deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-4146
Published: 2005-12-10
Description: Lyris ListManager before 8.9b allows remote attackers to obtain sensitive information via a request to the TCLHTTPd status module, which provides sensitive server configuration information.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html; http://metasploit.com/research/vulns/lyris_listmanager/; http://secunia.com/advisories/17943
CVE: CVE-2005-4147
Published: 2005-12-10
Description: The TCLHTTPd service in Lyris ListManager before 8.9b allows remote attackers to obtain source code for arbitrary .tml (TCL) files via (1) a request with a trailing null byte (%00), which might also require (2) an authentication bypass step that involves a username with a trailing "@" characters.
CVSS Score: 6.5 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html; http://metasploit.com/research/vulns/lyris_listmanager/; http://secunia.com/advisories/17943
CVE: CVE-2005-4148
Published: 2005-12-10
Description: Lyris ListManager 8.5, and possibly other versions before 8.8, includes sensitive information in the env hidden variable, which allows remote attackers to obtain information such as the installation path by requesting a non-existent page and reading the env variable from the resulting error message page.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html; http://metasploit.com/research/vulns/lyris_listmanager/; http://secunia.com/advisories/17943
CVE: CVE-2005-4149
Published: 2005-12-10
Description: Lyris ListManager 8.8 through 8.9b allows remote attackers to obtain sensitive information by causing errors in TML scripts, such as via direct requests, which leaks the installation path, SQL queries, or product code in diagnostic messages.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html; http://metasploit.com/research/vulns/lyris_listmanager/; http://secunia.com/advisories/17943
CVE: CVE-2005-4150
Published: 2005-12-10
Description: Cross-site scripting (XSS) vulnerability in the portal login page in Computer Associates CleverPath 4.7 allows remote attackers to execute Javascript via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17962; http://supportconnect.ca.com/sc/solcenter/solresults.jsp?aparno=QI70871; http://www.osvdb.org/21575
CVE: CVE-2005-4151
Published: 2005-12-10
Description: The Wipe Free Space utility in PGP Desktop Home 8.0 and Desktop Professional 9.0.3 Build 2932 and earlier does not clear file slack space in the last cluster for the file, which allows local users to access the previous contents of the disk.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0349.html; http://metasploit.com/research/vulns/pgp_slackspace/; http://secunia.com/advisories/17827
CVE: CVE-2005-3532
Published: 2005-12-11
Description: authpam.c in courier-authdaemon for Courier Mail Server 0.37.3 through 0.52.1, when using pam_tally, does not call the pam_acct_mgmt function to verify that access should be granted, which allows attackers to authenticate to the server using accounts that have been disabled.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=211920; http://secunia.com/advisories/17919; http://secunia.com/advisories/17999
CVE: CVE-2005-3533
Published: 2005-12-11
Description: Buffer overflow in OSH before 1.7-15 allows local users to execute arbitrary code via a long current working directory and filename.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/17967; http://www.debian.org/security/2005/dsa-918; http://www.osvdb.org/21576
CVE: CVE-2005-4152
Published: 2005-12-11
Description: Soti Pocket Controller-Professional 5.0 allows remote attackers to turn off, reboot, or hard reset a PDA via a series of initialization, command, and reset packets sent to port 5492.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17966/; http://securityreason.com/securityalert/243; http://www.airscanner.com/security/pocketcontroller.htm
CVE: CVE-2005-4153
Published: 2005-12-11
Description: Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
CVSS Score: 7.8 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U; http://secunia.com/advisories/18449; http://secunia.com/advisories/18456
CVE: CVE-2005-4154
Published: 2005-12-11
Description: Unspecified vulnerability in PEAR installer 1.4.2 and earlier allows user-assisted attackers to execute arbitrary code via a crafted package that can execute code when the pear command is executed or when the Web/Gtk frontend is loaded.
CVSS Score: 5.1 (MEDIUM)
References: http://pear.php.net/advisory-20051104.txt; http://secunia.com/advisories/17563/; http://securitytracker.com/alerts/2005/Nov/1015161.html
CVE: CVE-2005-4155
Published: 2005-12-11
Description: registration.PHP in ATutor 1.5.1 pl2 allows remote attackers to execute arbitrary SQL commands via an e-mail address that ends in a NULL character, which bypasses the PHP regular expression check. NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a vulnerability in ATutor.
CVSS Score: 7.5 (HIGH)
References: http://rgod.altervista.org/atutor151pl2.html; http://securitytracker.com/alerts/2005/Nov/1015166.html; http://www.osvdb.org/20851
CVE: CVE-2005-4156
Published: 2005-12-11
Description: Unspecified vulnerability in Mambo 4.5 (1.0.0) through 4.5 (1.0.9), with magic_quotes_gpc disabled, allows remote attackers to read arbitrary files and possibly cause a denial of service via a query string that ends with a NULL character.
CVSS Score: 9.4 (HIGH)
References: http://securitytracker.com/alerts/2005/Nov/1015176.html; http://www.procheckup.com/Vulner_PR0511.php; http://securitytracker.com/alerts/2005/Nov/1015176.html
CVE: CVE-2005-4157
Published: 2005-12-11
Description: Unspecified vulnerability in Kerio WinRoute Firewall before 6.1.3 allows remote attackers to authenticate to the service using an account that has been disabled.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17519/; http://securitytracker.com/alerts/2005/Nov/1015194.html; http://www.kerio.com/kwf_history.html
CVE: CVE-2005-4158
Published: 2005-12-11
Description: Sudo before 1.6.8 p12, when the Perl taint flag is off, does not clear the (1) PERLLIB, (2) PERL5LIB, and (3) PERL5OPT environment variables, which allows limited local users to cause a Perl script to include and execute arbitrary library files that have the same name as library files that are included by the script.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/17534/; http://secunia.com/advisories/18102; http://secunia.com/advisories/18156
CVE: CVE-2005-4159
Published: 2005-12-11
Description: NOTE: this issue has been disputed by the vendor and third parties. SQL injection vulnerability in Memberlist.php in Simple Machines Forum (SMF) 1.1 rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter.  NOTE: the vendor says that since only one character can be modified, there is no SQL injection. Thus this might be an "invalid SQL syntax error."  Multiple followups support the vendor
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-12/0090.html; http://www.securityfocus.com/archive/1/419068/100/0/threaded; http://www.securityfocus.com/archive/1/419105/100/0/threaded
CVE: CVE-2005-4160
Published: 2005-12-11
Description: Directory traversal vulnerability in getdox.php in Torrential 1.2 allows remote attackers to read arbitrary files via "../" sequences in the query string argument.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1015338; http://www.osvdb.org/21305; http://www.securityfocus.com/archive/1/419103/100/0/threaded
CVE: CVE-2005-4161
Published: 2005-12-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in MilliScripts 1.4 redirect script allow remote attackers to inject arbitrary web script or HTML via the domainname parameter to register.php, and other unspecified vectors.  NOTE: the vendor has disputed this issue, stating "No invalid input can reach the script.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/17997; http://securityreason.com/securityalert/245; http://www.securityfocus.com/archive/1/419070/100/0/threaded
CVE: CVE-2005-4162
Published: 2005-12-11
Description: Cross-site scripting (XSS) vulnerability in cal_make.pl in ACME PerlCal 2.99.20 allows remote attackers to inject arbitrary web script or HTML via the p0 parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0315.html; http://secunia.com/advisories/17953; http://securitytracker.com/id?1015332
CVE: CVE-2005-4163
Published: 2005-12-11
Description: Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the _tcf parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://freshmeat.net/projects/captchaphp/?branch_id=57290&release_id=206985; http://freshmeat.net/projects/captchaphp/?branch_id=57290&release_id=206985
CVE: CVE-2005-4164
Published: 2005-12-11
Description: SQL injection vulnerability in view.php in PHP-addressbook 1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17885; http://www.osvdb.org/21456; http://www.vupen.com/english/advisories/2005/2768
CVE: CVE-2005-4165
Published: 2005-12-11
Description: Multiple SQL injection vulnerabilities in ASP-DEV ASP Resources Forum allow remote attackers to execute arbitrary SQL commands via the (1) forum_id parameter to forum.asp, (2) unspecified parameters to register.asp, and (3) the "Search For" field in search.asp.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1015316; http://www.osvdb.org/21706; http://www.osvdb.org/21707
CVE: CVE-2005-4166
Published: 2005-12-11
Description: Cross-site scripting (XSS) vulnerability in password.asp in DUWare DUportal Pro 3.4.3 allows remote attackers to inject arbitrary web script or HTML via the result parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17898; http://www.osvdb.org/21485; http://www.securityfocus.com/bid/15731
CVE: CVE-2005-4167
Published: 2005-12-11
Description: Cross-site scripting (XSS) vulnerability in eFiction 1.0 and 1.1 allows remote attackers to inject arbitrary web script or HTML via the let parameter in a viewlist action to titles.php.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4168
Published: 2005-12-11
Description: Multiple SQL injection vulnerabilities in eFiction 1.0, 1.1, and 2.0 allow remote attackers to execute arbitrary SQL commands via (1) the let parameter in a viewlist action to titles.php and (2) the username.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4169
Published: 2005-12-11
Description: Multiple SQL injection vulnerabilities in eFiction 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) let parameter in a viewlist action to authors.php and (2) sid parameter to viewstory.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4170
Published: 2005-12-11
Description: SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4171
Published: 2005-12-11
Description: The "Upload new image" command in the "Manage Images" eFiction 1.1, when members are allowed to upload images, allows remote attackers to execute arbitrary PHP code by uploading a filename with a .php extension that contains a GIF header, which passes the image validity check but executes any PHP code within the file.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4172
Published: 2005-12-11
Description: eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information via a direct request to storyblock.php without arguments, which leaks the full pathname in the resulting PHP error message.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4173
Published: 2005-12-11
Description: eFiction 1.0, 1.1, and 2.0 allows remote attackers to obtain sensitive information by accessing phpinfo.php, which executes the PHP phpinfo function.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4174
Published: 2005-12-11
Description: eFiction 1.0, 1.1, and 2.0, in unspecified environments, might allow remote attackers to conduct unauthorized operations by directly accessing (1) install.php or (2) upgrade.php.  NOTE: it is unclear whether this is a vulnerability in eFiction itself or the result of incorrect system administration practices, e.g. by not removing utility scripts once they have been used.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2005-11/0301.html; http://rgod.altervista.org/efiction2_xpl.html; http://secunia.com/advisories/17777
CVE: CVE-2005-4175
Published: 2005-12-11
Description: Insyde BIOS V190 does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVSS Score: 2.1 (LOW)
References: http://www.ivizsecurity.com/preboot-patch.html; http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf; http://www.kb.cert.org/vuls/id/847537
CVE: CVE-2005-4176
Published: 2005-12-11
Description: AWARD Bios Modular 4.50pg does not clear the keyboard buffer after reading the BIOS password during system startup, which allows local administrators or users to read the password directly from physical memory.
CVSS Score: 2.1 (LOW)
References: http://www.ivizsecurity.com/preboot-patch.html; http://www.ivizsecurity.com/research/preboot/preboot_whitepaper.pdf; http://www.kb.cert.org/vuls/id/847537
CVE: CVE-2005-4177
Published: 2005-12-12
Description: Cross-site scripting (XSS) vulnerability in book.cfm in Magic Book Personal and Professional 2.0 allows remote attackers to inject arbitrary web script or HTML via the StartRow parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/magic-book-v20-professional-vuln.html; http://secunia.com/advisories/17982; http://www.osvdb.org/21529
CVE: CVE-2005-4178
Published: 2005-12-12
Description: Buffer overflow in Dropbear server before 0.47 allows authenticated users to execute arbitrary code via unspecified inputs that cause insufficient memory to be allocated due to an incorrect expression that does not enforce the proper order of operations.
CVSS Score: 6.5 (MEDIUM)
References: http://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2005q4/000312.html; http://matt.ucc.asn.au/dropbear/dropbear.html; http://secunia.com/advisories/18108
CVE: CVE-2005-4189
Published: 2005-12-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Kronolith H3 before 2.0.6 allow remote authenticated users to inject arbitrary web script or HTML via (1) the Calendar name field when creating calendars, (2) event title field when deleting events, the (3) Category and (4) Location search fields, and the (5) attendees email address fields when editing event attendees, and possibly other vectors.
CVSS Score: 3.5 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0459.html; http://lists.horde.org/archives/announce/2005/000234.html; http://secunia.com/advisories/17971
CVE: CVE-2005-4190
Published: 2005-12-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework before 3.0.8 allow remote authenticated users to inject arbitrary web script or HTML via multiple vectors, as demonstrated by (1) the identity field, (2) Category and (3) Label search fields, (4) the Mobile Phone field, and (5) Date and (6) Time fields when importing CSV files, as exploited through modules such as (a) Turba Address Book, (b) Kronolith, (c) Mnemo, and (d) Nag.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://lists.horde.org/archives/announce/2005/000238.html; http://secunia.com/advisories/17970; http://secunia.com/advisories/19619
CVE: CVE-2005-4191
Published: 2005-12-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/tasklists/tasklists.inc in Horde Nag Task List Manager H3 before 2.0.4 allow remote authenticated users to inject arbitrary web script or HTML via (1) the tasklist's name or (2) description, when creating a new tasklist.
CVSS Score: 3.5 (LOW)
References: http://cvs.horde.org/diff.php/nag/templates/tasklists/tasklists.inc?r1=1.10&r2=1.11&ty=h; http://lists.horde.org/archives/announce/2005/000236.html; http://secunia.com/advisories/17969
CVE: CVE-2005-4192
Published: 2005-12-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/notepads/notepads.inc in Horde Mnemo Note Manager H3 before 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via (1) the notepad's name or (2) description, when creating a new notepad.
CVSS Score: 3.5 (LOW)
References: http://cvs.horde.org/diff.php/mnemo/templates/notepads/notepads.inc?r1=1.9&r2=1.10&ty=h; http://lists.horde.org/archives/announce/2005/000237.html; http://secunia.com/advisories/17964
CVE: CVE-2005-4193
Published: 2005-12-13
Description: Cross-site scripting (XSS) vulnerability in UseBB before 0.7 allows remote attackers to inject arbitrary web script or HTML via the $_SERVER['PHP_SELF'] variable.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17958; http://sourceforge.net/project/shownotes.php?release_id=377496&group_id=93103; http://www.securityfocus.com/bid/15817
CVE: CVE-2005-4194
Published: 2005-12-13
Description: Buffer overflow in MediaServerList.exe in Sights 'n Sounds Streaming Media Server 2.0.3.a allows remote attackers to cause a denial of service (application crash) via a long query string.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17998; http://www.ipomonis.com/advisories/sws.txt; http://www.securityfocus.com/bid/15809
CVE: CVE-2005-4195
Published: 2005-12-13
Description: Multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ParentId parameter in SPT--BrowseResources.php, (2) ResourceId parameter in SPT--FullRecord.php, (3) ResourceOffset parameter in SPT--Home.php, and (4) F_UserName and (5) F_Password in SPT--UserLogin.php.  NOTE: it was later reported that vector 1 is also present in 1.4.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/17979; http://www.osvdb.org/21625; http://www.osvdb.org/21626
CVE: CVE-2005-4196
Published: 2005-12-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Scout Portal Toolkit (SPT) 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the ss parameter in SPT--QuickSearch.php; (2) ParentId parameter in SPT--BrowseResources.php; (3) the ResourceId parameter in SPT--FullRecord.php; (4) ResourceOffset parameter in SPT--Home.php, (5) F_SearchString parameter in SPT--QuickSearch.php; (6) F_UserName and (7) F_Password parameters in SPT--UserLogin.php; (8) F_SearchCat1, (9) F_TextField1, (10) F_SearchCat2, (11) F_TextField2, (12) F_SearchCat3, (13) F_TextField3, (14) F_SearchCat4, (15) F_TextField4, (16) ResourceType, (17) Language, (18) Audience, (19) Format parameters in SPT--AdvancedSearch.php.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17979; http://www.osvdb.org/21630; http://www.osvdb.org/21631
CVE: CVE-2005-4197
Published: 2005-12-13
Description: tunnelform.yaws in Nortel SSL VPN 4.2.1.6 allows remote attackers to execute arbitrary commands via a link in the a parameter, which is executed with extra privileges in a cryptographically signed Java Applet.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17974; http://securitytracker.com/id?1015341; http://www.sec-consult.com/247.html
CVE: CVE-2005-4198
Published: 2005-12-13
Description: SQL injection vulnerability in index.php in Netref 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this issue is unknown; the details were obtained solely from third party sources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/17987; http://www.osvdb.org/21623; http://www.securityfocus.com/bid/15801
CVE: CVE-2005-4199
Published: 2005-12-13
Description: Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) before 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) month, (2) day, and (3) year parameters in an addevent action in calendar.php; (4) threadmode and (5) showcodebuttons in an options action in usercp.php; (6) list parameter in an editlists action to usercp.php; (7) rating parameter in a rate action in member.php; and (8) rating parameter in either showthread.php or ratethread.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0379.html; http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964; http://secunia.com/advisories/18000
CVE: CVE-2005-4200
Published: 2005-12-13
Description: Multiple unspecified vulnerabilities in MyBulletinBoard (MyBB) before 1.0 have unknown impact and attack vectors, a different set of vulnerabilities than those identified by CVE-2005-4199.
CVSS Score: 10.0 (HIGH)
References: http://community.mybboard.net/showthread.php?tid=5184&pid=30964#pid30964; http://secunia.com/advisories/18000; http://www.securityfocus.com/bid/15793
CVE: CVE-2005-4201
Published: 2005-12-13
Description: Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" (triple dot) sequences in unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17951; http://www.ipomonis.com/advisories/myAlbumOnline.txt; http://www.securityfocus.com/bid/15800
CVE: CVE-2005-4202
Published: 2005-12-13
Description: Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to viewsource.jsp, or (5) "..\" (dot dot backslash) sequences in the NS-query-pat parameter to the search URL. URL.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17989; http://www.ipomonis.com/advisories/logisphere_server.zip; http://www.securityfocus.com/bid/15807