deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-5933
Published: 2009-01-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in CMS ISWEB 3.0 allow remote attackers to inject arbitrary web script or HTML via (1) the strcerca parameter (aka the input field for the cerca action) or (2) the id_oggetto parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33090; http://securityreason.com/securityalert/4933; http://www.securityfocus.com/bid/32823
CVE: CVE-2008-5934
Published: 2009-01-21
Description: SQL injection vulnerability in index.php in CMS ISWEB 3.0 allows remote attackers to execute arbitrary SQL commands via the id_sezione parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/33090; http://securityreason.com/securityalert/4933; http://www.securityfocus.com/bid/32823
CVE: CVE-2008-5935
Published: 2009-01-21
Description: Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for database/facto.mdb.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://securityreason.com/securityalert/4934; http://www.securityfocus.com/archive/1/499125/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/47278
CVE: CVE-2008-3864
Published: 2009-01-21
Description: The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allows remote attackers to cause a denial of service (service crash) via a packet with a large value in an unspecified size field.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/31160; http://secunia.com/advisories/33609; http://secunia.com/secunia_research/2008-42/
CVE: CVE-2008-3865
Published: 2009-01-21
Description: Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary code via a packet with a small value in an unspecified size field.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/31160; http://secunia.com/advisories/33609; http://secunia.com/secunia_research/2008-42/
CVE: CVE-2008-3866
Published: 2009-01-21
Description: The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, relies on client-side password protection implemented in the configuration GUI, which allows local users to bypass intended access restrictions and change firewall settings by using a modified client to send crafted packets.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/31160; http://secunia.com/advisories/33609; http://secunia.com/secunia_research/2008-43/
CVE: CVE-2009-0001
Published: 2009-01-21
Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://secunia.com/advisories/33632; http://support.apple.com/kb/HT3403
CVE: CVE-2009-0002
Published: 2009-01-21
Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QTVR movie file with crafted THKD atoms.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2009-01/0210.html; http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://osvdb.org/51525
CVE: CVE-2009-0003
Published: 2009-01-21
Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via an AVI movie file with an invalid nBlockAlign value in the _WAVEFORMATEX structure.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://osvdb.org/51526; http://secunia.com/advisories/33632
CVE: CVE-2009-0004
Published: 2009-01-21
Description: Buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted MP3 audio file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://secunia.com/advisories/33632; http://support.apple.com/kb/HT3403
CVE: CVE-2009-0005
Published: 2009-01-21
Description: Unspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted H.263 encoded movie file that triggers memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://secunia.com/advisories/33632; http://support.apple.com/kb/HT3403
CVE: CVE-2009-0006
Published: 2009-01-21
Description: Integer signedness error in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a Cinepak encoded movie file with a crafted MDAT atom that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2009-01/0215.html; http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://osvdb.org/51529
CVE: CVE-2009-0007
Published: 2009-01-21
Description: Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a QuickTime movie file containing invalid image width data in JPEG atoms within STSD atoms.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html; http://osvdb.org/51530; http://secunia.com/advisories/33632
CVE: CVE-2009-0026
Published: 2009-01-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to (1) search.jsp or (2) swr.jsp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33576; http://securityreason.com/securityalert/4942; http://www.apache.org/dist/jackrabbit/RELEASE-NOTES-1.5.2.txt
CVE: CVE-2009-0030
Published: 2009-01-21
Description: A certain Red Hat patch for SquirrelMail 1.4.8 sets the same SQMSESSID cookie value for all sessions, which allows remote authenticated users to access other users' folder lists and configuration data in opportunistic circumstances by using the standard webmail.php interface.  NOTE: this vulnerability exists because of an incorrect fix for CVE-2008-3663.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html; http://secunia.com/advisories/33611; http://securitytracker.com/id?1021611
CVE: CVE-2009-0243
Published: 2009-01-21
Description: Microsoft Windows does not properly enforce the Autorun and NoDriveTypeAutoRun registry values, which allows physically proximate attackers to execute arbitrary code by (1) inserting CD-ROM media, (2) inserting DVD media, (3) connecting a USB device, and (4) connecting a Firewire device; (5) allows user-assisted remote attackers to execute arbitrary code by mapping a network drive; and allows user-assisted attackers to execute arbitrary code by clicking on (6) an icon under My Computer\Devices with Removable Storage and (7) an option in an AutoPlay dialog, related to the Autorun.inf file.  NOTE: vectors 1 and 3 on Vista are already covered by CVE-2008-0951.
CVSS Score: 7.2 (HIGH)
CWE: CWE-16
References: http://isc.sans.org/diary.html?storyid=5695; http://www.securitytracker.com/id?1021629; http://www.us-cert.gov/cas/techalerts/TA09-020A.html
CVE: CVE-2009-0244
Published: 2009-01-21
Description: Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname.  NOTE: this can be leveraged for code execution by writing to a Startup folder.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/33598; http://securityreason.com/securityalert/4938; http://www.securityfocus.com/archive/1/500199/100/0/threaded
CVE: CVE-2008-5936
Published: 2009-01-22
Description: front-end/edit.php in mini-pub 0.3 and earlier allows remote attackers to read files and obtain PHP source code via a filename in the sFileName parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/31733; https://exchange.xforce.ibmcloud.com/vulnerabilities/45831; https://www.exploit-db.com/exploits/6734
CVE: CVE-2008-5937
Published: 2009-01-22
Description: AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) file with large height and width values.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/4939; https://exchange.xforce.ibmcloud.com/vulnerabilities/48183; https://www.exploit-db.com/exploits/6672
CVE: CVE-2009-0245
Published: 2009-01-22
Description: Cross-site scripting (XSS) vulnerability in Usagi Project MyNETS 1.2.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2008-4629.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN36802959/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000001.html; http://secunia.com/advisories/33409
CVE: CVE-2008-5938
Published: 2009-01-22
Description: PHP remote file inclusion vulnerability in assets/snippets/reflect/snippet.reflect.php in MODx CMS 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the reflect_base parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/32824; http://securityreason.com/securityalert/4940; http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt
CVE: CVE-2008-5939
Published: 2009-01-22
Description: Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php.  NOTE: some sources list the id parameter as being affected, but this is probably incorrect based on the original disclosure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/4940; http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt; http://www.securityfocus.com/bid/32436
CVE: CVE-2008-5940
Published: 2009-01-22
Description: SQL injection vulnerability in index.php in MODx 0.9.6.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the searchid parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN72630020/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000005.html; http://secunia.com/advisories/33405
CVE: CVE-2008-5941
Published: 2009-01-22
Description: Cross-site request forgery (CSRF) vulnerability in MODx 0.9.6.1p2 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN66828183/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000004.html; http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt
CVE: CVE-2008-5942
Published: 2009-01-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN10170564/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000003.html; http://svn.modxcms.com/svn/tattoo/tattoo/releases/0.9.6.3/install/changelog.txt
CVE: CVE-2008-5943
Published: 2009-01-22
Description: Multiple directory traversal vulnerabilities in NavBoard 16 (2.6.0) allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter to (1) admin_modules.php and (2) modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt; http://secunia.com/advisories/31463; http://www.securityfocus.com/bid/30687
CVE: CVE-2008-5944
Published: 2009-01-22
Description: Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or HTML via the module parameter.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt; http://secunia.com/advisories/31463; http://www.securityfocus.com/bid/30687
CVE: CVE-2008-5945
Published: 2009-01-22
Description: Nukeviet 2.0 Beta allows remote attackers to bypass authentication and gain administrative access by setting the admf cookie to 1.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/30681; https://exchange.xforce.ibmcloud.com/vulnerabilities/44457; http://www.securityfocus.com/bid/30681
CVE: CVE-2008-5946
Published: 2009-01-22
Description: SQL injection vulnerability in readmore.php in PHP-Fusion 4.01 allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30680; http://www.securityfocus.com/bid/30680/exploit; https://exchange.xforce.ibmcloud.com/vulnerabilities/44456
CVE: CVE-2008-5947
Published: 2009-01-22
Description: PHP remote file inclusion vulnerability in include/class_yapbbcooker.php in YapBB 1.2.Beta 2 allows remote attackers to execute arbitrary PHP code via a URL in the cfgIncludeDirectory parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://packetstormsecurity.org/0808-exploits/yapbb-rfi.txt; http://www.securityfocus.com/bid/30686; https://exchange.xforce.ibmcloud.com/vulnerabilities/44473
CVE: CVE-2009-0246
Published: 2009-01-22
Description: Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://easyhdr.com/version.php; http://osvdb.org/51609; http://secunia.com/advisories/33468
CVE: CVE-2009-0247
Published: 2009-01-22
Description: The server for 53KF Web IM 2009 Home, Professional, and Enterprise editions relies on client-side protection mechanisms against cross-site scripting (XSS), which allows remote attackers to conduct XSS attacks by using a modified client to send a crafted IM message, related to the msg variable.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/500169/100/0/threaded; http://www.securityfocus.com/bid/33341; https://exchange.xforce.ibmcloud.com/vulnerabilities/48096
CVE: CVE-2009-0248
Published: 2009-01-22
Description: Cross-site scripting (XSS) vulnerability in rankup.asp in Katy Whitton RankEm allows remote attackers to inject arbitrary web script or HTML via the siteID parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/33324; https://exchange.xforce.ibmcloud.com/vulnerabilities/48071; https://exchange.xforce.ibmcloud.com/vulnerabilities/48072
CVE: CVE-2009-0249
Published: 2009-01-22
Description: Katy Whitton RankEm stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for database/topsites.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/48070; https://www.exploit-db.com/exploits/7805; https://exchange.xforce.ibmcloud.com/vulnerabilities/48070
CVE: CVE-2009-0250
Published: 2009-01-22
Description: Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/51411; http://secunia.com/advisories/33531; http://securityreason.com/securityalert/4935
CVE: CVE-2009-0251
Published: 2009-01-22
Description: Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter.  NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/51412; http://secunia.com/advisories/33531; http://securityreason.com/securityalert/4935
CVE: CVE-2009-0252
Published: 2009-01-22
Description: Multiple SQL injection vulnerabilities in default.asp in Enthrallweb eReservations allow remote attackers to execute arbitrary SQL commands via the (1) Login parameter (aka username field) or the (2) Password parameter (aka password field).  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/51456; http://secunia.com/advisories/33578; http://www.securityfocus.com/bid/33321
CVE: CVE-2008-2384
Published: 2009-01-22
Description: SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://klecker.debian.org/~white/mod-auth-mysql/CVE-2008-2384_mod-auth-mysql.patch; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053899.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053903.html
CVE: CVE-2008-3820
Published: 2009-01-22
Description: Cisco Security Manager 3.1 and 3.2 before 3.2.2, when Cisco IPS Event Viewer (IEV) is used, exposes TCP ports used by the MySQL daemon and IEV server, which allows remote attackers to obtain "root access" to IEV via unspecified use of TCP sessions to these ports.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/33633; http://www.cisco.com/en/US/products/products_security_advisory09186a0080a6192a.shtml; http://www.securityfocus.com/bid/33381
CVE: CVE-2009-0008
Published: 2009-01-22
Description: Unspecified vulnerability in Apple QuickTime MPEG-2 Playback Component before 7.60.92.0 on Windows allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted MPEG-2 movie.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce//2009/Jan/msg00001.html; http://secunia.com/advisories/33642; http://support.apple.com/kb/HT3404
CVE: CVE-2009-0057
Published: 2009-01-22
Description: The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager 5.x before 5.1(3e) and 6.x before 6.1(3) allows remote attackers to cause a denial of service (voice service outage) by sending malformed input over a TCP session in which the "client terminates prematurely."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/33588; http://www.cisco.com/en/US/products/products_security_advisory09186a0080a61928.shtml; http://www.securityfocus.com/bid/33379
CVE: CVE-2009-0253
Published: 2009-01-22
Description: Mozilla Firefox 3.0.5 allows remote attackers to trick a user into visiting an arbitrary URL via an onclick action that moves a crafted element to the current mouse position, related to a "Status Bar Obfuscation" and "Clickjacking" attack.
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/4936; https://exchange.xforce.ibmcloud.com/vulnerabilities/48212; https://www.exploit-db.com/exploits/7842
CVE: CVE-2009-0254
Published: 2009-01-22
Description: Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Flexible Image Transport System (FITS) file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://easyhdr.com/version.php; http://osvdb.org/51608; http://secunia.com/advisories/33468
CVE: CVE-2009-0255
Published: 2009-01-22
Description: The System extension Install tool in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 creates the encryption key with an insufficiently random seed, which makes it easier for attackers to crack the key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-330
References: http://secunia.com/advisories/33617; http://secunia.com/advisories/33679; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
CVE: CVE-2009-0256
Published: 2009-01-22
Description: Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/33617; http://secunia.com/advisories/33679; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
CVE: CVE-2009-0257
Published: 2009-01-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) content of indexed files to the (a) Indexed Search Engine (indexed_search) system extension; (b) unspecified test scripts in the ADOdb system extension; and (c) unspecified vectors in the Workspace module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/33617; http://secunia.com/advisories/33679; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
CVE: CVE-2009-0258
Published: 2009-01-22
Description: The Indexed Search Engine (indexed_search) system extension in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to execute arbitrary commands via a crafted filename containing shell metacharacters, which is not properly handled by the command-line indexer.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/33617; http://secunia.com/advisories/33679; http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/