CVE Vulnerability Catalog

PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.

PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute arbitrary code via the photoroot parameter.

SQL injection vulnerability in PhpAuction 2.5 allows remote attackers to modify SQL queries via the 'category' parameter in adsearch.php.

Unknown vulnerability in the arshell tool in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.

Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.

Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin registry key, allowing local users to gain administrator privileges.

Multiple SQL injection vulnerabilities in Dragonfly Commerce allow remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the key parameter to dc_Categoriesview.asp, dc_productslist_Clearance.asp, PID parameter to ratings.asp, dc_Productsview.asp, start, key_mp, searchtype, or psearch parameters to dc_forum_Postslist.asp. The vendor disputes this, claiming errors arise from invalid category and product numbers, but the issue still meets the CVE definition of exposure.

Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, allows local users to execute arbitrary code via long command line arguments.

Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.

Multiple unknown vulnerabilities were discovered in Moodle before version 1.5.1. Their impact and attack vectors are unspecified.

A buffer overflow vulnerability exists in multiple 'p' commands in IBM AIX 5.1, 5.2, and 5.3. A local user can exploit long command line arguments to execute arbitrary code via commands such as penable, pdisable, pstart, phold, pdelay, or pshare.

Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the data or torrents directories with insufficient access control, allowing remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers.

An unknown vulnerability in F5 BIG-IP versions 9.0.2 through 9.1 allows attackers to subvert SSL transaction authentication, possibly involving NATIVE ciphers.

Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments.

A buffer overflow vulnerability in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.

Buffer overflow vulnerability in the getlvname command in IBM AIX 5.1, 5.2 and 5.3. A local user can exploit long command line arguments to execute arbitrary code.

PHP remote file inclusion vulnerability in gals.php of PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.

A stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.

Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.

A buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams.