The WYSIWYG rendering engine (rich mail editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attackers to bypass JavaScript security settings. By sending an email containing a JavaScript URI in the SRC attribute of an IFRAME tag, the code executes when the user edits the email, potentially leading to sensitive information disclosure or a crash.