deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4177
Published: 2006-10-24
Description: Heap-based buffer overflow in the NCP engine in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted NCP over IP packet that causes NCP to read more data than intended.
CVSS Score: 7.5 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=426; http://secunia.com/advisories/22506; http://securitytracker.com/id?1017104
CVE: CVE-2006-5471
Published: 2006-10-24
Description: PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg_dir and (2) lib_dir parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7495&w=2; http://securitytracker.com/id?1017046; http://www.securityfocus.com/bid/20442
CVE: CVE-2006-5472
Published: 2006-10-24
Description: PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22366; http://www.osvdb.org/29621; http://www.osvdb.org/29622
CVE: CVE-2006-5473
Published: 2006-10-24
Description: PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the lib_dir parameter.  NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the product, and the existing "Description" file contains documentation, not functioning code
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-October/001090.html; http://securityreason.com/securityalert/1763; http://www.attrition.org/pipermail/vim/2006-October/001094.html
CVE: CVE-2006-5474
Published: 2006-10-24
Description: The "forgot password" function in OneOrZero Helpdesk before 1.6.5.4 generates insecure passwords by concatenating the current timestamp with the username, which allows remote attackers to gain access as an arbitrary user by requesting a password reset.
CVSS Score: 7.5 (HIGH)
References: http://oneorzero.com/downloads/release_notes/Current_Release_notes.html; http://secunia.com/advisories/22476; http://securityreason.com/securityalert/1767
CVE: CVE-2006-5475
Published: 2006-10-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.
CVSS Score: 6.8 (MEDIUM)
References: http://drupal.org/node/88826; http://secunia.com/advisories/22486; http://securityreason.com/securityalert/1766
CVE: CVE-2006-5476
Published: 2006-10-24
Description: Cross-site request forgery (CSRF) vulnerability in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://drupal.org/node/88828; http://secunia.com/advisories/22486; http://securityreason.com/securityalert/1765
CVE: CVE-2006-5477
Published: 2006-10-24
Description: Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which allows remote attackers to obtain arbitrary form information via a crafted URL.
CVSS Score: 2.6 (LOW)
References: http://drupal.org/node/88828; http://secunia.com/advisories/22486; http://securityreason.com/securityalert/1764
CVE: CVE-2006-5478
Published: 2006-10-24
Description: Multiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to 8.7.3.8, and Novell NetMail before 3.52e FTF2, allow remote attackers to execute arbitrary code via (1) a long HTTP Host header, which triggers an overflow in the BuildRedirectURL function; or vectors related to a username containing a . (dot) character in the (2) SMTP, (3) POP, (4) IMAP, (5) HTTP, or (6) Networked Messaging Application Protocol (NMAP) Netmail services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050382.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050388.html; http://secunia.com/advisories/22519
CVE: CVE-2006-5479
Published: 2006-10-24
Description: The NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an unspecified denial of service via a certain "NCP Fragment."
CVSS Score: 5.0 (MEDIUM)
References: http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974600.htm
CVE: CVE-2006-5480
Published: 2006-10-24
Description: PHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1 allows remote attackers to execute arbitrary PHP code via the rootpath parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/22527; http://www.securityfocus.com/bid/20658; http://www.vupen.com/english/advisories/2006/4143
CVE: CVE-2006-5481
Published: 2006-10-24
Description: Multiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow remote attackers to execute arbitrary PHP code via the rootpath parameter in (1) lib/code.php, (2) lib/dbconnect.php, (3) lib/error.php, (4) lib/menu.php, and other unspecified files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22527; http://www.vupen.com/english/advisories/2006/4143; http://secunia.com/advisories/22527
CVE: CVE-2006-5482
Published: 2006-10-24
Description: ufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by calling the ftruncate function on a file type that is not VREG, VLNK or VDIR, which is not defined in POSIX.
CVSS Score: 2.1 (LOW)
References: http://lists.freebsd.org/pipermail/cvs-src/2006-May/064488.html; http://secunia.com/advisories/22413; http://www.securityfocus.com/bid/20522
CVE: CVE-2006-5483
Published: 2006-10-24
Description: p1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting a scheduler policy, which should only be settable by root.
CVSS Score: 2.1 (LOW)
References: http://lists.freebsd.org/pipermail/cvs-src/2006-May/063969.html; http://secunia.com/advisories/22413; http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/posix4/p1003_1b.c.diff?r1=1.24&r2=1.24.2.1
CVE: CVE-2006-5484
Published: 2006-10-24
Description: SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22350; http://securitytracker.com/id?1017060; http://securitytracker.com/id?1017061
CVE: CVE-2006-5485
Published: 2006-10-24
Description: Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERG_PATH parameter to (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5) simplePage.tpl.php, (6) speedberg.class.php, and (7) standardPage.tpl.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1762; http://www.attrition.org/pipermail/vim/2006-October/001091.html; http://www.securityfocus.com/archive/1/449468/100/0/threaded
CVE: CVE-2006-5486
Published: 2006-10-24
Description: Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/22575; http://securitytracker.com/id?1017113; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1
CVE: CVE-2006-5488
Published: 2006-10-25
Description: SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22489; http://www.osvdb.org/29898; http://www.securityfocus.com/bid/20643
CVE: CVE-2006-5489
Published: 2006-10-25
Description: Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's calendar meeting time.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22408; http://securitytracker.com/id?1017101; http://www.blackberry.com/knowledgecenterpublic/livelink.exe/4.1.2_HF1_Release_Notes?func=doc.Fetch&nodeId=1276788
CVE: CVE-2006-5490
Published: 2006-10-25
Description: Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22514; http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=456920; http://www.osvdb.org/29903
CVE: CVE-2006-5491
Published: 2006-10-25
Description: Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1768; http://securitytracker.com/id?1017096; http://www.securityfocus.com/archive/1/449220/100/0/threaded
CVE: CVE-2006-5492
Published: 2006-10-25
Description: Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via unspecified attack vectors related to "grants."
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/22468; http://sourceforge.net/project/shownotes.php?release_id=456553; http://www.osvdb.org/29900
CVE: CVE-2006-5493
Published: 2006-10-25
Description: PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/31068; http://securityreason.com/securityalert/1770; http://securitytracker.com/id?1017095
CVE: CVE-2006-5494
Published: 2006-10-25
Description: Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters.  NOTE: this issue might overlap CVE-2006-6795.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22505; http://www.osvdb.org/29892; http://www.securityfocus.com/bid/20633
CVE: CVE-2006-5495
Published: 2006-10-25
Description: Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files.
CVSS Score: 7.5 (HIGH)
References: http://cmsblog.msdazu.de/?p=209; http://secunia.com/advisories/22525; http://securitytracker.com/id?1017111
CVE: CVE-2006-5496
Published: 2006-10-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1769; http://securitytracker.com/id?1017097; http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006
CVE: CVE-2006-5497
Published: 2006-10-25
Description: PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22491; http://sourceforge.net/forum/forum.php?forum_id=625467; http://www.osvdb.org/29904
CVE: CVE-2006-5498
Published: 2006-10-25
Description: Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/forum/forum.php?forum_id=625467; http://www.vupen.com/english/advisories/2006/4122; https://exchange.xforce.ibmcloud.com/vulnerabilities/29692
CVE: CVE-2006-5499
Published: 2006-10-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html; http://secunia.com/advisories/22501; http://securityreason.com/securityalert/1771
CVE: CVE-2006-5500
Published: 2006-10-25
Description: Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userNick or (2) password parameters.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://www.vupen.com/english/advisories/2006/4129; http://www.vupen.com/english/advisories/2006/4129
CVE: CVE-2006-5501
Published: 2006-10-25
Description: Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502.
CVSS Score: 7.5 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430; http://secunia.com/advisories/22567; http://securitytracker.com/id?1017121
CVE: CVE-2006-5502
Published: 2006-10-25
Description: Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501.
CVSS Score: 7.5 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429; http://secunia.com/advisories/22567; http://securitytracker.com/id?1017121
CVE: CVE-2006-5503
Published: 2006-10-25
Description: Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1772; http://www.securityfocus.com/archive/1/449241/100/0/threaded; http://www.securityfocus.com/bid/20629
CVE: CVE-2006-5504
Published: 2006-10-25
Description: Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/31070; http://www.securityfocus.com/archive/1/449307/100/0/threaded; http://www.securityfocus.com/archive/1/449395/100/0/threaded
CVE: CVE-2006-5505
Published: 2006-10-25
Description: Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, and unspecified other files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22530; http://www.securityfocus.com/bid/20701; http://www.securityfocus.com/bid/20859
CVE: CVE-2006-5506
Published: 2006-10-25
Description: Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22547; http://wiclear.free.fr/; http://wiclear.free.fr/?Download
CVE: CVE-2006-5507
Published: 2006-10-25
Description: Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_dedi[dedi_path] parameter in (1) find.php, (2) insert_line.php, (3) fullscreen.php, (4) changecase.php, (5) insert_link.php, (6) insert_table.php, (7) table_cellprop.php, (8) table_prop.php, (9) table_rowprop.php, (10) insert_page.php, and possibly insert_marquee.php in backend/external/wysiswg/popups/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0610-exploits/Derdirigent.txt; http://secunia.com/advisories/22546; http://www.osvdb.org/29950
CVE: CVE-2006-5508
Published: 2006-10-25
Description: Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22442; http://securityreason.com/securityalert/1774; http://www.security.nnov.ru/Odocument711.html
CVE: CVE-2006-5509
Published: 2006-10-25
Description: Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22442; http://securityreason.com/securityalert/1774; http://www.security.nnov.ru/Odocument711.html
CVE: CVE-2006-5510
Published: 2006-10-25
Description: Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22504; http://www.osvdb.org/29899; http://www.rahim.webd.pl/exploity/Exploits/104.txt
CVE: CVE-2006-5511
Published: 2006-10-25
Description: Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter.
CVSS Score: 2.6 (LOW)
References: http://attrition.org/pipermail/vim/2006-October/001095.html; http://www.securityfocus.com/bid/20679; https://exchange.xforce.ibmcloud.com/vulnerabilities/29711
CVE: CVE-2006-5512
Published: 2006-10-25
Description: Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-November/001106.html; http://securityreason.com/securityalert/1773; http://www.securityfocus.com/archive/1/449467/100/0/threaded
CVE: CVE-2006-5382
Published: 2006-10-25
Description: 3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22818; http://securitytracker.com/id?1017128; http://www.3com.com/securityalert/alerts/3COM-06-004.html
CVE: CVE-2006-5513
Published: 2006-10-26
Description: SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22502; http://sourceforge.net/project/shownotes.php?release_id=457195; http://www.securityfocus.com/bid/20671
CVE: CVE-2006-5514
Published: 2006-10-26
Description: SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20653; https://exchange.xforce.ibmcloud.com/vulnerabilities/29712; https://www.exploit-db.com/exploits/2604
CVE: CVE-2006-5515
Published: 2006-10-26
Description: Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22526; http://secunia.com/advisories/22529; http://securityreason.com/securityalert/1777
CVE: CVE-2006-5516
Published: 2006-10-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters to wakka.php.
CVSS Score: 4.3 (MEDIUM)
References: http://cvs.gna.org/cvsweb/wikini/actions/usersettings.php.diff?r1=1.14.2.1%3Br2=1.14.2.2%3Bcvsroot=wikini%3Bf=h; http://secunia.com/advisories/22558; http://securityreason.com/securityalert/1776
CVE: CVE-2006-5517
Published: 2006-10-26
Description: Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22503; http://securityreason.com/securityalert/1775; http://www.osvdb.org/29975
CVE: CVE-2006-5518
Published: 2006-10-26
Description: Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, and (4) sql2xml.php in Src/getFeed/inc/.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22496; http://www.osvdb.org/29935; http://www.osvdb.org/29936