CVE Vulnerability Catalog

phpMyAdmin versions 2.5.1 through 2.5.7 contain a vulnerability that allows remote attackers to modify configuration settings by manipulating $cfg['Servers'] variables, potentially leading to unauthorized access to MySQL servers.

ripMIME 1.3.2.3 and earlier allows remote attackers to bypass e-mail protection via a base64 MIME encoded attachment containing invalid characters that are not properly extracted.

Unknown vulnerability in Rippy the Aggregator before version 0.10, when register_globals is enabled, has unknown attack vectors and impact, possibly related to the user-controlled filter.

The MIME transformation system in phpMyAdmin versions 2.5.0 through 2.6.0-pl1 contains a vulnerability that allows remote attackers to execute arbitrary commands by injecting shell metacharacters in unspecified vectors.

A vulnerability in Check Point Firewall-1 versions 4.1 through NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an IKE packet with a specific Vendor ID payload, causing the firewall to respond with version and other details.

A vulnerability in NewsPHP allows remote attackers to gain unauthorized administrative access by setting a cookie to the 'autorized=admin; root=admin' value.

The vulnerability in edituser.php3 in PHPMyChat 0.14.5 allows remote attackers to bypass authentication and gain administrative privileges by setting the do_not_login parameter to false.

A vulnerability in LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a server crash and client CPU consumption by sending a username starting with a percent sign (%) followed by a null character.

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

SQL injection vulnerability in register.php in Phorum before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via various parameters in PHP files.

The distribution of Zen Cart 1.1.4 before patch 2 includes certain debugging code in the Admin password retrieval functionality, which allows attackers to gain administrative privileges via password_forgotten.php.

An unknown vulnerability related to the handling of large requests in RAdmin for Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.

PHP remote file inclusion vulnerability in index.php in phpShop 0.7.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the base_dir parameter to reference a URL on a remote web server that contains phpshop.cfg.

The systrace_exit function in the systrace utility for NetBSD-current and 2.0 before April 16, 2004, and certain FreeBSD ports, does not verify the owner of the /dec/systrace connection before setting euid to 0, which allows local users to gain root privileges.

A format string vulnerability in the logmsg function in svc.c in Pound 1.5 and earlier allows remote attackers to execute arbitrary code via format string specifiers in syslog messages.

CSRF vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.

Buffer overflow in the Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall and other products, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

SCO OpenServer versions 5.0.5 through 5.0.7 only support Xauthority style access control when logging in using scologin. This allows remote attackers to gain unauthorized access to an X session via other X login methods.

Stack-based buffer overflow in the HTTP server in NetChat 7.3 and earlier allows remote attackers to execute arbitrary code via a long GET request.