CVE Vulnerability Catalog

Poster version.two allows remote authenticated users to gain administrative privileges by appending the '|' field separator and an 'admin' value into the email address field.

Buffer overflow in ssinc.dll for Microsoft Internet Information Services (IIS) 5.0 allows local users to execute arbitrary code via a web page with a Server Side Include (SSI) directive with a long filename.

A vulnerability in One or Zero Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.

CVE-2003-0188 vulnerability allows local users to execute arbitrary commands as other lv users by placing malicious .lv files in other directories.

SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.

L-Forum 2.40 and earlier has a cross-site scripting vulnerability when the 'Enable HTML in messages' option is off. This allows remote attackers to insert arbitrary scripts or HTML via message fields including 'From', 'E-Mail', and 'Subject'.

EPIC IRC Client (EPIC4) versions pre2.002, pre2.003, and possibly later versions allow remote malicious IRC servers to cause a denial of service (crash) and potentially execute arbitrary code via a CTCP request from a large nickname, leading to incorrect length calculation.

SQL injection vulnerability in ttForum allows remote attackers to execute arbitrary SQL and gain ttForum Administrator privileges via the Ignorelist-Textfield argument in the Preferences page.

The header.php file in ttCMS version 2.3 and earlier allows remote attackers to inject arbitrary PHP code by setting the ttcms_user_admin parameter to '1' and modifying the admin_root parameter to point to a URL containing a malicious header.inc.php script.

Symantec Raptor Firewalls and other listed models generate easily predictable initial sequence numbers (ISN), allowing remote attackers to spoof connections.

IPSec in Mac OS X before version 10.2.6 does not properly handle certain incoming security policies that match by port. This could allow traffic that is not explicitly allowed by the policies.

The FrontRange GoldMine mail agent in versions 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or labeling it untrusted. This allows remote attackers to execute arbitrary code via a message rendered in IE using a less secure zone.

Multiple off-by-one vulnerabilities in Ethereal 0.9.11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via various dissectors.

Multiple buffer overflows in ircII 20020912 allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via responses that are not properly fed to the my_strcat function by ctcp_buffer, cannot_join_channel, status_make_printable, create_server_list, and possibly other functions.

Internet Explorer versions 5.01, 5.5, and 6.0 allow remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// requests, leading to multiple file download dialogs being opened.

Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.

L-Forum versions 2.40 and earlier have a cross-site scripting (XSS) vulnerability when the 'Enable HTML in messages' option is enabled. This allows remote attackers to inject arbitrary scripts or HTML via message fields such as 'From', 'E-Mail', 'Subject', and 'Body'.

Web Shop Manager version 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.

Buffer overflows in EPIC IRC Client (EPIC4) version 1.0.1 allow remote malicious IRC servers to cause a denial of service (crash) and possibly execute arbitrary code via long replies not properly handled by the userhost_cmd_returned function or Statusbar capability.

Buffer overflow in EXPLORER.EXE on Windows XP allows attackers to execute arbitrary code as the XP user via a desktop.ini file with a long .ShellClassInfo parameter.