deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-4433
Published: 2009-12-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (a) 5 or (b) 9 field in a post action to ticket_function.php, reachable through ticket_submit.php and index.php; (c) the which parameter to function.php, or (d) the which parameter to index.php, related to knowledgebase_list.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt; http://secunia.com/advisories/37726; http://www.exploit-db.com/exploits/10478
CVE: CVE-2009-4434
Published: 2009-12-28
Description: Directory traversal vulnerability in index.php in IDevSpot iSupport 1.8 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/0912-exploits/isupport-lfixss.txt; http://secunia.com/advisories/37726; http://www.exploit-db.com/exploits/10478
CVE: CVE-2009-4435
Published: 2009-12-28
Description: Multiple directory traversal vulnerabilities in F3Site 2009 allow remote attackers to include and execute arbitrary local files via directory traversal sequences in the GLOBALS[nlang] parameter to (1) mod/poll.php and (2) mod/new.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/0912-exploits/f3site2009-lfi.txt; http://www.exploit-db.com/exploits/10536; http://www.securityfocus.com/bid/37408
CVE: CVE-2009-4436
Published: 2009-12-28
Description: Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to (1) questions.asp, (2) importquestions.asp, and (3) quiztakers.asp, different vectors than CVE-2007-1706.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/24653; http://www.exploit-db.com/exploits/10529; http://www.securityfocus.com/bid/37402
CVE: CVE-2009-4437
Published: 2009-12-28
Description: Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the (1) catid parameter to wishlist.asp and the (2) linkid parameter to links.asp.  NOTE: vector 1 might overlap CVE-2005-1029.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0912-exploits/activeauctionhouse-sql.txt; http://secunia.com/advisories/14839; http://www.exploit-db.com/exploits/10520
CVE: CVE-2009-1797
Published: 2009-12-28
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to hijack the authentication of (1) administrator or (2) device users for requests that create new administrative users or have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/111/45/; http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887; http://secunia.com/advisories/37744
CVE: CVE-2009-1798
Published: 2009-12-28
Description: Multiple cross-site scripting (XSS) vulnerabilities on the Network Management Card (NMC) on American Power Conversion (APC) Switched Rack PDU (aka Rack Mount Power Distribution) devices and other devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  NOTE: the login_username vector for Forms/login1 is already covered by CVE-2009-4406.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://holisticinfosec.org/content/view/111/45/; http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=10887; http://secunia.com/advisories/37744
CVE: CVE-2009-4007
Published: 2009-12-28
Description: Unspecified vulnerability in the NormaliseTrainConsist function in src/train_cmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service (daemon crash) via certain game actions involving a wagon and a dual-headed engine.
CVSS Score: 5.0 (MEDIUM)
References: http://binaries.openttd.org/releases/0.7.5/changelog.txt; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033754.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033896.html
CVE: CVE-2009-4438
Published: 2009-12-28
Description: The Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.1 before FP8, 9.5 before FP5, and 9.7 before FP1 does not enforce privilege requirements for access to a (1) sequence or (2) global-variable object, which allows remote authenticated users to make use of data via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://secunia.com/advisories/37759; http://www-01.ibm.com/support/docview.wss?uid=swg1IC62543
CVE: CVE-2009-4439
Published: 2009-12-28
Description: Unspecified vulnerability in the Query Compiler, Rewrite, and Optimizer component in IBM DB2 9.5 before FP5 allows remote authenticated users to cause a denial of service (instance crash) by compiling a SQL query.
CVSS Score: 4.0 (MEDIUM)
References: ftp://ftp.software.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://secunia.com/advisories/37759; http://www-01.ibm.com/support/docview.wss?uid=swg1JR31948
CVE: CVE-2009-4440
Published: 2009-12-28
Description: Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges of this user, by making a client connection in opportunistic circumstances, related to "long binds," aka Bug Ids 6828462 and 6823593.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/37915; http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
CVE: CVE-2009-4441
Published: 2009-12-28
Description: Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not enable the SO_KEEPALIVE socket option, which makes it easier for remote attackers to cause a denial of service (connection slot exhaustion) via multiple connections, aka Bug Id 6782659.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37915; http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
CVE: CVE-2009-4442
Published: 2009-12-28
Description: Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly implement the max-client-connections configuration setting, which allows remote attackers to cause a denial of service (connection slot exhaustion) by making multiple connections and performing no operations on these connections, aka Bug Id 6648665.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/37915; http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
CVE: CVE-2009-4443
Published: 2009-12-28
Description: Unspecified vulnerability in the psearch (aka persistent search) functionality in Directory Proxy Server (DPS) in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service (psearch outage) by using a crafted psearch client to send requests that trigger a psearch thread loop, aka Bug Id 6855978.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/37915; http://sunsolve.sun.com/search/document.do?assetkey=1-21-141958-01-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-270789-1
CVE: CVE-2009-3295
Published: 2009-12-29
Description: The prep_reprocess_req function in kdc/do_tgs_req.c in the cross-realm referral implementation in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a ticket request.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37977; http://securitytracker.com/id?1023392; http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2009-003.txt
CVE: CVE-2009-4446
Published: 2009-12-29
Description: Cross-site scripting (XSS) vulnerability in admin.php in phpInstantGallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/10709; http://www.securityfocus.com/bid/37502; https://exchange.xforce.ibmcloud.com/vulnerabilities/55062
CVE: CVE-2009-4447
Published: 2009-12-29
Description: Jax Guestbook 3.5.0 allows remote attackers to bypass authentication and modify administrator settings via a direct request to admin/guestbook.admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/61299; http://secunia.com/advisories/37921; http://www.exploit-db.com/exploits/10626
CVE: CVE-2009-4448
Published: 2009-12-29
Description: inc/functions_time.php in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, allows remote attackers to cause a denial of service (CPU consumption) via a crafted request with a large year value, which triggers a long loop, as reachable through member.php and possibly other vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/; http://dev.mybboard.net/issues/600; http://dev.mybboard.net/projects/mybb/repository/revisions/4613/diff/branches/1.4-stable/inc/functions_time.php
CVE: CVE-2009-4449
Published: 2009-12-29
Description: Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.4.10, and possibly earlier versions, when changing the user avatar from the gallery, allows remote authenticated users to determine the existence of files via directory traversal sequences in the avatar and possibly the gallery parameters, related to (1) admin/modules/user/users.php and (2) usercp.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://blog.mybboard.net/2009/12/29/mybb-1-4-11-released-minor-patch-security-update/; http://dev.mybboard.net/issues/617; http://dev.mybboard.net/projects/mybb/repository/revisions/4663/diff/branches/1.4-stable/admin/modules/user/users.php
CVE: CVE-2009-4450
Published: 2009-12-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in map.php in LiveZilla 3.1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lat, (2) lng, and (3) zom parameters, which are not properly handled when processed with templates/map.tpl.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.intern0t.net/intern0t-advisories/1998-intern0t-livezilla-cross-site-scripting-vulnerability.html; http://osvdb.org/61348; http://secunia.com/advisories/37990
CVE: CVE-2009-4451
Published: 2009-12-29
Description: Unrestricted file upload vulnerability in upper.php in kandalf upper 0.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in fileup/.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/61370; http://secunia.com/advisories/37946; http://www.exploit-db.com/exploits/10672
CVE: CVE-2009-4452
Published: 2009-12-29
Description: Kaspersky Anti-Virus 5.0 (5.0.712); Antivirus Personal 5.0.x; Anti-Virus 6.0 (6.0.3.837), 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); and Internet Security 7 (7.0.1.325), 2009 (8.0.0.x), and 2010 (9.0.0.463); use weak permissions (Everyone:Full Control) for the BASES directory, which allows local users to gain SYSTEM privileges by replacing an executable or DLL with a Trojan horse.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/37398; http://secunia.com/advisories/37730; http://www.exploit-db.com/exploits/10484
CVE: CVE-2009-4453
Published: 2009-12-29
Description: Insecure method vulnerability in SoftCab Sound Converter ActiveX control (sndConverter.ocx) 1.2 allows remote attackers to create or overwrite arbitrary files via the SaveFormat method.  NOTE: some of these details are obtained from third party information.
CVSS Score: 8.8 (HIGH)
References: http://osvdb.org/61351; http://secunia.com/advisories/37967; http://www.exploit-db.com/exploits/10649
CVE: CVE-2009-4444
Published: 2009-12-29
Description: Microsoft Internet Information Services (IIS) 5.x and 6.x uses only the portion of a filename before a ; (semicolon) character to determine the file extension, which allows remote attackers to bypass intended extension restrictions of third-party upload applications via a filename with a (1) .asp, (2) .cer, or (3) .asa first extension, followed by a semicolon and a safe extension, as demonstrated by the use of asp.dll to handle a .asp;.jpg file.
CVSS Score: 6.0 (MEDIUM)
References: http://blogs.technet.com/msrc/archive/2009/12/27/new-reports-of-a-vulnerability-in-iis.aspx; http://secunia.com/advisories/37831; http://securitytracker.com/id?1023387
CVE: CVE-2009-4445
Published: 2009-12-29
Description: Microsoft Internet Information Services (IIS), when used in conjunction with unspecified third-party upload applications, allows remote attackers to create empty files with arbitrary extensions via a filename containing an initial extension followed by a : (colon) and a safe extension, as demonstrated by an upload of a .asp:.jpg file that results in creation of an empty .asp file, related to support for the NTFS Alternate Data Streams (ADS) filename syntax.  NOTE: it could be argued that this is a vulnerability in the third-party product, not IIS, because the third-party product should be applying its extension restrictions to the portion of the filename before the colon.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: http://securitytracker.com/id?1023387; http://soroush.secproject.com/downloadable/iis-semicolon-report.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/55308
CVE: CVE-2009-4454
Published: 2009-12-29
Description: vccleaner in VideoCache 1.9.2 allows local users with Squid proxy user privileges to overwrite arbitrary files via a symlink attack on /var/log/videocache/vccleaner.log.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-12/0366.html; http://secunia.com/advisories/37733; http://www.securityfocus.com/archive/1/508507/100/0/threaded
CVE: CVE-2009-4455
Published: 2009-12-29
Description: The default configuration of Cisco ASA 5500 Series Adaptive Security Appliance (Cisco ASA) 7.0, 7.1, 7.2, 8.0, 8.1, and 8.2 allows portal traffic to access arbitrary backend servers, which might allow remote authenticated users to bypass intended access restrictions and access unauthorized web sites via a crafted URL obfuscated with ROT13 and a certain encoding.  NOTE: this issue was originally reported as a vulnerability related to lack of restrictions to URLs listed in the Cisco WebVPN bookmark component, but the vendor states that "The bookmark feature is not a security feature."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/61132; http://secunia.com/advisories/37710; http://tools.cisco.com/security/center/viewAlert.x?alertId=19609
CVE: CVE-2009-4456
Published: 2009-12-30
Description: SQL injection vulnerability in news_detail.php in Green Desktiny 2.3.1, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/61353; http://secunia.com/advisories/37839; http://www.exploit-db.com/exploits/10710
CVE: CVE-2009-4457
Published: 2009-12-30
Description: Multiple unspecified vulnerabilities in the Vsftpd Webmin module before 1.3b for the Vsftpd server have unknown impact and attack vectors related to "Some security issues."
CVSS Score: 7.5 (HIGH)
References: http://freshmeat.net/projects/vsftpdwebmin/releases/310064; http://osvdb.org/61362; http://secunia.com/advisories/37991
CVE: CVE-2009-4458
Published: 2009-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.2 and 2.6.0rc2, and possibly other versions, allow remote attackers to inject arbitrary web script or HTML via the (1) tech parameter to admin/admin/config.php during a trunks display action, the (2) description parameter during an Add Zap Channel action, and (3) unspecified vectors during an Add Recordings action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61357; http://osvdb.org/61358; http://secunia.com/advisories/37972
CVE: CVE-2009-4459
Published: 2009-12-30
Description: Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as script by Internet Explorer 7 and 8.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/10554; http://www.securityfocus.com/bid/37425; https://exchange.xforce.ibmcloud.com/vulnerabilities/54947
CVE: CVE-2009-4460
Published: 2009-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Auto-Surf Traffic Exchange Script 1.1 allow remote attackers to inject arbitrary web script or HTML via the rid parameter to (1) index.php, (2) faq.php, and (3) register.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61285; http://osvdb.org/61286; http://osvdb.org/61287
CVE: CVE-2009-4461
Published: 2009-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) contact.php, (2) login.php, and (3) search.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37938; http://www.exploit-db.com/exploits/10688; http://www.securityfocus.com/bid/37471
CVE: CVE-2009-4462
Published: 2009-12-30
Description: Stack-based buffer overflow in the NetBiterConfig utility (NetBiterConfig.exe) 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn (hostname) parameter in a crafted HICP-protocol UDP packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://blog.48bits.com/2009/12/12/exposing-hms-hicp-protocol-0day-light/; http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1; http://support.intellicom.se/getfile.cfm?FID=150&FPID=85
CVE: CVE-2009-4463
Published: 2009-12-30
Description: Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://blog.48bits.com/?p=781; http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1; http://support.intellicom.se/getfile.cfm?FID=151
CVE: CVE-2009-4464
Published: 2009-12-30
Description: Cross-site scripting (XSS) vulnerability in searchadvance.asp in Active Business Directory 2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/61267; http://secunia.com/advisories/37863; http://www.packetstormsecurity.org/0912-exploits/abd-xss.txt
CVE: CVE-2009-4465
Published: 2009-12-30
Description: DeluxeBB 1.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain user and configuration information, log data, and gain administrative access via a direct request to scripts in (1) templates/ including (2) templates/deluxe/admincp/, (3) templates/corporate/admincp/, and (4) templates/blue/admincp/; (5) images/; (6) logs/ including (7) logs/cp.php; (8) wysiwyg/; (9) docs/; (10) classes/; (11) lang/; and (12) settings/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://www.exploit-db.com/exploits/10598; http://www.securityfocus.com/bid/37448; https://exchange.xforce.ibmcloud.com/vulnerabilities/54975
CVE: CVE-2009-4466
Published: 2009-12-30
Description: DeluxeBB 1.3 allows remote attackers to obtain sensitive information via a crafted page parameter to misc.php, which reveals the installation path in an error message.  NOTE: this issue might be resultant from improperly controlled computation in tools.php that leads to a denial of service (CPU or memory consumption).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.exploit-db.com/exploits/10598; http://www.securityfocus.com/bid/37448; https://exchange.xforce.ibmcloud.com/vulnerabilities/54980
CVE: CVE-2009-4467
Published: 2009-12-30
Description: misc.php in DeluxeBB 1.3 allows remote attackers to register accounts without a valid email address via a valemail action with the valmem set to a pre-assigned user ID, which is visible from a memberlist action.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/10598; http://www.securityfocus.com/bid/37448; https://exchange.xforce.ibmcloud.com/vulnerabilities/54979
CVE: CVE-2009-4468
Published: 2009-12-30
Description: Cross-site scripting (XSS) vulnerability in misc.php in DeluxeBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/10598; http://www.securityfocus.com/bid/37448; https://exchange.xforce.ibmcloud.com/vulnerabilities/54976
CVE: CVE-2009-4469
Published: 2009-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in pagenumber.inc.php in phpPowerCards 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, the (2) archiv parameter, and the (3) subcat parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.exploit-db.com/exploits/10668; http://www.securityfocus.com/bid/37508; https://exchange.xforce.ibmcloud.com/vulnerabilities/55059
CVE: CVE-2009-4470
Published: 2009-12-30
Description: SQL injection vulnerability in boardrule.php in DVBBS 2.0 allows remote attackers to execute arbitrary SQL commands via the groupboardid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/archive/1/506258/100/0/threaded; http://www.securityfocus.com/bid/36282; http://www.securityfocus.com/archive/1/506258/100/0/threaded
CVE: CVE-2009-4471
Published: 2009-12-30
Description: Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CLASSPATH parameter to (1) bib_form.php, (2) bib_pldetails.php, (3) bib_plform.php, (4) bib_plsearchc.php, (5) bib_plsearchs.php, (6) bib_save.php, (7) bib_searchc.php, (8) bib_searchs.php, (9) edi_form.php, (10) edi_save.php, (11) gen_form.php, (12) gen_save.php, (13) lin_form.php, (14) lin_save.php, (15) luo_form.php, (16) luo_save.php, (17) sog_form.php, or (18) sog_save.php in biblioteca/; (19) cal_insert.php, (20) cal_save.php, or (21) cal_saveactivity.php in calendario/; (22) circolari/cir_save.php; or (23) modulistica/mdl_save.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/36605; http://www.exploit-db.com/exploits/9582; http://www.vupen.com/english/advisories/2009/2535