CVE Vulnerability Catalog

The vulnerability in amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file.

The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.

PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter.

The vulnerability in Enterasys Vertical Horizon VH-2402S switches before firmware version 2.05.05.09 consists of a hard-coded debugging account and password, allowing a remote attacker to gain elevated privileges.

Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter.

Buffer overflow in the legacy client support for AFP Server for Mac OS X 10.4.1 allows attackers to execute arbitrary code.

Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions.

The XMLHttpRequest object in Opera 8.0 Final Build 1095 allows remote attackers to bypass access restrictions and perform unauthorized actions on other domains via a redirect.

Vulnerability in modifyUser.asp in Cool Cafe Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value.

Multiple SQL injection vulnerabilities in ProductCart Ecommerce before version 2.7 allow remote attackers to execute arbitrary SQL commands via the idcategory parameter in viewPrd.asp, lid parameter in editCategories.asp, icd parameter in modCustomCardPaymentOpt.asp, and idccr parameter in OptionFieldsEdit.asp.

The eping_validaddr function in the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.

SQL injection vulnerability in login.asp of Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter.

Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via various parameters in HTTP requests.

Vulnerability in Symantec pcAnywhere 10.5x and 11.x before 11.5, with 'Launch with Windows' enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.

Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count.

Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via parameters such as formname, select, id, query, or string.

SQL injection vulnerability in content.php in Mambo 4.5.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_rating parameter.

The Adobe Reader control in Adobe Reader and Acrobat 7.0 and 7.0.1 allows remote attackers to determine the existence of files via Javascript containing XML script, aka the 'XML External Entity vulnerability.'

Vulnerability in Microsoft ISA Server 2000 allows remote attackers to connect to services using the NetBIOS protocol via a NetBIOS connection with an ISA Server that uses the NetBIOS (all) predefined packet filter.

Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.