deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3213
Published: 2009-09-16
Description: Stack-based buffer overflow in broid 1.0 Beta 3a allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .mp3 file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.org/0908-exploits/broid-overflow.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/52532; http://packetstormsecurity.org/0908-exploits/broid-overflow.txt
CVE: CVE-2009-3214
Published: 2009-09-16
Description: Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project (.psh) file, related to the (1) cell[n].images[m].image and (2) cell[n].sound.file fields.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blog.bkis.com/?p=737; http://osvdb.org/57226; http://secunia.com/advisories/36357
CVE: CVE-2009-3215
Published: 2009-09-16
Description: SQL injection vulnerability in IXXO Cart Standalone before 3.9.6.1, and the IXXO Cart component for Joomla! 1.0.x, allows remote attackers to execute arbitrary SQL commands via the parent parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36009; http://www.davidsopas.com/2009/07/25/ixxo-cart-standalone-and-joomla-component-sql-injection/; http://www.exploit-db.com/exploits/9276
CVE: CVE-2009-3216
Published: 2009-09-16
Description: Multiple directory traversal vulnerabilities in iWiccle 1.01, when magic_quotes_gpc is disabled, allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the show parameter to the admin module, reachable through index.php; or (2) the module parameter to index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/36015; http://www.exploit-db.com/exploits/9266; http://secunia.com/advisories/36015
CVE: CVE-2009-3217
Published: 2009-09-16
Description: SQL injection vulnerability in the admin module in iWiccle 1.01 allows remote attackers to execute arbitrary SQL commands via the member_id parameter in an edit_user action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9266; http://www.exploit-db.com/exploits/9266
CVE: CVE-2009-3218
Published: 2009-09-16
Description: SQL injection vulnerability in control/login.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/56338; http://secunia.com/advisories/35955; http://www.exploit-db.com/exploits/9237
CVE: CVE-2009-3219
Published: 2009-09-16
Description: Directory traversal vulnerability in a.php in AR Web Content Manager (AWCM) 2.1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the a parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/56336; http://secunia.com/advisories/35955; http://www.exploit-db.com/exploits/9237
CVE: CVE-2009-3220
Published: 2009-09-16
Description: PHP remote file inclusion vulnerability in cp_html2txt.php in All In One Control Panel (AIOCP) 1.4.001 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/archive/1/505250/100/0/threaded; http://www.securityfocus.com/bid/35811; http://www.securityfocus.com/archive/1/505250/100/0/threaded
CVE: CVE-2009-3221
Published: 2009-09-16
Description: Stack-based buffer overflow in Audio Lib Player (ALP) allows remote attackers to execute arbitrary code via a long URL in a .m3u playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.org/0907-exploits/alp-overflow.txt; http://secunia.com/advisories/35867; http://www.osvdb.org/56047
CVE: CVE-2009-3222
Published: 2009-09-16
Description: Cross-site scripting (XSS) vulnerability in index.php in FreeWebScriptz Honest Traffic (FWSHT) 1.x allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0907-exploits/honesttraffic-xss.txt; http://secunia.com/advisories/35887; http://www.osvdb.org/56036
CVE: CVE-2009-3223
Published: 2009-09-16
Description: SQL injection vulnerability in ppc-add-keywords.php in Inout Adserver allows remote authenticated users to execute arbitrary SQL commands via the id parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35975; http://www.exploit-db.com/exploits/9271; http://www.vupen.com/english/advisories/2009/2028
CVE: CVE-2009-3224
Published: 2009-09-16
Description: SQL injection vulnerability in index.php in Super Mod System, when using the 68 Classifieds 3.1 Core System, allows remote attackers to execute arbitrary SQL commands via the s parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35973; http://www.exploit-db.com/exploits/9270; http://www.vupen.com/english/advisories/2009/2027
CVE: CVE-2009-3225
Published: 2009-09-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlmondSoft Almond Classifieds Wap and Pro, and possibly Almond Affiliate Network Classifieds, allow remote attackers to inject arbitrary web script or HTML via (1) the page parameter in a browse action to index.php or (2) the addr parameter to gmap.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0907-exploits/almondclassifieds-xss.txt; http://secunia.com/advisories/36003; http://www.securityfocus.com/bid/35816
CVE: CVE-2009-3226
Published: 2009-09-16
Description: SQL injection vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to execute arbitrary SQL commands via the replid parameter in a manw_repl add_form action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt; http://secunia.com/advisories/36003; http://www.securityfocus.com/bid/35816
CVE: CVE-2009-3227
Published: 2009-09-16
Description: Cross-site scripting (XSS) vulnerability in index.php in AlmondSoft Almond Classifieds Ads Enterprise and Almond Affiliate Network Classifieds allows remote attackers to inject arbitrary web script or HTML via the city parameter in a search action.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0907-exploits/almondclassifiedsads-bsqlxss.txt; http://secunia.com/advisories/36003; http://www.securityfocus.com/bid/35816
CVE: CVE-2009-3229
Published: 2009-09-17
Description: The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, and 8.2 before 8.2.14 allows remote authenticated users to cause a denial of service (backend shutdown) by "re-LOAD-ing" libraries from a certain plugins directory.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1119&w=2
CVE: CVE-2009-3230
Published: 2009-09-17
Description: The core server component in PostgreSQL 8.4 before 8.4.1, 8.3 before 8.3.8, 8.2 before 8.2.14, 8.1 before 8.1.18, 8.0 before 8.0.22, and 7.4 before 7.4.26 does not use the appropriate privileges for the (1) RESET ROLE and (2) RESET SESSION AUTHORIZATION operations, which allows remote authenticated users to gain privileges.  NOTE: this is due to an incomplete fix for CVE-2007-6600.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://archives.postgresql.org/pgsql-www/2009-09/msg00024.php; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html
CVE: CVE-2009-3231
Published: 2009-09-17
Description: The core server component in PostgreSQL 8.3 before 8.3.8 and 8.2 before 8.2.14, when using LDAP authentication with anonymous binds, allows remote attackers to bypass authentication via an empty password.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1119&w=2
CVE: CVE-2009-3232
Published: 2009-09-17
Description: pam-auth-update for PAM, as used in Ubuntu 8.10 and 9.4, and Debian GNU/Linux, does not properly handle an "empty selection" for system authentication modules in certain rare configurations, which causes any attempt to be successful and allows remote attackers to bypass authentication.
CVSS Score: 9.3 (HIGH)
CWE: CWE-287
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=519927; http://secunia.com/advisories/36620; http://www.openwall.com/lists/oss-security/2009/09/08/7
CVE: CVE-2009-3233
Published: 2009-09-17
Description: changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://bugs.debian.org/546791; http://secunia.com/advisories/36756; http://www.openwall.com/lists/oss-security/2009/09/16/3
CVE: CVE-2009-3234
Published: 2009-09-17
Description: Buffer overflow in the perf_copy_attr function in kernel/perf_counter.c in the Linux kernel 2.6.31-rc1 allows local users to cause a denial of service (crash) and execute arbitrary code via a "big size data" to the perf_counter_open system call.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://article.gmane.org/gmane.linux.kernel/890654; http://www.openwall.com/lists/oss-security/2009/09/16/1; http://www.openwall.com/lists/oss-security/2009/09/17/13
CVE: CVE-2009-3235
Published: 2009-09-17
Description: Multiple stack-based buffer overflows in the Sieve plugin in Dovecot 1.0 before 1.0.4 and 1.1 before 1.1.7, as derived from Cyrus libsieve, allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SIEVE script, as demonstrated by forwarding an e-mail message to a large number of recipients, a different vulnerability than CVE-2009-2632.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://dovecot.org/list/dovecot-news/2009-September/000135.html; http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html
CVE: CVE-2009-3236
Published: 2009-09-17
Description: The form library in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; reuses temporary filenames during the upload process which allows remote attackers, with privileges to write to the address book, to overwrite arbitrary files and execute PHP code via crafted Horde_Form_Type_image form field elements.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=horde-announce&m=[PII_REDACTED]0436&w=2; http://marc.info/?l=horde-announce&m=[PII_REDACTED]4087&w=2; http://marc.info/?l=horde-announce&m=[PII_REDACTED]7049&w=2
CVE: CVE-2009-3237
Published: 2009-09-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.2 before 3.2.5 and 3.3 before 3.3.5; Groupware 1.1 before 1.1.6 and 1.2 before 1.2.4; and Groupware Webmail Edition 1.1 before 1.1.6 and 1.2 before 1.2.4; allow remote attackers to inject arbitrary web script or HTML via the (1) crafted number preferences that are not properly handled in the preference system (services/prefs.php), as demonstrated by the sidebar_width parameter; or (2) crafted unknown MIME "text parts" that are not properly handled in the MIME viewer library (config/mime_drivers.php).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.horde.org/ticket/?id=8311; http://bugs.horde.org/ticket/?id=8399; http://marc.info/?l=horde-announce&m=[PII_REDACTED]0436&w=2
CVE: CVE-2008-7240
Published: 2009-09-17
Description: Directory traversal vulnerability in include/unverified.inc.php in Linux Web Shop (LWS) php User Base 1.3beta allows remote attackers to include and execute arbitrary local files via the template parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-94
References: http://www.securityfocus.com/bid/27964; https://exchange.xforce.ibmcloud.com/vulnerabilities/40793; https://www.exploit-db.com/exploits/5179
CVE: CVE-2008-7241
Published: 2009-09-17
Description: Cross-site request forgery (CSRF) vulnerability in PunBB before 1.2.17 allows remote attackers to hijack the authentication of unspecified users for requests related to a logout, probably a forced logout.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/48685; http://punbb.informer.com/download/changelogs/1.2.16_to_1.2.17.txt; http://osvdb.org/48685
CVE: CVE-2008-7242
Published: 2009-09-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) "a," (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/41232; http://secunia.com/advisories/28840; http://www.securityfocus.com/archive/1/487696/100/200/threaded
CVE: CVE-2008-7243
Published: 2009-09-17
Description: Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php.  NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://secunia.com/advisories/28840; http://www.securityfocus.com/archive/1/487696/100/200/threaded; http://www.securityfocus.com/bid/27672
CVE: CVE-2009-1883
Published: 2009-09-18
Description: The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html; http://secunia.com/advisories/36759; http://secunia.com/advisories/37105
CVE: CVE-2009-2707
Published: 2009-09-18
Description: Unspecified vulnerability in ia32el (aka the IA 32 emulation functionality) before 7042_7022-0.4.2 in SUSE Linux Enterprise (SLE) 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service (system crash) via a 32-bit x86 application.
CVSS Score: 4.9 (MEDIUM)
References: http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html; http://support.novell.com/security/cve/CVE-2009-2707.html; http://www.securityfocus.com/bid/36393
CVE: CVE-2009-2937
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in Planet 2.0 and Planet Venus allows remote attackers to inject arbitrary web script or HTML via the SRC attribute of an IMG element in a feed.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546178; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546179; http://intertwingly.net/blog/2009/09/09/Venus-Updates
CVE: CVE-2009-3238
Published: 2009-09-18
Description: The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random numbers, which allows attackers to predict the return value, and possibly defeat protection mechanisms based on randomization, via vectors that leverage the function's tendency to "return the same value over and over again for long stretches of time."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-338
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=8a0a9bd4db63bc45e3017bedeafbd88d0eb84d02; http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00005.html; http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html
CVE: CVE-2009-3239
Published: 2009-09-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2139, CVE-2009-2140.  Reason: This candidate is a duplicate of CVE-2009-2139 and CVE-2009-2140.  Notes: All CVE users should reference CVE-2009-2139 and CVE-2009-2140 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3240
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in the Happy Linux XF-Section module 1.12a for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN00425482/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000062.html; http://linux.ohwada.jp/modules/smartsection/item.php?itemid=458
CVE: CVE-2009-3241
Published: 2009-09-18
Description: Unspecified vulnerability in the OpcUa (OPC UA) dissector in Wireshark 0.99.6 through 1.0.8 and 1.2.0 through 1.2.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via malformed OPCUA Service CallRequest packets.
CVSS Score: 7.8 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00001.html; http://secunia.com/advisories/36754; http://secunia.com/advisories/37409
CVE: CVE-2009-3242
Published: 2009-09-18
Description: Unspecified vulnerability in packet.c in the GSM A RR dissector in Wireshark 1.2.0 and 1.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors related to "an uninitialized dissector handle," which triggers an assertion failure.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/36754; http://secunia.com/advisories/37409; http://www.securityfocus.com/bid/36408
CVE: CVE-2009-3243
Published: 2009-09-18
Description: Unspecified vulnerability in the TLS dissector in Wireshark 1.2.0 and 1.2.1, when running on Windows, allows remote attackers to cause a denial of service (application crash) via unknown vectors related to TLS 1.2 conversations.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/36754; http://secunia.com/advisories/37409; http://www.securityfocus.com/bid/36408
CVE: CVE-2009-3244
Published: 2009-09-18
Description: Heap-based buffer overflow in the SwDir.dll ActiveX control in Adobe Shockwave Player 11.5.1.601 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long PlayerVersion property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://securitytracker.com/id?1023123; http://www.adobe.com/support/security/bulletins/apsb09-16.html; http://www.exploit-db.com/exploits/9682
CVE: CVE-2009-3246
Published: 2009-09-18
Description: SQL injection vulnerability in spnews.php in MyBuxScript PTC-BUX allows remote attackers to execute arbitrary SQL commands via the id parameter in an spnews action to the default URI.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9555; http://www.packetstormsecurity.com/0909-exploits/mybuxscript-sql.txt; http://www.vupen.com/english/advisories/2009/2495
CVE: CVE-2009-3247
Published: 2009-09-18
Description: Cross-site scripting (XSS) vulnerability in the Activities module in vtiger CRM 5.0.4 allows remote attackers to inject arbitrary web script or HTML via the action parameter to phprint.php.  NOTE: the query_string vector is already covered by CVE-2008-3101.3.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36309; http://www.exploit-db.com/exploits/9450; http://www.osvdb.org/57240
CVE: CVE-2009-3248
Published: 2009-09-18
Description: Cross-site request forgery (CSRF) vulnerability in the RSS module in vtiger CRM 5.0.4 allows remote attackers to hijack the authentication of Admin users for requests that modify the news feed system via the rssurl parameter in a Save action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5670&w=2; http://secunia.com/advisories/36309; http://www.exploit-db.com/exploits/9450
CVE: CVE-2009-3249
Published: 2009-09-18
Description: Multiple directory traversal vulnerabilities in vtiger CRM 5.0.4 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the module parameter to graph.php; or the (2) module or (3) file parameter to include/Ajax/CommonAjax.php, reachable through modules/Campaigns/CampaignsAjax.php, modules/SalesOrder/SalesOrderAjax.php, modules/System/SystemAjax.php, modules/Products/ProductsAjax.php, modules/uploads/uploadsAjax.php, modules/Dashboard/DashboardAjax.php, modules/Potentials/PotentialsAjax.php, modules/Notes/NotesAjax.php, modules/Faq/FaqAjax.php, modules/Quotes/QuotesAjax.php, modules/Utilities/UtilitiesAjax.php, modules/Calendar/ActivityAjax.php, modules/Calendar/CalendarAjax.php, modules/PurchaseOrder/PurchaseOrderAjax.php, modules/HelpDesk/HelpDeskAjax.php, modules/Invoice/InvoiceAjax.php, modules/Accounts/AccountsAjax.php, modules/Reports/ReportsAjax.php, modules/Contacts/ContactsAjax.php, and modules/Portal/PortalAjax.php; and allow remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the step parameter in an Import action to the (4) Accounts, (5) Contacts, (6) HelpDesk, (7) Leads, (8) Potentials, (9) Products, or (10) Vendors module, reachable through index.php and related to modules/Import/index.php and multiple Import.php files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5670&w=2; http://secunia.com/advisories/36309; http://securityreason.com/securityalert/8118
CVE: CVE-2009-3250
Published: 2009-09-18
Description: The saveForwardAttachments procedure in the Compose Mail functionality in vtiger CRM 5.0.4 allows remote authenticated users to execute arbitrary code by composing an e-mail message with an attachment filename ending in (1) .php in installations based on certain Apache HTTP Server configurations, (2) .php. on Windows, or (3) .php/ on Linux, and then making a direct request to a certain pathname under storage/.
CVSS Score: 9.0 (HIGH)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5670&w=2; http://secunia.com/advisories/36309; http://www.exploit-db.com/exploits/9450
CVE: CVE-2009-3251
Published: 2009-09-18
Description: include/utils/ListViewUtils.php in vtiger CRM before 5.1.0 allows remote authenticated users to bypass intended access restrictions and read the (1) visibility, (2) location, and (3) recurrence fields of a calendar via a custom view.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/36309; http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/12407; http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/4208
CVE: CVE-2009-3252
Published: 2009-09-18
Description: Multiple SQL injection vulnerabilities in news.php in Rock Band CMS 0.10 allow remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36517; http://www.exploit-db.com/exploits/9553; http://www.vupen.com/english/advisories/2009/2494
CVE: CVE-2009-3253
Published: 2009-09-18
Description: Stack-based buffer overflow in TriceraSoft Swift Ultralite 1.032 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long string in a .M3U playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36508; http://www.exploit-db.com/exploits/9546; http://secunia.com/advisories/36508