deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3972
Published: 2005-12-03
Description: Cross-site scripting (XSS) vulnerability in extremesearch.php in Extreme Search Corporate Edition 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/extreme-search-corporate-edition-6x.html; http://secunia.com/advisories/17816; http://www.osvdb.org/21336
CVE: CVE-2005-3973
Published: 2005-12-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allow remote attackers to inject arbitrary web script or HTML via various HTML tags and values, such as the (1) legend tag and the value parameter used in (2) label and (3) input tags, possibly due to an incomplete blacklist.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/files/sa-2005-007/4.6.3.patch; http://drupal.org/files/sa-2005-007/advisory.txt; http://secunia.com/advisories/17824
CVE: CVE-2005-3974
Published: 2005-12-03
Description: Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.
CVSS Score: 6.4 (MEDIUM)
References: http://drupal.org/files/sa-2005-009/4.6.3.patch; http://drupal.org/files/sa-2005-009/advisory.txt; http://secunia.com/advisories/17824
CVE: CVE-2005-3975
Published: 2005-12-03
Description: Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet Explorer as a result of CVE-2005-3312. NOTE: it could be argued that this vulnerability is due to a design flaw in Internet Explorer and the proper fix should be in that browser; if so, then this should not be treated as a vulnerability in Drupal.
CVSS Score: 4.0 (MEDIUM)
References: http://drupal.org/files/sa-2005-008/4.6.3.patch; http://drupal.org/files/sa-2005-008/advisory.txt; http://secunia.com/advisories/17824
CVE: CVE-2005-3976
Published: 2005-12-03
Description: SQL injection vulnerability in type.asp, as used in multiple DUware products including (1) DUamazon 3.1, (2) DUarticle 1.1, (3) DUclassified 4.2, (4) DUdirectory 3.1 and DUdirectory Pro 3.0 and 3.0 SQL, (5) DUdownload 1.1, (6) DUgallery 3.3, (7) DUnews 1.1, and (8) DUpaypal 3.1 and DUpaypal Pro 3.0, allows remote attackers to execute arbitrary SQL commands via the iType parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17835; http://www.osvdb.org/21385; http://www.securityfocus.com/bid/15681
CVE: CVE-2005-3977
Published: 2005-12-03
Description: Cross-site scripting (XSS) vulnerability in QualityEBiz Quality PPC 1553 allows remote attackers to inject web script or HTML via the REQ parameter to the search module.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/qualityppc-xss-vuln.html; http://secunia.com/advisories/17850; http://www.osvdb.org/21387
CVE: CVE-2005-3978
Published: 2005-12-03
Description: Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) CatID parameter in (a) ViewCat.php and (b) gallery.php, and the (2) ItemNum parameter in (c) ViewItem.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/netclassifieds-all-versions-sql-inj.html; http://secunia.com/advisories/17853; http://www.osvdb.org/21378
CVE: CVE-2005-3979
Published: 2005-12-03
Description: relocate_server.php in Coppermine Photo Gallery (CPG) 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://coppermine-gallery.net/forum/index.php?topic=24217.0; http://secunia.com/advisories/17855; http://www.vupen.com/english/advisories/2005/2698
CVE: CVE-2005-3980
Published: 2005-12-04
Description: SQL injection vulnerability in the ticket query module in Edgewall Trac 0.9 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the group parameter.
CVSS Score: 7.5 (HIGH)
References: http://projects.edgewall.com/trac/wiki/ChangeLog; http://secunia.com/advisories/17836/; http://securitytracker.com/id?1015302
CVE: CVE-2005-3981
Published: 2005-12-04
Description: NOTE: this issue has been disputed by third parties.  Microsoft Windows XP, 2000, and 2003 allows local users to kill a writable process by using the CreateRemoteThread function with certain arguments on a process that has been opened using the OpenProcess function, possibly involving an invalid address for the start routine. NOTE: followup posts have disputed this issue, saying that if a user already has privileges to write to a process, then other functions could be called or the process could be terminated using PROCESS_TERMINATE
CVSS Score: 4.9 (MEDIUM)
References: http://www.securityfocus.com/archive/1/418289/100/0/threaded; http://www.securityfocus.com/archive/1/418431/100/0/threaded; http://www.securityfocus.com/bid/15671/
CVE: CVE-2005-3982
Published: 2005-12-04
Description: CRLF injection vulnerability in layers_toggle.php in WebCalendar 1.0.1 might allow remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via the ret parameter, which is used to redirect URL requests.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17848; http://secunia.com/advisories/19240; http://vd.lwang.org/webcalendar_multiple_vulns.txt
CVE: CVE-2005-3983
Published: 2005-12-04
Description: Unknown vulnerability in the login page for HP Systems Insight Manager (SIM) 4.0 and 4.1, when accessed by Microsoft Internet Explorer with the MS04-025 patch, leads to a denial of service (browser hang). NOTE: although the advisory is vague, this issue does not appear to involve an attacker at all.  If not, then this issue is not a vulnerability.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/archive/1/418280/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/17235; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1582
CVE: CVE-2005-3984
Published: 2005-12-04
Description: SQL injection vulnerability in WebCalendar 1.0.1 allows remote attackers to execute arbitrary SQL commands via the time_range parameter to edit_report_handler.php.  NOTE: the startid/activity_log.php vector is already covered by CVE-2005-3949.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/17848; http://vd.lwang.org/webcalendar_multiple_vulns.txt; http://www.osvdb.org/21382
CVE: CVE-2005-3985
Published: 2005-12-04
Description: The Internet Key Exchange version 1 (IKEv1) implementation in Astaro Security Linux before 6.102 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17838; http://www.astaro.org/showflat.php?Cat=&Number=63958&page=0&view=collapsed&sb=5&o=&fpart=1#63958; http://www.securityfocus.com/bid/15666
CVE: CVE-2005-3986
Published: 2005-12-04
Description: Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cat_id parameter in portfolio.php and (2) cid parameter in content.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html; http://secunia.com/advisories/17841; http://www.osvdb.org/21334
CVE: CVE-2005-3987
Published: 2005-12-04
Description: Multiple SQL injection vulnerabilities in Tradesoft CMS allow remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/22863; http://www.securityfocus.com/bid/15661; http://www.osvdb.org/22863
CVE: CVE-2005-3988
Published: 2005-12-04
Description: SQL injection vulnerability in article.php in Pineapple Technologies Lore 1.5.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/lore-sql-inj-vuln.html; http://secunia.com/advisories/17842; http://www.osvdb.org/21328
CVE: CVE-2005-3989
Published: 2005-12-04
Description: Memory leak in Avaya TN2602AP IP Media Resource 320 circuit pack before vintage 9 firmware allows remote attackers to cause a denial of service (memory consumption) via crafted VoIP packets.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17825; http://support.avaya.com/elmodocs2/security/ASA-2005-231.pdf; http://www.securityfocus.com/bid/15668
CVE: CVE-2005-3990
Published: 2005-12-04
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-3619.  Reason: This candidate is a duplicate of CVE-2006-3619.  Notes: All CVE users should reference CVE-2006-3619 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3991
Published: 2005-12-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyChat 0.14.6 allow remote attackers to inject arbitrary web script or HTML via the medium parameter to (1) start_page.css.php and (2) style.css.php; or the From parameter to users_popupL.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/221; http://www.securityfocus.com/archive/1/418397/100/0/threaded; http://www.securityfocus.com/archive/1/484575/100/0/threaded
CVE: CVE-2005-3992
Published: 2005-12-04
Description: Multiple buffer overflows in WinEggDropShell remote access trojan (RAT) 1.7 allow remote attackers to execute arbitrary code via (1) a long GET request to the HTTP server, or a long (2) USER or (3) PASS command to the FTP server.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/0059.html; http://securityreason.com/securityalert/226; http://secway.org/advisory/AD20051202.txt
CVE: CVE-2005-3993
Published: 2005-12-05
Description: Multiple unspecified vulnerabilities in MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allow attackers to cause a denial of service (crash) via invalid IMAP commands.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/17820; http://www.mailenable.com/hotfix/; http://www.osvdb.org/21388
CVE: CVE-2005-3994
Published: 2005-12-05
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3967.  Reason: This candidate is a duplicate of CVE-2005-3967.  Notes: All CVE users should reference CVE-2005-3967 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3995
Published: 2005-12-05
Description: Format string vulnerability in the dosyslog function in the OBEX server (obexsrv.c) for Sobexsrv before 1.0.0-pre4, when the syslog (-S) function is enabled, allows remote attackers to execute arbitrary code via format string specifiers in file name arguments to OBEX commands.
CVSS Score: 5.1 (MEDIUM)
References: http://www.digitalmunition.com/DMA%5B2005-1202a%5D.txt; http://www.securityfocus.com/archive/1/418515/100/0/threaded; http://www.securityfocus.com/bid/15692
CVE: CVE-2005-3996
Published: 2005-12-05
Description: SQL injection vulnerability in admin/password_forgotten.php in Zen Cart 1.2.6d and earlier allows remote attackers to execute arbitrary SQL commands via the admin_email parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-89
References: http://rgod.altervista.org/zencart_126d_xpl.html; http://secunia.com/advisories/17869; http://securitytracker.com/id?1015306
CVE: CVE-2005-3997
Published: 2005-12-05
Description: Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including (1) graphs/banner_daily.php, (2) graphs/banner_infobox.php, (3) graphs/banner_yearly.php, (4) graphs/banner_monthly.php, (5) application_bottom.php, (6) attributes_preview.php, (7) modules/category_product_listing.php, (8) modules/copy_to_confirm.php, (9) modules/delete_product_confirm.php, and (10) modules/move_product_confirm.php, which leaks the web server path in the resulting error message.
CVSS Score: 2.6 (LOW)
References: http://rgod.altervista.org/zencart_126d_xpl.html; http://secunia.com/advisories/17869; http://www.osvdb.org/22866
CVE: CVE-2005-3998
Published: 2005-12-05
Description: Cross-site scripting (XSS) vulnerability in search.asp in Solupress News 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/solupress-news-xss-vuln.html; http://secunia.com/advisories/17854; http://www.osvdb.org/21430
CVE: CVE-2005-3999
Published: 2005-12-05
Description: Cross-site scripting (XSS) vulnerability in Search.asp in SiteBeater MP3 Catalog 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/sitebeater-mp3-catalog-xss-vuln.html; http://secunia.com/advisories/17856; http://www.osvdb.org/21424
CVE: CVE-2005-4000
Published: 2005-12-05
Description: Cross-site scripting (XSS) vulnerability in archive.asp in SiteBeater News System 4.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the sKeywords parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/sitebeater-news-system-xss-vuln.html; http://secunia.com/advisories/17857; http://www.osvdb.org/21436
CVE: CVE-2005-4001
Published: 2005-12-05
Description: Multiple SQL injection vulnerabilities in phpYellowTM Pro Edition and Lite Edition 5.33 allow remote attackers to execute arbitrary SQL commands via the (1) haystack parameter to search_result.php or (2) ckey parameter to print_me.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/phpyellowtm-pro-edition-sql-inj-vuln.html; http://secunia.com/advisories/17849; http://www.osvdb.org/21428
CVE: CVE-2005-4002
Published: 2005-12-05
Description: WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.
CVSS Score: 4.0 (MEDIUM)
References: http://www.kb.cert.org/vuls/id/388282; http://www.kb.cert.org/vuls/id/388282
CVE: CVE-2005-4003
Published: 2005-12-05
Description: Multiple SQL injection vulnerabilities in Absolute Shopping Package Solutions (ASPS) Shopping Cart Professional 2.9d and earlier, and Lite 2.1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) srch_product_name parameter to adv_search.asp and (2) b_search parameter to bsearch.asp.  NOTE: the original disclosure was specifically only for an XSS issue, but the CVE description was for SQL injection.  Since the original disclosure, SQL injection vectors have been reported.  This CVE might be REJECTed or significantly altered pending additional information.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/asps-shopping-cart-professional-and.html; http://www.securityfocus.com/bid/15694; http://pridels0.blogspot.com/2005/12/asps-shopping-cart-professional-and.html
CVE: CVE-2005-4004
Published: 2005-12-05
Description: Cross-site scripting (XSS) vulnerability in search.asp in MyTemplateSite 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/mytemplatesite-xss-vuln.html; http://secunia.com/advisories/17851; http://www.securityfocus.com/bid/15693
CVE: CVE-2005-4005
Published: 2005-12-05
Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to obtain path information and possibly execute arbitrary SQL commands via the srch_text parameter in a Search and Sort option to messages.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17871; http://securityreason.com/securityalert/31; http://www.osvdb.org/21415
CVE: CVE-2005-4006
Published: 2005-12-05
Description: SAPID CMS before 1.2.3.03 allows remote attackers to bypass authentication via direct requests to the usr/system files (1) insert_file.php, (2) insert_image.php, (3) insert_link.php, (4) insert_qcfile.php, and (5) edit.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://sapid-club.com/en/viewtopic.php?p=586#586; http://secunia.com/advisories/17859; http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100
CVE: CVE-2005-4007
Published: 2005-12-05
Description: Multiple unspecified vulnerabilities in SAPID CMS before 1.2.3.03, related to newly registered users and possibly authorization checks, have unknown impact and attack vectors involving (1) mvc/controller/user_request_analysis.inc.php and (2) usr/xml/ddc/authorization.xml.
CVSS Score: 10.0 (HIGH)
References: http://sapid-club.com/en/viewtopic.php?p=586#586; http://sourceforge.net/project/shownotes.php?release_id=375289&group_id=118100; http://sapid-club.com/en/viewtopic.php?p=586#586
CVE: CVE-2005-4008
Published: 2005-12-05
Description: SQL injection vulnerability in jax_calendar.php in Jax Calendar 1.34 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter, and possibly the (2) Y and (3) m parameters.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/11/jax-calendar-134-vuln.html; http://www.osvdb.org/21406; http://www.securityfocus.com/bid/16130
CVE: CVE-2005-4009
Published: 2005-12-05
Description: Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) cid and (2) catid parameters to (a) day.php, (b) week.php, (c) month.php, and (d) year.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/11/calendar-express-2-sql-inj-vuln.html; http://www.osvdb.org/21402; http://www.osvdb.org/21403
CVE: CVE-2005-4010
Published: 2005-12-05
Description: SQL injection vulnerability in KBase Express 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to category.php and (2) search parameters to search.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/11/kbase-express-sql-inj-vuln.html; http://secunia.com/advisories/17806; http://www.osvdb.org/21340
CVE: CVE-2005-4011
Published: 2005-12-05
Description: SQL injection vulnerability in calendar.php in Codewalkers ltwCalendar (aka PHP Event Calendar) 4.2, 4.1.3, and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://ltwcalendar.sourceforge.net/changelog.php; http://pridels0.blogspot.com/2005/11/codewalkers-ltwcalendar-4x-sql-inj.html; http://secunia.com/advisories/17799
CVE: CVE-2005-4012
Published: 2005-12-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
CVSS Score: 4.3 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html; http://freewebstat.com/changelog-english.html; http://secunia.com/advisories/17789
CVE: CVE-2005-4013
Published: 2005-12-05
Description: PHP Web Statistik 1.4 stores the stat.cfg file under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as statistics and the log directory location, possibly including the logdb.dta file.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html; http://freewebstat.com/changelog-english.html; http://secunia.com/advisories/17789
CVE: CVE-2005-4014
Published: 2005-12-05
Description: stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service (CPU consumption) via a large lastnumber value.
CVSS Score: 7.8 (HIGH)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html; http://freewebstat.com/changelog-english.html; http://secunia.com/advisories/17789
CVE: CVE-2005-4015
Published: 2005-12-05
Description: PHP Web Statistik 1.4 does not rotate the log database or limit the size of the referer field, which allows remote attackers to fill the log files via a large number of requests, as demonstrated using pixel.php.
CVSS Score: 5.0 (MEDIUM)
References: http://cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html; http://freewebstat.com/changelog-english.html; http://securityreason.com/securityalert/214
CVE: CVE-2005-4016
Published: 2005-12-05
Description: SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/widget-property-vuln.html; http://secunia.com/advisories/17829; http://www.osvdb.org/21426
CVE: CVE-2005-4017
Published: 2005-12-05
Description: property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/widget-property-vuln.html; http://secunia.com/advisories/17829; http://www.osvdb.org/21427
CVE: CVE-2005-4018
Published: 2005-12-05
Description: SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html; http://secunia.com/advisories/17843; http://www.osvdb.org/21433
CVE: CVE-2005-4019
Published: 2005-12-05
Description: SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html; http://secunia.com/advisories/17846; http://www.osvdb.org/21432
CVE: CVE-2005-4020
Published: 2005-12-05
Description: SQL injection vulnerability in create.php in Widget Imprint 1.0.26 and earlier allows remote attackers to execute arbitrary SQL commands via the product_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/widget-imprint-sql-inj-vuln.html; http://secunia.com/advisories/17840; http://www.osvdb.org/21435
CVE: CVE-2005-4021
Published: 2005-12-05
Description: The installer for Gallery 2.0 before 2.0.2 stores the install log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/418200/100/0/threaded; http://www.securityfocus.com/bid/15614; http://www.vupen.com/english/advisories/2005/2681
CVE: CVE-2005-4022
Published: 2005-12-05
Description: Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17747; http://www.osvdb.org/21221; http://www.securityfocus.com/archive/1/418200/100/0/threaded