deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-2638
Published: 2005-08-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeNews 1.40 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) NewsMode parameter to NewsCategoryForm.php, or the (2) Match or (3) NewsMode parameter to SearchResults.php.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0016&w=2; http://secunia.com/advisories/16490/; http://securitytracker.com/id?1014726
CVE: CVE-2005-2639
Published: 2005-08-23
Description: Buffer overflow in Chris Moneymaker's World Poker Championship 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long nickname.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/chmpokbof-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1271&w=2; http://secunia.com/advisories/16478/
CVE: CVE-2005-2640
Published: 2005-08-23
Description: Behavioral discrepancy information leak in Juniper Netscreen VPN running ScreenOS 5.2.0 and earlier, when using IKE with pre-shared key authentication, allows remote attackers to enumerate valid usernames via an IKE Aggressive Mode packet, which generates a response if the username is valid but does not respond when the username is invalid.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6034&w=2; http://secunia.com/advisories/16474/; http://securitytracker.com/id?1014728
CVE: CVE-2005-2641
Published: 2005-08-23
Description: Unknown vulnerability in pam_ldap before 180 does not properly handle a new password policy control, which could allow attackers to gain privileges.  NOTE: CVE-2005-2497 had also been assigned to this issue, but CVE-2005-2641 is the correct candidate.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17233; http://secunia.com/advisories/17270; http://www.kb.cert.org/vuls/id/778916
CVE: CVE-2005-2642
Published: 2005-08-23
Description: Buffer overflow in the mutt_decode_xbit function in Handler.c for Mutt 1.5.10 allows remote attackers to execute arbitrary code, possibly due to interactions with libiconv or gettext.
CVSS Score: 7.5 (HIGH)
References: http://comments.gmane.org/gmane.mail.mutt.devel/8379; http://online.securityfocus.com/archive/1/408493; http://online.securityfocus.com/archive/1/408501
CVE: CVE-2005-2643
Published: 2005-08-23
Description: Tor 0.1.0.13 and earlier, and experimental versions 0.1.1.4-alpha and earlier, does not reject certain weak keys when using ephemeral Diffie-Hellman (DH) handshakes, which allows malicious Tor servers to obtain the keys that a client uses for other systems in the circuit.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.seul.org/or/announce/Aug-2005/msg00002.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2443&w=2; http://secunia.com/advisories/16424
CVE: CVE-2005-2644
Published: 2005-08-23
Description: Buffer overflow in JaguarEditControl.dll in Isemarket JaguarControl allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Jtext field.
CVSS Score: 7.5 (HIGH)
References: http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0191.html; http://www.securityfocus.com/bid/14558; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2005-08/0191.html
CVE: CVE-2005-2645
Published: 2005-08-23
Description: Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to bypass authentication.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16467; http://securitytracker.com/id?1014720; http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf
CVE: CVE-2005-2646
Published: 2005-08-23
Description: Unknown vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to cause a denial of service or read files via unknown vectors involving crafted HTTP requests.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/16467; http://securitytracker.com/id?1014720; http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf
CVE: CVE-2005-2647
Published: 2005-08-23
Description: Cross-site scripting (XSS) vulnerability in Xerox MicroServer Web Server in Document Centre 220 through 265, 332 and 340, 420 through 490, and 535 through 555 allows remote attackers to inject arbitrary web script or HTML and modify web pages via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16467; http://securitytracker.com/id?1014720; http://www.xerox.com/downloads/usa/en/c/cert_XRX05_008.pdf
CVE: CVE-2005-2648
Published: 2005-08-23
Description: Directory traversal vulnerability in index.php in W-Agora 4.2.0 and earlier allows remote attackers to read arbitrary files via the site parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0599.html; http://h4cky0u.org/viewtopic.php?t=2097; http://secunia.com/advisories/16497
CVE: CVE-2005-2649
Published: 2005-08-23
Description: Cross-site scripting (XSS) vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via (1) course parameter in login.php or (2) words parameter in search.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/16496; http://www.securityfocus.com/archive/1/408521; http://www.securityfocus.com/bid/14598
CVE: CVE-2005-2650
Published: 2005-08-23
Description: Cross-site scripting (XSS) vulnerability in sign.asp in Emefa Guestbook 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) location, and (3) email parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://packetstormsecurity.org/0508-advisories/emefaGuest.txt; http://secunia.com/advisories/16489; http://systemsecure.org/ssforum/viewtopic.php?t=91
CVE: CVE-2005-2651
Published: 2005-08-23
Description: gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4862&w=2; http://rgod.altervista.org/zorum.html; http://secunia.com/advisories/16504/
CVE: CVE-2005-2652
Published: 2005-08-23
Description: Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) blacklist.php, (5) zorum/forum.php, (6) globalstat.php, (7) gorum/trace.php, (8) gorum/badwords.php, or (9) gorum/flood.php.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4862&w=2; http://rgod.altervista.org/zorum.html; http://securitytracker.com/id?1014725
CVE: CVE-2005-2653
Published: 2005-08-23
Description: Cross-site scripting (XSS) vulnerability in BBCaffe 2.0 allows remote attackers to inject arbitrary web script or HTML via e-mail data in a message.
CVSS Score: 4.3 (MEDIUM)
References: http://rgod.altervista.org/bbcaffe.html; http://secunia.com/advisories/16503; http://securitytracker.com/id?1014733
CVE: CVE-2005-2664
Published: 2005-08-23
Description: Whisper 32 1.16, and possibly earlier versions, stores passwords in plaintext in memory, which allows local users to obtain the password using a debugger or another mechanism to read process memory.
CVSS Score: 2.1 (LOW)
References: http://antilamo.skifstone.com/vuln/whisper32.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0990&w=2; http://securitytracker.com/id?1014730
CVE: CVE-2005-2665
Published: 2005-08-23
Description: Stack-based buffer overflow in expires.c in Elm 2.5 PL5 through PL7, and possibly other versions, allows remote attackers to execute arbitrary code via an e-mail message with a long Expires header.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-08/0688.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9964&w=2; http://secunia.com/advisories/16508
CVE: CVE-2005-2666
Published: 2005-08-23
Description: SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses, and keys in plaintext in the known_hosts file, which makes it easier for an attacker that has compromised an SSH user's account to generate a list of additional targets that are more likely to have the same password or key.
CVSS Score: 1.2 (LOW)
CWE: CWE-255
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.11/SCOSA-2006.11.txt; http://nms.csail.mit.edu/projects/ssh/; http://secunia.com/advisories/19243
CVE: CVE-2005-2667
Published: 2005-08-23
Description: Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of service via unknown vectors, aka the "CAM TCP port vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16513; http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp; http://www.osvdb.org/18915
CVE: CVE-2005-2668
Published: 2005-08-23
Description: Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16513; http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp; http://www.kb.cert.org/vuls/id/619988
CVE: CVE-2005-2669
Published: 2005-08-23
Description: Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16513; http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp; http://www.osvdb.org/18917
CVE: CVE-2005-2670
Published: 2005-08-23
Description: Directory traversal vulnerability in HAURI Anti-Virus products including ViRobot Expert 4.0, Advanced Server, Linux Server 2.0, and LiveCall allows remote attackers to overwrite arbitrary files via ".." sequences in filenames contained in (1) ACE, (2) ARJ, (3) CAB, (4) LZH, (5) RAR, (6) TAR and (7) ZIP files.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15846; http://secunia.com/secunia_research/2005-24/advisory; http://securitytracker.com/id?1014740
CVE: CVE-2005-2671
Published: 2005-08-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2041.  Reason: This candidate is a duplicate of CVE-2005-2041.  Notes: All CVE users should reference CVE-2005-2041 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-2672
Published: 2005-08-23
Description: pwmconfig in LM_sensors before 2.9.1 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the fancontrol temporary file.
CVSS Score: 2.1 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=324193; http://secunia.com/advisories/16501; http://secunia.com/advisories/17499
CVE: CVE-2005-2673
Published: 2005-08-23
Description: SQL injection vulnerability in modcp.php in WoltLab Burning Board 2.2.2 and 2.3.3 allows remote authenticated attackers to execute arbitrary SQL commands via the (1) x or (2) y parameters.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014746; http://www.securityfocus.com/bid/14617; http://securitytracker.com/id?1014746
CVE: CVE-2005-2674
Published: 2005-08-23
Description: Note: the vendor has disputed this issue. Multiple cross-site scripting (XSS) vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to inject arbitrary web script or HTML via the (1) c or (2) m parameters to index.php or (3) w parameter to journal.php.  NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9717&w=2; http://securitytracker.com/id?1014747; http://www.neocrome.net
CVE: CVE-2005-2675
Published: 2005-08-23
Description: Note: the vendor has disputed this issue. Multiple SQL injection vulnerabilities in Land Down Under (LDU) 800 allow remote attackers to execute arbitrary SQL commands via the (1) s or (2) m parameter to forums.php, (3) o, (4) w, (5) s, or (6) p parameter to list.php, (7) m parameter to journal.php, (8) x or (9) n parameter to forums.php, or (10) w parameter to links.php.  NOTE: this issue has been disputed by the vendor, who says "None of the tricks written there are working, the variables are properly sanitized and no LDU version is affected.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9717&w=2; http://securitytracker.com/id?1014747; http://www.neocrome.net
CVE: CVE-2005-2676
Published: 2005-08-23
Description: Cross-site scripting (XSS) vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data.
CVSS Score: 4.3 (MEDIUM)
References: http://coppermine-gallery.net/forum/index.php?topic=20933.0; http://secunia.com/advisories/16499; http://securitytracker.com/id?1014799
CVE: CVE-2005-2677
Published: 2005-08-23
Description: ACNews stores the database in a file under the web document root with a db.inc extension and insufficient access control, which allows remote attackers to obtain sensitive information such as the full pathname of the server.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014749; http://securitytracker.com/id?1014749
CVE: CVE-2005-2678
Published: 2005-08-23
Description: Microsoft IIS 5.1 and 6 allows remote attackers to spoof the SERVER_NAME variable to bypass security checks and conduct various attacks via a GET request with an http://localhost URI, which makes it appear as if the request is coming from localhost.
CVSS Score: 5.0 (MEDIUM)
References: http://ingehenriksen.blogspot.com/2005/08/remote-iis-5x-and-iis-60-server-name.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3399&w=2; http://secunia.com/advisories/16548
CVE: CVE-2005-2679
Published: 2005-08-23
Description: Buffer overflow in Sysinternals Process Explorer 9.23, and other versions before 9.25, allows local users to execute arbitrary code via a long CompanyName field in the VersionInfo information in a running process.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/16525; http://securitytracker.com/id?1014742; http://www.securityfocus.com/bid/14616
CVE: CVE-2005-2680
Published: 2005-08-23
Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows remote attackers to bypass access restrictions for the pages of a Book via crafted URLs.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/137; http://dev2dev.bea.com/pub/advisory/137
CVE: CVE-2005-2681
Published: 2005-08-23
Description: Unspecified vulnerability in the command line processing (CLI) logic in Cisco Intrusion Prevention System 5.0(1) and 5.0(2) allows local users with OPERATOR or VIEWER privileges to gain additional privileges via unknown vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/16545; http://www.cisco.com/warp/public/707/cisco-sa-20050824-ips.shtml; http://www.securityfocus.com/bid/14633
CVE: CVE-2005-2682
Published: 2005-08-23
Description: aspell_setup.php in the SpellChecker plugin in DTLink AreaEdit before 0.4.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the dictionary parameter (aka the lang variable).
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16511; http://www.formvista.com/forum.html?COMP=forum&cmd=view_thread&%28fvs%29cs_forums_threads_ref=47; http://www.formvista.com/otherprojects/areaedit
CVE: CVE-2005-2683
Published: 2005-08-23
Description: Multiple SQL injection vulnerabilities in PHPKit 1.6.1 allow remote attackers to execute arbitrary SQL commands via the (1) letter parameter to login/member.php or (2) im_receiver parameter to login/imcenter.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1031&w=2; http://secunia.com/advisories/16531/; http://www.securityfocus.com/bid/14629
CVE: CVE-2005-2684
Published: 2005-08-23
Description: nquser.php in Virtual Edge Netquery 3.11 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter to a dig query.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014750; http://securitytracker.com/id?1014750
CVE: CVE-2005-1842
Published: 2005-08-24
Description: VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, creates temporary log files with predictable names, which allows local users to modify arbitrary files via a symlink attack.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16541; http://securitytracker.com/id?1014776; http://www.adobe.com/support/techdocs/327129.html
CVE: CVE-2005-1843
Published: 2005-08-24
Description: VCNative for Adobe Version Cue 1.0 and 1.0.1, as used in Creative Suite 1.0 and 1.3, and when running on Mac OS X with Version Cue Workspace, allows local users to load arbitrary libraries and execute arbitrary code via the -lib command line argument.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/16541; http://securitytracker.com/id?1014776; http://www.adobe.com/support/techdocs/327129.html
CVE: CVE-2005-2531
Published: 2005-08-24
Description: OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails certificate authentication to the server and causes the error to be processed by the wrong client, which allows remote attackers to cause a denial of service (client disconnection) via a large number of failed authentication attempts.
CVSS Score: 5.0 (MEDIUM)
References: http://openvpn.net/changelog.html; http://secunia.com/advisories/16463; http://secunia.com/advisories/17103
CVE: CVE-2005-2532
Published: 2005-08-24
Description: OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authenticated attackers to cause a denial of service (client disconnection) via a large number of packets that can not be decrypted.
CVSS Score: 5.0 (MEDIUM)
References: http://openvpn.net/changelog.html; http://secunia.com/advisories/16463; http://secunia.com/advisories/17103
CVE: CVE-2005-2533
Published: 2005-08-24
Description: OpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote authenticated clients to cause a denial of service (memory exhaustion) via a flood of packets with a large number of spoofed MAC addresses.
CVSS Score: 2.1 (LOW)
References: http://openvpn.net/changelog.html; http://secunia.com/advisories/16463; http://secunia.com/advisories/17103
CVE: CVE-2005-2534
Published: 2005-08-24
Description: Race condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote attackers to cause a denial of service (server crash) via simultaneous TCP connections from multiple clients that use the same client certificate.
CVSS Score: 2.6 (LOW)
References: http://openvpn.net/changelog.html; http://secunia.com/advisories/16463; http://secunia.com/advisories/17103
CVE: CVE-2005-2556
Published: 2005-08-24
Description: core/database_api.php in Mantis 0.19.0a1 through 1.0.0a3, with register_globals enabled, allows remote attackers to connect to internal databases by modifying the g_db_type variable and monitoring the speed of responses, as identified by bug#0005956.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6276&w=2; http://secunia.com/advisories/16506; http://www.debian.org/security/2005/dsa-778
CVE: CVE-2005-2685
Published: 2005-08-24
Description: SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via a direct request to admin/PhpMyExplorer/editerfichier.php, then editing the desired file to contain the PHP code, as demonstrated using header.php in the fichier parameter.  NOTE: it is possible that this vulnerability stems from PhpMyExplorer, which is a separate package.
CVSS Score: 7.5 (HIGH)
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html; http://secunia.com/advisories/16522; http://rgod.altervista.org/save_yourself_from_savewebportal34.html
CVE: CVE-2005-2686
Published: 2005-08-24
Description: Directory traversal vulnerability in SaveWebPortal 3.4 allows remote attackers to include arbitrary files and execute arbitrary local PHP programs via ".." sequences in the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.
CVSS Score: 7.5 (HIGH)
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html; http://secunia.com/advisories/16522; http://rgod.altervista.org/save_yourself_from_savewebportal34.html
CVE: CVE-2005-2687
Published: 2005-08-24
Description: PHP remote file inclusion vulnerability in SaveWebPortal 3.4 allows remote attackers to execute arbitrary PHP code via the (1) SITE_Path parameter to menu_dx.php or (2) CONTENTS_Dir parameter to menu_sx.php.
CVSS Score: 7.5 (HIGH)
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html; http://secunia.com/advisories/16522; https://exchange.xforce.ibmcloud.com/vulnerabilities/28182
CVE: CVE-2005-2688
Published: 2005-08-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in SaveWebPortal 3.4 allow remote attackers to inject arbitrary web script or HTML via a large number of parameters to (1) footer.php, (2) header.php, (3) menu_dx.php, or (4) menu_sx.php, or Javascript code in the (5) HTTP_REFERER (referer) or (6) HTTP_USER_AGENT (user agent) fields.
CVSS Score: 4.3 (MEDIUM)
References: http://rgod.altervista.org/save_yourself_from_savewebportal34.html; http://secunia.com/advisories/16522; http://rgod.altervista.org/save_yourself_from_savewebportal34.html
CVE: CVE-2005-2689
Published: 2005-08-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/archive/1/408818; http://www.securityfocus.com/bid/14635; http://www.securityfocus.com/archive/1/408818
CVE: CVE-2005-2690
Published: 2005-08-24
Description: SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/408818; http://www.securityfocus.com/bid/14636; http://www.securityfocus.com/archive/1/408818
CVE: CVE-2005-2691
Published: 2005-08-24
Description: includes/common.php in RunCMS 1.2 and earlier calls the extract function with EXTR_OVERWRITE on HTTP POST variables, which allows remote attackers to overwrite arbitrary variables, possibly allowing execution of arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16514; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://secunia.com/advisories/16514
CVE: CVE-2005-2692
Published: 2005-08-24
Description: Multiple SQL injection vulnerabilities in RunCMS 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) addquery and (2) subquery parameters to the newbb plus module, the forum parameter to (3) newtopic.php, (4) edit.php, or (5) reply.php in the newbb plus module, or (6) the msg_id parameter to print.php in the messages module.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16514; http://www.gulftech.org/?node=research&article_id=00[PII_REDACTED]5; http://secunia.com/advisories/16514