deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-2303
Published: 2005-07-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1218.  Reason: This candidate is a duplicate of CVE-2005-1218.  Notes: All CVE users should reference CVE-2005-1218 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-2304
Published: 2005-07-19
Description: Microsoft MSN Messenger 9.0 and Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) via an image with an ICC Profile with a large Tag Count.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/405377; http://www.securityfocus.com/bid/14288; http://www.securityfocus.com/archive/1/405377
CVE: CVE-2005-2305
Published: 2005-07-19
Description: DG Remote Control Server 1.6.2 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via a long message to TCP port 1071 or 1073, possibly due to a buffer overflow.
CVSS Score: 7.5 (HIGH)
References: http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=72; http://secunia.com/advisories/16070; http://www.securityfocus.com/bid/14263
CVE: CVE-2005-2306
Published: 2005-07-19
Description: Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
CVSS Score: 3.7 (LOW)
References: http://secunia.com/advisories/16081; http://securitytracker.com/id?1014489; http://www.macromedia.com/devnet/security/security_zone/mpsb05-05.html
CVE: CVE-2005-2307
Published: 2005-07-19
Description: netman.dll in Microsoft Windows Connections Manager Library allows local users to cause a denial of service (Network Connections Service crash) via a large integer argument to a particular function, aka "Network Connection Manager Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16065; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-2308
Published: 2005-07-19
Description: The JPEG decoder in Microsoft Internet Explorer allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via certain crafted JPEG images, as demonstrated using (1) mov_fencepost.jpg, (2) cmp_fencepost.jpg, (3) oom_dos.jpg, or (4) random.jpg.
CVSS Score: 7.5 (HIGH)
References: http://lcamtuf.coredump.cx/crash; http://www.securityfocus.com/archive/1/405298; http://www.securityfocus.com/bid/14284
CVE: CVE-2005-2309
Published: 2005-07-19
Description: Opera 8.01 allows remote attackers to cause a denial of service (CPU consumption) via a crafted JPEG image, as demonstrated using random.jpg.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-400
References: http://lcamtuf.coredump.cx/crash; http://www.securityfocus.com/archive/1/405298; http://www.securityfocus.com/archive/1/405524/30/0/threaded
CVE: CVE-2005-2310
Published: 2005-07-19
Description: Buffer overflow in Winamp 5.03a, 5.09 and 5.091, and other versions before 5.094, allows remote attackers to execute arbitrary code via an MP3 file with a long ID3v2 tag such as (1) ARTIST or (2) TITLE.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/16077; http://security.lss.hr/index.php?page=details&ID=LSS-2005-07-14; http://securitytracker.com/id?1014483
CVE: CVE-2005-2311
Published: 2005-07-19
Description: SMS 1.9.2m and earlier allows local users to overwrite arbitrary files via a symlink attack on the (1) request1 or (2) request2 temporary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16038; http://www.zataz.net/adviso/sms-06272005.txt; http://secunia.com/advisories/16038
CVE: CVE-2005-2312
Published: 2005-07-19
Description: management.php in Realnode Emilda 1.2.2 and earlier allows remote attackers to perform actions as other users by modifying the user_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15857; http://sourceforge.net/project/shownotes.php?release_id=338551; http://www.securityfocus.com/bid/14244
CVE: CVE-2005-2313
Published: 2005-07-19
Description: Check Point SecuRemote NG with Application Intelligence R54 allows attackers to obtain credentials and gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://www.securityfocus.com/bid/14221; http://www.securityfocus.com/bid/14221
CVE: CVE-2005-2314
Published: 2005-07-19
Description: inc.login.php in PHPsFTPd 0.2 through 0.4 allows remote attackers to obtain the administrator's username and password by setting the do_login parameter and performing an edit action using user.php, which causes the login check to be bypassed and leaks the password in the response.
CVSS Score: 7.5 (HIGH)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/07/msg00209.html; http://packetstorm.linuxsecurity.com/0507-exploits/phpsftpd.txt; http://secunia.com/advisories/15879
CVE: CVE-2005-2317
Published: 2005-07-19
Description: Shorewall 2.4.x before 2.4.1, 2.2.x before 2.2.5, and 2.0.x before 2.0.17, when MACLIST_TTL is greater than 0 or MACLIST_DISPOSITION is set to ACCEPT, allows remote attackers with an accepted MAC address to bypass other firewall rules or policies.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/fulldisclosure/2005/Jul/0409.html; http://secunia.com/advisories/16087; http://secunia.com/advisories/17110
CVE: CVE-2005-2318
Published: 2005-07-19
Description: Cross-site scripting (XSS) vulnerability in showerr.asp in DVBBS 7.1 SP2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/14223; http://www.securityfocus.com/bid/14223
CVE: CVE-2005-2319
Published: 2005-07-19
Description: PHP remote file include vulnerability in Yawp library 1.0.6 and earlier, as used in YaWiki and possibly other products, allows remote attackers to include arbitrary files via the _Yawp[conf_path] parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://phpyawp.com/yawiki/index.php?page=ChangeLog; http://secunia.com/advisories/16049; http://www.hardened-php.net/advisory-102005.php
CVE: CVE-2005-2320
Published: 2005-07-19
Description: WebCalendar before 1.0.0 does not properly restrict access to assistant_edit.php, which allows remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/14072; http://www.securityfocus.com/bid/14072
CVE: CVE-2005-2321
Published: 2005-07-19
Description: PHP remote file inclusion vulnerability in CaLogic 1.2.2 allows remote attackers to execute arbitrary code via the CLPATH parameter to (1) cl_minical.php, (2) clmcpreload.php, (3) mcconfig.php, or (4) mcpi-demo.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16090; http://www.albaniafuckgreece.org/adviso/calogic.txt; http://www.calogic.de/modules/newbb/viewtopic.php?topic_id=333&forum=7
CVE: CVE-2005-2322
Published: 2005-07-19
Description: Cross-site scripting (XSS) vulnerability in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allows remote attackers to inject arbitrary web script or HTML via the (1) viewuser_id or (2) group parameter to users.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html; http://secunia.com/advisories/16078; http://securitytracker.com/id?1014485
CVE: CVE-2005-2323
Published: 2005-07-19
Description: Multiple SQL injection vulnerabilities in Class-1 Forum 0.24.4 and 0.23.2, and Clever Copy with forums installed, allow remote attackers to modify SQL statements via the (1) id parameter to viewattach.php, (2) viewuser_id parameter to users.php, or the (3) id or (4) forum parameter to viewforum.php.
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2005/07/class-1-forum-software-cross-site.html; http://secunia.com/advisories/16078; http://securitytracker.com/id?1014485
CVE: CVE-2005-2324
Published: 2005-07-19
Description: Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the searchtype or searchterm parameters to (1) results.php or (2) categorysearch.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html; http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html
CVE: CVE-2005-2325
Published: 2005-07-19
Description: Clever Copy 2.0 and 2.0a allows remote attackers to obtain the full path of the web root via a direct request to (1) ticker.php, (2) menu.php, (3) banned.php, (4) endlayout.php, (5) randomhlinesblock.php, (6) showlast.php, (7) showlast5class1.php, (8) showlast5phorum.php, (9) showlast5phorumblock.php, (10) showlastforumbb2.php, or (11) showlastforumbb2block.php.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html; http://lostmon.blogspot.com/2005/07/clever-copy-path-disclosure-and-xss.html
CVE: CVE-2005-2326
Published: 2005-07-19
Description: Cross-site scripting (XSS) vulnerability in Clever Copy 2.0 and 2.0a allows remote attackers to inject arbitrary web script or HTML via the yr parameter to calendar.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/07/clever-copy-calendarphp-yr-variable.html; http://lostmon.blogspot.com/2005/07/clever-copy-calendarphp-yr-variable.html
CVE: CVE-2005-2327
Published: 2005-07-20
Description: Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1014513; https://www.exploit-db.com/exploits/1106; http://securitytracker.com/id?1014513
CVE: CVE-2005-2328
Published: 2005-07-20
Description: PHP remote file inclusion vulnerability in im.php in Laffer 0.3.2.6 and 0.3.2.7 allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable.
CVSS Score: 5.0 (MEDIUM)
References: http://laffer.sourceforge.net/cgi-bin/index.pl?page=news&key=373747410; http://sourceforge.net/tracker/index.php?func=detail&aid=1235463&group_id=101249&atid=629313; http://www.securityfocus.com/bid/14264
CVE: CVE-2005-2329
Published: 2005-07-20
Description: MRV Communications In-Reach LX-8000S, LX-4000S, and LX-1000S 3.5.0, when using SSH public key authentication, does not properly restrict access to ports, which allows remote authenticated users to access the consoles of other users.
CVSS Score: 4.6 (MEDIUM)
References: http://securitytracker.com/id?1014517; http://www.securityfocus.com/archive/1/405546; http://www.securityfocus.com/bid/14300
CVE: CVE-2005-2330
Published: 2005-07-20
Description: Directory traversal vulnerability in extras/update.php in osCommerce 2.2 allows remote attackers to read arbitrary files via (1) .. sequences or (2) a full pathname in the readme_file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://retrogod.altervista.org/oscommerce_22_adv.html; http://securitytracker.com/id?1015944; http://sourceforge.net/mailarchive/message.php?msg_id=12318248
CVE: CVE-2005-2331
Published: 2005-07-20
Description: PHP remote file inclusion vulnerability in display.php in MooseGallery allows remote attackers to execute arbitrary PHP code via the type parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16093; http://securitytracker.com/id?1014487; http://www.securityfocus.com/bid/14280
CVE: CVE-2005-2332
Published: 2005-07-20
Description: Cross-site scripting (XSS) vulnerability in PHPPageProtect 1.0.0a allows remote attackers to inject arbitrary web script or HTML via the username parameter to (1) admin.php or (2) login.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16110; http://securitytracker.com/id?1014510; http://www.securityfocus.com/bid/14314
CVE: CVE-2005-2333
Published: 2005-07-20
Description: Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote attackers to inject arbitrary web script or HTML via the doc parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16051; http://securitytracker.com/id?1014509; http://www.osvdb.org/18062
CVE: CVE-2005-2334
Published: 2005-07-20
Description: Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cgi, or (3) w_s3sbfm.cgi.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1014502; http://www.securityfocus.com/bid/14299; http://securitytracker.com/id?1014502
CVE: CVE-2005-2355
Published: 2005-07-25
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2335, CVE-2005-2356.  Reason: due to a typo in an advisory, this candidate was accidentally referenced.  Notes: All CVE users should consult CVE-2005-2335 and CVE-2005-2356 to determine the appropriate identifier for the issue
CVE: CVE-2005-1691
Published: 2005-07-26
Description: Directory traversal vulnerability in Internet Graphics Server in SAP before 6.40 Patch 11 allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://www.corsaire.com/advisories/c050503-001.txt; http://www.corsaire.com/advisories/c050503-001.txt
CVE: CVE-2005-1849
Published: 2005-07-26
Description: inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.6/SCOSA-2006.6.txt; http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html
CVE: CVE-2005-1852
Published: 2005-07-26
Description: Multiple integer overflows in libgadu, as used in Kopete in KDE 3.2.3 to 3.4.1, ekg before 1.6rc3, GNU Gadu, CenterICQ, Kadu, and other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an incoming message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://lwn.net/Articles/144724/; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7250&w=2; http://secunia.com/advisories/16140
CVE: CVE-2005-1920
Published: 2005-07-26
Description: The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could allow local users and possibly remote attackers to obtain sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-281
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3679&w=2; http://secunia.com/advisories/16099; http://secunia.com/advisories/23099
CVE: CVE-2005-2218
Published: 2005-07-26
Description: The device file system (devfs) in FreeBSD 5.x does not properly check parameters of the node type when creating a device node, which makes hidden devices available to attackers, who can then bypass restrictions on a jailed process.
CVSS Score: 7.2 (HIGH)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-05:17.devfs.asc; http://secunia.com/advisories/16145; http://securitytracker.com/id?1014536
CVE: CVE-2005-2276
Published: 2005-07-26
Description: Cross-site scripting (XSS) vulnerability in Novell Groupwise WebAccess 6.5 before July 11, 2005 allows remote attackers to inject arbitrary web script or HTML via an e-mail message with an encoded javascript URI (e.g. "j&#X41vascript" in an IMG tag.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4783&w=2; http://secunia.com/advisories/16098/; http://securitytracker.com/id?1014515
CVE: CVE-2005-2368
Published: 2005-07-26
Description: vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.
CVSS Score: 9.3 (HIGH)
CWE: CWE-78
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html; http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html; http://www.redhat.com/support/errata/RHSA-2005-745.html
CVE: CVE-2005-2369
Published: 2005-07-26
Description: Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial of service or execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7250&w=2; http://www.debian.org/security/2005/dsa-813; http://www.securityfocus.com/bid/14415
CVE: CVE-2005-2370
Published: 2005-07-26
Description: Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers to cause a denial of service (bus error) on certain architectures such as SPARC via an incoming message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://gaim.sourceforge.net/security/index.php?id=20; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7250&w=2; http://secunia.com/advisories/16265
CVE: CVE-2005-2371
Published: 2005-07-26
Description: Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", (2) Windows drive letter (C:), and (3) absolute path sequences in the desname parameter.  NOTE: this issue was probably fixed by REP06 in CPU Jan 2006, in which case it overlaps CVE-2006-0289.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7467&w=2; http://secunia.com/advisories/18493; http://secunia.com/advisories/18608
CVE: CVE-2005-2372
Published: 2005-07-26
Description: Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows attackers to execute arbitrary code by uploading a malicious .fmx file and referencing it using an absolute pathname argument in the (1) form or (2) module parameters to f90servlet.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3784&w=2; http://www.red-database-security.com/advisory/oracle_forms_run_any_os_command.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3784&w=2
CVE: CVE-2005-2373
Published: 2005-07-26
Description: Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST, (2) DELE or (3) RNFR commands.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2610&w=2; http://secunia.com/advisories/16177; http://securitytracker.com/id?1014542
CVE: CVE-2005-2374
Published: 2005-07-26
Description: Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet or (2) web administration interfaces.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2115&w=2; http://securitytracker.com/alerts/2005/Jul/1014493.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/21412
CVE: CVE-2005-2375
Published: 2005-07-26
Description: Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via format string specifiers in a (1) nickname or (2) chat message.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/rdrum-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3678&w=2; http://aluigi.altervista.org/adv/rdrum-adv.txt
CVE: CVE-2005-2376
Published: 2005-07-26
Description: Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nickname or (2) chat message.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/rdrum-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3678&w=2; http://aluigi.altervista.org/adv/rdrum-adv.txt
CVE: CVE-2005-2377
Published: 2005-07-26
Description: nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly handle a SIGPIPE signal when sending a search request to an LDAP directory server, which might allow remote attackers to cause a denial of service (crond and other application crash) if they can cause an LDAP server to become unavailable.  NOTE: it is not clear whether this attack scenario is sufficient to include this item in CVE.
CVSS Score: 5.0 (MEDIUM)
References: http://qa.mandriva.com/show_bug.cgi?id=13271; http://www.mandriva.com/security/advisories?name=MDKSA-2005:121; https://exchange.xforce.ibmcloud.com/vulnerabilities/40501
CVE: CVE-2005-2378
Published: 2005-07-26
Description: Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the (1) CUSTOMIZE or (2) desformat parameters to rwservlet.  NOTE: vector 2 is probably the same as CVE-2006-0289, and fixed in Jan 2006 CPU.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6520&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6757&w=2; http://secunia.com/advisories/18493
CVE: CVE-2005-2379
Published: 2005-07-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) debug parameter to showenv, (2) test parameter to parsequery, or (3) delimiter or (4) CELLWRAPPER parameter to rwservlet.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1863&w=2; http://www.red-database-security.com/advisory/oracle_reports_various_css.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1863&w=2
CVE: CVE-2005-2380
Published: 2005-07-26
Description: Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) start, and (3) id parameters to browse.php, or the sid parameter to (4) dataentry.php or (5) export.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2; http://secunia.com/advisories/16123; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2
CVE: CVE-2005-2381
Published: 2005-07-26
Description: PHP Surveyor 0.98 allows remote attackers to obtain sensitive information via a direct request to (1) question.php, (2) survey.php, or (3) group.php in the root directory, a direct request to (4) database.php, (5) sessioncontrol.php, (6) html.php, (7) sessioncontrol.php, an invalid (8) qid parameter to dumpquestion.php, or an invalid lid parameter to (9) labels.php or (10) dumplabel.php, which reveal the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2; http://secunia.com/advisories/16123; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1681&w=2
CVE: CVE-2005-2382
Published: 2005-07-26
Description: Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8213&w=2; http://secunia.com/advisories/16124; http://secway.org/advisory/AD20050720EN.txt
CVE: CVE-2005-2383
Published: 2005-07-26
Description: SQL injection vulnerability in auth.php in PHPNews 1.2.5 allows remote attackers to execute arbitrary SQL commands via the user parameter in an HTTP POST request.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4389&w=2; http://newsphp.sourceforge.net/changelog/changelog_1.30.txt; http://secunia.com/advisories/16148