deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4822
Published: 2006-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/21883; http://www.osvdb.org/28767; http://www.security-net.biz/adv/D13906a.txt
CVE: CVE-2006-4823
Published: 2006-09-15
Description: PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21887; http://securityreason.com/securityalert/1592; http://www.securityfocus.com/archive/1/446032/100/0/threaded
CVE: CVE-2006-4824
Published: 2006-09-15
Description: PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the set[include_path] parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21892; http://www.quicksilverforums.com/index.php; http://www.securityfocus.com/bid/19991
CVE: CVE-2006-4825
Published: 2006-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) ti, (2) bi, or (3) cbgi parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/21895; http://securityreason.com/securityalert/1582; http://www.securityfocus.com/archive/1/445879/100/0/threaded
CVE: CVE-2006-4826
Published: 2006-09-15
Description: PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21920; http://www.osvdb.org/28835; http://www.securityfocus.com/bid/20006
CVE: CVE-2006-4827
Published: 2006-09-15
Description: Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to (1) admin.php, (2) chart.php, (3) modes.php, or (4) stats.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21914; http://www.securityfocus.com/bid/20007; http://www.vupen.com/english/advisories/2006/3594
CVE: CVE-2006-4828
Published: 2006-09-15
Description: PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1581; http://www.securityfocus.com/archive/1/446031/100/0/threaded; http://www.securityfocus.com/bid/20028
CVE: CVE-2006-4829
Published: 2006-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name parameter in a blog post.
CVSS Score: 6.8 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://secunia.com/advisories/21935
CVE: CVE-2006-4830
Published: 2006-09-15
Description: Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate.
CVSS Score: 10.0 (HIGH)
References: http://jira.blojsom.com/jira/browse/BLOJSOM-130; http://jira.blojsom.com/jira/browse/BLOJSOM-130
CVE: CVE-2006-4831
Published: 2006-09-15
Description: Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."
CVSS Score: 10.0 (HIGH)
References: http://code.kryo.se/iodine/CHANGELOG.txt; http://secunia.com/advisories/21872; http://www.securityfocus.com/bid/20017
CVE: CVE-2006-4832
Published: 2006-09-15
Description: Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via a long username.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html; http://secunia.com/advisories/21876; http://securityreason.com/securityalert/1583
CVE: CVE-2006-4833
Published: 2006-09-15
Description: Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allow remote attackers to cause a denial of service (hang or reboot) via an ICMP packet with the same destination and source address and port, aka the "Land" vulnerability.
CVSS Score: 7.8 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html; http://secunia.com/advisories/21876; http://securityreason.com/securityalert/1583
CVE: CVE-2006-4834
Published: 2006-09-15
Description: PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1587; http://www.nyubicrew.org/adv/solpot-adv-07.txt; http://www.securityfocus.com/archive/1/446039/100/0/threaded
CVE: CVE-2006-4835
Published: 2006-09-15
Description: Bluview Blue Magic Board (BMB) (aka BMForum) 5.5 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) db_mysql_error.php, (4) langlist.php, (5) sendmail.php, or (6) style.php, which reveals the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1586; http://www.securityfocus.com/archive/1/446037/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28949
CVE: CVE-2006-4836
Published: 2006-09-15
Description: SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1585; http://www.securityfocus.com/archive/1/445996/100/0/threaded; http://www.securityfocus.com/bid/20024
CVE: CVE-2006-4837
Published: 2006-09-15
Description: Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) library/lib.php and (2) library/editor/editor.php.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1585; http://www.securityfocus.com/archive/1/437510/100/200/threaded; http://www.securityfocus.com/archive/1/445996/100/0/threaded
CVE: CVE-2006-4838
Published: 2006-09-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and (2) dcp_version parameters in (a) admin/inc/footer.inc.php, and the root_url, (3) page_top_name, (4) page_name, and (5) page_options parameters in (b) admin/inc/header.inc.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1585; http://www.securityfocus.com/archive/1/445996/100/0/threaded; http://www.securityfocus.com/bid/20024
CVE: CVE-2006-4844
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/21931; http://secunia.com/advisories/21948; http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8
CVE: CVE-2006-4845
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tc_config[app_root] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21933; http://www.securityfocus.com/bid/20030; http://www.securityfocus.com/bid/20036
CVE: CVE-2006-4846
Published: 2006-09-19
Description: Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21941; http://securitytracker.com/id?1016874; http://support.citrix.com/article/CTX110439
CVE: CVE-2006-4847
Published: 2006-09-19
Description: Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.
CVSS Score: 6.5 (MEDIUM)
References: http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp; http://secunia.com/advisories/21932; http://www.osvdb.org/28939
CVE: CVE-2006-4848
Published: 2006-09-19
Description: Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (6) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, or (12) top50.php.  NOTE: this issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before being used
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1590; http://www.securityfocus.com/archive/1/446219/100/0/threaded; http://www.securityfocus.com/archive/1/446567/100/200/threaded
CVE: CVE-2006-4849
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2007-April/001523.html; http://secunia.com/advisories/21951; http://www.osvdb.org/28920
CVE: CVE-2006-4850
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21965; http://securityreason.com/securityalert/1593; http://www.securityfocus.com/archive/1/446113/100/0/threaded
CVE: CVE-2006-4851
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/84179; http://www.vupen.com/english/advisories/2006/3642; https://exchange.xforce.ibmcloud.com/vulnerabilities/28991
CVE: CVE-2006-4852
Published: 2006-09-19
Description: SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21929; http://securityreason.com/securityalert/1589; http://www.osvdb.org/28917
CVE: CVE-2006-4853
Published: 2006-09-19
Description: SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp.
CVSS Score: 7.5 (HIGH)
References: http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt; http://secunia.com/advisories/21960; http://www.securityfocus.com/bid/20038
CVE: CVE-2006-4246
Published: 2006-09-19
Description: Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/21968; http://secunia.com/advisories/21981; http://sourceforge.net/tracker/index.php?func=detail&aid=1509145&group_id=17457&atid=485894
CVE: CVE-2006-4684
Published: 2006-09-19
Description: The docutils module in Zope (Zope2) 2.7.0 through 2.7.9 and 2.8.0 through 2.8.8 does not properly handle web pages with reStructuredText (reST) markup, which allows remote attackers to read arbitrary files via a csv_table directive, a different vulnerability than CVE-2006-3458.
CVSS Score: 5.0 (MEDIUM)
References: http://mail.zope.org/pipermail/zope-announce/2006-August/002005.html; http://secunia.com/advisories/21947; http://secunia.com/advisories/21953
CVE: CVE-2006-4854
Published: 2006-09-19
Description: Rejected reason: Unspecified vulnerability in Microsoft Office 2000 (Chinese Edition) and Microsoft PowerPoint 2000 (Chinese Edition) allows user-assisted attackers to execute arbitrary code via a crafted PPT document, as exploited by malware such as Trojan.PPDropper.E.  NOTE: on 20060919, Microsoft notified CVE that this is a duplicate of CVE-2006-0009
CVE: CVE-2006-4855
Published: 2006-09-19
Description: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/21938; http://securityreason.com/securityalert/1591; http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html
CVE: CVE-2006-4856
Published: 2006-09-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do.
CVSS Score: 4.3 (MEDIUM)
References: http://opensource.atlassian.com/projects/roller/browse/ROL-1196; http://people.apache.org/~snoopdave/roller-2.3.1-rc1/apache-roller-src-2.3.1-rc1-incubating.tar.gz; http://secunia.com/advisories/21964
CVE: CVE-2006-4857
Published: 2006-09-19
Description: SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21980; http://securityreason.com/securityalert/1599; http://www.securityfocus.com/archive/1/446074/100/0/threaded
CVE: CVE-2006-4858
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/21943; http://securityreason.com/securityalert/1598; http://www.securityfocus.com/archive/1/446110/100/0/threaded
CVE: CVE-2006-4859
Published: 2006-09-19
Description: Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20044; https://www.exploit-db.com/exploits/2370; http://www.securityfocus.com/bid/20044
CVE: CVE-2006-4860
Published: 2006-09-19
Description: Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, and (12) imanager.php in Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.limboportal.com/index.php/option/downloads/task/download/id/110; http://www.limboportal.com/index.php/option/downloads/task/info/id/110/Itemid/46; http://www.osvdb.org/31012
CVE: CVE-2006-4861
Published: 2006-09-19
Description: SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1601; http://www.securityfocus.com/archive/1/446078/100/0/threaded; http://securityreason.com/securityalert/1601
CVE: CVE-2006-4862
Published: 2006-09-19
Description: SQL injection vulnerability in default.aspx in easypage allows remote attackers to execute arbitrary SQL commands via the srch parameter in the Search page.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/446122/100/0/threaded; http://www.securityfocus.com/bid/20049; http://www.securityfocus.com/archive/1/446122/100/0/threaded
CVE: CVE-2006-4863
Published: 2006-09-19
Description: Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2) stats.php, (3) detail.php, or (4) erase.php.  NOTE: CVE and a third party dispute this vulnerability, because the langfile parameter is set to english.php in each file.  NOTE: CVE also disputes a later report of this vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6867&w=2; http://securityvulns.com/Rdocument844.html; http://securityvulns.com/source26994.html
CVE: CVE-2006-4864
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21971; http://securityreason.com/securityalert/1603; http://www.nyubicrew.org/adv/home_edition2001-adv-01.txt
CVE: CVE-2006-4865
Published: 2006-09-19
Description: Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1604; http://www.securityfocus.com/archive/1/446112/100/0/threaded; http://securityreason.com/securityalert/1604
CVE: CVE-2006-4535
Published: 2006-09-19
Description: The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745.  NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/21945; http://secunia.com/advisories/21967; http://secunia.com/advisories/22082
CVE: CVE-2006-4866
Published: 2006-09-19
Description: Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html; http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt; http://www.securityfocus.com/bid/20034
CVE: CVE-2006-4867
Published: 2006-09-19
Description: SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is "Forum."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21956; http://www.gnuturk.com/mods.php?go=Forums&p=vtop&t_id=138; http://www.securityfocus.com/bid/20069
CVE: CVE-2006-4868
Published: 2006-09-19
Description: Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.securiteam.com/index.php/archives/624; http://secunia.com/advisories/21989; http://securitytracker.com/id?1016879
CVE: CVE-2006-4869
Published: 2006-09-19
Description: PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallery_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/21897; http://www.osvdb.org/28763; http://www.securityfocus.com/bid/19993
CVE: CVE-2006-4870
Published: 2006-09-19
Description: Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21955; http://www.osvdb.org/28923; http://www.osvdb.org/28924
CVE: CVE-2006-2191
Published: 2006-09-19
Description: Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.
CVSS Score: 7.5 (HIGH)
References: http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html; http://people.debian.org/~terpstra/message/20[PII_REDACTED]39.0c0732a4.en.html; http://secunia.com/advisories/21732
CVE: CVE-2006-3866
Published: 2006-09-19
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4868.  Reason: This candidate is a duplicate of CVE-2006-4868.  Notes: All CVE users should reference CVE-2006-4868 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-4334
Published: 2006-09-19
Description: Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204676; http://docs.info.apple.com/article.html?artnum=304829