deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-1769
Published: 2005-06-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors in (1) the URL or (2) an e-mail message.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1390&w=2
CVE: CVE-2005-1949
Published: 2005-06-16
Description: The eping_validaddr function in functions.php for the ePing plugin for e107 portal allows remote attackers to execute arbitrary commands via shell metacharacters after a valid argument to the eping_host parameter.
CVSS Score: 7.5 (HIGH)
References: http://e107plugins.co.uk/news.php; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2985&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1287&w=2
CVE: CVE-2005-1951
Published: 2005-06-16
Description: Multiple HTTP Response Splitting vulnerabilities in osCommerce 2.2 Milestone 2 and earlier allow remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the (1) products_id or (2) pid parameter to index.php or (3) goto parameter to banner.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5117&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1735&w=2; http://secunia.com/advisories/15670
CVE: CVE-2005-1952
Published: 2005-06-16
Description: Directory traversal vulnerability in Pico Server (pServ) 3.3 allows remote attackers to read arbitrary files and execute arbitrary commands via a /./ (slash dot slash) before each .. (dot dot) sequence in the URL, which results in an incorrect directory depth count.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1316&w=2; http://secunia.com/advisories/15663; http://sourceforge.net/project/shownotes.php?group_id=59378&release_id=334036
CVE: CVE-2005-1954
Published: 2005-06-16
Description: singapore 0.9.11 allows remote attackers to obtain sensitive information via a direct request to (1) admin.class.php, (2) any .tpl.php file in templates/admin_default/, or (3) any .tpl.php file in templates/default/, which reveal the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3167&w=2; http://securitytracker.com/id?1014186; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3167&w=2
CVE: CVE-2005-1962
Published: 2005-06-16
Description: Cross-site scripting (XSS) vulnerability in Cerberus Helpdesk 0.97.3 allows remote attackers to inject arbitrary web script or HTML via the (1) errorcode parameter to index.php or (2) certain fields to clients.php.
CVSS Score: 4.3 (MEDIUM)
References: http://echo.or.id/adv/adv15-theday-2005.txt; http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost; http://secunia.com/advisories/15641
CVE: CVE-2005-1963
Published: 2005-06-16
Description: Cerberus Helpdesk 0.97.3 allows remote attackers to obtain sensitive information via certain requests to (1) reports.php, (2) knowledgebase.php, or (3) configuration.php, which leaks the information in a PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://echo.or.id/adv/adv15-theday-2005.txt; http://forum.cerberusweb.com/showthread.php?threadid=5162&goto=newpost; http://secunia.com/advisories/15641
CVE: CVE-2005-1965
Published: 2005-06-16
Description: PHP remote file inclusion vulnerability in siteframe.php for Broadpool Siteframe allows remote attackers to execute arbitrary code via a URL in the LOCAL_PATH parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://list.broadpool.com/pipermail/siteframe-announce/2005-June/000020.html; http://secunia.com/advisories/15657; http://securitytracker.com/id?1014150
CVE: CVE-2005-1967
Published: 2005-06-16
Description: Multiple SQL injection vulnerabilities in ProductCart Ecommerce before 2.7 allow remote attackers to execute arbitrary SQL commands via the (1) idcategory parameter to viewPrd.asp, (2) lid parameter to editCategories.asp, (3) icd parameter to modCustomCardPaymentOpt.asp, or (4) idccr parameter to OptionFieldsEdit.asp.
CVSS Score: 7.5 (HIGH)
References: http://echo.or.id/adv/adv16-theday-2005.txt; http://securitytracker.com/id?1014129; http://echo.or.id/adv/adv16-theday-2005.txt
CVE: CVE-2005-1970
Published: 2005-06-16
Description: Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15673; http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html; http://securitytracker.com/id?1014178
CVE: CVE-2005-1971
Published: 2005-06-16
Description: Directory traversal vulnerability in InteractivePHP FusionBB .11 Beta and earlier allows remote attackers to include arbitrary local files via ".." sequences in the language parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://www.interactivephp.com/misc/CHANGELOG.html; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5
CVE: CVE-2005-1973
Published: 2005-06-16
Description: Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privileges.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3598&w=2; http://securityreason.com/securityalert/61; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101748-1
CVE: CVE-2005-1974
Published: 2005-06-16
Description: Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple products and platforms including (1) HP-UX and (2) APC PowerChute, allows applications to assign permissions to themselves and gain privileges.
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0119&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2844&w=2; http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=7638
CVE: CVE-2005-1975
Published: 2005-06-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in Annuaire 1Two 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter to index.php, or the (2) site_id, (3) nom, (4) email, or (5) commentaire parameters in commentaires.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/15708; http://securitytracker.com/id?1014187; http://www.hackisknowledge.org/Advisories/Annuaire%201Two%20v1.0/Annuaire%201Two%20v1.0.html
CVE: CVE-2005-2003
Published: 2005-06-16
Description: Ultimate PHP Board (UPB) 1.9.6 GOLD allows remote attackers to obtain sensitive information via an invalid (zero) id parameter to (1) viewtopic.php, (2) profile.php, or (3) newpost.php, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2; http://secunia.com/advisories/15732; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2
CVE: CVE-2005-2005
Published: 2005-06-16
Description: Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier stores the users.dat file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information on registered users via a direct request to db/users.dat.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2; http://secunia.com/advisories/15732; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2
CVE: CVE-2005-2026
Published: 2005-06-16
Description: Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 has a hard-coded account and password for debugging, which allows remote attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15757; http://www.enterasys.com/support/relnotes/VH-4[PII_REDACTED]-patch-rel.pdf; http://secunia.com/advisories/15757
CVE: CVE-2005-2027
Published: 2005-06-16
Description: Enterasys Vertical Horizon VH-2402S before firmware 2.05.05.09 does not properly restrict certain debugging commands to the ADMIN account, which could allow attackers to obtain sensitive information or modify the registry.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15757; http://www.enterasys.com/support/relnotes/VH-4[PII_REDACTED]-patch-rel.pdf; http://secunia.com/advisories/15757
CVE: CVE-2005-2030
Published: 2005-06-16
Description: Ultimate PHP Board (UPB) 1.9.6 GOLD uses weak encryption for passwords in the users.dat file, which allows attackers to easily decrypt the passwords and gain privileges, possibly after exploiting CVE-2005-2005 to obtain users.dat.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2; http://www.securityfocus.com/bid/13975; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2
CVE: CVE-2005-2031
Published: 2005-06-16
Description: Multiple SQL injection vulnerabilities in socialMPN allow remote attackers to execute arbitrary SQL commands via (1) the sid parameter to article.php, (2) uname parameter to user.php, (3) siteid parameter to viewforum.php, (4) username parameter to newtopic.php, the (5) secid or (6) artid parameter to sections.php, (7) siteid parameter to index.php, or (8) sid parameter to friend.php.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014214; http://securitytracker.com/id?1014214
CVE: CVE-2005-2032
Published: 2005-06-16
Description: Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/15723; http://securitytracker.com/id?1014218; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101768-1
CVE: CVE-2005-2035
Published: 2005-06-16
Description: SQL injection vulnerability in login.asp for Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to execute arbitrary SQL commands via the password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt; http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html; http://securitytracker.com/id?1014221
CVE: CVE-2005-2036
Published: 2005-06-16
Description: modifyUser.asp in Cool Cafe (Cool Café) Chat 1.2.1 allows remote attackers to obtain the administrator password and email address via a modified nickname value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-009-coolcafe.txt; http://seclists.org/lists/fulldisclosure/2005/Jun/0205.html; http://www.osvdb.org/17350
CVE: CVE-2005-2042
Published: 2005-06-16
Description: Cross-site scripting (XSS) vulnerability in ajax-spell before 1.8 allows remote attackers to inject arbitrary web script or HTML via onmouseover or other events in HTML tags.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/15737; http://sourceforge.net/project/shownotes.php?release_id=335556; http://www.broken-notebook.com/spell_checker/index.php
CVE: CVE-2005-2044
Published: 2005-06-16
Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.3 and 1.5 RC 1 allow remote attackers to inject arbitrary web script or HTML via the (1) show_course parameter to browse.php, (2) subject parameter to contact.php, (3) cid parameter to content.php, (4) l parameter to inbox/send_message.php, the (5) search, (6) words, (7) include, (8) find_in, (9) display_as, or (10) search parameter to search.php, the (11) submit, (12) query, or (13) field parameter to tile.php, the (14) us parameter to forum/subscribe_forum.php, or the (15) roles[], (16) status, (17) submit, or (18) reset_filter parameters to directory.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/06/atutor-multiple-variable-cross-site.html; http://securitytracker.com/id?1014216; http://www.osvdb.org/17351
CVE: CVE-2005-2004
Published: 2005-06-17
Description: Multiple cross-site scripting vulnerabilities in Ultimate PHP Board (UPB) 1.9.6 GOLD and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ref parameter to login.php, (2) id or (3) page parameter to viewtopic.php, id parameter to (4) profile.php, (5) newpost.php, (6) email.php, (7) icq.php, or (8) aol.php, (9) t_id parameter to newpost.php, (10) ref parameter to getpass.php, or (11) sText parameter to search.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2; http://secunia.com/advisories/15732; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4821&w=2
CVE: CVE-2005-2006
Published: 2005-06-17
Description: JBOSS 3.2.2 through 3.2.7 and 4.0.2 allows remote attackers to obtain sensitive information via a GET request (1) with a "%." (percent dot), which reveals the installation path or (2) with a % (percent) before a filename, which reveals the contents of the file.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0424.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4496&w=2; http://secunia.com/advisories/15746
CVE: CVE-2005-2008
Published: 2005-06-17
Description: Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null).
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6371&w=2; http://secunia.com/advisories/15740; http://www.osvdb.org/17375
CVE: CVE-2005-2022
Published: 2005-06-17
Description: Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting (XSS) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1; http://www.vupen.com/english/advisories/2005/0816; http://sunsolve.sun.com/search/document.do?assetkey=1-26-101770-1
CVE: CVE-2005-2023
Published: 2005-06-17
Description: The send_pinentry_environment function in asshelp.c in gpg2 on SUSE Linux 9.3 does not properly handle certain options, which can prevent pinentry from being found and causes S/MIME signing to fail.
CVSS Score: 10.0 (HIGH)
References: http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002291.html; http://lists.gnupg.org/pipermail/gpa-dev/2005-June/002294.html; http://www.novell.com/linux/security/advisories/2005_16_sr.html
CVE: CVE-2005-2024
Published: 2005-06-17
Description: Vipul Razor Agents (razor-agents) before 2.70 allows remote attackers to cause a denial of service via (1) certain "unusual HTML messages" or (2) "certain malformed headers" such as Content-Type.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=95492; http://security.gentoo.org/glsa/glsa-200506-17.xml; http://sourceforge.net/mailarchive/forum.php?thread_id=7520323&forum_id=4259
CVE: CVE-2005-2029
Published: 2005-06-17
Description: amaroK Web Frontend 1.3 stores the globals.inc file under the web root without a .php extension and insufficient access control, which allows remote attackers to obtain the database username and password via a direct request to the file.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15736; http://sourceforge.net/project/shownotes.php?release_id=335719; http://secunia.com/advisories/15736
CVE: CVE-2005-2043
Published: 2005-06-17
Description: Directory traversal vulnerability in XAMPP before 1.4.14 allows remote attackers to inject arbitrary HTML and PHP code via lang.php.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15735; http://sourceforge.net/project/shownotes.php?release_id=335710; http://www.securityfocus.com/bid/13983
CVE: CVE-2005-0773
Published: 2005-06-18
Description: Stack-based buffer overflow in VERITAS Backup Exec Remote Agent 9.0 through 10.0 for Windows, and 9.0.4019 through 9.1.307 for Netware allows remote attackers to execute arbitrary code via a CONNECT_CLIENT_AUTH request with authentication method type 3 (Windows credentials) and a long password argument.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15789; http://securitytracker.com/id?1014273; http://seer.support.veritas.com/docs/276604.htm
CVE: CVE-2005-2007
Published: 2005-06-19
Description: Directory traversal vulnerability in Edgewall Trac 0.8.3 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the id parameter to the (1) upload or (2) attachment scripts.
CVSS Score: 6.4 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034618.html; http://secunia.com/advisories/15752; http://svn.edgewall.com/repos/trac/tags/trac-0.8.4/ChangeLog
CVE: CVE-2005-2039
Published: 2005-06-19
Description: Unknown vulnerability in "various plugins" for NanoBlogger 3.2.1 and earlier allows remote attackers to execute arbitrary commands.
CVSS Score: 5.0 (MEDIUM)
References: http://nanoblogger.sourceforge.net/downloads/nanoblogger-3.2.3.tar.gz; http://secunia.com/advisories/15754; http://www.osvdb.org/17392
CVE: CVE-2005-1992
Published: 2005-06-20
Description: The XMLRPC server in utils.rb for the ruby library (libruby) 1.8 sets an invalid default value that prevents "security protection" using handlers, which allows remote attackers to execute arbitrary commands.
CVSS Score: 7.5 (HIGH)
References: http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-core/5237; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315064; http://lists.apple.com/archives/security-announce/2005/Sep/msg00002.html
CVE: CVE-2005-1993
Published: 2005-06-20
Description: Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is used after a user entry in the sudoers file, allows local users to gain privileges via a symlink attack.
CVSS Score: 3.7 (LOW)
References: http://docs.info.apple.com/article.html?artnum=302847; http://secunia.com/advisories/15744; http://secunia.com/advisories/17813
CVE: CVE-2005-2009
Published: 2005-06-20
Description: Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the (1) ci, (2) d, or (3) m parameter to index.asp, or the (4) bi parameter to blog_comment.asp.
CVSS Score: 7.5 (HIGH)
References: http://echo.or.id/adv/adv18-theday-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4897&w=2; http://www.vupen.com/english/advisories/2005/0818
CVE: CVE-2005-2010
Published: 2005-06-20
Description: Cross-site scripting (XSS) vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://echo.or.id/adv/adv18-theday-2005.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]4897&w=2; http://www.securityfocus.com/bid/13994
CVE: CVE-2005-2011
Published: 2005-06-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the id parameter in a Question action.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2
CVE: CVE-2005-2012
Published: 2005-06-20
Description: Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) id parameters.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2
CVE: CVE-2005-2013
Published: 2005-06-20
Description: paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2
CVE: CVE-2005-2014
Published: 2005-06-20
Description: The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute arbitrary PHP commands by uploading a malicious language pack.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8681&w=2
CVE: CVE-2005-2021
Published: 2005-06-20
Description: Cross-site scripting (XSS) vulnerability in cPanel 9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the user parameter in the login page.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/13996; http://www.securityfocus.com/bid/13996
CVE: CVE-2005-2025
Published: 2005-06-20
Description: Cisco VPN 3000 Concentrator before 4.1.7.F allows remote attackers to determine valid groupnames by sending an IKE Aggressive Mode packet with the groupname in the ID field, which generates a response if the groupname is valid, but does not generate a response for an invalid groupname.
CVSS Score: 5.0 (MEDIUM)
References: http://www.nta-monitor.com/news/vpn-flaws/cisco/VPN-Concentrator/index.htm; http://www.securityfocus.com/bid/13992; http://www.vupen.com/english/advisories/2005/0822
CVE: CVE-2005-2033
Published: 2005-06-20
Description: Directory traversal vulnerability in folderview.asp for Blue-Collar Productions i-Gallery 3.3 allows remote attackers to read arbitrary files and directories via the folder parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0489&w=2; http://www.securityfocus.com/bid/14000; http://www.vupen.com/english/advisories/2005/0825
CVE: CVE-2005-2034
Published: 2005-06-20
Description: Cross-site scripting (XSS) vulnerability in folderview.asp for BlueCollar iGallery 3.3 allows remote attackers to inject arbitrary web script or HTML via the folder parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0489&w=2; http://www.vupen.com/english/advisories/2005/0825; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0489&w=2
CVE: CVE-2005-2038
Published: 2005-06-20
Description: Fortibus CMS 4.0.0 allows remote attackers to modify information of other users, including Admin, via the "My info" page.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014242; http://securitytracker.com/id?1014242
CVE: CVE-2005-2040
Published: 2005-06-20
Description: Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2005-0468 and CVE-2005-0469.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15718; http://www.debian.org/security/2005/dsa-758; http://www.gentoo.org/security/en/glsa/glsa-200506-24.xml
CVE: CVE-2005-2028
Published: 2005-06-21
Description: SQL injection vulnerability in index.php for MercuryBoard 1.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8037&w=2; http://www.securityfocus.com/bid/14015; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8037&w=2
CVE: CVE-2005-2037
Published: 2005-06-21
Description: Multiple SQL injection vulnerabilities in Fortibus CMS 4.0.0 allow remote attackers to execute arbitrary SQL commands via (1) the username or password to logon.asp, (2) WeeklyNotesDisplay.asp, or (3) the Search page.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15762; http://securitytracker.com/id?1014242; http://www.vupen.com/english/advisories/2005/0827