deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2014-8754
Published: 2014-12-02
Description: Open redirect vulnerability in track-click.php in the Ad-Manager plugin 1.1.2 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the out parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://packetstormsecurity.com/files/129290/WordPress-Ad-Manager-1.1.2-Open-Redirect.html; http://seclists.org/fulldisclosure/2014/Nov/93; http://tetraph.com/security/cves/cve-2014-8754-wordpress-ad-manager-plugin-dest-redirect-privilege-escalation/
CVE: CVE-2014-8788
Published: 2014-12-02
Description: GleamTech FileVista before 6.1 allows remote authenticated users to obtain sensitive information via a crafted path when saving a zip file, which reveals the installation path in an error message.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html; http://seclists.org/fulldisclosure/2014/Nov/87; http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx
CVE: CVE-2014-8789
Published: 2014-12-02
Description: GleamTech FileVista before 6.1 allows remote authenticated users to create arbitrary files and possibly execute arbitrary code via a crafted path in a zip archive, which is not properly handled during extraction.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://packetstormsecurity.com/files/129304/FileVista-Path-Leakage-Path-Write-Modification.html; http://seclists.org/fulldisclosure/2014/Nov/87; http://support.gleamtech.com/kb/a10/version-history-of-filevista.aspx
CVE: CVE-2014-8874
Published: 2014-12-02
Description: The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attackers to obtain sensitive information via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2014/Dec/1; http://www.securityfocus.com/archive/1/534126/100/0/threaded; https://www.redteam-pentesting.de/advisories/rt-sa-2014-009
CVE: CVE-2014-9112
Published: 2014-12-02
Description: Heap-based buffer overflow in the process_copy_in function in GNU Cpio 2.11 allows remote attackers to cause a denial of service via a large block value in a cpio archive.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2014/Nov/74; http://secunia.com/advisories/60167; http://secunia.com/advisories/62145
CVE: CVE-2014-9113
Published: 2014-12-02
Description: CCH Wolters Kluwer ProSystem fx Engagement (aka PFX Engagement) 7.1 and earlier uses weak permissions (Authenticated Users: Modify and Write) for the (1) Pfx.Engagement.WcfServices, (2) PFXEngDesktopService, (3) PFXSYNPFTService, and (4) P2EWinService service files in PFX Engagement\, which allows local users to obtain LocalSystem privileges via a Trojan horse file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://packetstormsecurity.com/files/129323/CCH-Wolters-Kluwer-PFX-Engagement-7.1-Privilege-Escalation.html; http://www.exploit-db.com/exploits/35395; http://www.information-paradox.net/2014/11/cve-2014-9113-cch-wolters-kluwer-pfx.html
CVE: CVE-2014-9116
Published: 2014-12-02
Description: The write_one_header function in mutt 1.5.23 does not properly handle newline characters at the beginning of a header, which allows remote attackers to cause a denial of service (crash) via a header with an empty body, which triggers a heap-based buffer overflow in the mutt_substrdup function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://advisories.mageia.org/MGASA-2014-0509.html; http://dev.mutt.org/trac/ticket/3716; http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00002.html
CVE: CVE-2014-9173
Published: 2014-12-02
Description: SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/show/osvdb/115044; http://security.szurek.pl/google-doc-embedder-2514-sql-injection.html; http://www.exploit-db.com/exploits/35371
CVE: CVE-2014-9174
Published: 2014-12-02
Description: Cross-site scripting (XSS) vulnerability in the Google Analytics by Yoast (google-analytics-for-wordpress) plugin before 5.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the "Manually enter your UA code" (manual_ua_code_field) field in the General Settings.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/71330; https://exchange.xforce.ibmcloud.com/vulnerabilities/99053; https://twitter.com/yoast/status/[PII_REDACTED]07511296
CVE: CVE-2014-9175
Published: 2014-12-02
Description: SQL injection vulnerability in wpdatatables.php in the wpDataTables plugin 1.5.3 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the table_id parameter in a get_wdtable action to wp-admin/admin-ajax.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129232/WordPress-wpDataTables-1.5.3-SQL-Injection.html; http://www.exploit-db.com/exploits/35340; http://www.homelab.it/index.php/2014/11/23/wordpress-wpdatatables-sql-injection-vulnerability
CVE: CVE-2014-9176
Published: 2014-12-02
Description: Cross-site scripting (XSS) vulnerability in the InstaSqueeze Sexy Squeeze Pages plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://h4x0resec.blogspot.com/2014/11/wordpress-sexy-squeeze-pages-plugin.html; http://packetstormsecurity.com/files/129285/WordPress-Sexy-Squeeze-Pages-Cross-Site-Scripting.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/98986
CVE: CVE-2014-9177
Published: 2014-12-02
Description: The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allows remote attackers to obtain the installation path via a request to html5plus/playlist.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://h4x0resec.blogspot.com/2014/11/wordpress-html5-mp3-player-with.html; http://packetstormsecurity.com/files/129286/WordPress-Html5-Mp3-Player-Full-Path-Disclosure.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/98988
CVE: CVE-2014-9178
Published: 2014-12-02
Description: Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) vendor_email[] parameter in the email_vendor function or id parameter in the (2) download_project, (3) download_archive, or (4) remove_cat function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129212/WordPress-SP-Client-Document-Manager-2.4.1-SQL-Injection.html; http://www.exploit-db.com/exploits/35313; http://www.itas.vn/news/itas-team-phat-hien-nhieu-lo-hong-sql-injection-trong-sp-client-document-manager-plugin-67.html
CVE: CVE-2014-9179
Published: 2014-12-02
Description: Cross-site scripting (XSS) vulnerability in the SupportEzzy Ticket System plugin 1.2.5 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the "URL (optional)" field in a new ticket.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/129103/WordPress-SupportEzzy-Ticket-System-1.2.5-Cross-Site-Scripting.html; http://packetstormsecurity.com/files/129103/WordPress-SupportEzzy-Ticket-System-1.2.5-Cross-Site-Scripting.html
CVE: CVE-2014-9180
Published: 2014-12-02
Description: Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERY_STRING.
CVSS Score: 5.0 (MEDIUM)
References: http://packetstormsecurity.com/files/129087/Eleanor-CMS-Open-Redirect.html; http://packetstormsecurity.com/files/129087/Eleanor-CMS-Open-Redirect.html
CVE: CVE-2014-9181
Published: 2014-12-02
Description: Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/531290; https://forums.plex.tv/index.php/topic/62832-plex-media-server/?p=583250; https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140228-1_Plex_Media_Server_Authentication_bypass_local_file_disclosure_v10.txt
CVE: CVE-2014-9182
Published: 2014-12-02
Description: models/comment.php in Anchor CMS 0.9.2 and earlier allows remote attackers to inject arbitrary headers into mail messages via a crafted Host: header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/129042/Anchor-CMS-0.9.2-Header-Injection.html; http://packetstormsecurity.com/files/129042/Anchor-CMS-0.9.2-Header-Injection.html
CVE: CVE-2014-9183
Published: 2014-12-02
Description: ZTE ZXDSL 831CII has a default password of admin for the admin account, which allows remote attackers to gain administrator privileges.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/129016/ZTE-831CII-Hardcoded-Credential-XSS-CSRF.html; http://packetstormsecurity.com/files/129016/ZTE-831CII-Hardcoded-Credential-XSS-CSRF.html
CVE: CVE-2014-9184
Published: 2014-12-02
Description: ZTE ZXDSL 831CII allows remote attackers to bypass authentication via a direct request to (1) main.cgi, (2) adminpasswd.cgi, (3) userpasswd.cgi, (4) upload.cgi, (5) conprocess.cgi, or (6) connect.cgi.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://packetstormsecurity.com/files/129015/ZTE-ZXDSL-831CII-Insecure-Direct-Object-Reference.html; http://packetstormsecurity.com/files/129015/ZTE-ZXDSL-831CII-Insecure-Direct-Object-Reference.html
CVE: CVE-2014-3988
Published: 2014-12-03
Description: Cross-site scripting (XSS) vulnerability in index.php in SunHater KCFinder 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) file or (2) directory (folder) name of an uploaded file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://github.com/sunhater/kcfinder/issues/40; https://github.com/sunhater/kcfinder/issues/40
CVE: CVE-2014-9141
Published: 2014-12-03
Description: The installer in Thomson Reuters Fixed Assets CS 13.1.4 and earlier uses weak permissions for connectbgdl.exe, which allows local users to execute arbitrary code by modifying this program.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.exploit-db.com/exploits/35423; http://www.information-paradox.net/2014/12/cve-2014-9141-thomson-reuters-fixed.html; http://www.exploit-db.com/exploits/35423
CVE: CVE-2014-9220
Published: 2014-12-03
Description: SQL injection vulnerability in OpenVAS Manager before 4.0.6 and 5.x before 5.0.7 allows remote attackers to execute arbitrary SQL commands via the timezone parameter in a modify_schedule OMP command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147753.html; http://lists.opensuse.org/opensuse-updates/2015-02/msg00039.html; http://openwall.com/lists/oss-security/2014/11/30/2
CVE: CVE-2014-8104
Published: 2014-12-03
Description: OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://advisories.mageia.org/MGASA-2014-0512.html; http://lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html; http://www.debian.org/security/2014/dsa-3084
CVE: CVE-2014-8771
Published: 2014-12-03
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/; http://www.x3cms.net/en/news/article/8bb9a4f84d956653b4daa19ee7c529fa/x3_cms_0.5.2; http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/
CVE: CVE-2014-8772
Published: 2014-12-03
Description: Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/; http://www.x3cms.net/en/news/article/8bb9a4f84d956653b4daa19ee7c529fa/x3_cms_0.5.2; http://hacktivity.websecgeeks.com/x3-cms-xss-and-csrf/
CVE: CVE-2014-8773
Published: 2014-12-03
Description: MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior; http://hacktivity.websecgeeks.com/modx-csrf-and-xss/; http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE: CVE-2014-8774
Published: 2014-12-03
Description: Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the context_key parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior; http://hacktivity.websecgeeks.com/modx-csrf-and-xss/; http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE: CVE-2014-8775
Published: 2014-12-03
Description: MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior; http://hacktivity.websecgeeks.com/modx-csrf-and-xss/; http://forums.modx.com/thread/92152/critical-login-xss-csrf-revolution-2-2-1-4-and-prior
CVE: CVE-2014-9018
Published: 2014-12-03
Description: Icecast before 2.4.1 transmits the output of the on-connect script, which might allow remote attackers to obtain sensitive information, related to shared file descriptors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://icecast.org/news/icecast-release-2_4_1/; http://lists.opensuse.org/opensuse-updates/2014-12/msg00038.html; http://www.mandriva.com/security/advisories?name=MDVSA-2014:231
CVE: CVE-2013-7416
Published: 2014-12-03
Description: canto_curses/guibase.py in Canto Curses before 0.9.0 allows remote feed servers to execute arbitrary commands via shell metacharacters in a URL in a feed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: http://seclists.org/oss-sec/2014/q4/826; http://seclists.org/oss-sec/2014/q4/832; http://www.securityfocus.com/bid/71323
CVE: CVE-2014-9134
Published: 2014-12-03
Description: Unrestricted file upload vulnerability in Huawei Honor Cube Wireless Router WS860s before V100R001C02B222 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via unspecified vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-396206.htm; http://www.securityfocus.com/bid/69806; http://www.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-396206.htm
CVE: CVE-2014-9157
Published: 2014-12-03
Description: Format string vulnerability in the yyerror function in lib/cgraph/scan.l in Graphviz allows remote attackers to have unspecified impact via format string specifiers in unknown vectors, which are not properly handled in an error string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://advisories.mageia.org/MGASA-2014-0520.html; http://seclists.org/oss-sec/2014/q4/784; http://seclists.org/oss-sec/2014/q4/872
CVE: CVE-2014-9234
Published: 2014-12-03
Description: Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/129138/D-Link-DCS-2103-Directory-Traversal.html; http://seclists.org/fulldisclosure/2014/Nov/42; http://websecurity.com.ua/7250/
CVE: CVE-2014-9235
Published: 2014-12-03
Description: Multiple SQL injection vulnerabilities in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) _action parameter to group.php or (2) user.php or the (3) location_id parameter to photos.php in php/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Nov/45; http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html
CVE: CVE-2014-9236
Published: 2014-12-03
Description: Cross-site scripting (XSS) vulnerability in php/edit_photos.php in Zoph (aka Zoph Organizes Photos) 0.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) photographer_id or (2) _crumb parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Nov/45; http://packetstormsecurity.com/files/129141/Zoph-0.9.1-Cross-Site-Scripting-SQL-Injection.html
CVE: CVE-2014-9237
Published: 2014-12-03
Description: SQL injection vulnerability in Proticaret E-Commerce 3.0 allows remote attackers to execute arbitrary SQL commands via a tem:Code element in a SOAP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129129/Proticaret-E-Commerce-Script-3.0-SQL-Injection.html; http://seclists.org/fulldisclosure/2014/Nov/43; http://packetstormsecurity.com/files/129129/Proticaret-E-Commerce-Script-3.0-SQL-Injection.html
CVE: CVE-2014-9238
Published: 2014-12-03
Description: D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / (forward slash) character.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/129138/D-Link-DCS-2103-Directory-Traversal.html; http://seclists.org/fulldisclosure/2014/Nov/42; http://websecurity.com.ua/7250/
CVE: CVE-2014-9239
Published: 2014-12-03
Description: SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute arbitrary SQL commands via the id[] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://community.invisionpower.com/blogs/entry/9704-active-security-exploit/; http://community.invisionpower.com/blogs/entry/9705-ipboard-33x-34x-security-update/; http://seclists.org/fulldisclosure/2014/Nov/20
CVE: CVE-2014-9240
Published: 2014-12-03
Description: SQL injection vulnerability in member.php in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the question_id parameter in a do_register action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/; http://packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html; http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/
CVE: CVE-2014-9241
Published: 2014-12-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.8.x before 1.8.2 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to report.php, (2) signature parameter in a do_editsig action to usercp.php, or (3) title parameter in the style-templates module in an edit_template action or (4) file parameter in the config-languages module in an edit action to admin/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/; http://packetstormsecurity.com/files/129109/MyBB-1.8.1-Cross-Site-Scripting-SQL-Injection.html; http://blog.mybb.com/2014/11/13/mybb-1-8-2-released-security-release/
CVE: CVE-2014-9242
Published: 2014-12-03
Description: SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html; http://seclists.org/fulldisclosure/2014/Nov/44; http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html
CVE: CVE-2014-9243
Published: 2014-12-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in WebsiteBaker 2.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) QUERY_STRING to wb/admin/admintools/tool.php or (2) section_id parameter to edit_module_files.php, (3) news/add_post.php, (4) news/modify_group.php, (5) news/modify_post.php, or (6) news/modify_settings.php in wb/modules/.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html; http://seclists.org/fulldisclosure/2014/Nov/44; http://packetstormsecurity.com/files/129140/WebsiteBaker-2.8.3-XSS-SQL-Injection-HTTP-Response-Splitting.html
CVE: CVE-2014-5445
Published: 2014-12-04
Description: Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackers or remote authenticated users to read arbitrary files via a full pathname in the schFilePath parameter to the (1) CSVServlet or (2) CReportPDFServlet servlet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/129336/ManageEngine-Netflow-Analyzer-IT360-File-Download.html; http://seclists.org/fulldisclosure/2014/Dec/9; http://www.securityfocus.com/archive/1/534122/100/0/threaded
CVE: CVE-2014-5446
Published: 2014-12-04
Description: Directory traversal vulnerability in the DisplayChartPDF servlet in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allows remote attackers and remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.com/files/129336/ManageEngine-Netflow-Analyzer-IT360-File-Download.html; http://seclists.org/fulldisclosure/2014/Dec/9; http://www.securityfocus.com/archive/1/534122/100/0/threaded
CVE: CVE-2014-6034
Published: 2014-12-04
Description: Directory traversal vulnerability in the com.me.opmanager.extranet.remote.communication.fw.fe.FileCollector servlet in ZOHO ManageEngine OpManager 8.8 through 11.3, Social IT Plus 11.0, and IT360 10.4 and earlier allows remote attackers or remote authenticated users to write to and execute arbitrary WAR files via a .. (dot dot) in the regionID parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://seclists.org/fulldisclosure/2014/Sep/110; https://raw.githubusercontent.com/pedrib/PoC/master/ManageEngine/me_opmanager_socialit_it360.txt; https://support.zoho.com/portal/manageengine/helpcenter/articles/servlet-vulnerability-fix