deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1777
Published: 2005-05-31
Description: SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7520&w=2; http://news.postnuke.com/Article2691.html; http://securitytracker.com/id?1014066
CVE: CVE-2005-1778
Published: 2005-05-31
Description: Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7520&w=2; http://news.postnuke.com/Article2691.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7520&w=2
CVE: CVE-2005-1779
Published: 2005-05-31
Description: SQL injection vulnerability in password.asp in MaxWebPortal 1.35, 1.36, 2.0, and 20050418 Next allows remote attackers to execute arbitrary SQL commands via the memKey parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15511; http://securitytracker.com/id?1014048; http://secunia.com/advisories/15511
CVE: CVE-2005-1780
Published: 2005-05-31
Description: SQL injection vulnerability in admin/login.asp in Active News Manager allows remote attackers to execute arbitrary SQL commands via the password.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15493; http://securitytracker.com/id?1014057; http://www.under9round.com/anm.txt
CVE: CVE-2005-1781
Published: 2005-05-31
Description: Unknown vulnerability in SMTP authentication for MailEnable allows remote attackers to cause a denial of service (crash).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15487; http://secunia.com/advisories/15487
CVE: CVE-2005-1783
Published: 2005-05-31
Description: BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a search[string] parameter with a missing value or an incorrect submit[type] value, which reveals the path in the resulting error message.  NOTE: it is not clear whether BookReview is available to the public.  If not, then it should not be included in CVE.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/05/bookreview-10-multiple-variable-xss.html; http://secunia.com/advisories/1014058; http://www.osvdb.org/16880
CVE: CVE-2005-1785
Published: 2005-05-31
Description: SQL injection vulnerability in ad/login.asp in ZonGG 1.2 allows remote attackers to execute arbitrary SQL commands via the password parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15515; http://securitytracker.com/id?1014063; http://www.securityfocus.com/bid/13787
CVE: CVE-2005-1796
Published: 2005-05-31
Description: Format string vulnerability in the curses_msg function in the Ncurses interface (ec_curses.c) for Ettercap before 0.7.3 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://ettercap.sourceforge.net/history.php; http://secunia.com/advisories/15535; http://secunia.com/advisories/15664
CVE: CVE-2005-1799
Published: 2005-05-31
Description: Cross-site scripting (XSS) vulnerability in FreeStyle Wiki 3.5.7 and WikiLite (FSWikiLite) .10 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/15538; http://www.securityfocus.com/bid/13824; http://secunia.com/advisories/15538
CVE: CVE-2005-1831
Published: 2005-05-31
Description: Sudo 1.6.8p7 on SuSE Linux 9.3, and possibly other Linux distributions, allows local users to gain privileges by using sudo to call su, then entering a blank password and hitting CTRL-C. NOTE: SuSE and multiple third-party researchers have not been able to replicate this issue, stating "Sudo catches SIGINT and returns an empty string for the password so I don't see how this could happen unless the user's actual password was empty.
CVSS Score: 8.4 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-05/0349.html; http://archives.neohapsis.com/archives/bugtraq/2005-05/0359.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8928&w=2
CVE: CVE-2005-1832
Published: 2005-05-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (3) limit parameter to misc.php, (4) page or (5) datecut parameter to forumdisplay.php, (6) username, (7) email, or (8) email2 parameter to member.php, (9) page or (10) usersearch parameter to memberlist.php, (11) pid or (12) tid parameter to showthread.php, or (13) tid parameter to printthread.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8050&w=2; http://secunia.com/advisories/15552; http://www.mybboard.com/community/showthread.php?tid=2559
CVE: CVE-2005-1833
Published: 2005-05-31
Description: Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to online.php, (3) usersearch parameter to memberlist.php, (4) pid parameter to editpost.php, (5) fid parameter to forumdisplay.php, (6) tid parameter to newreply.php, (7) sid parameter to search.php, (8) tid or (9) pid parameter to showthread.php, (10) tid parameter to usercp2.php, (11) tid parameter to printthread.php, or (12) pid parameter to reputation.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8050&w=2; http://secunia.com/advisories/15552; http://www.mybboard.com/community/showthread.php?tid=2559
CVE: CVE-2005-1866
Published: 2005-05-31
Description: Cross-site scripting (XSS) vulnerability in calendar.php in Calendarix Advanced 1.5 allows remote attackers to inject arbitrary web script or HTML via the year parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-05/0356.html; http://securitytracker.com/alerts/2005/May/1014083.html; http://www.osvdb.org/16973
CVE: CVE-2005-1907
Published: 2005-05-31
Description: The ISA Firewall service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (Wspsrv.exe crash) via a large amount of SecureNAT network traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014113; http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3B894864; http://www.networksecurity.fi/advisories/windows-isa-firewall.html
CVE: CVE-2005-1788
Published: 2005-06-01
Description: SQL injection vulnerability in resellerresources.asp in Hosting Controller 6.1 Hotfix 2.0 allows remote attackers to execute arbitrary SQL commands via the jresourceid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15540; http://securitytracker.com/id?1014071; http://secunia.com/advisories/15540
CVE: CVE-2005-1790
Published: 2005-06-01
Description: Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."
CVSS Score: 2.6 (LOW)
CWE: CWE-399
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6172&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6013&w=2; http://secunia.com/advisories/15368
CVE: CVE-2005-1792
Published: 2005-06-01
Description: Memory leak in Windows Management Instrumentation (WMI) service allows attackers to cause a denial of service (memory consumption and crash) by creating security contexts more quickly than they can be cleared from the RPC cache.
CVSS Score: 5.0 (MEDIUM)
References: http://support.microsoft.com/kb/890196; http://www.networksecurity.fi/advisories/windows-wmi-rpc.html; http://www.osvdb.org/13020
CVE: CVE-2005-1793
Published: 2005-06-01
Description: User32.DLL in Microsoft Windows 98SE, and possibly other operating systems, allows local and remote attackers to cause a denial of service (crash) via an icon (.ico) bitmap file with large width and height values.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/archive/1/399207; http://www.securityfocus.com/archive/1/399228; http://www.securityfocus.com/archive/1/399207
CVE: CVE-2005-1794
Published: 2005-06-01
Description: Microsoft Terminal Server using Remote Desktop Protocol (RDP) 5.2 stores an RSA private key in mstlsapi.dll and uses it to sign a certificate, which allows remote attackers to spoof public keys of legitimate servers and conduct man-in-the-middle attacks.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/15605/; http://www.oxid.it/downloads/rdp-gbu.pdf; http://www.securityfocus.com/bid/13818
CVE: CVE-2005-1809
Published: 2005-06-01
Description: Sony Ericsson P900 Beamer allows remote attackers to cause a denial of service (panic) via an obexftp session with a long filename in an OBEX File Transfer or OBEX Object Push.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/13872; http://www.securityfocus.com/infocus/1836; http://www.securityfocus.com/bid/13872
CVE: CVE-2005-1810
Published: 2005-06-01
Description: SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://bugs.gentoo.org/show_bug.cgi?id=94512; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9067&w=2; http://secunia.com/advisories/15517
CVE: CVE-2005-1811
Published: 2005-06-01
Description: Cross-site scripting (XSS) vulnerability in usercp.php for MyBulletinBoard (MyBB) allows remote attackers to inject arbitrary web script or HTML via the website field in a user profile.
CVSS Score: 4.3 (MEDIUM)
References: http://seclists.org/lists/bugtraq/2005/May/0338.html; http://secunia.com/advisories/15552; http://securitytracker.com/id?1014081
CVE: CVE-2005-1812
Published: 2005-06-01
Description: Multiple stack-based buffer overflows in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allow remote attackers to execute arbitrary code via a long (1) filename or (2) transfer mode string in a Read Request (RRQ) or Write Request (WRQ) packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/15539; http://securitytracker.com/id?1014079; http://www.security.org.sg/vuln/tftp2000-1001.html
CVE: CVE-2005-1813
Published: 2005-06-01
Description: Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing (1) "../" (dot dot slash) or (2) "..\" (dot dot backslash) sequences.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/15539; http://securitytracker.com/id?1014079; http://www.security.org.sg/vuln/tftp2000-1001.html
CVE: CVE-2005-1814
Published: 2005-06-01
Description: Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2380&w=2; http://secunia.com/advisories/15541; http://www.securityfocus.com/bid/13807
CVE: CVE-2005-1815
Published: 2005-06-01
Description: Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).
CVSS Score: 5.0 (MEDIUM)
References: http://connectivity.hummingbird.com/support/nc/exceed/ftpd_advisory.html?cks=y; http://connectivity.hummingbird.com/support/nc/exceed/lpdw_advisory.html; http://secunia.com/advisories/15557
CVE: CVE-2005-1816
Published: 2005-06-01
Description: Invision Power Board (IPB) 1.0 through 2.0.4 allows non-root admins to add themselves or other users to the root admin group via the "Move users in this group to" screen.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0635.html; http://secunia.com/advisories/15545; http://www.securityfocus.com/bid/13797
CVE: CVE-2005-1817
Published: 2005-06-01
Description: Invision Power Board (IPB) 1.0 through 1.3 allows remote attackers to edit arbitrary forum posts via a direct request to index.php with modified parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/13802; http://www.securityfocus.com/bid/13802
CVE: CVE-2005-1818
Published: 2005-06-01
Description: Multiple SQL injection vulnerabilities in NewLife Blogger before 3.3.1 allow remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15523; http://www.securityfocus.com/bid/13815; http://www.sevengraff.com/index.php
CVE: CVE-2005-1819
Published: 2005-06-01
Description: Cross-site scripting (XSS) vulnerability in NikoSoft WebMail before 0.11.0 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/15518; http://www.nikosoft.net/nswm/; http://secunia.com/advisories/15518
CVE: CVE-2005-1820
Published: 2005-06-01
Description: zboard.php in Zeroboard version 4.1pl2 to 4.1pl5 allows remote attackers to execute arbitrary PHP code via improper quoting when using the preg_replace function.
CVSS Score: 7.5 (HIGH)
References: http://pandora.sapzil.info/text/notify/20050123.zb41advisory.php; http://www.securiteam.com/exploits/5KP0V0AFPA.html; http://www.securityfocus.com/bid/13823
CVE: CVE-2005-1821
Published: 2005-06-01
Description: PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6095&w=2; http://secunia.com/advisories/15537; http://securitytracker.com/id?1014078
CVE: CVE-2005-1822
Published: 2005-06-01
Description: Multiple SQL injection vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1076&w=2; http://secunia.com/advisories/15555; http://securitytracker.com/id?1014077
CVE: CVE-2005-1823
Published: 2005-06-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in Qualiteam X-Cart 4.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) printable parameter to home.php, (3) productid or (4) mode parameter to product.php, (5) id parameter to error_message.php, (6) section parameter to help.php, (7) mode parameter to orders.php, (8) mode parameter to register.php, (9) mode parameter to search.php, or the (10) gcid or (11) gcindex parameter to giftcert.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1076&w=2; http://secunia.com/advisories/15555; http://securitytracker.com/id?1014077
CVE: CVE-2005-1834
Published: 2005-06-01
Description: SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5083&w=2; http://secunia.com/advisories/15560; http://securitytracker.com/id?1014085
CVE: CVE-2005-1835
Published: 2005-06-01
Description: NEXTWEB (i)Site stores databases under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to databases/Users.mdb.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-552
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5083&w=2; http://secunia.com/advisories/15560; http://securitytracker.com/id?1014085
CVE: CVE-2005-1836
Published: 2005-06-01
Description: NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5083&w=2; http://secunia.com/advisories/15560; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5083&w=2
CVE: CVE-2005-1837
Published: 2005-06-01
Description: Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6375&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6375&w=2
CVE: CVE-2005-1824
Published: 2005-06-02
Description: The sql_escape_string function in auth/sql.c for the mailutils SQL authentication module does not properly quote the "\" (backslash) character, which is used as an escape character and makes the module vulnerable to SQL injection attacks.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031; http://www.gentoo.org/security/en/glsa/glsa-200506-02.xml; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=308031
CVE: CVE-2005-1838
Published: 2005-06-02
Description: Multiple cross-site scripting vulnerabilities in castnewPost.asp in Liberum Help Desk 0.97.3 allow remote attackers to inject arbitrary web script or HTML via the (1) Email, (2) Title, or (3) Description fields.
CVSS Score: 5.0 (MEDIUM)
References: http://echo.or.id/adv/adv14-theday-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1991&w=2; http://echo.or.id/adv/adv14-theday-2005.txt
CVE: CVE-2005-1839
Published: 2005-06-02
Description: Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) view.asp or (2) print.asp or (3) edit parameter to register.asp.
CVSS Score: 7.5 (HIGH)
References: http://echo.or.id/adv/adv14-theday-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1991&w=2; http://secunia.com/advisories/15593
CVE: CVE-2005-1840
Published: 2005-06-02
Description: Directory traversal vulnerability in class.layout_phpcms.php in phpCMS 1.2.x before 1.2.1pl2 allows remote attackers to read or include arbitrary files, as demonstrated using a .. (dot dot) in the language parameter to parser.php.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/phpcms/phpcms/parser/include/class.layout_phpcms.php?rev=1.12.2.37&view=markup; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6907&w=2; http://secunia.com/advisories/15586
CVE: CVE-2005-1875
Published: 2005-06-02
Description: Multiple SQL injection vulnerabilities in list.php in Exhibit Engine (EE) 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) search_row, (2) sort_row, (3) order or (4) perpage parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5119&w=2; http://photography-on-the.net/forum/showthread.php?p=579692; http://secunia.com/advisories/15583
CVE: CVE-2005-1903
Published: 2005-06-02
Description: Buffer overflow in the IMAP service for SPA-PRO Mail @Solomon 4.00 allows remote authenticated users to execute arbitrary code via a long CREATE command.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/15573; http://securitytracker.com/id?1014095; http://www.osvdb.org/16990
CVE: CVE-2005-1906
Published: 2005-06-02
Description: SQL injection vulnerability in login.asp in livingmailing 1.3 allows remote attackers to execute arbitrary SQL commands via the password. NOTE: there is little public information about this product and its vendor, and the original researcher announcement is no longer available.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014087; http://www.under9round.com/lmg.txt; http://www.vupen.com/english/advisories/2005/0678
CVE: CVE-2005-1334
Published: 2005-06-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-1579.  Reason: This candidate is a duplicate of CVE-2005-1579.  Notes: All CVE users should reference CVE-2005-1579 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-1858
Published: 2005-06-03
Description: FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/311634; http://secunia.com/advisories/15561/; http://secunia.com/advisories/16024
CVE: CVE-2005-1872
Published: 2005-06-03
Description: Buffer overflow in the administrative console in IBM WebSphere Application Server 5.x, when the global security option is enabled, allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0752&w=2; http://secunia.com/advisories/15598/; http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24009775
CVE: CVE-2005-1910
Published: 2005-06-05
Description: SQL injection vulnerability in login.asp for WWWeb Concepts Events System 1.0 allows remote attackers to execute arbitrary SQL commands via the password.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15595; http://securitytracker.com/id?1014104; http://www.under9round.com/wecs.txt
CVE: CVE-2005-1877
Published: 2005-06-06
Description: Cross-site scripting (XSS) vulnerability in view_ticket.php in Lpanel 1.59 and earlier allows remote attackers to inject arbitrary web script or HTML and obtain sensitive information via the pid parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034413.html; http://secunia.com/advisories/15589/; http://www.securityfocus.com/bid/13869
CVE: CVE-2005-1880
Published: 2005-06-06
Description: everybuddy 0.4.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file created by a system call to wget.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-59
References: http://bugs.gentoo.org/show_bug.cgi?id=94473; http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034422.html; http://securitytracker.com/id?1014110
CVE: CVE-2005-1881
Published: 2005-06-06
Description: upload.php in YaPiG 0.92b, 0.93u and 0.94u does not properly restrict the file extension for uploaded image files, which allows remote attackers to upload arbitrary files and execute arbitrary PHP code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: http://secunia.com/advisories/15600/; http://securitytracker.com/id?1014103; http://secwatch.org/advisories/secwatch/20050530_yapig.txt
CVE: CVE-2005-1885
Published: 2005-06-06
Description: view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to obtain sensitive information via a phid parameter that is not an integer, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15600/; http://securitytracker.com/id?1014103; http://secwatch.org/advisories/secwatch/20050530_yapig.txt
CVE: CVE-2005-1888
Published: 2005-06-06
Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.5 allows remote attackers to inject arbitrary web script via HTML attributes in page templates.
CVSS Score: 4.3 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?release_id=332231; http://www.novell.com/linux/security/advisories/2005_19_sr.html; http://www.securityfocus.com/bid/13861