deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4130
Published: 2006-08-14
Description: PHP remote file inclusion vulnerability in admin.remository.php in the Remository Component (com_remository) 3.25 and earlier for Mambo and Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/21477; http://securityreason.com/securityalert/1379; http://www.remository.com/component/option%2Ccom_mamboboard/func%2Cview/catid%2C6/id%2C3666/#3666
CVE: CVE-2006-4131
Published: 2006-08-14
Description: Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted MMS (Multimedia Messaging Service) messages that trigger the overflows in the (1) M-Notification.ind, (2) M-Retrieve.conf (Header and Body), or (3) SMIL parsers.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html; http://secunia.com/advisories/21426; http://securityreason.com/securityalert/1387
CVE: CVE-2006-4132
Published: 2006-08-14
Description: ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service (resource exhaustion and application crash) via WAPPush messages to UDP port UDP 2948.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048614.html; http://secunia.com/advisories/21426; http://securityreason.com/securityalert/1387
CVE: CVE-2006-4133
Published: 2006-08-14
Description: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21448; http://securityreason.com/securityalert/1386; http://securitytracker.com/id?1016675
CVE: CVE-2006-4134
Published: 2006-08-14
Description: Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests.  NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4055&w=2; http://secunia.com/advisories/21448; http://securityreason.com/securityalert/1390
CVE: CVE-2006-4135
Published: 2006-08-14
Description: PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter.  NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1016694; http://www.attrition.org/pipermail/vim/2006-August/000975.html; http://www.osvdb.org/28284
CVE: CVE-2006-4136
Published: 2006-08-14
Description: Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-264
References: http://secunia.com/advisories/21440; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951; http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only
CVE: CVE-2006-4137
Published: 2006-08-14
Description: IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21440; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951; http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only
CVE: CVE-2006-4138
Published: 2006-08-14
Description: Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files.
CVSS Score: 7.6 (HIGH)
References: http://securityreason.com/securityalert/1382; http://www.securityfocus.com/archive/1/443034/100/0/threaded; http://www.securityfocus.com/archive/1/443039/100/0/threaded
CVE: CVE-2006-4139
Published: 2006-08-14
Description: Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries.
CVSS Score: 5.4 (MEDIUM)
References: http://secunia.com/advisories/21471; http://securitytracker.com/id?1016690; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102569-1
CVE: CVE-2006-4140
Published: 2006-08-14
Description: Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21468; http://securityreason.com/securityalert/1389; http://securitytracker.com/id?1016676
CVE: CVE-2006-4141
Published: 2006-08-14
Description: SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1383; http://www.securityfocus.com/archive/1/442880/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28332
CVE: CVE-2006-4142
Published: 2006-08-14
Description: SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1384; http://www.attrition.org/pipermail/vim/2007-April/001519.html; http://www.securityfocus.com/archive/1/442989/100/0/threaded
CVE: CVE-2006-4143
Published: 2006-08-15
Description: Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) via TCP packets with bad checksums.
CVSS Score: 7.8 (HIGH)
References: http://securityreason.com/securityalert/1388; http://www.securityfocus.com/archive/1/442870/100/0/threaded; http://www.securityfocus.com/bid/19468/info
CVE: CVE-2006-2446
Published: 2006-08-15
Description: Race condition between the kfree_skb and __skb_unlink functions in the socket buffer handling in Linux kernel 2.6.9, and possibly other versions, allows remote attackers to cause a denial of service (crash), as demonstrated using the TCP stress tests from the LTP test suite.
CVSS Score: 5.4 (MEDIUM)
References: http://secunia.com/advisories/21465; http://secunia.com/advisories/22082; http://secunia.com/advisories/22093
CVE: CVE-2006-4144
Published: 2006-08-15
Description: Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow.
CVSS Score: 2.6 (LOW)
References: ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://secunia.com/advisories/21462; http://secunia.com/advisories/21525
CVE: CVE-2006-4030
Published: 2006-08-16
Description: Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285; http://secunia.com/advisories/16594; http://secunia.com/advisories/21502
CVE: CVE-2006-4155
Published: 2006-08-16
Description: Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic."
CVSS Score: 7.5 (HIGH)
References: http://forums.invisionpower.com/index.php?&showtopic=225755; http://secunia.com/advisories/21442; http://www.vupen.com/english/advisories/2006/3260
CVE: CVE-2006-4156
Published: 2006-08-16
Description: PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter.  NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate.  CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1391; http://www.securityfocus.com/archive/1/442867/100/0/threaded; http://www.securityfocus.com/archive/1/443153/100/0/threaded
CVE: CVE-2006-4157
Published: 2006-08-16
Description: Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://securitytracker.com/id?1016684; http://www.securityfocus.com/archive/1/442817/100/0/threaded; http://www.securityfocus.com/bid/19460
CVE: CVE-2006-4158
Published: 2006-08-16
Description: PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21469; http://www.osvdb.org/27893; http://www.securityfocus.com/bid/19466
CVE: CVE-2006-4159
Published: 2006-08-16
Description: Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _BASE parameter to scripts in Classes/ including (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, and possibly (7) Event_for_month_per_day.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/21489; http://www.osvdb.org/27897; http://www.osvdb.org/27898
CVE: CVE-2006-4160
Published: 2006-08-16
Description: Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConf[path_library] parameter to (1) BaseCommand.php, (2) BaseLoader.php, and (3) BaseView.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21455; http://www.osvdb.org/27894; http://www.osvdb.org/27895
CVE: CVE-2006-4161
Published: 2006-08-16
Description: Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21483; http://securityreason.com/securityalert/1395; http://www.securityfocus.com/archive/1/442881/100/0/threaded
CVE: CVE-2006-4162
Published: 2006-08-16
Description: Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field.
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/1394; http://www.securityfocus.com/archive/1/442885/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28333
CVE: CVE-2006-4163
Published: 2006-08-16
Description: PHP remote file inclusion vulnerability in cls_fast_template.php in myWebland miniBloggie 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fname parameter.  NOTE: another researcher was unable to find a way to execute code after including it via a URL.  CVE analysis as of 20060816 was inconclusive
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/442966/100/0/threaded; http://www.securityfocus.com/archive/1/443160/100/0/threaded; http://www.securityfocus.com/bid/19476
CVE: CVE-2006-4164
Published: 2006-08-16
Description: PHP remote file inclusion vulnerability in inc/header.inc.php in phpPrintAnalyzer 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ficStyle parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/19474; http://www.vupen.com/english/advisories/2006/3258; https://exchange.xforce.ibmcloud.com/vulnerabilities/28322
CVE: CVE-2006-4165
Published: 2006-08-16
Description: Cross-site scripting (XSS) vulnerability in NetCommons 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/21445; http://www.securityfocus.com/bid/19497
CVE: CVE-2006-4166
Published: 2006-08-16
Description: PHP remote file inclusion vulnerability in TinyWebGallery 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the image parameter to (1) image.php or (2) image.php2.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1393; http://securitytracker.com/id?1016682; http://www.securityfocus.com/archive/1/442818/100/0/threaded
CVE: CVE-2006-4184
Published: 2006-08-17
Description: SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/21494; http://securityreason.com/securityalert/1392; http://www.protect-me.com/dl/whatsnew.html
CVE: CVE-2006-4185
Published: 2006-08-17
Description: Unspecified vulnerability in the NCPENGINE in Novell eDirectory 8.7.3.8 allows local users to cause a denial of service (CPU consumption) via unspecified vectors, as originally demonstrated using a Nessus scan.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/21496; http://securitytracker.com/id?1016695; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm
CVE: CVE-2006-4186
Published: 2006-08-17
Description: The iManager in eMBoxClient.jar in Novell eDirectory 8.7.3.8 writes passwords in plaintext to a log file, which allows local users to obtain passwords by reading the file.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/21496; http://securitytracker.com/id?1016695; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973826.htm
CVE: CVE-2006-4187
Published: 2006-08-17
Description: Unspecified vulnerability in HP-UX B.11.00, B.11.11 and B.11.23, when running in trusted mode, allows local users to cause a denial of service via unspecified vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/21475; http://secunia.com/advisories/21984; http://securitytracker.com/id?1016697
CVE: CVE-2006-4188
Published: 2006-08-17
Description: Unspecified vulnerability in the LP subsystem in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21499; http://secunia.com/advisories/21898; http://securitytracker.com/alerts/2006/Aug/1016698.html
CVE: CVE-2006-3121
Published: 2006-08-17
Description: The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/21505; http://secunia.com/advisories/21511; http://secunia.com/advisories/21518
CVE: CVE-2006-3854
Published: 2006-08-17
Description: Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote attackers to execute arbitrary code via a long username, which causes an overflow in vsprintf when displaying in the resulting error message.  NOTE: this issue is due to an incomplete fix for CVE-2006-3853.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1409; http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf; http://www.securityfocus.com/archive/1/443133/100/0/threaded
CVE: CVE-2006-3859
Published: 2006-08-17
Description: IBM Informix Dynamic Server (IDS) allows remote authenticated users to create and overwrite arbitrary files via the (1) LOTOFILE and (2) trl_tracefile_set functions, and the (3) "SET DEBUG FILE" commands.
CVSS Score: 4.0 (MEDIUM)
References: http://securityreason.com/securityalert/1408; http://www.databasesecurity.com/informix/DatabaseHackersHandbook-AttackingInformix.pdf; http://www.securityfocus.com/archive/1/443133/100/0/threaded
CVE: CVE-2006-3860
Published: 2006-08-17
Description: IBM Informix Dynamic Server (IDS) before 9.40.xC7 and 10.00 before 10.00.xC3 allows allows remote authenticated users to execute arbitrary commands via the (1) "SET DEBUG FILE" SQL command, and the (2) start_onpload and (3) dbexp functions.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21301; http://securityreason.com/securityalert/1407; http://www-1.ibm.com/support/docview.wss?uid=swg21242921
CVE: CVE-2006-4189
Published: 2006-08-17
Description: Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21535; http://securitytracker.com/id?1016692; http://www.osvdb.org/28473
CVE: CVE-2006-4190
Published: 2006-08-17
Description: Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation.
CVSS Score: 2.1 (LOW)
References: http://securityreason.com/securityalert/1398; http://www.lezr.com/vb/showthread.php?p=104324; http://www.securityfocus.com/archive/1/443289/100/0/threaded
CVE: CVE-2006-4191
Published: 2006-08-17
Description: Directory traversal vulnerability in memcp.php in XMB (Extreme Message Board) 1.9.6 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the langfilenew parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by header.php.
CVSS Score: 5.1 (MEDIUM)
References: http://retrogod.altervista.org/xmb_196_sql.html; http://secunia.com/advisories/21293; http://securityreason.com/securityalert/1411
CVE: CVE-2006-4192
Published: 2006-08-17
Description: Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
CVSS Score: 5.1 (MEDIUM)
References: http://aluigi.altervista.org/adv/mptho-adv.txt; http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac; http://secunia.com/advisories/21418
CVE: CVE-2006-4193
Published: 2006-08-17
Description: Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1402; http://www.osvdb.org/29345; http://www.osvdb.org/29346
CVE: CVE-2006-4194
Published: 2006-08-17
Description: Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032.  NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
CVSS Score: 5.0 (MEDIUM)
References: http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html; http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html; http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/
CVE: CVE-2006-4021
Published: 2006-08-17
Description: The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for ECB mode encryption.
CVSS Score: 2.6 (LOW)
References: http://securityreason.com/securityalert/1396; http://www.scatterchat.com/advisories/2006-01_non_tech.html; http://www.scatterchat.com/advisories/2006-01_tech.html
CVE: CVE-2006-4195
Published: 2006-08-17
Description: PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/21470; http://securityreason.com/securityalert/1406; http://www.securityfocus.com/archive/1/443201/100/0/threaded
CVE: CVE-2006-4196
Published: 2006-08-17
Description: PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://advisories.echo.or.id/adv/adv45-K-159-2006.txt; http://my.opera.com/atomo64/blog/show.dml/443167; http://secunia.com/advisories/21463
CVE: CVE-2006-4197
Published: 2006-08-17
Description: Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/brainzbof-adv.txt; http://secunia.com/advisories/21404; http://secunia.com/advisories/21668