[CLOSE] OSVDB ID : 55387 - Disclosed: 2009-05-31

Description:

(Description Provided by CVE) : import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.

[CLOSE] OSVDB ID : 55388 - Disclosed: 2009-05-31

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter.

[CLOSE] OSVDB ID : 55389 - Disclosed: 2009-05-31

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter.

[CLOSE] OSVDB ID : 55390 - Disclosed: 2009-05-31

Description:

Unclassified NewsBoard (UNB) contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the forum.php script not properly sanitizing user-supplied input to the 'Query' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 61689 - Disclosed: 2009-05-31

Description:

(Description Provided by CVE) : Unspecified vulnerability in posting.php in phpBB before 3.0.5 has unknown impact and attack vectors related to the use of a "forum id" in circumstances related to a "global announcement."

[CLOSE] OSVDB ID : 72681 - Disclosed: 2009-05-31

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 54829 - Disclosed: 2009-05-30

Description:

OCS Inventory NG contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the download.php script not properly sanitizing user-supplied input to the 'N', 'DL', 'O', and 'V' parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 54830 - Disclosed: 2009-05-30

Description:

OCS Inventory NG contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'group_show.php' script not properly sanitizing user-supplied input to the 'systemid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54893 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.

[CLOSE] OSVDB ID : 62021 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.

[CLOSE] OSVDB ID : 62022 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.

[CLOSE] OSVDB ID : 62023 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.

[CLOSE] OSVDB ID : 64451 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.

[CLOSE] OSVDB ID : 64452 - Disclosed: 2009-05-30

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Basic Analysis and Security Engine (BASE), possibly 1.4.4 and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/base_roleadmin.php, (2) admin/base_useradmin.php, (3) base_conf_contents.php, (4) base_qry_sqlcalls.php, and (5) base_ag_main.php.

[CLOSE] OSVDB ID : 58146 - Disclosed: 2009-05-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55078 - Disclosed: 2009-05-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55061 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Buffer overflow in the queue manager in IBM WebSphere MQ 6.x before 6.0.2.7 and 7.x before 7.0.1.0 allows remote attackers to execute arbitrary code via a crafted request.

[CLOSE] OSVDB ID : 55781 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and other applications, allows remote attackers to execute arbitrary code via vectors involving the DirectShow (aka DShow) frontend and improper handling of the XVID_ERR_MEMORY return code during processing of a crafted movie file. NOTE: some of these details are obtained from third party information.

[CLOSE] OSVDB ID : 54781 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) model.php and (2) config.php with timestamps before 20090521.

[CLOSE] OSVDB ID : 54782 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to model.php with a timestamp before 20090521.

[CLOSE] OSVDB ID : 54809 - Disclosed: 2009-05-29

Description:

Traidnt Up contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the uploadcp/index.php script not properly sanitizing user-supplied input to the 'trupuser' and 'truppassword' cookies. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 54811 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Multiple SQL injection vulnerabilities in admin/aclass/admin_func.php in Arab Portal 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) X-Forwarded-For or (2) Client-IP HTTP header in a request to the default URI under admin/.

[CLOSE] OSVDB ID : 54812 - Disclosed: 2009-05-29

Description:

AIMP version 2.51 build 330 suffers from a stack based buffer overflow vulnerability that can be exploited via malicious media file that supports ID3 tags (mp3). EIP and ECX registers gets overwritten, including the SE handler and the pointer to the next SEH record. The issue is trigered by playing the file (crashes within 5 seconds) or by viewing the file's metadata or by pressing the F4 key and selecting the ID3v1 or ID3v2 tab.

[CLOSE] OSVDB ID : 54824 - Disclosed: 2009-05-29

Description:

ZeusCart contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'maincatid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54851 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Unspecified vulnerability in the Finnish Bank Payment module 2.2 for osCommerce has unknown impact and attack vectors related to bank charges.

[CLOSE] OSVDB ID : 54881 - Disclosed: 2009-05-29

Description:

SonicWALL SSL-VPN 200, 2000 and 4000 appliances contain a flaw that may allow a malicious user to inject format string specifiers. The issue is triggered when manipulating the 'err' parameter of the /cgi-bin/welcome/VirtualOffice CGI. It is possible that the flaw may allow aribtrary memory read and write operations, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 54917 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.

[CLOSE] OSVDB ID : 55102 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Unspecified vulnerability in the Luottokunta module before 1.3 for osCommerce has unknown impact and attack vectors related to orders.

[CLOSE] OSVDB ID : 56590 - Disclosed: 2009-05-29

Description:

Zen Help Desk contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the admin.asp script not properly sanitizing user-supplied input to the 'userid' and 'PassWord' parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 56600 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in view.php in Webboard 2.90 beta and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the topic parameter.

[CLOSE] OSVDB ID : 58415 - Disclosed: 2009-05-29

Description:

Adobe Acrobat contains a flaw that may allow a remote denial of service. The issue is triggered when Acrobat opens a PDF file with a large number of "[" (square bracket) characters to the alert method, and will result in loss of availability for the service.

[CLOSE] OSVDB ID : 60787 - Disclosed: 2009-05-29

Description:

Million Dollar Text Links contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'admin.link.modify.php' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 61572 - Disclosed: 2009-05-29

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 64448 - Disclosed: 2009-05-29

Description:

(Description Provided by CVE) : Heap-based buffer overflow in the SonicMediaPlayer ActiveX control in SonicMediaPlayer.dll in Roxio CinePlayer 3.2 allows remote attackers to execute arbitrary code via a long argument to the DiskType method. NOTE: this might overlap CVE-2007-1559.

[CLOSE] OSVDB ID : 66477 - Disclosed: 2009-05-29

Description:

JVideo! Component for Joomla! contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'user_id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 55588 - Disclosed: 2009-05-28

Description:

(Description Provided by CVE) : The OSCAR protocol implementation in Pidgin before 2.5.8 misinterprets the ICQWebMessage message type as the ICQSMS message type, which allows remote attackers to cause a denial of service (application crash) via a crafted ICQ web message that triggers allocation of a large amount of memory.

[CLOSE] OSVDB ID : 59000 - Disclosed: 2009-05-28

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 56275 - Disclosed: 2009-05-28

Description:

(Description Provided by CVE) : The (1) htk_read_header, (2) alaw_init, (3) ulaw_init, (4) pcm_init, (5) float32_init, and (6) sds_read_header functions in libsndfile 1.0.20 allow context-dependent attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted audio file.

[CLOSE] OSVDB ID : 54773 - Disclosed: 2009-05-28

Description:

Simple Machines Forum contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application uses the incorrect MIME type 'image/bmp'. The unknown header triggers MIME sniffing in Internet Explorer, allowing an image to be falsely identified as text/html. This could allow a user to create a specially crafted image that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 54914 - Disclosed: 2009-05-28

Description:

DB2 contains an unspecified error. If LDAP-based authentication is used and the LDAP server allows anonymous binds, this flaw can be exploited to connect to DB2 databases without a valid password. No further details have been provided.