deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-7084
Published: 2009-08-26
Description: Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/51464; http://www.securityfocus.com/archive/1/494422/100/0/threaded; http://www.securityfocus.com/bid/30261
CVE: CVE-2008-7085
Published: 2009-08-26
Description: Multiple SQL injection vulnerabilities in TheHockeyStop HockeySTATS Online 2.0 Basic and Advanced allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in the viewpage action to the default URI, probably index.php, or (2) divid parameter in the schedule action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/30248; https://exchange.xforce.ibmcloud.com/vulnerabilities/43852; https://www.exploit-db.com/exploits/6084
CVE: CVE-2008-7086
Published: 2009-08-26
Description: Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecard_admin_cookie cookie to admin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/30199; https://exchange.xforce.ibmcloud.com/vulnerabilities/43744; https://www.exploit-db.com/exploits/6050
CVE: CVE-2008-7087
Published: 2009-08-26
Description: PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/51466; http://www.securityfocus.com/archive/1/494426/100/0/threaded; http://www.securityfocus.com/bid/30264
CVE: CVE-2008-7088
Published: 2009-08-26
Description: Unrestricted file upload vulnerability in upload.php in PhotoPost vBGallery 2.4.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in a certain path.  NOTE: this may be the same vulnerability as CVE-2008-0251, but this is not clear due to lack of details from the vendor.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/30249; https://exchange.xforce.ibmcloud.com/vulnerabilities/43845; https://www.exploit-db.com/exploits/6082
CVE: CVE-2008-7089
Published: 2009-08-26
Description: Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8; http://www.osvdb.org/50186; http://www.securityfocus.com/archive/1/494987/100/0/threaded
CVE: CVE-2008-7090
Published: 2009-08-26
Description: Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8; http://www.osvdb.org/50187; http://www.osvdb.org/50188
CVE: CVE-2008-7091
Published: 2009-08-26
Description: Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]8; http://www.osvdb.org/50189; http://www.osvdb.org/50190
CVE: CVE-2008-7092
Published: 2009-08-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to inject arbitrary web script or HTML via a Javascript event in the (1) url, (2) PageName, and (3) title parameters in a CustomBookMarkLink action to Campaign/Campaign; (4) a Javascript event in the displayIcon parameter to Campaign/updateOfferTemplateSubmit.do (aka the templates web page); (5) crafted input to Campaign/CampaignListener (aka the listener server), which is not properly handled when displaying the status log; and (6) id parameter to Campaign/campaignDetails.do, (7) id parameter to Campaign/offerDetails.do, (8) function parameter to Campaign/Campaign, (9) sessionID parameter to Campaign/runAllFlowchart.do, (10) id parameter in an edit action to Campaign/updateOfferTemplatePage.do, (11) Frame parameter in a LoadFrame action to Campaign/Campaign, (12) affiniumUserName parameter to manager/jsp/test.jsp, (13) affiniumUserName parameter to Campaign/main.do, and possibly other vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/31280; http://www.osvdb.org/47520; http://www.osvdb.org/47521
CVE: CVE-2008-7093
Published: 2009-08-26
Description: Multiple directory traversal vulnerabilities in Unica Affinium Campaign 7.2.1.0.55 allow remote attackers to (1) create arbitrary directories or files via a .. (dot dot) in the folder name in the new folder functionality or (2) list arbitrary files via a crafted request to Campaign/CampaignListener.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31280; http://www.osvdb.org/47519; http://www.osvdb.org/47529
CVE: CVE-2008-7094
Published: 2009-08-26
Description: Campaign/CampaignListener in the listener server in Unica Affinium Campaign 7.2.1.0.55 allows remote attackers to cause a denial of service (server crash) via a crafted length field that triggers (1) connection exhaustion or (2) memory allocation failure.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/31280; http://www.osvdb.org/47518; http://www.portcullis.co.uk/292.php
CVE: CVE-2009-2967
Published: 2009-08-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, different vulnerabilities than CVE-2009-2959.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://buildbot.net/trac#SecurityAlert; http://secunia.com/advisories/36352; http://secunia.com/advisories/36418
CVE: CVE-2009-2050
Published: 2009-08-27
Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/57452; http://secunia.com/advisories/36495; http://secunia.com/advisories/36499
CVE: CVE-2009-2051
Published: 2009-08-27
Description: Cisco IOS 12.2 through 12.4 and 15.0 through 15.1, Cisco IOS XE 2.5.x and 2.6.x before 2.6.1, and Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), and 7.x before 7.1(2) allow remote attackers to cause a denial of service (device reload or voice-services outage) via a malformed SIP INVITE message that triggers an improper call to the sipSafeStrlen function, aka Bug IDs CSCsz40392 and CSCsz43987.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/57453; http://secunia.com/advisories/36498; http://secunia.com/advisories/36499
CVE: CVE-2009-2052
Published: 2009-08-27
Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to "tracking of network connections," aka Bug IDs CSCsq22534 and CSCsw52371.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/36498; http://secunia.com/advisories/36499; http://secunia.com/advisories/37039
CVE: CVE-2009-2053
Published: 2009-08-27
Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/57455; http://secunia.com/advisories/36498; http://secunia.com/advisories/36499
CVE: CVE-2009-2054
Published: 2009-08-27
Description: Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2a)su1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and SIP outage) via a flood of TCP packets, aka Bug ID CSCsx23689.
CVSS Score: 7.8 (HIGH)
CWE: CWE-770
References: http://osvdb.org/57456; http://secunia.com/advisories/36498; http://secunia.com/advisories/36499
CVE: CVE-2009-2861
Published: 2009-08-27
Description: The Over-the-Air Provisioning (OTAP) functionality on Cisco Aironet Lightweight Access Point 1100 and 1200 devices does not properly implement access-point association, which allows remote attackers to spoof a controller and cause a denial of service (service outage) via crafted remote radio management (RRM) packets, aka "SkyJack" or Bug ID CSCtb56664.
CVSS Score: 7.3 (HIGH)
References: http://securitytracker.com/id?1022774; http://tools.cisco.com/security/center/viewAlert.x?alertId=18919; http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf
CVE: CVE-2009-2935
Published: 2009-08-27
Description: Google V8, as used in Google Chrome before 2.0.172.43, allows remote attackers to bypass intended restrictions on reading memory, and possibly obtain sensitive information or execute arbitrary code in the Chrome sandbox, via crafted JavaScript.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://code.google.com/p/chromium/issues/detail?id=18639; http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html; http://osvdb.org/57421
CVE: CVE-2009-2698
Published: 2009-08-27
Description: The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=1e0c14f49d6b393179f423abbac47f85618d3d46; http://lists.opensuse.org/opensuse-security-announce/2009-08/msg00008.html; http://rhn.redhat.com/errata/RHSA-2009-1222.html
CVE: CVE-2009-2972
Published: 2009-08-27
Description: in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec() bomb."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://secunia.com/advisories/36445; http://sunsolve.sun.com/search/document.do?assetkey=1-21-109320-23-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-264608-1
CVE: CVE-2009-2973
Published: 2009-08-27
Description: Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the (1) MD2 or (2) MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-310
References: http://code.google.com/p/chromium/issues/detail?id=18725; http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html; http://secunia.com/advisories/36417
CVE: CVE-2009-2974
Published: 2009-08-27
Description: Google Chrome 1.0.154.65, 1.0.154.48, and earlier allows remote attackers to (1) cause a denial of service (application hang) via vectors involving a chromehtml: URI value for the document.location property or (2) cause a denial of service (application hang and CPU consumption) via vectors involving a series of function calls that set a chromehtml: URI value for the document.location property.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2009-08/0217.html; http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html; http://websecurity.com.ua/3435/
CVE: CVE-2009-2975
Published: 2009-08-27
Description: Mozilla Firefox 3.5.2 on Windows XP, in some situations possibly involving an incompletely configured protocol handler, does not properly implement setting the document.location property to a value specifying a protocol associated with an external application, which allows remote attackers to cause a denial of service (memory consumption) via vectors involving a series of function calls that set this property, as demonstrated by (1) the chromehtml: protocol and (2) the aim: protocol.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2009-08/0234.html; http://archives.neohapsis.com/archives/bugtraq/2009-08/0236.html; http://archives.neohapsis.com/archives/bugtraq/2009-08/0246.html
CVE: CVE-2009-2976
Published: 2009-08-27
Description: Cisco Aironet Lightweight Access Point (AP) devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://securitytracker.com/id?1022774; http://www.airmagnet.com/assets/AM_Technote_SkyJack_082509.pdf; http://www.airmagnet.com/news/press_releases/2009/08252009.php
CVE: CVE-2009-2977
Published: 2009-08-27
Description: The Cisco Security Monitoring, Analysis and Response System (CS-MARS) 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace.## files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files.
CVSS Score: 3.3 (LOW)
CWE: CWE-310
References: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtb52450; http://www.securityfocus.com/archive/1/505995/100/0/threaded; http://www.securityfocus.com/archive/1/505998/100/0/threaded
CVE: CVE-2008-7095
Published: 2009-08-27
Description: The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://osvdb.org/51916; http://www.securityfocus.com/archive/1/498033/100/0/threaded; http://www.securityfocus.com/bid/32102
CVE: CVE-2009-2978
Published: 2009-08-27
Description: SQL injection vulnerability in SugarCRM 4.5.1o and earlier, 5.0.0k and earlier, and 5.2.0g and earlier, allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN31035930/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000056.html; http://secunia.com/advisories/36423
CVE: CVE-2008-7096
Published: 2009-08-27
Description: Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://invisiblethingslab.com/bh08/part2-full.pdf; http://osvdb.org/49901; http://security-center.intel.com/advisory.aspx?intelid=INTEL-SA-00017&languageid=en-fr
CVE: CVE-2008-7097
Published: 2009-08-27
Description: Multiple SQL injection vulnerabilities in Qsoft K-Rate Premium allow remote attackers to execute arbitrary SQL commands via (1) the $id variable in admin/includes/dele_cpac.php, (2) $ord[order_id] variable in payments/payment_received.php, (3) $id variable in includes/functions.php, and (4) unspecified variables in modules/chat.php, as demonstrated via the (a) show parameter in an online action to index.php; (b) PATH_INTO to the room/ handler; (c) image and (d) id parameters in a vote action to index.php; (e) PATH_INFO to the blog/ handler; and (f) id parameter in a blog_edit action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/48338; http://secunia.com/advisories/31548; http://www.securityfocus.com/bid/30842
CVE: CVE-2008-7098
Published: 2009-08-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in Qsoft K-Rate Premium allow remote attackers to inject arbitrary web script or HTML via the blog, possibly the (1) Title and (2) Text fields; (3) the gallery, possibly the Description field in Your Pictures; (4) the forum, possibly the Your Message field when posting a new thread; or (5) the vote parameter in a view action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/48339; http://osvdb.org/48340; http://osvdb.org/48341
CVE: CVE-2008-7099
Published: 2009-08-27
Description: Unspecified vulnerability in the Manage Templates feature in Qsoft K-Rate Premium allows remote attackers to execute arbitrary PHP code via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/48342; http://secunia.com/advisories/31548; https://exchange.xforce.ibmcloud.com/vulnerabilities/52924
CVE: CVE-2008-7100
Published: 2009-08-27
Description: Unspecified vulnerability in DotNetNuke 4.4.1 through 4.8.4 allows remote authenticated users to bypass authentication and gain privileges via unknown vectors related to a "unique id" for user actions and improper validation of a "user identity."
CVSS Score: 6.5 (MEDIUM)
References: http://osvdb.org/48343; http://secunia.com/advisories/31893; http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno21/tabid/1174/Default.aspx
CVE: CVE-2008-7101
Published: 2009-08-27
Description: Unspecified vulnerability in DotNetNuke 4.0 through 4.8.4 and 5.0 allows remote attackers to obtain sensitive information (portal number) by accessing the install wizard page via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/48344; http://secunia.com/advisories/31893; http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno22/tabid/1175/Default.aspx
CVE: CVE-2008-7102
Published: 2009-08-27
Description: DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to parameter validation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://osvdb.org/48345; http://secunia.com/advisories/31893; http://www.dotnetnuke.com/News/SecurityPolicy/Securitybulletinno23/tabid/1176/Default.aspx
CVE: CVE-2008-7103
Published: 2009-08-27
Description: Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows remote attackers to cause a denial of service (browser crash) or execute arbitrary code via a long Document.Location property value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/47909; http://secunia.com/advisories/31671; http://www.securityfocus.com/bid/30922
CVE: CVE-2008-7104
Published: 2009-08-27
Description: Sophos PureMessage Scanner service (PMScanner.exe) in PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (message queue delay and incomplete spam rule update) via a crafted (1) RTF or (2) PDF file.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/30881; http://www.sophos.com/support/knowledgebase/article/44385.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/44775
CVE: CVE-2008-7105
Published: 2009-08-27
Description: Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service (EdgeTransport.exe termination) via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text.  NOTE: this might be related to CVE-2008-7104.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/30881; http://www.sophos.com/support/knowledgebase/article/44385.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/52925
CVE: CVE-2008-7106
Published: 2009-08-27
Description: The installation of Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2, when both anti-virus and anti-spam are supported, does not create or launch the associated scan engines when the system is under heavy load, which has unspecified impact, probably remote bypass of scanner protection or a denial of service (message loss or delay).
CVSS Score: 5.0 (MEDIUM)
References: http://www.sophos.com/support/knowledgebase/article/44385.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/52926; http://www.sophos.com/support/knowledgebase/article/44385.html
CVE: CVE-2008-7107
Published: 2009-08-28
Description: easdrv.sys in ESET Smart Security 3.0.667.0 allows local users to cause a denial of service (crash) via a crafted IOCTL 0x222003 request to the \\.\easdrv device interface.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/30719; https://exchange.xforce.ibmcloud.com/vulnerabilities/44520; https://www.exploit-db.com/exploits/6251
CVE: CVE-2008-7108
Published: 2009-08-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) quantity or (2) Add Engraving fields to the default URI; (3) Quantity field to phpcart.php; (4) Name, (5) Company, (6) Address, (7) City, and (8) Province/State fields in a checkout action to phpcart.php; and other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/495806/100/0/threaded; http://www.securityfocus.com/bid/30884; https://exchange.xforce.ibmcloud.com/vulnerabilities/44760
CVE: CVE-2008-7109
Published: 2009-08-28
Description: The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to bypass authorization and upload arbitrary files to the client system via a modified program that does not prompt the user for a password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-863
References: http://secunia.com/advisories/31631; http://www.informit.com/guides/content.aspx?g=security&seqNum=320; http://www.securityfocus.com/archive/1/495772/100/0/threaded
CVE: CVE-2008-7110
Published: 2009-08-28
Description: Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. (dot dot) in a request.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/31631; http://www.informit.com/guides/content.aspx?g=security&seqNum=320; http://www.securityfocus.com/archive/1/495772/100/0/threaded