deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4489
Published: 2006-08-31
Description: Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ipn.php or (2) an FTP path in the config[plugin_dir] parameter in include/initPlugins.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21688; http://securitytracker.com/id?1016769; http://www.attrition.org/pipermail/vim/2006-November/001115.html
CVE: CVE-2006-4490
Published: 2006-08-31
Description: Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users to read arbitrary files via a .. (dot dot) sequence via the id parameter in (1) scripts/cbag/ag.exe or (2) scripts/s360v2/s360.exe.
CVSS Score: 4.0 (MEDIUM)
References: http://cybozu.co.jp/products/dl/notice_060825/; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/21618
CVE: CVE-2006-4491
Published: 2006-08-31
Description: Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://cybozu.co.jp/products/dl/notice_060825/; http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/21638
CVE: CVE-2006-4492
Published: 2006-08-31
Description: Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including users and groups, via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/21623; http://www.osvdb.org/28263
CVE: CVE-2006-4493
Published: 2006-08-31
Description: xbiff2 1.9 creates $HOME/.xbiff2rc in a user's home directory with insecure file permissions, which allows local users to obtain sensitive information such as login credentials.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/21686; http://www.osvdb.org/28278; http://www.securityfocus.com/bid/19762
CVE: CVE-2006-4494
Published: 2006-08-31
Description: Microsoft Visual Studio 6.0 allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Visual Studio 6.0 ActiveX COM Objects in Internet Explorer, including (1) tcprops.dll, (2) fp30wec.dll, (3) mdt2db.dll, (4) mdt2qd.dll, and (5) vi30aut.dll.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1473; http://www.securityfocus.com/archive/1/443499/100/100/threaded; http://www.securityfocus.com/bid/19572
CVE: CVE-2006-4495
Published: 2006-08-31
Description: Microsoft Internet Explorer allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code by instantiating certain Windows 2000 ActiveX COM Objects including (1) ciodm.dll, (2) myinfo.dll, (3) msdxm.ocx, and (4) creator.dll.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1474; http://www.securityfocus.com/archive/1/443896/100/100/threaded; http://www.securityfocus.com/bid/19636
CVE: CVE-2006-4496
Published: 2006-08-31
Description: Cross-site scripting (XSS) vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1476; http://www.securityfocus.com/archive/1/444744/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28663
CVE: CVE-2006-4497
Published: 2006-08-31
Description: SQL injection vulnerability in comments.php in IwebNegar 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1480; http://www.securityfocus.com/archive/1/444744/100/0/threaded; http://www.securityfocus.com/bid/19757
CVE: CVE-2006-4498
Published: 2006-08-31
Description: PHP remote file inclusion vulnerability in sommaire_admin.php in PhpAlbum (mod_phpalbum) 2.15 for PortailPHP allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter, a different vector than CVE-2006-3922.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1477; http://www.securityfocus.com/archive/1/444684/100/0/threaded; http://www.securityfocus.com/bid/19750
CVE: CVE-2006-4499
Published: 2006-08-31
Description: ModernBill 5.0.4 and earlier uses cURL with insecure settings for CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST that do not verify SSL certificates, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21663; http://www.justinsamuel.com/security-vulnerabilities/12/vulnerability-modernbill-insecure-curl-settings; http://secunia.com/advisories/21663
CVE: CVE-2006-4500
Published: 2006-08-31
Description: Cross-site scripting (XSS) vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) about, (2) again, (3) lastname, (4) email, (5) password, (6) album, (7) id, (8) table, (9) desc, (10) doc, (11) mname, (12) max, (13) htpl, (14) pheader, and possibly other parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1481; http://www.securityfocus.com/archive/1/444743/100/0/threaded; http://www.securityfocus.com/bid/19759
CVE: CVE-2006-4501
Published: 2006-08-31
Description: SQL injection vulnerability in index.php in ezPortal/ztml CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) about, (2) album, (3) id, (4) use, (5) desc, (6) doc, (7) mname, (8) max, and possibly other parameters.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1481; http://www.securityfocus.com/archive/1/444743/100/0/threaded; http://www.securityfocus.com/bid/19759
CVE: CVE-2006-4502
Published: 2006-08-31
Description: ezPortal/ztml CMS 1.0 allows remote attackers to bypass authentication controls via a direct request to the "Administration Area" script.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1481; http://www.securityfocus.com/archive/1/444743/100/0/threaded; http://www.securityfocus.com/bid/19759
CVE: CVE-2006-4503
Published: 2006-08-31
Description: Directory traversal vulnerability in link.php in NX5Linx 1.0 allows remote attackers to read arbitrary files via the logo parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21922; http://www.evuln.com/vulns/138/; http://www.securityfocus.com/archive/1/445916/100/0/threaded
CVE: CVE-2006-4504
Published: 2006-08-31
Description: SQL injection vulnerability in NX5Linx 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) c and (2) l parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21922; http://www.evuln.com/vulns/138/; http://www.securityfocus.com/archive/1/445916/100/0/threaded
CVE: CVE-2006-4505
Published: 2006-08-31
Description: CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21922; http://www.evuln.com/vulns/138/; http://www.securityfocus.com/archive/1/445916/100/0/threaded
CVE: CVE-2006-4506
Published: 2006-08-31
Description: idmlib.sh in nxdrv in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors, possibly involving the " (quote) and \ (backslash) characters and eval injection.
CVSS Score: 3.6 (LOW)
References: http://securitytracker.com/id?1016741; http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974299.htm; http://www.securityfocus.com/bid/19688
CVE: CVE-2006-4507
Published: 2006-08-31
Description: Unspecified vulnerability in the TIFF viewer (possibly libTIFF) in the Photo Viewer in the Sony PlaystationPortable (PSP) 2.00 through 2.80 allows local users to execute arbitrary code via crafted TIFF images. NOTE: due to lack of details, it is not clear whether this is related to other issues such as CVE-2006-3464 or CVE-2006-3465.
CVSS Score: 4.6 (MEDIUM)
References: http://noobz.eu/content/home.html#280806; http://secunia.com/advisories/21672; http://www.vupen.com/english/advisories/2006/3419
CVE: CVE-2006-4508
Published: 2006-08-31
Description: Unspecified vulnerability in (1) Tor 0.1.0.x before 0.1.0.18 and 0.1.1.x before 0.1.1.23, and (2) ScatterChat before 1.0.2, allows remote attackers operating a Tor entry node to route arbitrary Tor traffic through clients or cause a denial of service (flood) via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://archives.seul.org/or/announce/Aug-2006/msg00001.html; http://secunia.com/advisories/21708; http://secunia.com/advisories/21725
CVE: CVE-2006-4522
Published: 2006-09-01
Description: Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/21673; http://www-1.ibm.com/support/docview.wss?uid=isg1IY89045; http://www-1.ibm.com/support/docview.wss?uid=isg1IY89052
CVE: CVE-2006-4523
Published: 2006-09-01
Description: The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET request.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21583; http://securityreason.com/securityalert/1489; http://www.mexhackteam.org/prethoonker/DoS_ADV_2Wire.txt
CVE: CVE-2006-4524
Published: 2006-09-01
Description: Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21669; http://securityreason.com/securityalert/1488; http://www.kapda.ir/advisory-410.html
CVE: CVE-2006-4525
Published: 2006-09-01
Description: Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array.
CVSS Score: 4.3 (MEDIUM)
References: http://cubecart.com/site/forums/index.php?showtopic=21540; http://secunia.com/advisories/21659; http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697
CVE: CVE-2006-4526
Published: 2006-09-01
Description: SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter.
CVSS Score: 7.5 (HIGH)
References: http://cubecart.com/site/forums/index.php?showtopic=21540; http://secunia.com/advisories/21659; http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697
CVE: CVE-2006-4527
Published: 2006-09-01
Description: includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks.
CVSS Score: 2.6 (LOW)
References: http://cubecart.com/site/forums/index.php?showtopic=21540; http://secunia.com/advisories/21659; http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697
CVE: CVE-2006-4528
Published: 2006-09-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php.
CVSS Score: 4.3 (MEDIUM)
References: http://acid-root.new.fr/advisories/09290806.txt; http://secunia.com/advisories/21715; http://securityreason.com/securityalert/1487
CVE: CVE-2006-4529
Published: 2006-09-01
Description: SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter.
CVSS Score: 7.5 (HIGH)
References: http://acid-root.new.fr/advisories/09290806.txt; http://secunia.com/advisories/21715; http://securityreason.com/securityalert/1487
CVE: CVE-2006-4530
Published: 2006-09-01
Description: Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21715; http://securityreason.com/securityalert/1487; http://www.securityfocus.com/archive/1/444845/100/0/threaded
CVE: CVE-2006-4531
Published: 2006-09-01
Description: PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter.
CVSS Score: 7.5 (HIGH)
References: http://pheap.barekoncept.com/; http://secunia.com/advisories/21678; http://securitytracker.com/id?1016774
CVE: CVE-2006-4532
Published: 2006-09-01
Description: PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21680; http://securitytracker.com/id?1016775; http://www.vupen.com/english/advisories/2006/3425
CVE: CVE-2006-4533
Published: 2006-09-01
Description: Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8) xmedia.php, (9) frontinc/class.template.php, (10) inc/lib.text.php, (11) install/index.php, (12) install/upgrade.php, and (13) tools/htaccess/index.php.  NOTE: other vectors are covered by CVE-2006-3562, CVE-2006-2645, and CVE-2006-0725.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/0608-exploits/plume-1.0.6.txt; http://www.osvdb.org/31171; http://www.osvdb.org/31172
CVE: CVE-2006-4339
Published: 2006-09-05
Description: OpenSSL before 0.9.7, 0.9.7 before 0.9.7k, and 0.9.8 before 0.9.8c, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents OpenSSL from correctly verifying X.509 and other certificates that use PKCS #1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc; http://dev2dev.bea.com/pub/advisory/238; http://docs.info.apple.com/article.html?artnum=304829
CVE: CVE-2006-4534
Published: 2006-09-05
Description: Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo.
CVSS Score: 9.3 (HIGH)
References: http://blogs.securiteam.com/?p=586; http://isc.sans.org/diary.php?storyid=1669; http://secunia.com/advisories/21735
CVE: CVE-2006-4536
Published: 2006-09-05
Description: SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the podpis parameter.
CVSS Score: 7.5 (HIGH)
References: http://secwatch.org/advisories/1015206/; http://www.securityfocus.com/bid/19727; https://exchange.xforce.ibmcloud.com/vulnerabilities/28599
CVE: CVE-2006-4537
Published: 2006-09-05
Description: NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt; ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt; http://secunia.com/advisories/21705
CVE: CVE-2006-4538
Published: 2006-09-05
Description: Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries.
CVSS Score: 4.9 (MEDIUM)
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.11; http://lkml.org/lkml/2006/9/4/116; http://rhn.redhat.com/errata/RHSA-2007-0014.html
CVE: CVE-2006-4539
Published: 2006-09-05
Description: (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_company_tickets.php.diff?r1=1.6%3Br2=1.7%3Bf=h; http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_track_tickets.php.diff?r1=1.17%3Br2=1.18%3Bf=h; http://forum.cerberusweb.com/showthread.php?t=7671
CVE: CVE-2006-4540
Published: 2006-09-05
Description: Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/21716; http://www.attrition.org/pipermail/vim/2006-October/001093.html; http://www.osvdb.org/28306
CVE: CVE-2006-4541
Published: 2006-09-05
Description: RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/21710; http://securityreason.com/securityalert/1512; http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php
CVE: CVE-2006-4542
Published: 2006-09-05
Description: Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/21690; http://secunia.com/advisories/22087
CVE: CVE-2006-2941
Published: 2006-09-06
Description: Mailman before 2.1.9rc1 allows remote attackers to cause a denial of service via unspecified vectors involving "standards-breaking RFC 2231 formatted headers".
CVSS Score: 5.0 (MEDIUM)
References: http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html; http://rhn.redhat.com/errata/RHSA-2006-0600.html; http://secunia.com/advisories/21732
CVE: CVE-2006-3126
Published: 2006-09-06
Description: c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=382474; http://secunia.com/advisories/21722; http://secunia.com/advisories/21726
CVE: CVE-2006-3636
Published: 2006-09-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html; http://moritz-naumann.com/adv/0013/mailmanmulti/0013.txt; http://rhn.redhat.com/errata/RHSA-2006-0600.html
CVE: CVE-2006-4095
Published: 2006-09-06
Description: BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://secunia.com/advisories/21752
CVE: CVE-2006-4096
Published: 2006-09-06
Description: BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=305530; http://lists.apple.com/archives/security-announce/2007/May/msg00004.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8471&w=2
CVE: CVE-2006-4459
Published: 2006-09-06
Description: Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash) via a 1 byte header size specified in the USB string descriptor.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21739; http://securityreason.com/securityalert/1500; http://www.safend.com/advisories/digi_anywhereusb5_intoverflow.txt
CVE: CVE-2006-4543
Published: 2006-09-06
Description: Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/21635; http://securityreason.com/securityalert/1490; http://www.securityfocus.com/archive/1/444716/100/0/threaded
CVE: CVE-2006-4544
Published: 2006-09-06
Description: Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter in files in the modules directory including (1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php, and (7) threadstop/threadstop.php.  NOTE: the (8) modules/userstop/userstop.php vector might overlap CVE-2006-4488, although it is for a slightly different product from the same vendor.
CVSS Score: 7.5 (HIGH)
References: http://advisories.echo.or.id/adv/adv46-matdhule-2006.txt; http://securityreason.com/securityalert/1501; http://securitytracker.com/id?1016773
CVE: CVE-2006-4545
Published: 2006-09-06
Description: PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, and (5) libs/profile/proccess.php.  NOTE: CVE disputes this claim, as the _SERVER array and the _SERVER[DOCUMENT_ROOT] index are controlled by PHP and cannot be manipulated by an attacker
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2006-September/001012.html; http://www.osvdb.org/29872; http://www.securityfocus.com/archive/1/444897/100/0/threaded