deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-6924
Published: 2007-01-13
Description: bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error.  NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html; http://secunia.com/advisories/22793; http://securityreason.com/securityalert/2144
CVE: CVE-2006-6925
Published: 2007-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the message title field when submitting an article to articles/edit.php, (2) the message title field when submitting a blog post to blogs/post.php, or (3) the message description field when editing in the Sandbox in wiki/edit.php.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html; http://secunia.com/advisories/22793; http://securityreason.com/securityalert/2144
CVE: CVE-2006-6926
Published: 2007-01-13
Description: Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22858; http://www.securityfocus.com/bid/21084; http://secunia.com/advisories/22858
CVE: CVE-2006-6927
Published: 2007-01-13
Description: Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the uname (username) and (2) pword (passwd) fields in (a) admin/default.asp; the (3) ID parameter to (b) listfull.asp or (c) printmain.asp; the (4) cat parameter to (d) listmain.asp, (e) searchoption.asp, or (f) searchmain.asp; the (5) Keyword parameter to (g) searchkey.asp; the (6) area parameter to searchmain.asp or searchoption.asp; the (7) searchin parameter to searchkey.asp; or the (8) cost1, (9) cost2, (10) acreage1, or (11) squarefeet1 parameters to searchoption.asp.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23049; http://securityreason.com/securityalert/2143; http://www.securityfocus.com/archive/1/452112/100/0/threaded
CVE: CVE-2006-6928
Published: 2007-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) listmain.asp or (b) searchmain.asp, the (2) the Keyword parameter to (c) searchkey.asp, or the (3) refno parameter to (d) forminfo.asp.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/23049; http://securityreason.com/securityalert/2143; http://www.securityfocus.com/archive/1/452112/100/0/threaded
CVE: CVE-2006-6929
Published: 2007-01-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) reply.asp or (b) view_print.asp, the (2) SH1 parameter to (c) search.asp, the (3) name parameter to reply.asp, or the (4) dosearch parameter to (d) advsearch.asp.
CVSS Score: 6.8 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=44; http://secunia.com/advisories/22985; http://securityreason.com/securityalert/2142
CVE: CVE-2006-6930
Published: 2007-01-13
Description: SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=44; http://secunia.com/advisories/22985; http://securityreason.com/securityalert/2142
CVE: CVE-2007-0223
Published: 2007-01-13
Description: SQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One Control Panel (AIOCP) before 1.3.009 allows remote attackers to execute arbitrary SQL commands via the download_category parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/31641; http://secunia.com/advisories/23726; http://sourceforge.net/project/shownotes.php?release_id=477845
CVE: CVE-2007-0224
Published: 2007-01-13
Description: SQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginLastname parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32732; http://secunia.com/advisories/23699; https://exchange.xforce.ibmcloud.com/vulnerabilities/31447
CVE: CVE-2007-0225
Published: 2007-01-13
Description: Cross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/32733; http://secunia.com/advisories/23699; https://exchange.xforce.ibmcloud.com/vulnerabilities/31449
CVE: CVE-2007-0226
Published: 2007-01-13
Description: SQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to execute arbitrary SQL commands via the "by User" field (aka the TXbyuser parameter).
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32927; http://secunia.com/advisories/23827; http://www.securityfocus.com/archive/1/458060/100/0/threaded
CVE: CVE-2007-0227
Published: 2007-01-13
Description: slocate 3.1 does not properly manage database entries that specify names of files in protected directories, which allows local users to obtain the names of private files.  NOTE: another researcher reports that the issue is not present in slocate 2.7.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33465; http://www.securityfocus.com/archive/1/456489/100/0/threaded; http://www.securityfocus.com/archive/1/456530/100/0/threaded
CVE: CVE-2007-0228
Published: 2007-01-13
Description: The DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to cause a denial of service (service crash) via a (1) &CONNECTSERVER& (2) &ADDENTRY& (3) &FIN& (4) &START& (5) &LOGPATH& (6) &FWADELTA& (7) &FWALOG& (8) &SETSYNCHRONOUS& (9) &SETPRGFILE&, or (10) &SETREPLYPORT& string to TCP port 10618, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0209.html; http://osvdb.org/32725; http://secunia.com/advisories/23693
CVE: CVE-2007-0229
Published: 2007-01-13
Description: Integer overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly gain privileges via a crafted DMG image that causes "allocation of a negative size buffer" leading to a heap-based buffer overflow, a related issue to CVE-2006-5679.  NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.
CVSS Score: 7.2 (HIGH)
CWE: CWE-189
References: http://applefun.blogspot.com/2007/01/moab-10-01-2007-apple-dmg-ufs.html; http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
CVE: CVE-2007-0230
Published: 2007-01-13
Description: PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the install_dir parameter.  NOTE: CVE and third parties dispute this vulnerability because install_dir is defined before use
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/31277; http://www.attrition.org/pipermail/vim/2007-January/001223.html; http://www.securityfocus.com/archive/1/456527/100/0/threaded
CVE: CVE-2007-0231
Published: 2007-01-13
Description: Cross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and unmoderated comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Comments field.
CVSS Score: 6.8 (MEDIUM)
References: http://golem.ph.utexas.edu/~distler/blog/archives/001102.html; http://osvdb.org/32717; http://secunia.com/advisories/23669
CVE: CVE-2007-0232
Published: 2007-01-13
Description: PHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the jssShopFileSystem parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33459; http://securityreason.com/securityalert/2146; http://www.securityfocus.com/archive/1/456591/100/0/threaded
CVE: CVE-2007-0233
Published: 2007-01-13
Description: wp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the tb_id parameter.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in WordPress.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36860; http://www.securityfocus.com/bid/21983; https://exchange.xforce.ibmcloud.com/vulnerabilities/31385
CVE: CVE-2007-0235
Published: 2007-01-16
Description: Stack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 (libgtop2) allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a process with a long filename that is mapped in its address space, which triggers the overflow in gnome-system-monitor.
CVSS Score: 3.7 (LOW)
CWE: CWE-119
References: http://bugzilla.gnome.org/show_bug.cgi?id=396477; http://ftp.gnome.org/pub/gnome/sources/libgtop/2.14/libgtop-2.14.6.news; http://osvdb.org/32815
CVE: CVE-2007-0236
Published: 2007-01-16
Description: Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (kernel panic) and possibly execute arbitrary code via a crafted AppleTalk request that triggers a heap-based buffer overflow.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://projects.info-pull.com/moab/MOAB-14-01-2007.html
CVE: CVE-2007-0247
Published: 2007-01-16
Description: squid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of service (core dump) via crafted FTP directory listing responses, possibly related to the (1) ftpListingFinish and (2) ftpHtmlifyListEntry functions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://fedoranews.org/cms/node/2442; http://osvdb.org/39839; http://secunia.com/advisories/23767
CVE: CVE-2007-0248
Published: 2007-01-16
Description: The aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a denial of service (crash) by causing an external_acl queue overload, which triggers an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/23767; http://secunia.com/advisories/23805; http://secunia.com/advisories/23889
CVE: CVE-2006-5876
Published: 2007-01-16
Description: The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
CVSS Score: 7.8 (HIGH)
References: http://fedoranews.org/cms/node/2509; http://ftp.gnome.org/pub/gnome/sources/libsoup/2.2/libsoup-2.2.99.news; http://osvdb.org/31667
CVE: CVE-2006-6487
Published: 2007-01-16
Description: Cross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the error[] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/23778; http://www.netvigilance.com/advisory0010; http://www.osvdb.org/30787
CVE: CVE-2006-6767
Published: 2007-01-16
Description: oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an assertion failure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://osvdb.org/32822; http://secunia.com/advisories/23790; http://secunia.com/advisories/23797
CVE: CVE-2006-5171
Published: 2007-01-16
Description: Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/31319; http://secunia.com/advisories/23648; http://securitytracker.com/id?1017506
CVE: CVE-2006-5172
Published: 2007-01-16
Description: Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/31320; http://secunia.com/advisories/23648; http://securitytracker.com/id?1017506
CVE: CVE-2006-6931
Published: 2007-01-16
Description: Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack."
CVSS Score: 5.0 (MEDIUM)
References: http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html; http://secunia.com/advisories/23716; http://secunia.com/advisories/24164
CVE: CVE-2006-6932
Published: 2007-01-16
Description: Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2147; http://www.securityfocus.com/archive/1/451875/100/0/threaded; http://www.securityfocus.com/bid/21131
CVE: CVE-2006-6933
Published: 2007-01-16
Description: Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as (1) ServerKey.pem and (2) AcceptIP.txt.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/22739; https://exchange.xforce.ibmcloud.com/vulnerabilities/30075; http://secunia.com/advisories/22739
CVE: CVE-2006-6934
Published: 2007-01-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) titre or (2) auteur field in a forum post.
CVSS Score: 6.8 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=8; http://secunia.com/advisories/22795; http://securityreason.com/securityalert/2150
CVE: CVE-2006-6935
Published: 2007-01-16
Description: SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL commands via the username and passwd (password) fields.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=8; http://securityreason.com/securityalert/2150; http://www.securityfocus.com/archive/1/450935/100/0/threaded
CVE: CVE-2007-0249
Published: 2007-01-16
Description: Cross-site scripting (XSS) vulnerability in index.php in Nwom topsites 3.0 allows remote attackers to inject arbitrary web script or HTML via the o parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33461; http://securityreason.com/securityalert/2149; http://www.securityfocus.com/archive/1/456636/100/0/threaded
CVE: CVE-2007-0250
Published: 2007-01-16
Description: index.php in Nwom topsites 3.0 allows remote attackers to obtain potentially sensitive information via a ' (quote) character in the o parameter, which forces a SQL error.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/33462; http://securityreason.com/securityalert/2149; http://www.securityfocus.com/archive/1/456636/100/0/threaded
CVE: CVE-2007-0251
Published: 2007-01-16
Description: Integer underflow in the DecodeGRE function in src/decode.c in Snort 2.6.1.2 allows remote attackers to trigger dereferencing of certain memory locations via crafted GRE packets, which may cause corruption of log files or writing of sensitive information into log files.
CVSS Score: 7.8 (HIGH)
References: http://labs.calyptix.com/advisories/CX-2007-01.txt; http://osvdb.org/32095; http://osvdb.org/33464
CVE: CVE-2007-0252
Published: 2007-01-16
Description: Unspecified vulnerability in easy-content filemanager allows remote attackers to upload or modify arbitrary files via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33463; http://www.securityfocus.com/archive/1/456622/100/0/threaded; http://osvdb.org/33463
CVE: CVE-2007-0253
Published: 2007-01-16
Description: Unspecified vulnerability in the grsecurity patch has unspecified impact and remote attack vectors, a different vulnerability than the expand_stack vulnerability from the Digital Armaments 20070110 pre-advisory.  NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities."  The developer also cites a past disclosure that was not proven
CVSS Score: 7.2 (HIGH)
References: http://forums.grsecurity.net/viewtopic.php?t=1646; http://grsecurity.net/news.php#digitalfud; http://www.digitalarmaments.com/news_news.shtml
CVE: CVE-2007-0254
Published: 2007-01-16
Description: Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/31594; http://secunia.com/advisories/23709; http://secunia.com/advisories/23891
CVE: CVE-2007-0255
Published: 2007-01-16
Description: XINE 0.99.4 allows user-assisted remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a certain M3U file that contains a long #EXTINF line and contains format string specifiers in an invalid udp:// URI, possibly a variant of CVE-2007-0017.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/31666; http://secunia.com/advisories/23931; http://www.mandriva.com/security/advisories?name=MDKSA-2007:027
CVE: CVE-2007-0256
Published: 2007-01-16
Description: VideoLAN VLC 0.8.6a allows remote attackers to cause a denial of service (application crash) via a crafted .wmv file.
CVSS Score: 7.8 (HIGH)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/22003.py; http://osvdb.org/39022; http://wiki.videolan.org/Changelog/0.8.6b
CVE: CVE-2007-0257
Published: 2007-01-16
Description: Unspecified vulnerability in the expand_stack function in grsecurity PaX allows local users to gain privileges via unspecified vectors. NOTE: the grsecurity developer has disputed this issue, stating that "the function they claim the vulnerability to be in is a trivial function, which can, and has been, easily checked for any supposed vulnerabilities."  The developer also cites a past disclosure that was not proven.  As of 20070120, the original researcher has released demonstration code
CVSS Score: 7.8 (HIGH)
References: http://forums.grsecurity.net/viewtopic.php?t=1646; http://grsecurity.net/news.php#digitalfud; http://osvdb.org/32727
CVE: CVE-2007-0258
Published: 2007-01-16
Description: Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://14house.blogspot.com/2007/01/fastilo-open-source-shopping-cart-vuln.html; http://osvdb.org/32730; http://osvdb.org/32731
CVE: CVE-2007-0259
Published: 2007-01-16
Description: Ezboxx Portal System Beta 0.7.6 and earlier allows remote attackers to obtain sensitive information via an invalid cat parameter to boxx/knowledgebase.asp, which reveals the path in an error message.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://osvdb.org/32829; http://osvdb.org/33470; http://www.bugsec.com/articles.php?Security=20
CVE: CVE-2007-0260
Published: 2007-01-16
Description: PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the this_path parameter.  NOTE: a reliable third party disputes this vulnerability because this_path is defined before use
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33472; http://securityreason.com/securityalert/2145; http://www.attrition.org/pipermail/vim/2007-January/001239.html
CVE: CVE-2007-0261
Published: 2007-01-16
Description: snews.php in sNews 1.5.30 and earlier does not properly exit when authentication fails, which allows remote attackers to perform unauthorized administrative actions, as demonstrated by changing an administrative password via the changeup task, and by uploading PHP code via the imagefile parameter.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/32817; http://secunia.com/advisories/23746; http://www.securityfocus.com/bid/22025
CVE: CVE-2007-0262
Published: 2007-01-16
Description: WordPress 2.0.6, and 2.1Alpha 3 (SVN:4662), does not properly verify that the m parameter value has the string data type, which allows remote attackers to obtain sensitive information via an invalid m[] parameter, as demonstrated by obtaining the path, and obtaining certain SQL information such as the table prefix.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33458; http://www.securityfocus.com/archive/1/456731/100/0/threaded; http://osvdb.org/33458
CVE: CVE-2007-0263
Published: 2007-01-16
Description: Unspecified vulnerability in Total Commander before 6.5.6 allows user-assisted remote attackers to delete arbitrary files and corrupt a filesystem via a crafted RAR file.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/39837; http://www.ghisler.com/whatsnew.htm; http://www.securityfocus.com/bid/22033
CVE: CVE-2007-0264
Published: 2007-01-16
Description: Buffer overflow in Winzip32.exe in WinZip 9.0 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long command line argument.  NOTE: this issue may cross privilege boundaries if an application automatically invokes Winzip32.exe for untrusted input filenames, as in the case of a file upload application.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.6 (MEDIUM)
References: http://osvdb.org/39800; http://www.securityfocus.com/bid/22020; http://osvdb.org/39800
CVE: CVE-2007-0265
Published: 2007-01-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Ezboxx Portal System Beta 0.7.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the pic parameter to custom/piczoom.asp, (2) the nocatname parameter to boxx/user-upload.asp, or (3) the iid parameter to indexes/newscomments.asp.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/32826; http://osvdb.org/32827; http://osvdb.org/32828