deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-2537
Published: 2006-05-22
Description: Multiple format string vulnerabilities in (a) OpenBOR 2.0046 and earlier, (b) Beats of Rage (BOR) 1.0029 and earlier, and (c) Horizontal Shooter BOR (HOR) 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by the (1) music identifier in data/scenes/intro.txt, which is not properly handled in the update function, and (2) background identifier in data/easy/1aeasy.txt, which is not properly handled in the shutdown function.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/borfs-adv.txt; http://secunia.com/advisories/20173; http://secunia.com/advisories/20174
CVE: CVE-2006-2538
Published: 2006-05-22
Description: IE Tab 1.0.9 plugin for Mozilla Firefox 1.5.0.3 allows remote user-assisted attackers to cause a denial of service (application crash), possibly due to a null dereference, via certain Javascript, as demonstrated using a url parameter to the content/reloaded.html page in a chrome:// URI.  Some third-party researchers claim that they are unable to reproduce this vulnerability.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/archive/1/434280/100/0/threaded; http://www.securityfocus.com/archive/1/434519/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/26540
CVE: CVE-2006-2539
Published: 2006-05-22
Description: Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the getSelectedText function in javax.swing.JPasswordField component.
CVSS Score: 3.5 (LOW)
References: http://secunia.com/advisories/20145; http://www.securityfocus.com/bid/18036; http://www.sybase.com/detail?id=1040665
CVE: CVE-2006-0747
Published: 2006-05-23
Description: Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U; http://lists.apple.com/archives/security-announce/2009/May/msg00002.html; http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html
CVE: CVE-2006-1861
Published: 2006-05-23
Description: Multiple integer overflows in FreeType before 2.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attack vectors related to (1) bdf/bdflib.c, (2) sfnt/ttcmap.c, (3) cff/cffgload.c, and (4) the read_lwfn function and a crafted LWFN file in base/ftmac.c.  NOTE: item 4 was originally identified by CVE-2006-2493.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U; http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2007-10/msg00006.html
CVE: CVE-2006-2540
Published: 2006-05-23
Description: Privacy leak in install.php for Diesel PHP Job Site sends sensitive information such as user credentials to an e-mail address controlled by the product developers.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20142; http://www.securityfocus.com/archive/1/434369/100/0/threaded; http://www.securityfocus.com/archive/1/435382/100/0/threaded
CVE: CVE-2006-2541
Published: 2006-05-23
Description: SQL injection vulnerability in settings.asp in Zixforum 1.12 allows remote attackers to execute arbitrary SQL commands via the layid parameter to (1) login.asp and (2) main.asp.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20190; http://securityreason.com/securityalert/946; http://www.kapda.ir/advisory-327.html
CVE: CVE-2006-2542
Published: 2006-05-23
Description: xmcdconfig in xmcd for Debian GNU/Linux 2.6-17.1 creates /var/lib/cddb and /var/lib/xmcd/discog with world writable permissions, which allows local users to cause a denial of service (disk consumption).
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=366816; http://secunia.com/advisories/20078; http://www.debian.org/security/2006/dsa-1086
CVE: CVE-2006-2543
Published: 2006-05-23
Description: Xtreme Topsites 1.1 allows remote attackers to trigger MySQL errors and possibly conduct SQL injection attacks via unspecified vectors in join.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20192; http://securityreason.com/securityalert/945; http://www.osvdb.org/25705
CVE: CVE-2006-2544
Published: 2006-05-23
Description: Multiple SQL injection vulnerabilities in Xtreme Topsites 1.1, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) searchthis parameter in lostid.php and (2) id parameter in stats.php.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20192; http://www.osvdb.org/25703; http://www.vupen.com/english/advisories/2006/1899
CVE: CVE-2006-2545
Published: 2006-05-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Xtreme Topsites 1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in stats.php and (2) unspecified inputs in lostid.php, probably the searchthis parameter.  NOTE: one or more of these vectors might be resultant from SQL injection.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/20192; http://securityreason.com/securityalert/945; http://www.osvdb.org/25702
CVE: CVE-2006-2546
Published: 2006-05-23
Description: A recommended admin password reset mechanism for BEA WebLogic Server 8.1, when followed before October 10, 2005, causes the administrator password to be stored in cleartext in the domain directory, which could allow attackers to gain privileges.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/193; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016101
CVE: CVE-2006-2547
Published: 2006-05-23
Description: Unspecified vulnerability in the sapdba command in SAP with Informix before 700, and 700 up to patch 100, allows local users to execute arbitrary commands via unknown vectors related to "insecure environment variable" handling.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046130.html; http://secunia.com/advisories/20180; http://securityreason.com/securityalert/941
CVE: CVE-2006-2548
Published: 2006-05-23
Description: Prodder before 0.5, and perlpodder before 0.5, allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast (url attribute of an enclosure tag, or $enc_url variable), which is executed when running wget.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0567.html; http://secunia.com/advisories/20208; http://secunia.com/advisories/20238
CVE: CVE-2006-2550
Published: 2006-05-23
Description: perlpodder before 0.5 allows remote attackers to execute arbitrary code via shell metacharacters in the URL of a podcast, which are executed when saving the URL to a log file.  NOTE: the wget vector is already covered by CVE-2006-2548.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0570.html; http://secunia.com/advisories/20238; http://www.osvdb.org/25708
CVE: CVE-2006-2551
Published: 2006-05-23
Description: Unspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service via unknown vectors.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/20227; http://secunia.com/advisories/20459; http://secunia.com/advisories/21140
CVE: CVE-2006-1466
Published: 2006-05-24
Description: Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service.
CVSS Score: 4.0 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2006/May/msg00004.html; http://secunia.com/advisories/20267; http://securitytracker.com/id?1016143
CVE: CVE-2006-2552
Published: 2006-05-24
Description: Jemscripts DownloadControl 1.0 allows remote attackers to obtain sensitive information via an invalid dcid parameter to dc.php, which leaks the pathname in an error message.  NOTE: this was originally claimed to be SQL injection, but it is probably resultant from another issue in functions.php.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/943; http://www.osvdb.org/25716; http://www.securityfocus.com/archive/1/434533/100/0/threaded
CVE: CVE-2006-2553
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in Jemscripts DownloadControl 1.0 allows remote attackers to inject arbitrary HTML or web script via the dcid parameter to dc.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. This issue appears to be independent from a different issue that involves the same vector.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20212; http://securityreason.com/securityalert/943; http://www.attrition.org/pipermail/vim/2006-May/000783.html
CVE: CVE-2006-2554
Published: 2006-05-24
Description: Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
CVSS Score: 6.4 (MEDIUM)
References: http://aluigi.altervista.org/adv/genecysbof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html; http://secunia.com/advisories/20099
CVE: CVE-2006-2555
Published: 2006-05-24
Description: The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via a command with a missing ":" (colon) separator, which triggers a null dereference.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/genecysbof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html; http://secunia.com/advisories/20099
CVE: CVE-2006-2556
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in Florian Amrhein NewsPortal before 0.37, and possibly TR Newsportal (TRanx rebuilded), allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html; http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal; http://secunia.com/advisories/20128
CVE: CVE-2006-2557
Published: 2006-05-24
Description: PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal (TRanx rebuilded), allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html; http://archives.neohapsis.com/archives/bugtraq/2006-05/0325.html; http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal
CVE: CVE-2006-2558
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/20246; http://securitytracker.com/id?1016147; http://www.securityfocus.com/archive/1/434822/100/0/threaded
CVE: CVE-2006-2559
Published: 2006-05-24
Description: Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20161; http://securitytracker.com/id?1016134; http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
CVE: CVE-2006-2560
Published: 2006-05-24
Description: Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/20183; http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html; http://www.securityview.org/how-does-the-upnp-flaw-works.html
CVE: CVE-2006-2561
Published: 2006-05-24
Description: Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20169; http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html; http://www.securityview.org/how-does-the-upnp-flaw-works.html
CVE: CVE-2006-2562
Published: 2006-05-24
Description: ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/20184; http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html; http://www.securityview.org/how-does-the-upnp-flaw-works.html
CVE: CVE-2006-2313
Published: 2006-05-24
Description: PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications via invalid encodings of multibyte characters, aka one variant of "Encoding-Based SQL Injection."
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc; http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php; http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html
CVE: CVE-2006-2314
Published: 2006-05-24
Description: PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "\" (backslash) byte 0x5c to be the trailing byte of a multibyte character, such as SJIS, BIG5, GBK, GB18030, and UHC, which cannot be handled correctly by a client that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc; http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php; http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html
CVE: CVE-2006-1862
Published: 2006-05-24
Description: The virtual memory implementation in Linux kernel 2.6.x allows local users to cause a denial of service (panic) by running lsof a large number of times in a way that produces a heavy system load.
CVSS Score: 4.9 (MEDIUM)
References: http://osvdb.org/31663; http://secunia.com/advisories/20237; http://secunia.com/advisories/21745
CVE: CVE-2006-2564
Published: 2006-05-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2) posting a listing, (3) posting an event, (4) adding comments, or (5) sending a message.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20229; http://securityreason.com/securityalert/954; http://www.securityfocus.com/archive/1/434846/100/0/threaded
CVE: CVE-2006-2565
Published: 2006-05-24
Description: SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id parameter in profile.php and (2) the aut_id parameter in userarticles.php.  NOTE: the aut_id vector can produce resultant path disclosure if the SQL manipulation is invalid.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20228; http://securityreason.com/securityalert/949; http://www.securityfocus.com/archive/1/434847/100/0/threaded
CVE: CVE-2006-2566
Published: 2006-05-24
Description: Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a request to mrarticles.php or (2) a login QUERY_STRING to admin.php without any additional parameters, which reveal the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/949; http://www.securityfocus.com/archive/1/434847/100/0/threaded; http://www.vupen.com/english/advisories/2006/1943
CVE: CVE-2006-2567
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20228; http://securityreason.com/securityalert/949; http://www.securityfocus.com/archive/1/434847/100/0/threaded
CVE: CVE-2006-2549
Published: 2006-05-24
Description: Stack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long field names.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046292.html; http://secunia.com/advisories/20233; http://www.osvdb.org/25902
CVE: CVE-2006-2568
Published: 2006-05-24
Description: PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20242; http://www.osvdb.org/25714; http://www.securityfocus.com/bid/18075
CVE: CVE-2006-2569
Published: 2006-05-24
Description: SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20167; http://www.securityfocus.com/bid/18077; http://www.vupen.com/english/advisories/2006/1925
CVE: CVE-2006-2570
Published: 2006-05-24
Description: PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php. NOTE: this might be due to a globals overwrite issue.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/18076; https://exchange.xforce.ibmcloud.com/vulnerabilities/26590; https://www.exploit-db.com/exploits/1809
CVE: CVE-2006-2571
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20251; http://securitytracker.com/id?1016158; http://www.eazel.es/media/advisory002-OpenCms-Xml-Content-Demo-search-engine-Cross-site-scripting.html
CVE: CVE-2006-2572
Published: 2006-05-24
Description: Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20201; http://securityreason.com/securityalert/948; http://www.osvdb.org/25732
CVE: CVE-2006-2573
Published: 2006-05-24
Description: SQL injection vulnerability in index.php in DGBook 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, (4) address, (5) comment, and (6) ip parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20201; http://www.osvdb.org/25733; http://www.vupen.com/english/advisories/2006/1942
CVE: CVE-2006-2574
Published: 2006-05-24
Description: Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00659649; http://secunia.com/advisories/20230; http://secunia.com/advisories/20332
CVE: CVE-2006-2575
Published: 2006-05-24
Description: The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (crash) via a client flag (frameNum) that is greater than 41, which triggers an assert error.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/panza-adv.txt; http://secunia.com/advisories/20250/; http://securitytracker.com/id?1016149
CVE: CVE-2006-2576
Published: 2006-05-24
Description: Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) lib.simplesel.php, (b) lib.filelist.php, (c) tree.documents.php, (d) lib.repo.php, and (e) lib.php, and (2) GLOBALS[where_scs] to (f) lib.teleskill.php.  NOTE: this issue might be resultant from a global overwrite vulnerability.
CVSS Score: 5.1 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-06/0113.html; http://secunia.com/advisories/20260; http://www.osvdb.org/25757
CVE: CVE-2006-2577
Published: 2006-05-24
Description: Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) where_cms, (2) where_lms, (3) where_upgrade, (4) BBC_LIB_PATH, and (5) BBC_LANGUAGE_PATH parameters in various unspecified scripts. NOTE: the provenance of some of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20260; http://www.osvdb.org/25757; https://exchange.xforce.ibmcloud.com/vulnerabilities/26633
CVE: CVE-2006-2578
Published: 2006-05-24
Description: admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://pridels0.blogspot.com/2006/05/esyndicat-directory-software-local.html; http://secunia.com/advisories/20218; http://www.vupen.com/english/advisories/2006/1983