deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-3001
Published: 2006-06-13
Description: Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/20621; http://securityreason.com/securityalert/1080; http://www.securityfocus.com/archive/1/436561
CVE: CVE-2006-3002
Published: 2006-06-13
Description: Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/20539; http://securityreason.com/securityalert/1079; http://www.securityfocus.com/archive/1/436413
CVE: CVE-2006-3003
Published: 2006-06-13
Description: details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message.  NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting (XSS).  NOTE: on 20060829, the vendor notified CVE that this issue has been fixed.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20539; http://securityreason.com/securityalert/1079; http://www.securityfocus.com/archive/1/436413
CVE: CVE-2006-3004
Published: 2006-06-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20530; http://securityreason.com/securityalert/1097; http://www.securityfocus.com/archive/1/436424
CVE: CVE-2006-3005
Published: 2006-06-13
Description: The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits.
CVSS Score: 5.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=130889; http://secunia.com/advisories/20563; http://www.gentoo.org/security/en/glsa/glsa-200606-11.xml
CVE: CVE-2006-3006
Published: 2006-06-13
Description: Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20619; http://www.securityfocus.com/archive/1/436599/100/0/threaded; http://www.securityfocus.com/archive/1/436774/100/0/threaded
CVE: CVE-2006-3007
Published: 2006-06-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5062&w=2; http://secunia.com/advisories/20524; http://secunia.com/advisories/21005
CVE: CVE-2006-3008
Published: 2006-06-13
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-2904.  Reason: This candidate is a duplicate of CVE-2006-2904.  Notes: All CVE users should reference CVE-2006-2904 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-2376
Published: 2006-06-13
Description: Integer overflow in the PolyPolygon function in Graphics Rendering Engine on Microsoft Windows 98 and Me allows remote attackers to execute arbitrary code via a Windows Metafile (WMF) or EMF image with a sum of entries in the vertext counts array and number of polygons that triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/20631; http://securityreason.com/securityalert/1094; http://securitytracker.com/id?1016286
CVE: CVE-2006-2660
Published: 2006-06-13
Description: Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html; http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134; http://secunia.com/advisories/21125
CVE: CVE-2006-0022
Published: 2006-06-13
Description: Unspecified vulnerability in Microsoft PowerPoint in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP1 and SP2, Office 2004 for Mac, and v. X for Mac allows user-assisted attackers to execute arbitrary code via a PowerPoint document with a malformed record, which triggers memory corruption.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/20633; http://securitytracker.com/id?1016287; http://www.kb.cert.org/vuls/id/190089
CVE: CVE-2006-0025
Published: 2006-06-13
Description: Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/20626; http://securitytracker.com/id?1016284; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=406
CVE: CVE-2006-1193
Published: 2006-06-13
Description: Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Access (OWA), allows user-assisted remote attackers to inject arbitrary HTML or web script via unknown vectors related to "HTML parsing."
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046892.html; http://secunia.com/advisories/20634; http://securitytracker.com/id?1016280
CVE: CVE-2006-1303
Published: 2006-06-13
Description: Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/20595; http://securitytracker.com/id?1016291; http://www.kb.cert.org/vuls/id/959049
CVE: CVE-2006-1313
Published: 2006-06-13
Description: Microsoft JScript 5.1, 5.5, and 5.6 on Windows 2000 SP4, and 5.6 on Windows XP, Server 2003, Windows 98 and Windows Me, will "release objects early" in certain cases, which results in memory corruption and allows remote attackers to execute arbitrary code.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20620; http://securitytracker.com/id?1016283; http://www.kb.cert.org/vuls/id/390044
CVE: CVE-2006-2370
Published: 2006-06-13
Description: Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," aka the "RRAS Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20630; http://securitytracker.com/id?1016285; http://www.kb.cert.org/vuls/id/631516
CVE: CVE-2006-2371
Published: 2006-06-13
Description: Buffer overflow in the Remote Access Connection Manager service (RASMAN) service in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote unauthenticated or authenticated attackers to execute arbitrary code via certain crafted "RPC related requests," that lead to registry corruption and stack corruption, aka the "RASMAN Registry Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20630; http://securityreason.com/securityalert/1096; http://securitytracker.com/id?1016285
CVE: CVE-2006-2373
Published: 2006-06-13
Description: The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to execute arbitrary code by calling the MrxSmbCscIoctlOpenForCopyChunk function with the METHOD_NEITHER method flag and an arbitrary address, possibly for kernel memory, aka the "SMB Driver Elevation of Privilege Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/20635; http://securitytracker.com/id?1016288; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=408
CVE: CVE-2006-2374
Published: 2006-06-13
Description: The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows local users to cause a denial of service (hang) by calling the MrxSmbCscIoctlCloseForCopyChunk with the file handle of the shadow device, which results in a deadlock, aka the "SMB Invalid Handle Vulnerability."
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: http://secunia.com/advisories/20635; http://securitytracker.com/id?1016288; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=409
CVE: CVE-2006-2378
Published: 2006-06-13
Description: Buffer overflow in the ART Image Rendering component (jgdw400.dll) in Microsoft Windows XP SP1 and Sp2, Server 2003 SP1 and earlier, and Windows 98 and Me allows remote attackers to execute arbitrary code via a crafted ART image that causes heap corruption.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20605; http://securitytracker.com/id?1016292; http://www.idefense.com/intelligence/vulnerabilities/display.php?id=407
CVE: CVE-2006-2379
Published: 2006-06-13
Description: Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and earlier allows remote attackers to execute arbitrary code via unknown vectors related to IP source routing.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/20639; http://securitytracker.com/id?1016290; http://www.gossamer-threads.com/lists/fulldisc/full-disclosure/46702
CVE: CVE-2006-2380
Published: 2006-06-13
Description: Microsoft Windows 2000 SP4 does not properly validate an RPC server during mutual authentication over SSL, which allows remote attackers to spoof an RPC server, aka the "RPC Mutual Authentication Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/20637; http://securitytracker.com/id?1016289; http://www.osvdb.org/26438
CVE: CVE-2006-2382
Published: 2006-06-13
Description: Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/20595; http://securitytracker.com/id?1016291; http://www.kb.cert.org/vuls/id/136849
CVE: CVE-2006-2383
Published: 2006-06-13
Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via "unexpected data" related to "parameter validation" in the DXImageTransform.Microsoft.Light ActiveX control, which causes Internet Explorer to crash in a way that enables the code execution.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/20595; http://securitytracker.com/id?1016291; http://www.kb.cert.org/vuls/id/417585
CVE: CVE-2006-2384
Published: 2006-06-13
Description: Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/20595; http://securitytracker.com/id?1016291; http://www.osvdb.org/26445
CVE: CVE-2006-2385
Published: 2006-06-13
Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted web page that triggers memory corruption when it is saved as a multipart HTML (.mht) file.
CVSS Score: 7.6 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/20595; http://securitytracker.com/id?1016291; http://www.osvdb.org/26446
CVE: CVE-2006-3009
Published: 2006-06-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to inject arbitrary HTML or web script via the (1) tf_lang, (2) tf_name, (3) tf_user, (4) tf_lastname, (5) tf_contact, (6) tf_datebefore, and (7) tf_dateafter parameters to files such as (a) publication/publication_index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php.
CVSS Score: 5.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html; http://secunia.com/advisories/20486; http://www.osvdb.org/26198
CVE: CVE-2006-3010
Published: 2006-06-13
Description: Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html; http://secunia.com/advisories/20486; http://www.osvdb.org/26203
CVE: CVE-2006-3015
Published: 2006-06-14
Description: Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI.
CVSS Score: 7.1 (HIGH)
CWE: CWE-88
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html; http://secunia.com/advisories/20575
CVE: CVE-2006-3016
Published: 2006-06-14
Description: Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities.  NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name().
CVSS Score: 9.3 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc; http://rhn.redhat.com/errata/RHSA-2006-0736.html; http://secunia.com/advisories/19927
CVE: CVE-2006-3017
Published: 2006-06-14
Description: zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations.
CVSS Score: 9.3 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U; http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html; http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2
CVE: CVE-2006-3018
Published: 2006-06-14
Description: Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19927; http://secunia.com/advisories/21050; http://secunia.com/advisories/21125
CVE: CVE-2006-2195
Published: 2006-06-15
Description: Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php.
CVSS Score: 6.8 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=136830; http://cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146; http://cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.inc
CVE: CVE-2006-2197
Published: 2006-06-15
Description: Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-189
References: http://secunia.com/advisories/20665; http://secunia.com/advisories/20688; http://secunia.com/advisories/20689
CVE: CVE-2006-2449
Published: 2006-06-15
Description: KDE Display Manager (KDM) in KDE 3.2.0 up to 3.5.3 allows local users to read arbitrary files via a symlink attack related to the session type for login.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20602; http://secunia.com/advisories/20660; http://secunia.com/advisories/20674
CVE: CVE-2006-2916
Published: 2006-06-15
Description: artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-273
References: http://dot.kde.org/[PII_REDACTED]/; http://mail.gnome.org/archives/beast/2006-December/msg00025.html; http://secunia.com/advisories/20677
CVE: CVE-2006-3019
Published: 2006-06-15
Description: Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php.  NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/20573; http://securityreason.com/securityalert/1106; http://www.osvdb.org/26388
CVE: CVE-2006-3020
Published: 2006-06-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) image and (2) PublisedDate parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/ws-album-xss-vuln.html; http://secunia.com/advisories/20537; http://www.attrition.org/pipermail/vim/2006-June/000860.html
CVE: CVE-2006-3021
Published: 2006-06-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) n and (2) d parameters in (a) login.asp and the d parameter in (b) igallery.asp.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/i-gallery-xss-vuln.html; http://secunia.com/advisories/20610; http://www.vupen.com/english/advisories/2006/2306
CVE: CVE-2006-3022
Published: 2006-06-15
Description: Cross-site scripting (XSS) vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/fipsgallery-vuln.html; http://secunia.com/advisories/20559; http://www.vupen.com/english/advisories/2006/2294
CVE: CVE-2006-3023
Published: 2006-06-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html; http://secunia.com/advisories/20606; http://www.vupen.com/english/advisories/2006/2307
CVE: CVE-2006-3024
Published: 2006-06-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) monthly.php and (2) daily.php.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html; http://secunia.com/advisories/20546; http://securitytracker.com/id?1016281
CVE: CVE-2006-3025
Published: 2006-06-15
Description: Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/bid/18351; http://www.securityfocus.com/bid/18351
CVE: CVE-2006-3026
Published: 2006-06-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/clickgallery-vuln.html; http://secunia.com/advisories/20614; http://www.vupen.com/english/advisories/2006/2315
CVE: CVE-2006-3027
Published: 2006-06-15
Description: Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/06/ephotos-vuln.html; http://secunia.com/advisories/20609; http://secunia.com/advisories/23525
CVE: CVE-2006-3028
Published: 2006-06-15
Description: PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20536; http://www.attrition.org/pipermail/vim/2006-June/000863.html; http://www.osvdb.org/26428
CVE: CVE-2006-3029
Published: 2006-06-15
Description: Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/06/clickcart-60-xss.html; http://secunia.com/advisories/20527; http://www.osvdb.org/26342