deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-4203
Published: 2005-12-13
Description: LogiSphere 0.9.9j does not restrict the number of messages that can be sent, which allows remote attackers to cause a denial of service by sending a large number of messages via the msg command.  NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this description accurately reflects the discloser's claim and is distinct from the XSS issue.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17989; http://www.ipomonis.com/advisories/logisphere_server.zip; http://www.securityfocus.com/bid/15807
CVE: CVE-2005-4204
Published: 2005-12-13
Description: Cross-site scripting (XSS) vulnerability in LogiSphere 0.9.9j allows remote attackers to inject arbitrary Javascript via the msg command. NOTE: due to lack of appropriate details by the original researcher, it is unclear whether this issue is distinct from the msg DoS.
CVSS Score: 4.3 (MEDIUM)
References: http://www.ipomonis.com/advisories/logisphere_server.zip; http://www.ipomonis.com/advisories/logisphere_server.zip
CVE: CVE-2005-4205
Published: 2005-12-13
Description: Cross-site scripting (XSS) vulnerability in searchdb.asp in LocazoList 1.03c and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/locazolist-classifieds-v103c-vuln.html; http://secunia.com/advisories/17983; http://www.osvdb.org/21530
CVE: CVE-2005-4206
Published: 2005-12-13
Description: Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to appear to be part of a valid page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: http://secunia.com/advisories/17991; http://www.ipomonis.com/advisories/Bb_6.zip; http://www.osvdb.org/21618
CVE: CVE-2005-4207
Published: 2005-12-13
Description: SQL injection vulnerability in BTGrup Admin WebController Script allows remote attackers to execute SQL commands via the (1) Username and (2) Password fields.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/249; http://www.osvdb.org/21815; http://www.securityfocus.com/archive/1/419237/100/0/threaded
CVE: CVE-2005-4208
Published: 2005-12-13
Description: Directory traversal vulnerability in Flatnuke 2.5.6 allows remote attackers to access arbitrary files via a .. (dot dot) and null byte (%00) in the id parameter of the read module.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1015339; http://www.securityfocus.com/archive/1/419107/100/0/threaded; http://www.securityfocus.com/bid/15796
CVE: CVE-2005-4209
Published: 2005-12-13
Description: WorldClient webmail in Alt-N MDaemon 8.1.3 allows remote attackers to prevent arbitrary users from accessing their inboxes via script tags in the Subject header of an e-mail message, which prevents the user from being able to access the Inbox folder, possibly due to a cross-site scripting (XSS) vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/17990; http://www.ipomonis.com/advisories/mdaemon.zip; http://www.securityfocus.com/bid/15815
CVE: CVE-2005-4210
Published: 2005-12-13
Description: Opera before 8.51, when running on Windows with Input Method Editor (IME) installed, allows remote attackers to cause a denial of service (persistent application crash) by bookmarking a site with a long title.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17963; http://www.opera.com/support/search/supsearch.dml?index=821; http://www.osvdb.org/21641
CVE: CVE-2005-3352
Published: 2005-12-13
Description: Cross-site scripting (XSS) vulnerability in the mod_imap module of Apache httpd before 1.3.35-dev and Apache httpd 2.0.x before 2.0.56-dev allows remote attackers to inject arbitrary web script or HTML via the Referer when using image maps.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U; http://docs.info.apple.com/article.html?artnum=307562; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01428449
CVE: CVE-2005-2827
Published: 2005-12-14
Description: The thread termination routine in the kernel for Windows NT 4.0 and 2000 (NTOSKRNL.EXE) allows local users to modify kernel memory and execution flow via steps in which a terminating thread causes Asynchronous Procedure Call (APC) entries to free the wrong data, aka the "Windows Kernel Vulnerability."
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15821; http://secunia.com/advisories/18064; http://secunia.com/advisories/18311
CVE: CVE-2005-2829
Published: 2005-12-14
Description: Multiple design errors in Microsoft Internet Explorer 5.01, 5.5, and 6 allow user-assisted attackers to execute arbitrary code by (1) overlaying a malicious new window above a file download box, then (2) using a keyboard shortcut and delaying the display of the file download box until the user hits a shortcut that activates the "Run" button, aka "File Download Dialog Box Manipulation Vulnerability."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6463&w=2; http://secunia.com/advisories/15368; http://secunia.com/advisories/18064
CVE: CVE-2005-2830
Published: 2005-12-14
Description: Microsoft Internet Explorer 5.01, 5.5, and 6, when using an HTTPS proxy server that requires Basic Authentication, sends URLs in cleartext, which allows remote attackers to obtain sensitive information, aka "HTTPS Proxy Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/15368; http://secunia.com/advisories/18064; http://secunia.com/advisories/18311
CVE: CVE-2005-2831
Published: 2005-12-14
Description: Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a web page with embedded CLSIDs that reference certain COM objects that are not intended for use within Internet Explorer, aka a variant of the "COM Object Instantiation Memory Corruption Vulnerability," a different vulnerability than CVE-2005-2127.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15368; http://secunia.com/advisories/18064; http://secunia.com/advisories/18311
CVE: CVE-2005-3703
Published: 2005-12-14
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2272.  Reason: This candidate is a duplicate of CVE-2005-2272.  It was reserved when another candidate was already public.  Notes: All CVE users should reference CVE-2005-2272 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3903
Published: 2005-12-14
Description: Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.54; http://secunia.com/advisories/17986; http://secunia.com/advisories/18660
CVE: CVE-2005-4211
Published: 2005-12-14
Description: PHP remote file inclusion vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the $_CCFG[_PKG_PATH_DBSE] variable.
CVSS Score: 7.5 (HIGH)
References: http://forums.phpcoin.com/index.php?showtopic=5469; http://rgod.altervista.org/phpcoin122.html; http://secunia.com/advisories/18030
CVE: CVE-2005-4212
Published: 2005-12-14
Description: Directory traversal vulnerability in coin_includes/db.php in phpCOIN 1.2.2 allows remote attackers to read arbitrary local files via ".." (dot dot) sequences in the $_CCFG[_PKG_PATH_DBSE] variable.
CVSS Score: 5.0 (MEDIUM)
References: http://forums.phpcoin.com/index.php?showtopic=5469; http://rgod.altervista.org/phpcoin122.html; http://secunia.com/advisories/18030
CVE: CVE-2005-4213
Published: 2005-12-14
Description: SQL injection vulnerability in mod.php in phpCOIN 1.2.2 allows remote attackers to execute arbitrary SQL commands via the phpcoinsessid cookie.
CVSS Score: 7.5 (HIGH)
References: http://forums.phpcoin.com/index.php?showtopic=5469; http://rgod.altervista.org/phpcoin122.html; http://rgod.altervista.org/phpcoin_122_sql_xpl.html
CVE: CVE-2005-4214
Published: 2005-12-14
Description: phpCOIN 1.2.2 allows remote attackers to obtain the installation path via a direct request to config.php, which leaks the path in an error message because the _CCFG['_PKG_PATH_DBSE'] variable is not defined.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://forums.phpcoin.com/index.php?showtopic=5469; http://rgod.altervista.org/phpcoin122.html; http://rgod.altervista.org/phpcoin_122_sql_xpl.html
CVE: CVE-2005-4215
Published: 2005-12-14
Description: Motorola SB5100E Cable Modem allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND).
CVSS Score: 7.8 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0313&w=2; http://secunia.com/advisories/17996; http://www.securityfocus.com/bid/15795
CVE: CVE-2005-4216
Published: 2005-12-14
Description: The Administration Service (FMSAdmin.exe) in Macromedia Flash Media Server 2.0 r1145 allows remote attackers to cause a denial of service (application crash) via a malformed request with a single character to port 1111.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17978; http://securitytracker.com/id?1015346; http://www.ipomonis.com/advisories/Flash_media_server_2.txt
CVE: CVE-2005-4217
Published: 2005-12-14
Description: Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which allows attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/17922
CVE: CVE-2005-4218
Published: 2005-12-14
Description: SQL injection vulnerability in forum.php in PHPWebThings 1.4 allows remote attackers to execute arbitrary SQL commands via the msg parameter, a different vulnerability than CVE-2005-3585.
CVSS Score: 7.5 (HIGH)
References: http://rgod.altervista.org/phpwebth14_xpl.html; http://www.securityfocus.com/bid/15465; https://www.exploit-db.com/exploits/1324
CVE: CVE-2005-4219
Published: 2005-12-14
Description: setting.php in Innovative CMS (ICMS, formerly Imoel-CMS) contains username and password information in cleartext, which might allow attackers to obtain this information via a direct request to setting.php. NOTE: on a properly configured web server, it would be expected that a .php file would be processed before content is returned to the user, so this might not be a vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/250; http://securitytracker.com/id?1015343; http://www.osvdb.org/21766
CVE: CVE-2005-4220
Published: 2005-12-14
Description: Netgear RP114, and possibly other versions and devices, allows remote attackers to cause a denial of service via a SYN flood attack between one system on the internal interface and another on the external interface, which temporarily stops routing between the interfaces, as demonstrated using nmap.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/11698/; http://www.securityfocus.com/archive/1/419243/100/0/threaded; http://www.securityfocus.com/archive/1/419244/100/0/threaded
CVE: CVE-2005-4221
Published: 2005-12-14
Description: SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the (1) PHPSESSID (session ID) or (2) REQUEST_URI (query string).
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17984; http://www.osvdb.org/21672; http://www.securityfocus.com/archive/1/419264/100/0/threaded
CVE: CVE-2005-4222
Published: 2005-12-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in guestbook.cgi in Lars Ellingsen Guestserver 4.13 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified message fields.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/419241/100/0/threaded; http://www.securityfocus.com/bid/15821/; http://www.securityfocus.com/archive/1/419241/100/0/threaded
CVE: CVE-2005-4223
Published: 2005-12-14
Description: Multiple "potential" SQL injection vulnerabilities in Utopia News Pro (UNP) 1.1.4 might allow remote attackers to execute arbitrary SQL commands via (1) the newsid parameter in editnews.php, (2) the catid and question parameters in faq.php, (3) the poster parameter in postnews.php, (4) the tempid parameter in templates.php, and (5) the userid and groupid parameters in users.php.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://secunia.com/advisories/17988/; http://www.osvdb.org/21645
CVE: CVE-2005-4224
Published: 2005-12-14
Description: Multiple "potential" SQL injection vulnerabilities in e107 0.7 might allow remote attackers to execute arbitrary SQL commands via (1) the email, hideemail, image, realname, signature, timezone, and xupexist parameters in signup.php, (2) the content_comment, content_rating, and content_summary parameters in subcontent.php, (3) the download_category and file_demo in upload.php, and (4) the email, hideemail, user_timezone, and user_xup parameters in usersettings.php.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://secunia.com/advisories/18023/; http://www.osvdb.org/21657
CVE: CVE-2005-4225
Published: 2005-12-14
Description: Multiple "potential" SQL injection vulnerabilities in myBloggie 2.1.3 beta might allow remote attackers to execute arbitrary SQL commands via (1) the category parameter in add.php, (2) the cat_desc parameter in addcat.php, (3) the level and user parameters in adduser.php, (4) the post_id parameter in del.php, (5) the cat_id parameter in delcat.php, (6) the comment_id parameter in delcomment.php, (7) the id parameter in deluser.php, (8) the post_id and category parameter in edit.php, (9) the cat_id and cat_desc parameters in editcat.php, and (10) the id, level, and user parameters in edituser.php.  NOTE: the username/login.php vector is already identified by CVE-2005-2838.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://secunia.com/advisories/18024/; http://www.osvdb.org/21659
CVE: CVE-2005-4226
Published: 2005-12-14
Description: Multiple "potential" SQL injection vulnerabilities in phpWebThings 1.4 Patched might allow remote attackers to execute arbitrary SQL commands via (1) the ref parameter in download.php, (2) the direction, msg, sforum, reason, subname, and toform parameters in forum.php, (3) the msg and forum parameters in forum_edit.php, (4) the msg and forum parameters in forum_write.php, (5) the tekst parameter in guestbook.php, (6) the menuoption parameter in index.php, and the (7) sel_avatar parameter in myaccount.php.  NOTE: the forum.php/forum vector is already identified by CVE-2005-3585.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://secunia.com/advisories/18011/; http://www.osvdb.org/21650
CVE: CVE-2005-4227
Published: 2005-12-14
Description: Multiple "potential" SQL injection vulnerabilities in DCP-Portal 6.1.1 might allow remote attackers to execute arbitrary SQL commands via (1) the password and username parameters in advertiser.php, (2) the aid parameter in announcement.php, (3) the dcp5_member_id, year, agid, day, day_s, hour, minute, month, month_s, and year_s parameters in calendar.php, (4) the cid parameter in contents.php, (5) the dcp5_member_id parameter in forums.php, (6) the bid parameter in go.php, (7) the lid parameter in golink.php, (8) the dcp5_member_id and mid parameters in inbox.php, (9) the catid, dcat, and dl parameters in index.php, (10) the dcp5_member_id in informer.php, (11) the nid parameter in news.php, (12) the type and rate parameters in rate.php, (13) the q parameter in search.php, and (14) the dcp5_member_id in update.php.  NOTE: other vectors in the PHP-CHECKER report are also covered by CVE-2005-3365 and CVE-2005-0454.
CVSS Score: 7.5 (HIGH)
References: http://glide.stanford.edu/yichen/research/sec.pdf; http://secunia.com/advisories/12751; http://www.osvdb.org/22017
CVE: CVE-2005-4228
Published: 2005-12-14
Description: Multiple SQL injection vulnerabilities in PhpWebGallery 1.5.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) since, (2) sort_by, and (3) items_number parameters to comments.php, (4) the search parameter to category.php, and (5) image_id parameter to picture.php.  NOTE: it was later reported that the comments.php/sort_by vector also affects 1.7.2 and earlier.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pridels0.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html; http://secunia.com/advisories/18019; http://www.osvdb.org/21689
CVE: CVE-2005-4229
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in auction.pl in EveryAuction 1.53 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.  NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources and independently verified using source code inspection.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18016; http://www.osvdb.org/21674; http://www.securityfocus.com/bid/15824
CVE: CVE-2005-4230
Published: 2005-12-14
Description: SQL injection vulnerability in poll.php in Link Up Gold 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the number parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html; http://www.osvdb.org/21701; http://www.securityfocus.com/bid/15843
CVE: CVE-2005-4231
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in Link Up Gold 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) link parameter to tell_friend.php, (2) phrase[] parameter to search.php in a search_links_advanced action, and the (3) direction or (4) sort parameter to articles.php.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/link-up-gold-vuln.html; http://secunia.com/advisories/18031; http://www.securityfocus.com/bid/15843
CVE: CVE-2005-4232
Published: 2005-12-14
Description: SQL injection vulnerability in index.php in Jamit Job Board 2.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the vendor has disputed this issue, saying "The vulnerability is without any basis and did not actually work." CVE has not verified either the vendor or researcher statements, but the original researcher is known to make frequent mistakes when reporting SQL injection
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pridels0.blogspot.com/2005/12/jamit-job-board-24x-sql-inj.html; http://secunia.com/advisories/18007; http://www.attrition.org/pipermail/vim/2006-August/000972.html
CVE: CVE-2005-4233
Published: 2005-12-14
Description: SQL injection vulnerability in advertiser_statistic.php in Ad Manager Pro 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ad_number parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/ad-manager-pro-sql-vuln.html; http://www.osvdb.org/21709; http://www.securityfocus.com/bid/15847
CVE: CVE-2005-4234
Published: 2005-12-14
Description: SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/encapsgallery-sql-inj-vuln.html; http://secunia.com/advisories/18021; http://www.osvdb.org/21696
CVE: CVE-2005-4235
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in knowledgebase.php in WHMCompleteSolution 2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/whmcompletesolution-xss-vuln.html; http://secunia.com/advisories/18029; http://www.osvdb.org/21697
CVE: CVE-2005-4236
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in search.php in CKGOLD allows remote attackers to inject arbitrary web script or HTML via the search parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/ckgold-xss-vuln.html; http://secunia.com/advisories/17972; http://www.osvdb.org/21675
CVE: CVE-2005-4237
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in MySQL Auction 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the keyword parameter in the SearchZoom module.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/mysql-auction-xss-vuln.html; http://secunia.com/advisories/18006; http://www.osvdb.org/21685
CVE: CVE-2005-4238
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in view_filters_page.php in Mantis 1.0.0rc3 and earlier allows remote attackers to inject arbitrary web script or HTML via the target_field parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/mantis-bugtracking-system-xss-vuln.html; http://secunia.com/advisories/18018; http://secunia.com/advisories/18481
CVE: CVE-2005-4239
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/php-jackknife-xss-vuln.html; http://secunia.com/advisories/18020; http://www.securityfocus.com/bid/15841
CVE: CVE-2005-4240
Published: 2005-12-14
Description: SQL injection vulnerability in search.php in VCD-db 0.98 and earlier allows remote attackers to execute arbitrary SQL commands via the by parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html; http://www.osvdb.org/21699; http://www.securityfocus.com/bid/15840
CVE: CVE-2005-4241
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in the category page in VCD-db 0.98 and earlier allows remote attackers to inject arbitrary web script or HTML via the batch parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/vcd-db-vuln.html; http://secunia.com/advisories/18034; http://www.osvdb.org/21700
CVE: CVE-2005-4244
Published: 2005-12-14
Description: SQL injection vulnerability in Snipe Gallery 3.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) gallery_id parameter to view.php and (2) image_id parameter to image.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html; http://secunia.com/advisories/18022; http://www.osvdb.org/21693
CVE: CVE-2005-4245
Published: 2005-12-14
Description: Cross-site scripting (XSS) vulnerability in search.php in Snipe Gallery 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pridels0.blogspot.com/2005/12/snipe-gallery-sqlxss-vuln.html; http://secunia.com/advisories/18022; http://securityreason.com/securityalert/716