deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-3497
Published: 2012-11-23
Description: (1) TMEMC_SAVE_GET_CLIENT_WEIGHT, (2) TMEMC_SAVE_GET_CLIENT_CAP, (3) TMEMC_SAVE_GET_CLIENT_FLAGS and (4) TMEMC_SAVE_END in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (NULL pointer dereference or memory corruption and host crash) or possibly have other unspecified impacts via a NULL client id.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-3498
Published: 2012-11-23
Description: PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host crash) and possibly read hypervisor or guest memory via vectors related to a missing range check of map->index.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE: CVE-2012-3515
Published: 2012-11-23
Description: Qemu, as used in Xen 4.0, 4.1 and possibly other products, when emulating certain devices with a virtual console backend, allows local OS guest users to gain privileges via a crafted escape VT100 sequence that triggers the overwrite of a "device model's address space."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://git.qemu.org/?p=qemu-stable-0.15.git%3Ba=log; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00003.html
CVE: CVE-2012-3516
Published: 2012-11-23
Description: The GNTTABOP_swap_grant_ref sub-operation in the grant table hypercall in Xen 4.2 and Citrix XenServer 6.0.2 allows local guest kernels or administrators to cause a denial of service (host crash) and possibly gain privileges via a crafted grant reference that triggers a write to an arbitrary hypervisor memory location.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00004.html; http://secunia.com/advisories/50472; http://secunia.com/advisories/50530
CVE: CVE-2012-4411
Published: 2012-11-23
Description: The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor.  NOTE: this might be a duplicate of CVE-2007-0998.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-4601
Published: 2012-11-23
Description: Multiple SQL injection vulnerabilities in Nicola Asuni TCExam before 11.3.009 allow remote authenticated users with level 5 or greater permissions to execute arbitrary SQL commands via the (1) user_groups[] parameter to admin/code/tce_edit_test.php or (2) subject_id parameter to admin/code/tce_show_all_questions.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://freecode.com/projects/tcexam/releases/347588; http://secunia.com/advisories/50539; http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view
CVE: CVE-2012-4602
Published: 2012-11-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/code/tce_select_users_popup.php in Nicola Asuni TCExam before 11.3.009 allow remote attackers to inject arbitrary web script or HTML via the (1) cid or (2) uids parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://freecode.com/projects/tcexam/releases/347588; http://secunia.com/advisories/50539; http://sourceforge.net/projects/tcexam/files/CHANGELOG.TXT/view
CVE: CVE-2012-6030
Published: 2012-11-23
Description: The do_tmem_op function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (host crash) and possibly have other unspecified impacts via unspecified vectors related to "broken locking checks" in an "error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6031
Published: 2012-11-23
Description: The do_tmem_get function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (CPU hang and host crash) via unspecified vectors related to a spinlock being held in the "bad_copy error path." NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6032
Published: 2012-11-23
Description: Multiple integer overflows in the (1) tmh_copy_from_client and (2) tmh_copy_to_client functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 allow local guest OS users to cause a denial of service (memory corruption and host crash) via unspecified vectors. NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-189
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6033
Published: 2012-11-23
Description: The do_tmem_control function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly check privileges, which allows local guest OS users to access control stack operations via unspecified vectors.  NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6034
Published: 2012-11-23
Description: The (1) tmemc_save_get_next_page and (2) tmemc_save_get_next_inv functions and the (3) TMEMC_SAVE_GET_POOL_UUID sub-operation in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 "do not check incoming guest output buffer pointers," which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors.  NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-20
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6035
Published: 2012-11-23
Description: The do_tmem_destroy_pool function in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 does not properly validate pool ids, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or execute arbitrary code via unspecified vectors.  NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-6036
Published: 2012-11-23
Description: The (1) memc_save_get_next_page, (2) tmemc_restore_put_page and (3) tmemc_restore_flush_page functions in the Transcendent Memory (TMEM) in Xen 4.0, 4.1, and 4.2 do not check for negative id pools, which allows local guest OS users to cause a denial of service (memory corruption and host crash) or possibly execute arbitrary code via unspecified vectors.  NOTE: this issue was originally published as part of CVE-2012-3497, which was too general; CVE-2012-3497 has been SPLIT into this ID and others.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-264
References: http://lists.xen.org/archives/html/xen-announce/2012-09/msg00006.html; http://osvdb.org/85199; http://secunia.com/advisories/50472
CVE: CVE-2012-0959
Published: 2012-11-24
Description: Remote Login Service (RLS) 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.ubuntu.com/usn/USN-1624-1; https://bugs.launchpad.net/remote-login-service/%2Bbug/1070896; https://exchange.xforce.ibmcloud.com/vulnerabilities/80278
CVE: CVE-2012-0960
Published: 2012-11-24
Description: Unity integration extension (unity-firefox-extension) before 2.4.1 for Firefox does not properly handle callbacks, which allows remote attackers to cause a denial of service (Firefox crash) and possibly execute arbitrary code via a crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/56650; http://www.ubuntu.com/usn/USN-1639-1; https://bugs.launchpad.net/unity-firefox-extension/%2Bbug/1076350
CVE: CVE-2012-2239
Published: 2012-11-24
Description: Mahara 1.4.x before 1.4.4 and 1.5.x before 1.5.3 allows remote attackers to read arbitrary files or create TCP connections via an XML external entity (XXE) injection attack, as demonstrated by reading config.php.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1047111; https://mahara.org/interaction/forum/topic.php?id=4869
CVE: CVE-2012-2243
Published: 2012-11-24
Description: Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML by uploading an XML file with the xhtml extension, which is rendered inline as script.  NOTE: this can be leveraged with CVE-2012-2244 to execute arbitrary code without authentication, as demonstrated by modifying the clamav path.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1055232; https://mahara.org/interaction/forum/topic.php?id=4937
CVE: CVE-2012-2244
Published: 2012-11-24
Description: Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote authenticated administrators to execute arbitrary programs by modifying the path to clamav.  NOTE: this can be exploited without authentication by leveraging CVE-2012-2243.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-264
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1057238; https://mahara.org/interaction/forum/topic.php?id=4936
CVE: CVE-2012-2246
Published: 2012-11-24
Description: Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to conduct clickjacking attacks to delete arbitrary users and bypass CSRF protection via account/delete.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1057240; https://exchange.xforce.ibmcloud.com/vulnerabilities/79273
CVE: CVE-2012-2247
Published: 2012-11-24
Description: Cross-site scripting (XSS) vulnerability in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to artefact/file/ and a crafted SVG file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1061980; https://mahara.org/interaction/forum/topic.php?id=4938
CVE: CVE-2012-2253
Published: 2012-11-24
Description: Cross-site scripting (XSS) vulnerability in group/members.php in Mahara 1.5.x before 1.5.7 and 1.6.x before 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/51404; http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1079498
CVE: CVE-2012-3433
Published: 2012-11-24
Description: Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical address space in a way that triggers excessive shared page search time during the p2m teardown.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00024.html; http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00025.html; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html
CVE: CVE-2012-4522
Published: 2012-11-24
Description: The rb_get_path_check function in file.c in Ruby 1.9.3 before patchlevel 286 and Ruby 2.0.0 before r37163 allows context-dependent attackers to create files in unexpected locations or with unexpected names via a NUL byte in a file path.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090235.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-October/090515.html; http://rhn.redhat.com/errata/RHSA-2013-0129.html
CVE: CVE-2012-4538
Published: 2012-11-24
Description: The HVMOP_pagetable_dying hypercall in Xen 4.0, 4.1, and 4.2 does not properly check the pagetable state when running on shadow pagetables, which allows a local HVM guest OS to cause a denial of service (hypervisor crash) via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00008.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00009.html; http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00017.html
CVE: CVE-2012-5533
Published: 2012-11-24
Description: The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the "Connection: TE,,Keep-Alive" header.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.31_fix_connection_header_dos.patch; http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2012_01.txt; http://lists.opensuse.org/opensuse-updates/2012-11/msg00044.html
CVE: CVE-2012-6037
Published: 2012-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in Mahara 1.4.x before 1.4.5 and 1.5.x before 1.5.4, and other versions including 1.2, allow remote attackers to inject arbitrary web script or HTML via a CSV header with "unknown fields," which are not properly handled in error messages in the (1) bulk user, (2) group, and (3) group member upload capabilities.  NOTE: this issue was originally part of CVE-2012-2243, but that ID was SPLIT due to different issues by different researchers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2012/dsa-2591; https://bugs.launchpad.net/mahara/+bug/1063480; https://mahara.org/interaction/forum/topic.php?id=4937
CVE: CVE-2012-0698
Published: 2012-11-26
Description: tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_offset value in a TCP packet to port 30003.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692649; http://packetstormsecurity.com/files/118281/TrouSerS-Denial-Of-Service.html; http://secunia.com/advisories/51295
CVE: CVE-2012-2437
Published: 2012-11-26
Description: cookie_gen.php in ar web content manager (AWCM) 2.2 does not require authentication, which allows remote attackers to generate arbitrary cookies via the name parameter in conjunction with the content parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0039.html; http://packetstormsecurity.org/files/117975/AWCM-2.2-Access-Bypass.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/79926
CVE: CVE-2012-2438
Published: 2012-11-26
Description: ar web content manager (AWCM) 2.2 does not restrict the number of comment records that can be submitted through HTTP requests, which allows remote attackers to cause a denial of service (disk consumption) via the coment parameter to (1) show_video.php or (2) topic.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0039.html; http://packetstormsecurity.org/files/117975/AWCM-2.2-Access-Bypass.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/79927
CVE: CVE-2012-5520
Published: 2012-11-26
Description: The send_to_sourcefire function in manage_sql.c in OpenVAS Manager 3.x before 3.0.4 allows remote attackers to execute arbitrary commands via the (1) IP address or (2) port number field in an OMP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-11/0047.html; http://archives.neohapsis.com/archives/bugtraq/2012-11/0055.html; http://archives.neohapsis.com/archives/bugtraq/2012-11/0059.html
CVE: CVE-2012-6038
Published: 2012-11-26
Description: admin/core/admin_func.php in razorCMS before 1.2.1 does not properly restrict access to certain administrator directories and files, which allows remote authenticated users to read, edit, rename, move, copy and delete files via the (1) dir parameter in a fileman or (2) filemanview action.  NOTE: this issue has been referred to as a "path traversal."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/78230; http://secunia.com/advisories/47461; http://www.exploit-db.com/exploits/18344
CVE: CVE-2012-6039
Published: 2012-11-26
Description: SQL injection vulnerability in view_comments.php in YABSoft Advanced Image Hosting (AIH) Script, possibly 2.3, allows remote attackers to execute arbitrary SQL commands via the gal parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/18352; http://www.osvdb.org/82543; http://www.securityfocus.com/bid/51394
CVE: CVE-2012-6040
Published: 2012-11-26
Description: Cross-site scripting (XSS) vulnerability in users.php in File King Advanced File Management 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/view/108466/afm134-xss.txt; http://www.securityfocus.com/bid/51339; https://exchange.xforce.ibmcloud.com/vulnerabilities/72275
CVE: CVE-2012-6041
Published: 2012-11-26
Description: Double free vulnerability in GreenBrowser before 6.0.1002, when the keyword search bar (F6) is activated, allows remote attackers to execute arbitrary code via a crafted iframe.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2012-01/0079.html; http://www.securityfocus.com/bid/51393; https://exchange.xforce.ibmcloud.com/vulnerabilities/72351
CVE: CVE-2012-6042
Published: 2012-11-26
Description: GPSMapEdit 1.1.73.2 allows user-assisted remote attackers to cause a denial of service (crash) via a long string in a lst file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/18339; http://www.securityfocus.com/bid/51327; http://www.exploit-db.com/exploits/18339
CVE: CVE-2012-6043
Published: 2012-11-26
Description: Cross-site scripting (XSS) vulnerability in downloads.php in PHP-Fusion 7.02.04 allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/view/108542/phpfusion70204-xss.txt; http://www.securityfocus.com/bid/51365; https://exchange.xforce.ibmcloud.com/vulnerabilities/72311
CVE: CVE-2012-6044
Published: 2012-11-26
Description: M-Player 0.4 allows remote attackers to cause a denial of service (crash) via a crafted MP3 file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/18337; http://www.securityfocus.com/bid/51318; https://exchange.xforce.ibmcloud.com/vulnerabilities/72242
CVE: CVE-2010-5280
Published: 2012-11-26
Description: Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabname parameter in a userProfile action to index.php.  NOTE: this can be leveraged to execute arbitrary code by using the file upload feature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.org/1010-exploits/joomlacbe-lfi.txt; http://secunia.com/advisories/41741; http://www.exploit-db.com/exploits/15222
CVE: CVE-2010-5281
Published: 2012-11-26
Description: Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1009-exploits/cmscout209-lfi.txt; http://secunia.com/advisories/41634; http://www.johnleitch.net/Vulnerabilities/CMScout.2.09.IBrowser.TinyMCE.Plugin.Local.File.Inclusion/33
CVE: CVE-2010-5282
Published: 2012-11-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html; http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt; http://secunia.com/advisories/41553
CVE: CVE-2010-5283
Published: 2012-11-26
Description: Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-09/0359.html; http://packetstormsecurity.org/1009-exploits/opentext-xsrfxss.txt; http://secunia.com/advisories/41553
CVE: CVE-2010-5284
Published: 2012-11-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Collabtive 0.6.5 allow remote attackers to inject arbitrary web script or HTML via the (1) User parameter in the edit user profile feature to manageuser.php, (2) y parameter in a newcal action to manageajax.php, and the (3) pic parameter to thumb.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt; http://secunia.com/advisories/41805; http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt
CVE: CVE-2010-5285
Published: 2012-11-26
Description: Cross-site request forgery (CSRF) vulnerability in admin.php in Collabtive 0.6.5 allows remote attackers to hijack the authentication of administrators for requests that add administrative users via the edituser action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://packetstormsecurity.org/1010-exploits/collabtive-xssxsrf.txt; http://secunia.com/advisories/41805; http://www.anatoliasecurity.com/adv/as-adv-2010-003.txt