deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1324
Published: 2006-03-21
Description: Cross-site scripting (XSS) vulnerability in acp/lib/class_db_mysql.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/19293; http://securityreason.com/securityalert/529; http://securityreason.com/securityalert/598
CVE: CVE-2006-1325
Published: 2006-03-21
Description: Cross-site scripting (XSS) vulnerability in Streber 0.055 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/19263; http://www.securityfocus.com/bid/17157; http://www.streber-pm.org/phpBB2/viewtopic.php?p=491#491
CVE: CVE-2006-1326
Published: 2006-03-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board 2.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) result_type, (2) search_in, (3) nav, (4) forums, and (5) s parameters in the Search action to index.php; (6) st parameter to index.php with showtopics set to 1; (7) m, (8) y, and (9) d parameters in a calendar action; (10) t parameter in a Print action; (11) MID parameter in a Mail action; (12) HID parameter in a Help action; (13) active parameter in a search action; (14) sort_order, (15) max_results, or (16) sort_key parameter in a Members action.
CVSS Score: 4.3 (MEDIUM)
References: http://www.osvdb.org/25009; http://www.osvdb.org/25010; http://www.osvdb.org/25011
CVE: CVE-2006-1327
Published: 2006-03-21
Description: SQL injection vulnerability in reg.php in SoftBB 0.1 allows remote attackers to execute arbitrary SQL commands via the mail parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19283; http://www.osvdb.org/23999; http://www.securityfocus.com/bid/17160
CVE: CVE-2006-1328
Published: 2006-03-21
Description: SQL injection vulnerability in count.php in Skull-Splitter PHP Downloadcounter for Wallpapers 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) count_fieldname, (2) url_fieldname, or (3) url parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://evuln.com/vulns/105/summary.html; http://secunia.com/advisories/19314; http://securityreason.com/securityalert/649
CVE: CVE-2006-1329
Published: 2006-03-21
Description: The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".
CVSS Score: 5.0 (MEDIUM)
References: http://article.gmane.org/gmane.network.jabber.admin/27372; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://secunia.com/advisories/19281
CVE: CVE-2006-1330
Published: 2006-03-21
Description: Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/19315; http://www.securityfocus.com/archive/1/428156; http://www.securityfocus.com/archive/1/430870/100/0/threaded
CVE: CVE-2006-1331
Published: 2006-03-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0191.html; http://www.securityfocus.com/archive/1/428157; http://www.securityfocus.com/bid/17151
CVE: CVE-2006-1332
Published: 2006-03-21
Description: Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
CVSS Score: 6.4 (MEDIUM)
References: http://securityreason.com/securityalert/471; http://securityreason.com/securityalert/605; http://www.securityfocus.com/archive/1/428157
CVE: CVE-2006-1333
Published: 2006-03-21
Description: Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp.
CVSS Score: 6.4 (MEDIUM)
References: http://blog.betaparticle.com/UserFiles/File/6fix.txt; http://secunia.com/advisories/19292; http://securityreason.com/securityalert/600
CVE: CVE-2006-1334
Published: 2006-03-21
Description: Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.
CVSS Score: 6.4 (MEDIUM)
References: http://evuln.com/vulns/101/summary.html; http://secunia.com/advisories/19273; http://securityreason.com/securityalert/638
CVE: CVE-2006-1335
Published: 2006-03-21
Description: gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome.
CVSS Score: 3.7 (LOW)
References: http://bugzilla.gnome.org/show_bug.cgi?id=326663; http://secunia.com/advisories/19280; http://www.osvdb.org/24015
CVE: CVE-2006-0745
Published: 2006-03-21
Description: X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid, which allows local users to bypass intended restrictions and (1) execute arbitrary code via the -modulepath command line option or (2) overwrite arbitrary files via -logfile.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/19256; http://secunia.com/advisories/19307; http://secunia.com/advisories/19311
CVE: CVE-2006-1336
Published: 2006-03-21
Description: Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19321; http://securityreason.com/securityalert/601; http://www.osvdb.org/23969
CVE: CVE-2006-1337
Published: 2006-03-21
Description: Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html; http://secunia.com/advisories/19288; http://securitytracker.com/id?1015797
CVE: CVE-2006-1338
Published: 2006-03-21
Description: Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/19288; http://www.mailenable.com/enterprisehistory.asp; http://www.mailenable.com/professionalhistory.asp
CVE: CVE-2006-1339
Published: 2006-03-21
Description: Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://hamid.ir/security/cutenews.txt; http://secunia.com/advisories/19289; http://www.securityfocus.com/archive/1/428434/100/0/threaded
CVE: CVE-2006-1340
Published: 2006-03-21
Description: CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.
CVSS Score: 5.0 (MEDIUM)
References: http://hamid.ir/security/cutenews.txt; http://secunia.com/advisories/19289; http://www.securityfocus.com/archive/1/428434/100/0/threaded
CVE: CVE-2006-1341
Published: 2006-03-21
Description: SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/102/description.html; http://secunia.com/advisories/19274; http://securityreason.com/securityalert/646
CVE: CVE-2006-1342
Published: 2006-03-21
Description: net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=linux-netdev&m=[PII_REDACTED]3594&w=2; http://secunia.com/advisories/19357; http://secunia.com/advisories/20398
CVE: CVE-2006-1343
Published: 2006-03-21
Description: net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=linux-netdev&m=[PII_REDACTED]3594&w=2; http://secunia.com/advisories/19357; http://secunia.com/advisories/19955
CVE: CVE-2006-1344
Published: 2006-03-22
Description: Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTML_FILE parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/614; http://securitytracker.com/id?1015813; http://www.coresecurity.com/common/showdoc.php?idx=522&idxseccion=10
CVE: CVE-2006-1345
Published: 2006-03-22
Description: polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/428056/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/25337; http://www.securityfocus.com/archive/1/428056/100/0/threaded
CVE: CVE-2006-1346
Published: 2006-03-22
Description: Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by index.php.
CVSS Score: 6.4 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-April/000698.html; http://secunia.com/advisories/19322; http://www.osvdb.org/24016
CVE: CVE-2006-1347
Published: 2006-03-22
Description: SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-April/000698.html; http://secunia.com/advisories/19322; http://www.osvdb.org/24017
CVE: CVE-2006-1348
Published: 2006-03-22
Description: Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an error message.  NOTE: this issue might be resultant from CVE-2006-1346.
CVSS Score: 4.3 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-April/000698.html; http://secunia.com/advisories/19322; http://www.osvdb.org/24018
CVE: CVE-2006-1349
Published: 2006-03-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.
CVSS Score: 4.3 (MEDIUM)
References: http://www.osvdb.org/23967; http://www.osvdb.org/23968; http://www.securityfocus.com/archive/1/428972/100/0/threaded
CVE: CVE-2006-1350
Published: 2006-03-22
Description: PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-March/000626.html; http://secunia.com/advisories/19320; http://securityreason.com/securityalert/616
CVE: CVE-2006-1351
Published: 2006-03-22
Description: BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/180; http://secunia.com/advisories/19310; http://securitytracker.com/id?1015792
CVE: CVE-2006-1352
Published: 2006-03-22
Description: BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/183; http://secunia.com/advisories/19310; http://securitytracker.com/id?1015790
CVE: CVE-2006-1353
Published: 2006-03-22
Description: Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1402.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1431.html; http://secunia.com/advisories/19286
CVE: CVE-2006-1354
Published: 2006-03-22
Description: Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc; http://lists.suse.de/archive/suse-security-announce/2006-Mar/0009.html; http://rhn.redhat.com/errata/RHSA-2006-0271.html
CVE: CVE-2006-1355
Published: 2006-03-22
Description: avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
CVSS Score: 7.2 (HIGH)
References: http://forum.avast.com/index.php?topic=19862.0; http://secunia.com/advisories/19284; http://www.dslreports.com/forum/remark%2C15601404~days=9999~start=20
CVE: CVE-2006-1356
Published: 2006-03-22
Description: Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/ref/23/23985-libvc.txt; http://secunia.com/advisories/19295; http://www.osvdb.org/23985
CVE: CVE-2006-1357
Published: 2006-03-22
Description: Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19337; http://securityreason.com/securityalert/611; http://securitytracker.com/id?1015798
CVE: CVE-2006-1358
Published: 2006-03-22
Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftpna.beasys.com/pub/releases/security/patch_CR259534_81SP5.zip; http://dev2dev.bea.com/pub/advisory/182; http://secunia.com/advisories/19308
CVE: CVE-2006-0038
Published: 2006-03-22
Description: Integer overflow in the do_replace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAP_NET_ADMIN rights to cause a buffer overflow in the copy_from_user function.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/19330; http://secunia.com/advisories/20671; http://secunia.com/advisories/20716
CVE: CVE-2006-0058
Published: 2006-03-22
Description: Signal handler race condition in Sendmail 8.13.x before 8.13.6 allows remote attackers to execute arbitrary code by triggering timeouts in a way that causes the setjmp and longjmp function calls to be interrupted and modify unexpected memory locations.
CVSS Score: 7.6 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:13.sendmail.asc; ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-010.txt.asc; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.24/SCOSA-2006.24.txt
CVE: CVE-2006-1359
Published: 2006-03-23
Description: Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1427.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1430.html; http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1434.html
CVE: CVE-2006-0050
Published: 2006-03-23
Description: snmptrapfmt in Debian 3.0 allows local users to overwrite arbitrary files via a symlink attack on a temporary log file.
CVSS Score: 1.2 (LOW)
References: http://secunia.com/advisories/19318; http://www.debian.org/security/2006/dsa-1013; http://www.securityfocus.com/bid/17182
CVE: CVE-2006-0905
Published: 2006-03-23
Description: A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks.
CVSS Score: 7.5 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc; ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc; http://secunia.com/advisories/19366
CVE: CVE-2006-0997
Published: 2006-03-23
Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19324; http://securitytracker.com/id?1015799; http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
CVE: CVE-2006-0998
Published: 2006-03-23
Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19324; http://securitytracker.com/id?1015799; http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
CVE: CVE-2006-0999
Published: 2006-03-23
Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19324; http://securitytracker.com/id?1015799; http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm
CVE: CVE-2006-1360
Published: 2006-03-23
Description: Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/428972/100/0/threaded; http://www.securityfocus.com/archive/1/441000/100/0/threaded; http://www.securityfocus.com/bid/17149
CVE: CVE-2006-1361
Published: 2006-03-23
Description: Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19290; http://svn.sourceforge.net/viewcvs.cgi/opensourcewiki/branches/0.3/oswiki/app/views/user/list.rhtml?view=log; http://www.securityfocus.com/bid/17189
CVE: CVE-2006-1362
Published: 2006-03-23
Description: Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp.  NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18439; http://securityreason.com/securityalert/617; http://www.securityfocus.com/archive/1/428361/100/0/threaded
CVE: CVE-2006-1363
Published: 2006-03-23
Description: images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19343; http://www.vupen.com/english/advisories/2006/1038; https://exchange.xforce.ibmcloud.com/vulnerabilities/25377
CVE: CVE-2006-1364
Published: 2006-03-23
Description: Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip; http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044291.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044292.html