deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-2719
Published: 2009-08-10
Description: The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file, as demonstrated by the jnlp_file/appletDesc/index.html#misc test in the Technology Compatibility Kit (TCK) for the Java Network Launching Protocol (JNLP).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://java.sun.com/javase/6/webnotes/6u15.html; http://secunia.com/advisories/37386; http://secunia.com/advisories/37460
CVE: CVE-2009-2720
Published: 2009-08-10
Description: Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException in the Jemmy library) via unknown vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://java.sun.com/javase/6/webnotes/6u15.html; http://secunia.com/advisories/37386; http://secunia.com/advisories/37460
CVE: CVE-2009-2721
Published: 2009-08-10
Description: Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.
CVSS Score: 10.0 (HIGH)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://secunia.com/advisories/37386; http://secunia.com/advisories/37460
CVE: CVE-2009-2722
Published: 2009-08-10
Description: Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594.  NOTE: this issue exists because of an incorrect fix for BugId 6406003.
CVSS Score: 10.0 (HIGH)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://secunia.com/advisories/37386
CVE: CVE-2009-2723
Published: 2009-08-10
Description: Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.
CVSS Score: 10.0 (HIGH)
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://lists.apple.com/archives/security-announce/2009/Sep/msg00000.html; http://secunia.com/advisories/37386
CVE: CVE-2009-2724
Published: 2009-08-10
Description: Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."
CVSS Score: 9.3 (HIGH)
CWE: CWE-362
References: http://java.sun.com/j2se/1.5.0/ReleaseNotes.html; http://secunia.com/advisories/37386; http://secunia.com/advisories/37460
CVE: CVE-2009-2727
Published: 2009-08-10
Description: Stack-based buffer overflow in the _tt_internal_realpath function in the ToolTalk library (libtt.a) in IBM AIX 5.2.0, 5.3.0, 5.3.7 through 5.3.10, and 6.1.0 through 6.1.3, when the rpc.ttdbserver daemon is enabled in /etc/inetd.conf, allows remote attackers to execute arbitrary code via a long XDR-encoded ASCII string to remote procedure 15.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://aix.software.ibm.com/aix/efixes/security/libtt_advisory.asc; http://risesecurity.org/advisories/RISE-2009001.txt; http://secunia.com/advisories/35505
CVE: CVE-2009-0687
Published: 2009-08-11
Description: The pf_test_rule function in OpenBSD Packet Filter (PF), as used in OpenBSD 4.2 through 4.5, NetBSD 5.0 before RC3, MirOS 10 and earlier, and MidnightBSD 0.3-current allows remote attackers to cause a denial of service (panic) via crafted IP packets that trigger a NULL pointer dereference during translation, related to an IPv4 packet with an ICMPv6 payload.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: ftp://ftp.openbsd.org/pub/OpenBSD/patches/4.3/common/013_pf.patch; http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-001.txt.asc; http://www.helith.net/txt/multiple_vendor-PF_null_pointer_dereference.txt
CVE: CVE-2009-2704
Published: 2009-08-11
Description: CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing a %00 (encoded null byte).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://i8jesus.com/?p=55; http://i8jesus.com/?p=55
CVE: CVE-2009-2705
Published: 2009-08-11
Description: CA SiteMinder allows remote attackers to bypass cross-site scripting (XSS) protections for J2EE applications via a request containing non-canonical, "overlong Unicode" in place of blacklisted characters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://i8jesus.com/?p=55; http://i8jesus.com/?p=55
CVE: CVE-2009-2735
Published: 2009-08-11
Description: SQL injection vulnerability in admin.php in sun-jester OpenNews 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/56812; http://secunia.com/advisories/36154; http://www.exploit-db.com/exploits/9371
CVE: CVE-2009-2736
Published: 2009-08-11
Description: Static code injection vulnerability in admin.php in sun-jester OpenNews 1.0 allows remote authenticated administrators to inject arbitrary PHP code into config.php via the "Overall Width" field in a setconfig action.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/56813; http://secunia.com/advisories/36154; http://www.exploit-db.com/exploits/9371
CVE: CVE-2009-2737
Published: 2009-08-11
Description: The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as demonstrated by editing all queries, modifying settings, and adding roles to users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=518768; http://issues.roundup-tracker.org/issue2550521; http://secunia.com/advisories/34192
CVE: CVE-2009-1885
Published: 2009-08-11
Description: Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/36201; http://svn.apache.org/viewvc/xerces/c/trunk/src/xercesc/validators/DTD/DTDScanner.cpp?r1=781488&r2=781487&pathrev=781488&view=patch; http://svn.apache.org/viewvc?view=rev&revision=781488
CVE: CVE-2009-2414
Published: 2009-08-11
Description: Stack consumption vulnerability in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allows context-dependent attackers to cause a denial of service (application crash) via a large depth of element declarations in a DTD, related to a function recursion, as demonstrated by the Codenomicon XML fuzzing framework.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html; http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html
CVE: CVE-2009-2416
Published: 2009-08-11
Description: Multiple use-after-free vulnerabilities in libxml2 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32, and libxml 1.8.17, allow context-dependent attackers to cause a denial of service (application crash) via crafted (1) Notation or (2) Enumeration attribute types in an XML file, as demonstrated by the Codenomicon XML fuzzing framework.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: http://googlechromereleases.blogspot.com/2009/08/stable-update-security-fixes.html; http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.apple.com/archives/security-announce/2009/Nov/msg00001.html
CVE: CVE-2009-2738
Published: 2009-08-11
Description: Cross-site request forgery (CSRF) vulnerability in the WebGUI in FreeNAS before 0.7RC1 allows remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN15267895/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000053.html; http://www.freenas.org/index.php?option=com_frontpage&Itemid=22
CVE: CVE-2009-2739
Published: 2009-08-11
Description: Cross-site scripting (XSS) vulnerability in FreeNAS before 0.69.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN89791790/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000052.html; http://www.freenas.org/index.php?option=com_frontpage&Itemid=22
CVE: CVE-2008-6928
Published: 2009-08-11
Description: Unrestricted file upload vulnerability in PHPStore Complete Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in classifieds1/yellow_images/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50294; http://secunia.com/advisories/32626; http://www.vupen.com/english/advisories/2008/3100
CVE: CVE-2008-6929
Published: 2009-08-11
Description: Unrestricted file upload vulnerability in PHPStore Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in cars/cars_images/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50292; http://secunia.com/advisories/32626; http://www.vupen.com/english/advisories/2008/3098
CVE: CVE-2008-6930
Published: 2009-08-11
Description: Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50293; http://secunia.com/advisories/32626; http://www.vupen.com/english/advisories/2008/3101
CVE: CVE-2008-6931
Published: 2009-08-11
Description: Unrestricted file upload vulnerability in PHPStore Job Search (aka PHPCareers) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseeker_profile_images.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/50295; http://secunia.com/advisories/32626; http://www.vupen.com/english/advisories/2008/3099
CVE: CVE-2008-6932
Published: 2009-08-11
Description: Unrestricted file upload vulnerability in submit_file.php in AlstraSoft SendIt Pro allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in send/files/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/49844; http://secunia.com/advisories/32666; http://www.securityfocus.com/bid/32277
CVE: CVE-2008-6933
Published: 2009-08-11
Description: Directory traversal vulnerability in index.php in MiniGal b13 (aka MG2) allows remote attackers to read the source code of .php files, and possibly the content of other files, via a .. (dot dot) in the list parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/32312; https://exchange.xforce.ibmcloud.com/vulnerabilities/46635; https://www.exploit-db.com/exploits/7130
CVE: CVE-2008-6934
Published: 2009-08-11
Description: Static code injection vulnerability in Sanus|artificium (aka Sanusart) Free simple guestbook PHP script, when downloaded before 20081111, allows remote attackers to inject arbitrary PHP code into messages.txt via the message parameter to act.php, which is executed when guestbook/guestbook.php is accessed.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/49703; http://secunia.com/advisories/32643; http://www.sanusart.com/news.php
CVE: CVE-2008-6935
Published: 2009-08-11
Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://osvdb.org/49888; http://retrogod.altervista.org/exodus_uri.html; http://secunia.com/advisories/32729
CVE: CVE-2008-6936
Published: 2009-08-11
Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/32729; https://exchange.xforce.ibmcloud.com/vulnerabilities/52630; https://www.exploit-db.com/exploits/7167
CVE: CVE-2008-6937
Published: 2009-08-11
Description: Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/32729; https://exchange.xforce.ibmcloud.com/vulnerabilities/52631; http://secunia.com/advisories/32729
CVE: CVE-2008-6938
Published: 2009-08-11
Description: Pi3Web 2.0.3 before PL2, when installed on Windows as a desktop application and without using the Pi3Web/Conf/Intenet.pi3, allows remote attackers to cause a denial of service (crash or hang) and obtain the full pathname of the server via a request to a file in the ISAPI directory that is not an executable DLL, which triggers the crash when the DLL load fails, as demonstrated using Isapi\users.txt.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2008-11/0171.html; http://secunia.com/advisories/32696; http://www.osvdb.org/49998
CVE: CVE-2008-6939
Published: 2009-08-12
Description: TurnkeyForms Web Hosting Directory allows remote attackers to bypass authentication and (1) gain administrative privileges by setting the adm cookie to 1 or (2) gain privileges as another user by setting the logged cookie to the target username.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://osvdb.org/49838; http://secunia.com/advisories/32644; http://www.securityfocus.com/bid/32283
CVE: CVE-2008-6940
Published: 2009-08-12
Description: TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain a database backup via a direct request to admin/backup/db.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/49839; http://secunia.com/advisories/32644; http://www.securityfocus.com/bid/32283
CVE: CVE-2008-6941
Published: 2009-08-12
Description: SQL injection vulnerability in the login functionality in TurnkeyForms Web Hosting Directory allows remote attackers to execute arbitrary SQL commands via the password field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/36166; https://exchange.xforce.ibmcloud.com/vulnerabilities/52448; https://www.exploit-db.com/exploits/7107
CVE: CVE-2008-6942
Published: 2009-08-12
Description: Unrestricted file upload vulnerability in ScriptsFeed Realtor Classifieds System (aka Real Estate Classifieds) allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/49960; http://secunia.com/advisories/32690; http://www.securityfocus.com/bid/32293
CVE: CVE-2008-6943
Published: 2009-08-12
Description: Unrestricted file upload vulnerability in ScriptsFeed Recipes Listing Portal allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a recipe photo, then accessing it via a direct request to the file in pictures/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/49960; http://secunia.com/advisories/32690; http://www.securityfocus.com/bid/32293
CVE: CVE-2008-6944
Published: 2009-08-12
Description: Unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in cars_images/.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/49960; http://secunia.com/advisories/32690; http://www.securityfocus.com/bid/32293
CVE: CVE-2008-6945
Published: 2009-08-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in Interchange 5.7 before 5.7.1, 5.6 before 5.6.1, and 5.4 before 5.4.3 allow remote attackers to inject arbitrary web script or HTML via (1) the mv_order_item CGI variable parameter in Core, (2) the country-select widget, or (3) possibly the value specifier when used in the UserTag feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://ftp.icdevgroup.org/interchange/5.7/WHATSNEW; http://osvdb.org/49852; http://osvdb.org/49853
CVE: CVE-2008-6946
Published: 2009-08-12
Description: Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/archive/1/498186/100/0/threaded; http://www.securityfocus.com/bid/32229; https://exchange.xforce.ibmcloud.com/vulnerabilities/46496
CVE: CVE-2008-6947
Published: 2009-08-12
Description: Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via unspecified vectors associated with the added mode in a users action to admin.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/archive/1/498186/100/0/threaded; http://www.securityfocus.com/bid/32229; https://exchange.xforce.ibmcloud.com/vulnerabilities/46497
CVE: CVE-2008-6948
Published: 2009-08-12
Description: Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to (1) the showproject action in managefile.php or (2) the Messages feature.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/archive/1/498186/100/0/threaded; http://www.securityfocus.com/bid/32229; https://exchange.xforce.ibmcloud.com/vulnerabilities/46498
CVE: CVE-2008-6949
Published: 2009-08-12
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that (1) submit or edit a new project, or (2) upload files to a project, or (3) attach files to messages via unknown vectors.  NOTE: these issues can be leveraged with other vulnerabilities to create remote attack vectors that do not require authentication.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/archive/1/498186/100/0/threaded; https://www.exploit-db.com/exploits/7076; http://www.securityfocus.com/archive/1/498186/100/0/threaded
CVE: CVE-2008-6950
Published: 2009-08-12
Description: Multiple SQL injection vulnerabilities in login.asp in Bankoi WebHosting Control Panel 1.20 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/32299; https://exchange.xforce.ibmcloud.com/vulnerabilities/46637; https://www.exploit-db.com/exploits/7120
CVE: CVE-2008-6951
Published: 2009-08-12
Description: MauryCMS 0.53.2 and earlier does not require administrative authentication for Editors/fckeditor/editor/filemanager/browser/default/browser.html, which allows remote attackers to upload arbitrary files via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/32787; http://www.securityfocus.com/bid/32439; https://exchange.xforce.ibmcloud.com/vulnerabilities/46802
CVE: CVE-2008-6952
Published: 2009-08-12
Description: SQL injection vulnerability in Rss.php in MauryCMS 0.53.2 and earlier allows remote attackers to execute arbitrary SQL commands via the c parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/49963; http://secunia.com/advisories/32787; http://www.securityfocus.com/bid/32364
CVE: CVE-2008-6953
Published: 2009-08-12
Description: Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2008-11/0082.html; http://osvdb.org/49791; http://retrogod.altervista.org/9sg_oovoo_url_poc.html
CVE: CVE-2008-6954
Published: 2009-08-12
Description: The web interface (CobblerWeb) in Cobbler before 1.2.9 allows remote authenticated users to execute arbitrary Python code in cobblerd by editing a Cheetah kickstart template to import arbitrary Python modules.
CVSS Score: 9.0 (HIGH)
CWE: CWE-264
References: http://freshmeat.net/projects/cobbler/releases/288374; http://osvdb.org/50291; http://secunia.com/advisories/32737
CVE: CVE-2008-6955
Published: 2009-08-12
Description: mxCamArchive 2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain configuration details and passwords via a direct request for archive/config.ini.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://osvdb.org/49886; http://secunia.com/advisories/32751; http://www.securityfocus.com/bid/32324
CVE: CVE-2008-6956
Published: 2009-08-12
Description: Static code injection vulnerability in admin/admin.php in mxCamArchive 2.2 allows remote authenticated administrators to inject arbitrary PHP code into an unspecified program via the description parameter, which is executed by invocation of index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/49887; http://secunia.com/advisories/32751; https://exchange.xforce.ibmcloud.com/vulnerabilities/46658
CVE: CVE-2008-6957
Published: 2009-08-12
Description: member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasswd actions, possibly involving predictable generation of the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/32731; http://www.80vul.com/dzvul/sodb/14/dz-exp-sodb-2008-14_php.htm; http://www.discuz.net/archiver/?tid-1112426.html
CVE: CVE-2008-6958
Published: 2009-08-12
Description: wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/50202; http://secunia.com/advisories/32731; http://www.80vul.com/dzvul/sodb/13/dz-exp-sodb-2008-13_php.htm