deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-2428
Published: 2006-05-17
Description: add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed.  NOTE: some of these details are obtained from third party information, since the raw source is vague.
CVSS Score: 7.5 (HIGH)
CWE: CWE-434
References: http://secunia.com/advisories/20102; http://securityreason.com/securityalert/911; http://www.securityfocus.com/archive/1/433894/100/0/threaded
CVE: CVE-2006-2429
Published: 2006-05-17
Description: Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and remote attack vectors related to "HTTP request handlers".
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2430
Published: 2006-05-17
Description: IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2431
Published: 2006-05-17
Description: Cross-site scripting (XSS) vulnerability in the 500 Internal Server Error page on the SOAP port (8880/tcp) in IBM WebSphere Application Server 5.0.2 and earlier, 5.1.x before 5.1.1.12, and 6.0.2 up to 6.0.2.7, allows remote attackers to inject arbitrary web script or HTML via the URI, which is contained in a FAULTACTOR element on this page.  NOTE: some sources have reported the element as "faultfactor," but this is likely erroneous.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2432
Published: 2006-05-17
Description: IBM WebSphere Application Server 5.0.2 (or any earlier cumulative fix) and 5.1.1 (or any earlier cumulative fix) allows EJB access on Solaris systems via a crafted LTPA token.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2433
Published: 2006-05-17
Description: Unspecified vulnerability in IBM WebSphere Application Server 6.0.2, 6.0.2.1, 6.0.2.3, 6.0.2.5, and 6.0.2.7 has unknown impact and attack vectors related to the "administrative console".
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2434
Published: 2006-05-17
Description: Unspecified vulnerability in WebSphere 5.1.1 (or any earlier cumulative fix) Common Configuration Mode + CommonArchive and J2EE Models might allow attackers to obtain sensitive information via the trace.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2435
Published: 2006-05-17
Description: Unspecified vulnerability in IBM WebSphere Application Server 5.0.2 and earlier, and 5.1.1 and earlier, has unknown impact and attack vectors related to "Inserting certain script tags in urls [that] may allow unintended execution of scripts."
CVSS Score: 6.4 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2436
Published: 2006-05-17
Description: WebSphere Application Server 5.0.2 (or any earlier cumulative fix) stores admin and LDAP passwords in plaintext in the FFDC logs when a login to WebSphere fails, which allows attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html; http://secunia.com/advisories/20032; http://securityreason.com/securityalert/910
CVE: CVE-2006-2437
Published: 2006-05-17
Description: The viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to obtain the source code for file under the web root via the file parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html; http://securityreason.com/securityalert/908; http://www.securityfocus.com/archive/1/434145
CVE: CVE-2006-2438
Published: 2006-05-17
Description: Directory traversal vulnerability in the viewfile servlet in the documentation package (resin-doc) for Caucho Resin 3.0.17 and 3.0.18 allows remote attackers to read arbitrary files under other web roots via the contextpath parameter.  NOTE: this issue can produce resultant path disclosure when the parameter is invalid.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0384.html; http://secunia.com/advisories/20125; http://securityreason.com/securityalert/908
CVE: CVE-2006-2440
Published: 2006-05-18
Description: Heap-based buffer overflow in the libMagick component of ImageMagick 6.0.6.2 might allow attackers to execute arbitrary code via an image index array that triggers the overflow during filename glob expansion by the ExpandFilenames function.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345595; http://secunia.com/advisories/21719
CVE: CVE-2006-2441
Published: 2006-05-18
Description: Pioneers meta-server before 0.9.55, when the server-console is not installed, allows remote attackers to cause a denial of service (crash) via certain requests from an older gnocatan client to create a new game.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=351986; http://sourceforge.net/tracker/index.php?func=detail&aid=1425705&group_id=5095&atid=305095; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=351986
CVE: CVE-2006-2442
Published: 2006-05-18
Description: kphone 4.2 creates .qt/kphonerc with world-readable permissions, which allows local users to read usernames and SIP passwords.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=337830; http://www.debian.org/security/2006/dsa-1062; http://www.mandriva.com/security/advisories?name=MDKSA-2006:089
CVE: CVE-2006-2443
Published: 2006-05-18
Description: The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348306; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348306
CVE: CVE-2006-1528
Published: 2006-05-18
Description: Linux kernel before 2.6.13 allows local users to cause a denial of service (crash) via a dio transfer from the sg driver to memory mapped (mmap) IO space.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-20
References: http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1; http://linux.bkbits.net:8080/linux-2.6/cset%[PII_REDACTED]yu9ClBQNuqSSnW_9amW7iQ; http://marc.info/?l=linux-scsi&m=[PII_REDACTED]1489&w=2
CVE: CVE-2006-1855
Published: 2006-05-18
Description: choose_new_parent in Linux kernel before 2.6.11.12 includes certain debugging code, which allows local users to cause a denial of service (panic) by causing certain circumstances involving termination of a parent process.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/20237; http://secunia.com/advisories/20716; http://secunia.com/advisories/21179
CVE: CVE-2006-2458
Published: 2006-05-18
Description: Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c).
CVSS Score: 4.0 (MEDIUM)
References: http://gnunet.org/libextractor/; http://secunia.com/advisories/20150; http://secunia.com/advisories/20160
CVE: CVE-2006-2459
Published: 2006-05-19
Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://retrogod.altervista.org/phpfusion_600306_sql.html; http://secunia.com/advisories/20129; http://securityreason.com/securityalert/922
CVE: CVE-2006-2460
Published: 2006-05-19
Description: Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by modifying the GLOBALS[sugarEntry] parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://retrogod.altervista.org/sugar_suite_42_incl_xpl.html; http://secunia.com/advisories/20072; http://securityreason.com/securityalert/921
CVE: CVE-2006-2461
Published: 2006-05-19
Description: BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/194; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016102
CVE: CVE-2006-2462
Published: 2006-05-19
Description: BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/195; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016103
CVE: CVE-2006-2463
Published: 2006-05-19
Description: view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1016085; http://securitytracker.com/id?1016085
CVE: CVE-2006-2464
Published: 2006-05-19
Description: stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/181; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016094
CVE: CVE-2006-2465
Published: 2006-05-19
Description: Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument.  NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability.
CVSS Score: 5.1 (MEDIUM)
References: http://osvdb.org/show/osvdb/30945; http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html; http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html
CVE: CVE-2006-2466
Published: 2006-05-19
Description: BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability."
CVSS Score: 2.6 (LOW)
References: http://dev2dev.bea.com/pub/advisory/192; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016100
CVE: CVE-2006-2467
Published: 2006-05-19
Description: BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address.
CVSS Score: 4.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/191; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016097
CVE: CVE-2006-2468
Published: 2006-05-19
Description: The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.
CVSS Score: 4.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/190; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016097
CVE: CVE-2006-2469
Published: 2006-05-19
Description: The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/189; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016098
CVE: CVE-2006-2470
Published: 2006-05-19
Description: Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/188; http://secunia.com/advisories/20130; http://www.vupen.com/english/advisories/2006/1828
CVE: CVE-2006-2471
Published: 2006-05-19
Description: Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/187; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016096
CVE: CVE-2006-2472
Published: 2006-05-19
Description: Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys.
CVSS Score: 4.9 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/186; http://secunia.com/advisories/20130; http://securitytracker.com/id?1016095
CVE: CVE-2006-2473
Published: 2006-05-19
Description: Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter.  NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product.  The vendor states "You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/920; http://www.openwiki.com/ow.asp?OpenWikiVulnerability; http://www.openwiki.com/ow.asp?XssVulnerability
CVE: CVE-2006-2474
Published: 2006-05-19
Description: SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20177; http://securityreason.com/securityalert/919; http://www.osvdb.org/25649
CVE: CVE-2006-2475
Published: 2006-05-19
Description: Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/20177; http://securityreason.com/securityalert/919; http://www.osvdb.org/25647
CVE: CVE-2006-2476
Published: 2006-05-19
Description: Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html; http://secunia.com/advisories/20143; http://securityreason.com/securityalert/918
CVE: CVE-2006-2477
Published: 2006-05-19
Description: Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/20143; http://securityreason.com/securityalert/918; http://securitytracker.com/id?1016121
CVE: CVE-2006-2478
Published: 2006-05-19
Description: Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html; http://secunia.com/advisories/20143; http://securityreason.com/securityalert/918
CVE: CVE-2006-2479
Published: 2006-05-19
Description: The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/918; http://securitytracker.com/id?1016121; http://www.securityfocus.com/archive/1/434367/100/0/threaded
CVE: CVE-2006-0059
Published: 2006-05-19
Description: Heap-based buffer overflow in the ISO Transport Service over TCP (RFC 1006) implementation of LiveData ICCP Server before 5.00.035 allows remote attackers to cause a denial of service or execute arbitrary code via malformed packets.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20146; http://securitytracker.com/id?1016113; http://www.digitalbond.com/SCADA_Blog/2006/05/us-cert-livedata-iccp-vulnerability.html
CVE: CVE-2006-2312
Published: 2006-05-19
Description: Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches.
CVSS Score: 2.6 (LOW)
CWE: CWE-88
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0549.html; http://secunia.com/advisories/20154; http://www.kb.cert.org/vuls/id/466428
CVE: CVE-2006-2480
Published: 2006-05-19
Description: Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename.  NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-134
References: http://bugzilla.gnome.org/show_bug.cgi?id=342111; http://kandangjamur.net/tutorial/dia.txt; http://secunia.com/advisories/20199
CVE: CVE-2006-0039
Published: 2006-05-19
Description: Race condition in the do_add_counters function in netfilter for Linux kernel 2.6.16 allows local users with CAP_NET_ADMIN capabilities to read kernel memory by triggering the race condition in a way that produces a size value that is inconsistent with allocated memory, which leads to a buffer over-read in IPT_ENTRY_ITERATE.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362
References: http://bugs.gentoo.org/show_bug.cgi?id=133465; http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.17; http://secunia.com/advisories/20185
CVE: CVE-2006-1856
Published: 2006-05-19
Description: Certain modifications to the Linux kernel 2.6.16 and earlier do not add the appropriate Linux Security Modules (LSM) file_permission hooks to the (1) readv and (2) writev functions, which might allow attackers to bypass intended access restrictions.
CVSS Score: 7.5 (HIGH)
References: http://lists.jammed.com/linux-security-module/2005/09/0019.html; http://secunia.com/advisories/20237; http://secunia.com/advisories/20716
CVE: CVE-2006-2483
Published: 2006-05-19
Description: PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20121; http://www.ldev.com/forums/showthread.php?p=9976#post9976; http://www.osvdb.org/25523
CVE: CVE-2006-2484
Published: 2006-05-19
Description: Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/925; http://www.securityfocus.com/archive/1/434121/100/0/threaded; http://www.securityfocus.com/bid/17995
CVE: CVE-2006-2485
Published: 2006-05-19
Description: PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezza_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0396.html; http://secunia.com/advisories/20120; http://securityreason.com/securityalert/924
CVE: CVE-2006-2486
Published: 2006-05-19
Description: SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://securityreason.com/securityalert/923; http://www.securityfocus.com/archive/1/434039/100/0/threaded; http://www.securityfocus.com/bid/17988
CVE: CVE-2006-2487
Published: 2006-05-19
Description: Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[main_path] parameter in (1) functions.php, (2) template.php, (3) news.php, (4) help.php, (5) mail.php, (6) Admin/admin_cats.php, (8) Admin/admin_edit.php, (9) Admin/admin_import.php, and (10) Admin/admin_templates.php.  NOTE: this might be resultant from a variable overwrite issue.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20156; http://securitytracker.com/id?1016491; http://www.osvdb.org/25616
CVE: CVE-2006-2488
Published: 2006-05-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters to (a) notes/index.php, (4) curr parameter to (b) ipod/get_ipod.php, and in (c) login.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2006/05/multiple-cross-site-scripting-in.html; http://securitytracker.com/id?1016116; http://www.vupen.com/english/advisories/2006/1852
CVE: CVE-2006-2489
Published: 2006-05-19
Description: Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header.  NOTE: this is a different vulnerability than CVE-2006-2162.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20123; http://secunia.com/advisories/20247; http://secunia.com/advisories/20313