deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-6781
Published: 2009-05-01
Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) Gaming Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/49553; http://secunia.com/advisories/32558; http://www.securityfocus.com/bid/32021
CVE: CVE-2008-6782
Published: 2009-05-01
Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Hosting Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32558; http://www.osvdb.org/49551; http://www.securityfocus.com/bid/32021
CVE: CVE-2008-6783
Published: 2009-05-01
Description: SQL injection vulnerability in directory.php in Sites for Scripts (SFS) EZ Home Business Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32558; http://www.osvdb.org/49552; http://www.securityfocus.com/bid/32021
CVE: CVE-2008-6784
Published: 2009-05-01
Description: SQL injection vulnerability in directory.php in Scripts For Sites (SFS) EZ Adult Directory allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a list action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/32558; http://www.osvdb.org/49550; http://www.securityfocus.com/bid/32021
CVE: CVE-2009-1364
Published: 2009-05-01
Description: Use-after-free vulnerability in the embedded GD library in libwmf 0.2.8.4 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted WMF file.
CVSS Score: 7.5 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html; http://lists.opensuse.org/opensuse-updates/2015-06/msg00051.html; http://lists.opensuse.org/opensuse-updates/2015-06/msg00053.html
CVE: CVE-2009-1365
Published: 2009-05-01
Description: Unspecified vulnerability in Adobe Flash Media Server (FMS) before 3.0.4 and 3.5.x before 3.5.2, as used in Flash Media Interactive Server and Flash Media Streaming Server, allows remote attackers to execute arbitrary remote procedures within an ActionScript file on the server via RPC requests.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/34878; http://www.adobe.com/support/security/bulletins/apsb09-05.html; http://www.securityfocus.com/bid/34790
CVE: CVE-2009-1500
Published: 2009-05-01
Description: SQL injection vulnerability in index.php in ProjectCMS 1.0 Beta allows remote attackers to execute arbitrary SQL commands via the sn parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/503079/100/0/threaded; http://www.securityfocus.com/bid/34767; https://www.exploit-db.com/exploits/8565
CVE: CVE-2009-1501
Published: 2009-05-01
Description: Cross-site scripting (XSS) vulnerability in the Exif module 5.x-1.x before 5.x-1.2 and 6.x-1.x-dev before April 13, 2009, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via EXIF tags in an image.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/448958; http://secunia.com/advisories/34953; http://www.securityfocus.com/bid/34774
CVE: CVE-2009-1502
Published: 2009-05-01
Description: Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/34940; http://www.securityfocus.com/bid/34771; https://www.exploit-db.com/exploits/8566
CVE: CVE-2009-1503
Published: 2009-05-01
Description: Multiple SQL injection vulnerabilities in login.php in Tiger Document Management System (DMS) allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/34784; http://www.securityfocus.com/bid/34775; https://www.exploit-db.com/exploits/8571
CVE: CVE-2009-1504
Published: 2009-05-01
Description: Absolute Form Processor XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the xlaAFPadmin cookie to "lvl=1&userid=1."
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://www.exploit-db.com/exploits/8529; https://www.exploit-db.com/exploits/8529
CVE: CVE-2009-1505
Published: 2009-05-01
Description: SQL injection vulnerability in the News Page module 5.x before 5.x-1.2 for Drupal allows remote authenticated users, with News Page nodes create and edit privileges, to execute arbitrary SQL commands via the Include Words (aka keywords) field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://drupal.org/node/449014; http://osvdb.org/54151; http://secunia.com/advisories/34954
CVE: CVE-2009-1506
Published: 2009-05-01
Description: SQL injection vulnerability in classes/Xp.php in eLitius 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to banner-details.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/34769; https://www.exploit-db.com/exploits/8563; http://www.securityfocus.com/bid/34769
CVE: CVE-2009-1507
Published: 2009-05-01
Description: The Node Access User Reference module 5.x before 5.x-2.0-beta4 and 6.x before 6.x-2.0-beta6, a module for Drupal, interprets an empty CCK user reference as a reference to the anonymous user, which might allow remote attackers to bypass intended access restrictions to read or modify a node.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://drupal.org/node/449030; http://secunia.com/advisories/34955; http://www.securityfocus.com/bid/34778
CVE: CVE-2008-6785
Published: 2009-05-01
Description: Unrestricted file upload vulnerability in Mini File Host 1.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory, as demonstrated by creating a name.php file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/47460; https://www.exploit-db.com/exploits/7509; https://exchange.xforce.ibmcloud.com/vulnerabilities/47460
CVE: CVE-2008-6786
Published: 2009-05-01
Description: Multiple directory traversal vulnerabilities in geekigeeki.py in GeekiGeeki before 3.0 allow remote attackers to read arbitrary files via directory traversal sequences in a pagename argument in the (1) handle_edit and (2) handle_raw functions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/33162; http://www.codewiz.org/wikigit/geekigeeki.git/blobdiff/92e45c3ce9260c69b4201d877c0f2e431024a52e..5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0:/geekigeeki.py; http://www.codewiz.org/wikigit/geekigeeki.git?a=commit%3Bh=5f99f96a7a102bb8f2c491dd1e11fe8686c7c0a0
CVE: CVE-2008-6787
Published: 2009-05-01
Description: SQL injection vulnerability in administrator/index.php in Lizardware CMS 0.6.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32898; https://exchange.xforce.ibmcloud.com/vulnerabilities/47440; https://www.exploit-db.com/exploits/7507
CVE: CVE-2009-1508
Published: 2009-05-01
Description: SQL injection vulnerability in the xforum_validateUser function in Common.php in X-Forum 0.6.2 allows remote attackers to execute arbitrary SQL commands, as demonstrated via the cookie_username parameter to Configure.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/34302; https://exchange.xforce.ibmcloud.com/vulnerabilities/49537; https://www.exploit-db.com/exploits/8317
CVE: CVE-2009-1509
Published: 2009-05-01
Description: SQL injection vulnerability in ajaxp_backend.php in MyioSoft AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/34529; http://www.securityfocus.com/bid/34338; https://www.exploit-db.com/exploits/8341
CVE: CVE-2009-1510
Published: 2009-05-01
Description: Multiple directory traversal vulnerabilities in KoschtIT Image Gallery 1.82 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the file parameter to (1) ki_makepic.php and (2) ki_nojsdisplayimage.php in ki_base/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/34335; https://www.exploit-db.com/exploits/8334; http://www.securityfocus.com/bid/34335
CVE: CVE-2009-1511
Published: 2009-05-01
Description: GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/34586; https://www.exploit-db.com/exploits/8466; http://www.securityfocus.com/bid/34586
CVE: CVE-2009-1512
Published: 2009-05-01
Description: Static code injection vulnerability in X-Forum 0.6.2 allows remote authenticated administrators to inject arbitrary PHP code into Config.php via the adminEMail parameter to SaveConfig.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/50390; https://www.exploit-db.com/exploits/8317; https://exchange.xforce.ibmcloud.com/vulnerabilities/50390
CVE: CVE-2009-1513
Published: 2009-05-04
Description: Buffer overflow in the PATinst function in src/load_pat.cpp in libmodplug before 0.8.7 allows user-assisted remote attackers to cause a denial of service and possibly execute arbitrary code via a long instrument name.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526084; http://modplug-xmms.cvs.sourceforge.net/viewvc/modplug-xmms/libmodplug/src/load_pat.cpp?r1=1.3&r2=1.4; http://modplug-xmms.git.sourceforge.net/git/gitweb.cgi?p=modplug-xmms%3Ba=commitdiff%3Bh=c4ebb701be6ee9a296a44fdac5a20b7739ff0595
CVE: CVE-2009-1514
Published: 2009-05-04
Description: Google Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a throw statement with a long exception value.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.securityfocus.com/bid/34786; https://www.exploit-db.com/exploits/8573; http://www.securityfocus.com/bid/34786
CVE: CVE-2009-1515
Published: 2009-05-04
Description: Heap-based buffer overflow in the cdf_read_sat function in src/cdf.c in Christos Zoulas file 5.00 allows user-assisted remote attackers to execute arbitrary code via a crafted compound document file, as demonstrated by a .msi, .doc, or .mpp file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: ftp://ftp.astron.com/pub/file/file-5.01.tar.gz; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=515603; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525820
CVE: CVE-2009-1516
Published: 2009-05-04
Description: Stack-based buffer overflow in the IceWarpServer.APIObject ActiveX control in api.dll in IceWarp Merak Mail Server 9.4.1 might allow context-dependent attackers to execute arbitrary code via a large value in the second argument to the Base64FileEncode method, as possibly demonstrated by a web application that accepts untrusted input for this method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/34739; https://www.exploit-db.com/exploits/8542; http://www.securityfocus.com/bid/34739
CVE: CVE-2009-1517
Published: 2009-05-04
Description: Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service (browser crash) and possibly execute arbitrary code via unspecified input to the (1) GetBackupLocationPath, (2) CallUninstall, (3) SetupDeleteVolume, (4) CanUseEasySetup, (5) CallAddInitialProtection, and (6) CallTour methods.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/34696; http://www.securitytracker.com/id?1022120; http://www.shinnai.net/xplits/TXT_Gl6RHStS23c9DANArcJE.html
CVE: CVE-2008-6788
Published: 2009-05-04
Description: SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/49266; http://secunia.com/advisories/32358; http://www.securityfocus.com/bid/31893
CVE: CVE-2008-6789
Published: 2009-05-04
Description: SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/32358; https://exchange.xforce.ibmcloud.com/vulnerabilities/46075; https://exchange.xforce.ibmcloud.com/vulnerabilities/50344
CVE: CVE-2008-6790
Published: 2009-05-04
Description: The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/31897; https://exchange.xforce.ibmcloud.com/vulnerabilities/46078; https://www.exploit-db.com/exploits/6820
CVE: CVE-2008-6791
Published: 2009-05-04
Description: PumpKIN TFTP Server 2.7.2.0 allows remote attackers to cause a denial of service via a write request with a long mode field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/31922; https://exchange.xforce.ibmcloud.com/vulnerabilities/46122; https://www.exploit-db.com/exploits/6838
CVE: CVE-2009-1518
Published: 2009-05-04
Description: Cross-site request forgery (CSRF) vulnerability in Beltane before 2.3.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/54167; http://secunia.com/advisories/34973; http://osvdb.org/54167
CVE: CVE-2009-1519
Published: 2009-05-04
Description: Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the language parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/34802; https://www.exploit-db.com/exploits/8593; http://www.securityfocus.com/bid/34802
CVE: CVE-2008-4828
Published: 2009-05-05
Description: Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54231; http://osvdb.org/54232; http://secunia.com/advisories/32604
CVE: CVE-2009-0148
Published: 2009-05-05
Description: Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://secunia.com/advisories/34978; http://secunia.com/advisories/35074
CVE: CVE-2009-0720
Published: 2009-05-05
Description: Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2511&w=2; http://osvdb.org/54222; http://secunia.com/advisories/34942
CVE: CVE-2009-1520
Published: 2009-05-05
Description: Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/32604; http://www-01.ibm.com/support/docview.wss?uid=swg21384389; http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994
CVE: CVE-2009-1521
Published: 2009-05-05
Description: Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/32604; http://www-01.ibm.com/support/docview.wss?uid=swg21384389; http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779
CVE: CVE-2009-1522
Published: 2009-05-05
Description: The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/54235; http://secunia.com/advisories/32604; http://www-01.ibm.com/support/docview.wss?uid=swg21384389
CVE: CVE-2009-1523
Published: 2009-05-05
Description: Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via directory traversal sequences in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388; http://jira.codehaus.org/browse/JETTY-1004; http://secunia.com/advisories/34975
CVE: CVE-2009-1524
Published: 2009-05-05
Description: Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388; http://jira.codehaus.org/browse/JETTY-980; http://secunia.com/advisories/34975
CVE: CVE-2009-1490
Published: 2009-05-05
Description: Heap-based buffer overflow in Sendmail before 8.13.2 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long X- header, as demonstrated by an X-Testing header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.nmrc.org/~thegnome/blog/apr09/; http://www.sendmail.org/releases/8.13.2; https://exchange.xforce.ibmcloud.com/vulnerabilities/50355
CVE: CVE-2009-1491
Published: 2009-05-05
Description: McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other vendors, does not scan X- headers for malicious content, which allows remote attackers to bypass virus detection via a crafted message, as demonstrated by a message with an X-Testing header and no message body.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://www.nmrc.org/~thegnome/blog/apr09/; https://exchange.xforce.ibmcloud.com/vulnerabilities/50354; http://www.nmrc.org/~thegnome/blog/apr09/
CVE: CVE-2009-1184
Published: 2009-05-05
Description: The selinux_ip_postroute_iptables_compat function in security/selinux/hooks.c in the SELinux subsystem in the Linux kernel before 2.6.27.22, and 2.6.28.x before 2.6.28.10, when compat_net is enabled, omits calls to avc_has_perm for the (1) node and (2) port, which allows local users to bypass intended restrictions on network traffic.  NOTE: this was incorrectly reported as an issue fixed in 2.6.27.21.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-16
References: http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=910c9e41186762de3717baaf392ab5ff0c454496; http://lwn.net/Articles/331434/; http://lwn.net/Articles/331435/
CVE: CVE-2009-1467
Published: 2009-05-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54226; http://osvdb.org/54227; http://www.redteam-pentesting.de/advisories/rt-sa-2009-001
CVE: CVE-2009-1468
Published: 2009-05-05
Description: Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL commands via the (1) sql and (2) order_by elements in an XML search query.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/54228; http://www.redteam-pentesting.de/advisories/rt-sa-2009-003; http://www.securityfocus.com/archive/1/503226/100/0/threaded
CVE: CVE-2009-1469
Published: 2009-05-05
Description: CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing credentials via CRLF sequences preceding a Reply-To header in the subject element of an XML document, as demonstrated by triggering an e-mail message from the server that contains a user's correct credentials, and requests that the user compose a reply that includes this message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/54229; http://www.redteam-pentesting.de/advisories/rt-sa-2009-004; http://www.securityfocus.com/archive/1/503227/100/0/threaded
CVE: CVE-2009-1525
Published: 2009-05-05
Description: CMD_DB in JBMC Software DirectAdmin before 1.334 allows remote authenticated users to gain privileges via shell metacharacters in the name parameter during a restore action.
CVSS Score: 8.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html; http://osvdb.org/54015; http://secunia.com/advisories/34861
CVE: CVE-2009-1526
Published: 2009-05-05
Description: JBMC Software DirectAdmin before 1.334 allows local users to create or overwrite any file via a symlink attack on an arbitrary file in a certain temporary directory, related to a request for this temporary file in the PATH_INFO to the CMD_DB script during a backup action.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-04/0228.html; http://osvdb.org/54014; http://secunia.com/advisories/34861