deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3891
Published: 2009-11-17
Description: Cross-site scripting (XSS) vulnerability in wp-admin/press-this.php in WordPress before 2.8.6 allows remote authenticated users to inject arbitrary web script or HTML via the s parameter (aka the selection variable).
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://core.trac.wordpress.org/attachment/ticket/11119/press-this-xss-bug-11-10-2009.patch; http://core.trac.wordpress.org/attachment/ticket/11119/press-this.002.diff; http://core.trac.wordpress.org/ticket/11119
CVE: CVE-2009-3892
Published: 2009-11-17
Description: Cross-site scripting (XSS) vulnerability in Best Practical Solutions RT 3.6.x before 3.6.9, 3.8.x before 3.8.5, and other 3.4.6 through 3.8.4 versions allows remote attackers to inject arbitrary web script or HTML via certain Custom Fields.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=546778; http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000172.html; http://lists.bestpractical.com/pipermail/rt-announce/2009-September/000173.html
CVE: CVE-2009-3961
Published: 2009-11-17
Description: SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://code.google.com/p/superseriousstats/; http://secunia.com/advisories/37316; http://www.vupen.com/english/advisories/2009/3175
CVE: CVE-2009-3962
Published: 2009-11-17
Description: The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service (reboot) via a %0d%0a sequence in the page parameter to the xslt program on TCP port 50001, a related issue to CVE-2006-4523.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://webvuln.com/advisories/2wire.remote.denial.of.service.txt; http://www.securityfocus.com/archive/1/507587/100/0/threaded; http://www.securitytracker.com/id?1023116
CVE: CVE-2009-3963
Published: 2009-11-17
Description: Multiple unspecified vulnerabilities in XOOPS before 2.4.0 Final have unknown impact and attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/36955; http://www.vupen.com/english/advisories/2009/3174; http://www.xoops.org/modules/news/article.php?storyid=5064
CVE: CVE-2009-3964
Published: 2009-11-18
Description: SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9502; http://www.securityfocus.com/bid/36122; http://www.exploit-db.com/exploits/9502
CVE: CVE-2009-3965
Published: 2009-11-18
Description: SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9499; http://www.exploit-db.com/exploits/9499
CVE: CVE-2009-3966
Published: 2009-11-18
Description: Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/36448; http://www.exploit-db.com/exploits/9482; http://secunia.com/advisories/36448
CVE: CVE-2009-3967
Published: 2009-11-18
Description: SQL injection vulnerability in browse.php in Ed Charkow SuperCharged Linking allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36450; http://www.exploit-db.com/exploits/9480; https://exchange.xforce.ibmcloud.com/vulnerabilities/52693
CVE: CVE-2009-3968
Published: 2009-11-18
Description: Multiple SQL injection vulnerabilities in ITechBids 8.0 allow remote attackers to execute arbitrary SQL commands via the (1) user_id parameter to feedback.php, (2) cate_id parameter to category.php, (3) id parameter to news.php, and (4) productid parameter to itechd.php. NOTE: the sellers_othersitem.php, classifieds.php, and shop.php vectors are already covered by CVE-2008-3238.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36437; http://www.exploit-db.com/exploits/9497; http://secunia.com/advisories/36437
CVE: CVE-2009-3969
Published: 2009-11-18
Description: Stack-based buffer overflow in Faslo Player 7.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long string in a .m3u playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36444; http://www.exploit-db.com/exploits/9487; http://www.vupen.com/english/advisories/2009/2395
CVE: CVE-2009-3970
Published: 2009-11-18
Description: SQL injection vulnerability in index.php in PHP Dir Submit (aka WebsiteSubmitter or Submitter Script) allows remote authenticated users to execute arbitrary SQL commands via the aid parameter in a showarticle action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9484; http://www.vupen.com/english/advisories/2009/2401; https://exchange.xforce.ibmcloud.com/vulnerabilities/52709
CVE: CVE-2009-3971
Published: 2009-11-18
Description: SQL injection vulnerability in the jTips (com_jtips) component 1.0.7 and 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the season parameter in a ladder action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9504; http://www.securityfocus.com/bid/36123; http://www.vupen.com/english/advisories/2009/2405
CVE: CVE-2009-3972
Published: 2009-11-18
Description: SQL injection vulnerability in the Q-Proje Siirler Bileseni (com_siirler) component 1.2 RC for Joomla! allows remote attackers to execute arbitrary SQL commands via the sid parameter in an sdetay action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9510; http://www.securityfocus.com/bid/36127; http://www.vupen.com/english/advisories/2009/2407
CVE: CVE-2009-3973
Published: 2009-11-18
Description: SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9511; http://www.securityfocus.com/bid/36129; http://www.vupen.com/english/advisories/2009/2408
CVE: CVE-2009-3974
Published: 2009-11-18
Description: Multiple SQL injection vulnerabilities in Invision Power Board (IPB or IP.Board) 3.0.0, 3.0.1, and 3.0.2 allow remote attackers to execute arbitrary SQL commands via the (1) search_term parameter to admin/applications/core/modules_public/search/search.php and (2) aid parameter to admin/applications/core/modules_public/global/lostpass.php.  NOTE: on 20090818, the vendor patched 3.0.2 without changing the version number.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forums.invisionpower.com/topic/291103-invision-power-board-3-0-2-security-update/; http://www.vupen.com/english/advisories/2009/2413; http://forums.invisionpower.com/topic/291103-invision-power-board-3-0-2-security-update/
CVE: CVE-2009-3975
Published: 2009-11-18
Description: SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the gallery_id parameter in a gallery_view action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/36449; http://www.exploit-db.com/exploits/9481; http://www.vupen.com/english/advisories/2009/2399
CVE: CVE-2009-3976
Published: 2009-11-18
Description: Buffer overflow in Labtam ProFTP 2.9 allows remote FTP servers to cause a denial of service (application crash) or execute arbitrary code via a long 220 reply (aka connection greeting or welcome message).
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/9508; http://www.securityfocus.com/bid/36128; http://www.vupen.com/english/advisories/2009/2414
CVE: CVE-2009-3840
Published: 2009-11-19
Description: The embedded database engine service (aka ovdbrun.exe) in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to cause a denial of service (daemon crash) via an invalid Error Code field in a packet.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01926980; http://osvdb.org/60200; http://seclists.org/fulldisclosure/2009/Nov/199
CVE: CVE-2009-3909
Published: 2009-11-19
Description: Integer overflow in the read_channel_data function in plug-ins/file-psd/psd-load.c in GIMP 2.6.7 might allow remote attackers to execute arbitrary code via a crafted PSD file that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-190
References: http://git.gnome.org/cgit/gimp/commit/?id=0e440cb6d4d6ee029667363d244aff61b154c33c; http://git.gnome.org/cgit/gimp/commit/?id=9cc8d78ff33b7a36852b74e64b427489cad44d0e; http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html
CVE: CVE-2009-3977
Published: 2009-11-19
Description: Multiple buffer overflows in a certain ActiveX control in ActiveDom.ocx in HP OpenView Network Node Manager (OV NNM) 7.53 might allow remote attackers to cause a denial of service (memory corruption) or have unspecified other impact via a long string argument to the (1) DisplayName, (2) AddGroup, (3) InstallComponent, or (4) Subscribe method.  NOTE: this issue is not a vulnerability in many environments, because the control is not marked as safe for scripting and would not execute with default Internet Explorer settings.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://seclists.org/fulldisclosure/2009/Nov/199; http://www.coresecurity.com/content/openview_nnm_internaldb_dos; https://exchange.xforce.ibmcloud.com/vulnerabilities/54377
CVE: CVE-2009-3978
Published: 2009-11-19
Description: The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size, a different vulnerability than CVE-2009-3373.
CVSS Score: 4.3 (MEDIUM)
References: http://hg.mozilla.org/releases/mozilla-1.9.1/rev/edf189567edc; http://www.h-online.com/open/news/item/Mozilla-fixes-critical-bugs-with-Firefox-3-5-5-852070.html; http://www.mozilla.com/en-US/firefox/3.5.5/releasenotes/
CVE: CVE-2009-3553
Published: 2009-11-20
Description: Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html; http://secunia.com/advisories/37360; http://secunia.com/advisories/37364
CVE: CVE-2009-4004
Published: 2009-11-20
Description: Buffer overflow in the kvm_vcpu_ioctl_x86_setup_mce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a KVM_X86_SETUP_MCE IOCTL request that specifies a large number of Machine Check Exception (MCE) banks.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a9e38c3e01ad242fe2a625354cf065c34b01e3aa; http://secunia.com/advisories/37357; http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.32-rc7
CVE: CVE-2009-4005
Published: 2009-11-20
Description: The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=286e633ef0ff5bb63c07b4516665da8004966fec; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-4006
Published: 2009-11-20
Description: Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0 allows remote attackers to execute arbitrary code via a long hexadecimal string.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37228; http://secunia.com/secunia_research/2009-46/; http://www.osvdb.org/60427
CVE: CVE-2009-3080
Published: 2009-11-20
Description: Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request.
CVSS Score: 7.2 (HIGH)
CWE: CWE-129
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=690e744869f3262855b83b4fb59199cf142765b0; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-3386
Published: 2009-11-20
Description: Template.pm in Bugzilla 3.3.2 through 3.4.3 and 3.5 through 3.5.1 allows remote attackers to discover the alias of a private bug by reading the (1) Depends On or (2) Blocks field of a related bug.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/60271; http://secunia.com/advisories/37423; http://www.bugzilla.org/security/3.4.3/
CVE: CVE-2009-3842
Published: 2009-11-20
Description: Unspecified vulnerability on the HP Color LaserJet M3530 Multifunction Printer with firmware 05.058.4 and the Color LaserJet CP3525 Printer with firmware 53.021.2 allows remote attackers to obtain "access to data" or cause a denial of service via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7975&w=2; http://secunia.com/advisories/37433; http://www.securityfocus.com/bid/37070
CVE: CVE-2009-3895
Published: 2009-11-20
Description: Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry.c in libexif 0.6.18 allows remote attackers to cause a denial of service or possibly execute arbitrary code via an invalid EXIF image.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/557137; http://bugs.gentoo.org/show_bug.cgi?id=293190; http://libexif.cvs.sourceforge.net/viewvc/libexif/libexif/NEWS?view=markup&pathrev=libexif-0_6_19-release
CVE: CVE-2005-4882
Published: 2009-11-20
Description: tftpd in Philippe Jounin Tftpd32 2.74 and earlier, as used in Wyse Simple Imager (WSI) and other products, allows remote attackers to cause a denial of service (daemon crash) via a long filename in a TFTP read (aka RRQ or get) request, a different vulnerability than CVE-2002-2226.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-01/0386.html; http://securitytracker.com/id?1012856; http://secway.org/advisory/ad20050108.txt
CVE: CVE-2005-4883
Published: 2009-11-20
Description: Race condition in Philippe Jounin Tftpd32 before 2.80 allows remote attackers to cause a denial of service (daemon crash) via invalid "connect frames."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-362
References: http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html; http://pagesperso-orange.fr/philippe.jounin/tftpd32_news.html
CVE: CVE-2009-4037
Published: 2009-11-20
Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7, and 2.2.x before 2.2 RC, allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) admin/db/users_db.inc, and various other .inc and .php files under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, and (7) purchasing/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php; http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php; http://secunia.com/advisories/37327
CVE: CVE-2009-4038
Published: 2009-11-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in NCH Software Axon Virtual PBX 2.10 and 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) onok or (2) oncancel parameter to the logon program.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/59871; http://secunia.com/advisories/37157; http://osvdb.org/59871
CVE: CVE-2009-4039
Published: 2009-11-20
Description: Cross-site scripting (XSS) vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://piwigo.org/releases/2.0.6; http://secunia.com/advisories/37336; http://www.vupen.com/english/advisories/2009/3221
CVE: CVE-2009-4040
Published: 2009-11-20
Description: Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37354; http://www.phpmyfaq.de/advisory_2009-09-01.php; http://www.vupen.com/english/advisories/2009/3241
CVE: CVE-2009-4041
Published: 2009-11-20
Description: UseBB 1.0.9 before 1.0.10 allows remote attackers to cause a denial of service (infinite loop) via crafted BBCode tags.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/37328; http://www.securityfocus.com/bid/37010; http://www.usebb.net/community/topic-2388.html
CVE: CVE-2009-4042
Published: 2009-11-20
Description: Cross-site scripting (XSS) vulnerability in the RootCandy theme 6.x before 6.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/629894; http://drupal.org/node/630168; http://osvdb.org/59914
CVE: CVE-2009-4043
Published: 2009-11-20
Description: Cross-site scripting (XSS) vulnerability in the AddToAny module 5.x before 5.x-2.4 and 6.x before 6.x-2.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via a node title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/601110; http://drupal.org/node/630198; http://drupal.org/node/630208
CVE: CVE-2009-4044
Published: 2009-11-20
Description: The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://drupal.org/node/630244; http://www.securityfocus.com/bid/37000; http://www.vupen.com/english/advisories/2009/3218
CVE: CVE-2009-4045
Published: 2009-11-20
Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) before 2.1.7 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to various .inc and .php files in (1) reporting/, (2) sales/, (3) sales/includes/, (4) sales/includes/db/, (5) sales/inquiry/, (6) sales/manage/, (7) sales/view/, (8) taxes/, and (9) taxes/db/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://frontaccounting.net/wb3/pages/posts/2.1.7-security-release103.php; http://secunia.com/advisories/37327; http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.1.7/frontaccount-2.1.7.tar.gz/download
CVE: CVE-2009-4046
Published: 2009-11-20
Description: Multiple SQL injection vulnerabilities in FrontAccounting (FA) 2.2.x before 2.2 RC allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) bank_accounts.php, (2) currencies.php, (3) exchange_rates.php, (4) gl_account_types.php, and (5) gl_accounts.php in gl/manage/; and (6) audit_trail_db.inc, (7) comments_db.inc, (8) inventory_db.inc, (9) manufacturing_db.inc, and (10) references_db.inc in includes/db/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://frontaccounting.net/wb3/pages/posts/release-2.2-rc104.php; http://sourceforge.net/projects/frontaccounting/files/FrontAccounting-2/2.2%20RC/frontaccount-2.2RC.tar.gz/download; http://www.vupen.com/english/advisories/2009/3223
CVE: CVE-2009-3557
Published: 2009-11-23
Description: The tempnam function in ext/standard/file.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass safe_mode restrictions, and create files in group-writable or world-writable directories, via the dir and prefix arguments.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5735&w=2; http://news.php.net/php.announce/79
CVE: CVE-2009-3558
Published: 2009-11-23
Description: The posix_mkfifo function in ext/posix/posix.c in PHP before 5.2.12 and 5.3.x before 5.3.1 allows context-dependent attackers to bypass open_basedir restrictions, and create FIFO files, via the pathname and mode arguments, as demonstrated by creating a .htaccess file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://news.php.net/php.announce/79; http://secunia.com/advisories/37412
CVE: CVE-2009-3559
Published: 2009-11-23
Description: main/streams/plain_wrapper.c in PHP 5.3.x before 5.3.1 does not recognize the safe_mode_include_dir directive, which allows context-dependent attackers to have an unknown impact by triggering the failure of PHP scripts that perform include or require operations, as demonstrated by a script that attempts to perform a require_once on a file in a standard library directory. NOTE: a reliable third party reports that this is not a vulnerability, because it results in a more restrictive security policy.
CVSS Score: 7.5 (HIGH)
References: http://bugs.php.net/bug.php?id=50063; http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://news.php.net/php.announce/79
CVE: CVE-2009-4047
Published: 2009-11-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHD Help Desk 1.43 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to area.php; the (2) pagina, (3) sentido, (4) q_registros, and (5) orden parameters to area.php; (6) the q_registros parameter to solic_display.php; (7) the PATH_INFO to area_list.php; (8) the q_registros parameter to area_list.php; (9) the PATH_INFO to atributo.php; the (10) pagina, (11) q_registros, and (12) orden parameters to atributo_list.php; (13) an arbitrary parameter name beginning with "sentido" to atributo_list.php; and (14) the PATH_INFO to caso_insert.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/60085; http://osvdb.org/60086; http://osvdb.org/60087