deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-0378
Published: 2006-01-23
Description: Cross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom mp3players_details.php program.  NOTE: the name of the affected program might be installation-dependent, but it has been identified as "product_details.php" by some sources.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/ref/22/22634-x-site.txt; http://secunia.com/advisories/18537; http://www.osvdb.org/22634
CVE: CVE-2006-0036
Published: 2006-01-23
Description: ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows remote attackers to cause a denial of service (memory corruption or crash) via an inbound PPTP_IN_CALL_REQUEST packet that causes a null pointer to be used in an offset calculation.
CVSS Score: 7.8 (HIGH)
References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=15db34702cfafd24acc60295cf14861e497502ab; http://secunia.com/advisories/18482; http://securityreason.com/securityalert/388
CVE: CVE-2006-0037
Published: 2006-01-23
Description: ip_nat_pptp in the PPTP NAT helper (netfilter/ip_nat_helper_pptp.c) in Linux kernel 2.6.14, and other versions, allows local users to cause a denial of service (memory corruption or crash) via a crafted outbound packet that causes an incorrect offset to be calculated from pointer arithmetic when non-linear SKBs (socket buffers) are used.
CVSS Score: 4.9 (MEDIUM)
References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=03b9feca89366952ae5dfe4ad8107b1ece50b710; http://secunia.com/advisories/18482; http://securityreason.com/securityalert/388
CVE: CVE-2006-0321
Published: 2006-01-24
Description: fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747; http://developer.berlios.de/project/shownotes.php?release_id=8784; http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt
CVE: CVE-2006-0224
Published: 2006-01-25
Description: Buffer overflow in Library of Assorted Spiffy Things (LibAST) 0.6.1 and earlier, as used in Eterm and possibly other software, allows local users to execute arbitrary code as the utmp user via a long -X command line argument (alternative configuration file name).
CVSS Score: 4.6 (MEDIUM)
References: http://freshmeat.net/projects/libast/?branch_id=17907&release_id=217840; http://secunia.com/advisories/18586; http://secunia.com/advisories/18632
CVE: CVE-2006-0402
Published: 2006-01-25
Description: SQL injection vulnerability in Zoph before 0.5pre1 allows remote attackers to execute arbitrary SQL commands.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18563; http://secunia.com/advisories/19153; http://sourceforge.net/project/shownotes.php?group_id=69353&release_id=387320
CVE: CVE-2006-0403
Published: 2006-01-25
Description: Multiple SQL injection vulnerabilities in e-moBLOG 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) monthy parameter to index.php or (2) login parameter to admin/index.php. NOTE: some sources have reported item 1 as involving the "monthly" parameter, but this is incorrect.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://attrition.org/pipermail/vim/2006-January/000511.html; http://evuln.com/vulns/43/summary.html; http://secunia.com/advisories/18567
CVE: CVE-2006-0404
Published: 2006-01-25
Description: Note-A-Day Weblog 2.2 stores sensitive data under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to archive/.phpass-admin, which contains encrypted passwords.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-01/0389.html; http://evuln.com/vulns/44/summary.html; http://secunia.com/advisories/18566
CVE: CVE-2006-0405
Published: 2006-01-25
Description: The TIFFFetchShortPair function in tif_dirread.c in libtiff 3.8.0 allows remote attackers to cause a denial of service (application crash) via a crafted TIFF image that triggers a NULL pointer dereference, possibly due to changes in type declarations and/or the TIFFVSetField function.
CVSS Score: 5.0 (MEDIUM)
References: http://bugzilla.remotesensing.org/show_bug.cgi?id=1029; http://bugzilla.remotesensing.org/show_bug.cgi?id=1034; http://secunia.com/advisories/18587
CVE: CVE-2006-0406
Published: 2006-01-25
Description: search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18577; http://www.osvdb.org/22736; http://www.securityfocus.com/archive/1/422227/100/0/threaded
CVE: CVE-2006-0407
Published: 2006-01-25
Description: Cross-site scripting (XSS) vulnerability in post.php in AZ Bulletin Board (AZbb) 1.1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) nickname parameter and (2) an iframe tag in the topic parameter.  NOTE: the original disclosure specified the name parameter, but a correction was later provided. NOTE: followup posts have both disputed and confirmed the original claim.
CVSS Score: 4.3 (MEDIUM)
References: http://kapda.ir/advisory-236.html; http://secunia.com/advisories/18565; http://www.securityfocus.com/archive/1/423353/100/0/threaded
CVE: CVE-2006-0408
Published: 2006-01-25
Description: rsh utility in Sun Grid Engine (SGE) before 6.0u7_1 allows local users to gain privileges and execute arbitrary code via unspecified vectors, possibly involving command line arguments.
CVSS Score: 7.2 (HIGH)
References: http://gridengine.sunsource.net/project/gridengine/60patches.txt; http://secunia.com/advisories/18580; http://securitytracker.com/id?1015531
CVE: CVE-2006-0409
Published: 2006-01-25
Description: Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/45/summary.html; http://secunia.com/advisories/18572; http://securitytracker.com/id?1015529
CVE: CVE-2006-0410
Published: 2006-01-25
Description: SQL injection vulnerability in ADOdb before 4.71, when using PostgreSQL, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors involving binary strings.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18575; http://secunia.com/advisories/18732; http://secunia.com/advisories/18745
CVE: CVE-2006-0225
Published: 2006-01-25
Description: scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
CVSS Score: 4.6 (MEDIUM)
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.8/common/005_ssh.patch; ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc; http://blogs.sun.com/security/entry/sun_alert_102961_security_vulnerability
CVE: CVE-2006-0411
Published: 2006-01-25
Description: claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18588; http://www.securityfocus.com/archive/1/422482; http://www.securityfocus.com/bid/16341
CVE: CVE-2006-0412
Published: 2006-01-25
Description: SQL injection vulnerability in CyberShop allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2006-01/0064.html; http://www.osvdb.org/22365; https://exchange.xforce.ibmcloud.com/vulnerabilities/24005
CVE: CVE-2006-0413
Published: 2006-01-25
Description: Multiple SQL injection vulnerabilities in index.php in NewsPHP allow remote attackers to execute arbitrary SQL commands via the (1) discuss, (2) tim, (3) id, (4) last, and (5) limit parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/18624; http://www.osvdb.org/22717; http://www.securityfocus.com/archive/1/423129/100/0/threaded
CVE: CVE-2006-0414
Published: 2006-01-25
Description: Tor before 0.1.1.20 allows remote attackers to identify hidden services via a malicious Tor server that attempts a large number of accesses of the hidden service, which eventually causes a circuit to be built through the malicious server.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.seul.org/or/announce/Jan-2006/msg00001.html; http://secunia.com/advisories/18576; http://secunia.com/advisories/20514
CVE: CVE-2006-0415
Published: 2006-01-25
Description: Cross-site scripting (XSS) vulnerability in index.php in SleeperChat 0.3f and earlier allows remote attackers to inject arbitrary web script or HTML via the pseudo parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1015525; http://www.osvdb.org/22784; http://www.securityfocus.com/bid/16363
CVE: CVE-2006-0416
Published: 2006-01-25
Description: SleeperChat 0.3f and earlier allows remote attackers to bypass authentication and create new entries via the txt parameter to (1) chat_no.php and (2) chat_if.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://securitytracker.com/id?1015525; https://exchange.xforce.ibmcloud.com/vulnerabilities/24357; http://securitytracker.com/id?1015525
CVE: CVE-2006-0417
Published: 2006-01-25
Description: SQL injection vulnerability in login.php in miniBloggie 1.0 and earlier, when gpc_magic_quotes is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/47/summary.html; http://secunia.com/advisories/18604; http://securitytracker.com/id?1015534
CVE: CVE-2006-0418
Published: 2006-01-25
Description: Eval injection vulnerability in 123 Flash Chat Server 5.0 and 5.1 allows attackers to execute arbitrary code via a crafted username.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/423164/100/0/threaded; http://www.securityfocus.com/bid/16360; http://www.securityfocus.com/archive/1/423164/100/0/threaded
CVE: CVE-2006-0379
Published: 2006-01-25
Description: FreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc; http://secunia.com/advisories/18599; http://securitytracker.com/id?1015541
CVE: CVE-2006-0380
Published: 2006-01-25
Description: A logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:06.kmem.asc; http://secunia.com/advisories/18599; http://securitytracker.com/id?1015541
CVE: CVE-2006-0381
Published: 2006-01-25
Description: A logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a 'scrub fragment crop' or 'scrub fragment drop-ovl' rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
CVSS Score: 5.0 (MEDIUM)
References: ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:07.pf.asc; ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-004.txt.asc; http://secunia.com/advisories/18609
CVE: CVE-2006-0419
Published: 2006-01-25
Description: BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a denial of service (unspecified) via a large number of connections.
CVSS Score: 6.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/163; http://securitytracker.com/id?1015528; http://dev2dev.bea.com/pub/advisory/163
CVE: CVE-2006-0420
Published: 2006-01-25
Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service (slowdown) via unknown attack vectors that cause "looping stack overflow errors."
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/164; http://securitytracker.com/id?1015528; http://dev2dev.bea.com/pub/advisory/164
CVE: CVE-2006-0421
Published: 2006-01-25
Description: By design, BEA WebLogic Server and WebLogic Express 7.0 and 6.1, when creating multiple domains from the same WebLogic instance on the same machine, allows administrators of any created domain to access other created domains, which could allow administrators to gain privileges that were not intended.
CVSS Score: 4.6 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/165; http://secunia.com/advisories/18581; http://securitytracker.com/id?1015528
CVE: CVE-2006-0422
Published: 2006-01-25
Description: Multiple unspecified vulnerabilities in BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allow remote attackers to access MBean attributes or cause an unspecified denial of service via unknown attack vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/166; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0423
Published: 2006-01-25
Description: BEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in cleartext in the config.xml file, which allows attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/167; http://dev2dev.bea.com/pub/advisory/262; http://secunia.com/advisories/18593
CVE: CVE-2006-0424
Published: 2006-01-25
Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.
CVSS Score: 4.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/168; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0425
Published: 2006-01-25
Description: BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/169; http://secunia.com/advisories/18593; http://securitytracker.com/id?1015528
CVE: CVE-2006-0426
Published: 2006-01-25
Description: BEA WebLogic Server and WebLogic Express 8.1 through SP4, when configuration auditing is enabled and a password change occurs, stores the old and new passwords in cleartext in the DefaultAuditRecorder.log file, which could allow attackers to gain privileges.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/170; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0427
Published: 2006-01-25
Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0 and 8.1 through SP5 allows malicious EJBs or servlet applications to decrypt system passwords, possibly by accessing functionality that should have been restricted.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/171; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0428
Published: 2006-01-25
Description: Unspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services Remote Portlets (WSRP), allows remote attackers to access restricted web resources via crafted URLs.
CVSS Score: 7.5 (HIGH)
References: http://dev2dev.bea.com/pub/advisory/172; http://secunia.com/advisories/18593; http://securitytracker.com/id?1015528
CVE: CVE-2006-0429
Published: 2006-01-25
Description: BEA WebLogic Server and WebLogic Express 9.0 causes new security providers to appear active even if they have not been activated by a server reboot, which could cause an administrator to perform inappropriate, security-relevant actions.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/173; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0430
Published: 2006-01-25
Description: Certain configurations of BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6, when connection filters are enabled, cause the server to run more slowly, which makes it easier for remote attackers to cause a denial of service (server slowdown).
CVSS Score: 5.0 (MEDIUM)
References: http://dev2dev.bea.com/pub/advisory/174; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0431
Published: 2006-01-25
Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 8.1 SP5 allows untrusted applications to obtain the server's SSL identity via unknown attack vectors.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/175; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0432
Published: 2006-01-25
Description: Unspecified vulnerability in BEA WebLogic Server and WebLogic Express 9.0, when an Administrator uses the WebLogic Administration Console to add custom security policies, causes incorrect policies to be created, which prevents the server from properly protecting JNDI resources.
CVSS Score: 2.1 (LOW)
References: http://dev2dev.bea.com/pub/advisory/176; http://secunia.com/advisories/18592; http://securitytracker.com/id?1015528
CVE: CVE-2006-0434
Published: 2006-01-26
Description: Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." (dot dot) sequences and null bytes in the sAction parameter, a different vulnerability than CVE-2006-0244.  NOTE: if the functionality of phpXplorer supports the upload of PHP files, then this issue would not cross privilege boundaries and would not be a vulnerability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/422434/100/0/threaded; http://www.securityfocus.com/bid/16292; https://exchange.xforce.ibmcloud.com/vulnerabilities/39982
CVE: CVE-2006-0435
Published: 2006-01-26
Description: Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041898.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041899.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041742.html
CVE: CVE-2006-0436
Published: 2006-01-26
Description: Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/18596; http://secunia.com/advisories/18600; http://securitytracker.com/id?1015530
CVE: CVE-2006-0439
Published: 2006-01-26
Description: Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password hashes by directly accessing data/userlist.txt.
CVSS Score: 5.0 (MEDIUM)
References: http://evuln.com/vulns/46/summary.html; http://secunia.com/advisories/18605; http://securitytracker.com/id?1015533
CVE: CVE-2006-0440
Published: 2006-01-26
Description: Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password (possibly via another vulnerability that reads it from a data file), then including the hash in a cookie.
CVSS Score: 5.0 (MEDIUM)
References: http://evuln.com/vulns/46/summary.html; http://securitytracker.com/id?1015533; http://www.securityfocus.com/archive/1/423130/100/0/threaded
CVE: CVE-2006-0441
Published: 2006-01-26
Description: Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER command, which triggers the overflow when the log is viewed.
CVSS Score: 7.5 (HIGH)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/sami_ftp_poc.pl; http://secunia.com/advisories/18574; http://www.critical.lt/?vulnerabilities/208
CVE: CVE-2006-0442
Published: 2006-01-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://kapda.ir/advisory-241.html; http://secunia.com/advisories/18603; http://securitytracker.com/id?1015535
CVE: CVE-2006-0443
Published: 2006-01-26
Description: Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/49/summary.html; http://secunia.com/advisories/18610; http://securityreason.com/securityalert/369
CVE: CVE-2006-0444
Published: 2006-01-26
Description: SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page.  NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/18597; http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt; http://www.osvdb.org/22720
CVE: CVE-2006-0445
Published: 2006-01-26
Description: index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php.  NOTE: this might be the result of a file inclusion vulnerability.
CVSS Score: 4.0 (MEDIUM)
References: http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt; http://www.osvdb.org/22721; http://www.securityfocus.com/archive/1/423145/100/0/threaded
CVE: CVE-2006-0446
Published: 2006-01-27
Description: Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt1pt4; http://secunia.com/advisories/18594; http://www.securityfocus.com/bid/16371