deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3718
Published: 2005-11-21
Description: UTStarcom F1000 VOIP WIFI Phone s2.0 running VxWorks 5.5.1 with kernel WIND 2.6 does not allow users to disable access to (1) SNMP or (2) the rlogin port TCP 513, which allows remote attackers to exploit other vulnerabilities such as CVE-2005-3716, or execute arbitrary shell commands via rlogin, which does not require authentication.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-November/038834.html; http://secunia.com/advisories/17629; http://www.securityfocus.com/bid/15476
CVE: CVE-2005-3719
Published: 2005-11-21
Description: Hitachi IP5000 VOIP WIFI Phone 1.5.6 has a hard-coded administrator password of "0000", which allows attackers with physical access to obtain sensitive information and modify the phone's configuration.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8951&w=2; http://secunia.com/advisories/17628; http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE: CVE-2005-3720
Published: 2005-11-21
Description: The default index page in the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 lists sensitive information such as software versions.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8951&w=2; http://secunia.com/advisories/17628; http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE: CVE-2005-3721
Published: 2005-11-21
Description: The default configuration of the HTTP server in Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not require authentication for sensitive configuration pages, which allows remote attackers to modify configuration.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8951&w=2; http://secunia.com/advisories/17628; http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE: CVE-2005-3722
Published: 2005-11-21
Description: The SNMP v1/v2c daemon in Hitachi IP5000 VOIP WIFI Phone 1.5.6 allows remote attackers to gain read or write access to system configuration using arbitrary SNMP credentials.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8951&w=2; http://secunia.com/advisories/17628; http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE: CVE-2005-3723
Published: 2005-11-21
Description: Hitachi IP5000 VOIP WIFI Phone 1.5.6 does not allow the user to disable access to (1) SNMP or (2) TCP port 3390, which allows remote attackers to modify configuration using CVE-2005-3722, or access the Unidata Shell to obtain sensitive information or cause a denial of service.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8951&w=2; http://secunia.com/advisories/17628; http://www.hitachi-cable.co.jp/ICSFiles/infosystem/security/76659792_e.pdf
CVE: CVE-2005-3724
Published: 2005-11-21
Description: Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 allows remote attackers to obtain sensitive information and possibly cause a denial of service via a direct connection to UDP port 9090, which is undocumented and does not require authentication.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-200
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6673&w=2; http://www.osvdb.org/21292; http://www.securityfocus.com/bid/15478
CVE: CVE-2005-3725
Published: 2005-11-21
Description: Zyxel P2000W Version 1 VOIP WIFI Phone Wj.00.10 uses hardcoded IP addresses for its DNS servers, which could allow remote attackers to cause a denial of service or hijack Zyxel phones by attacking or spoofing the hardcoded DNS servers.  NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6673&w=2; http://www.securityfocus.com/bid/15478; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]6673&w=2
CVE: CVE-2005-3726
Published: 2005-11-21
Description: SQL injection vulnerability in Interspire ArticleLive NX 0.3 allows remote attackers to execute arbitrary SQL commands via the Query parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/ref/20/20833-articlelive-sql.txt; http://secunia.com/advisories/17585; http://www.osvdb.org/20833
CVE: CVE-2005-3727
Published: 2005-11-21
Description: SQL injection vulnerability in debug/query_results.jsp in Idetix Software Systems Revize CMS allows remote attackers to execute arbitrary SQL commands via the query parameter.
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html; http://secunia.com/advisories/17623; http://securitytracker.com/id?1015231
CVE: CVE-2005-3728
Published: 2005-11-21
Description: Idetix Software Systems Revize CMS stores conf/revize.xml under the web document root with insufficient access control, which allows remote attackers to obtain sensitive configuration information.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html; http://secunia.com/advisories/17623; http://securitytracker.com/id?1015231
CVE: CVE-2005-3729
Published: 2005-11-21
Description: Idetix Software Systems Revize CMS allows remote attackers to obtain sensitive information via direct requests to files in the revize/debug directory, such as (1) apptables.html and (2) main.html.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html; http://secunia.com/advisories/17623; http://securitytracker.com/id?1015231
CVE: CVE-2005-3730
Published: 2005-11-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in HTTPTranslatorServlet in Idetix Software Systems Revize CMS allow remote attackers to inject arbitrary web script or HTML via the (1) resourcetype, (2) objectmap, and (3) redirect parameters, possibly involving setWebSpace.jsp.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2005/11/revizer-cms-sql-information-disclosure.html; http://secunia.com/advisories/17623; http://securitytracker.com/id?1015231
CVE: CVE-2005-3731
Published: 2005-11-21
Description: Unspecified vulnerability in yaSSL before 1.0.6 has unknown impact and attack vectors, related to "certificate chain processing."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17619; http://www.osvdb.org/20831; http://www.securityfocus.com/bid/15487
CVE: CVE-2005-3632
Published: 2005-11-21
Description: Multiple buffer overflows in pnmtopng in netpbm 10.0 and earlier allow attackers to execute arbitrary code via a crafted PNM file.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/17544; http://secunia.com/advisories/17671; http://secunia.com/advisories/17679
CVE: CVE-2005-3732
Published: 2005-11-21
Description: The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in racoon in ipsec-tools before 0.6.3, when running in aggressive mode, allows remote attackers to cause a denial of service (null dereference and crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc; http://archives.neohapsis.com/archives/bugtraq/2005-12/0161.html; http://cvs.sourceforge.net/viewcvs.py/ipsec-tools/ipsec-tools/src/racoon/isakmp_agg.c?r1=1.20.2.3&r2=1.20.2.4&diff_format=u
CVE: CVE-2005-2339
Published: 2005-11-21
Description: Cross-site scripting (XSS) vulnerability in the Unicode version of msearch (unicode-msearch) 1.51(U1)-beta1, 1.51(U1), and 1.52(U1) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%2379925E6F/index.html; http://jvn.jp/jp/JVN%2379925E6F/index.html
CVE: CVE-2005-3733
Published: 2005-11-21
Description: The Internet Key Exchange version 1 (IKEv1) implementation in Juniper JUNOS and JUNOSe software for M, T, and J-series routers before release 6.4, and E-series routers before 7-1-0, allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.  NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.5 (HIGH)
References: http://jvn.jp/niscc/NISCC-273756/index.html; http://secunia.com/advisories/17568; http://securitytracker.com/id?1015203
CVE: CVE-2005-3734
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in the "add content" page in phpMyFAQ 1.5.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) thema, (2) username, and (3) usermail parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17649; http://securityreason.com/securityalert/196; http://www.osvdb.org/20989
CVE: CVE-2005-3735
Published: 2005-11-22
Description: Multiple SQL injection vulnerabilities in e-Quick Cart allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in shopaddtocart.asp, (2) strpemail parameter in shopprojectlogin.asp, and (3) id parameter in shoptellafriend.asp.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17652; http://securitytracker.com/id?1015244; http://www.osvdb.org/20997
CVE: CVE-2005-3736
Published: 2005-11-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in e-Quick Cart allow remote attackers to inject arbitrary web script or HTML via the (1) strgifttoname parameter in shopgift.asp, (2) strfirstname parameter in shopmaillist.asp, (3) strpid parameter in shopprojectlogin.asp, and (4) Custname parameter in shoptellafriend.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://securitytracker.com/id?1015244; http://www.osvdb.org/20993; http://www.osvdb.org/20994
CVE: CVE-2005-3737
Published: 2005-11-22
Description: Buffer overflow in the SVG importer (style.cpp) of inkscape 0.41 through 0.42.2 might allow remote attackers to execute arbitrary code via a SVG file with long CSS style property values.
CVSS Score: 5.1 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=330894; http://cvs.sourceforge.net/viewcvs.py/inkscape/inkscape/src/style.cpp?r1=1.110&r2=1.110.2.1; http://secunia.com/advisories/17651
CVE: CVE-2005-3738
Published: 2005-11-22
Description: globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.
CVSS Score: 2.6 (LOW)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0520.html; http://forum.mamboserver.com/showthread.php?t=66154; http://secunia.com/advisories/17622
CVE: CVE-2005-3739
Published: 2005-11-22
Description: Unspecified vulnerability in subheader.php in PHP-Fusion 6.00.206 and earlier allows remote attackers to obtain the full path via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://myblog.it-security23.net/advisories/advisory-6.txt; http://seclists.org/lists/bugtraq/2005/Nov/0232.html; http://seclists.org/lists/bugtraq/2005/Nov/0237.html
CVE: CVE-2005-3740
Published: 2005-11-22
Description: Multiple SQL injection vulnerabilities in PHP-Fusion 6.00.206 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the forum_id parameter to options.php or (2) lastvisited parameter to viewforum.php.
CVSS Score: 7.5 (HIGH)
References: http://myblog.it-security23.net/advisories/advisory-6.txt; http://seclists.org/lists/bugtraq/2005/Nov/0232.html; http://seclists.org/lists/bugtraq/2005/Nov/0237.html
CVE: CVE-2005-3741
Published: 2005-11-22
Description: Almond Classifieds does not properly verify the password, which allows attackers to bypass access restrictions.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/15505; http://www.securityfocus.com/bid/15505
CVE: CVE-2005-3742
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in popup.php in Advanced Poll 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the poll_ident parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17669; http://securitytracker.com/id?1015245; http://www.osvdb.org/21006
CVE: CVE-2005-3743
Published: 2005-11-22
Description: SQL injection vulnerability in results.php in SimplePoll allows remote attackers to execute arbitrary SQL commands via the pollid parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/21035; http://www.securityfocus.com/bid/15508; http://www.osvdb.org/21035
CVE: CVE-2005-3744
Published: 2005-11-22
Description: SQL injection vulnerability in index.php in phpComasy 0.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: an examination of the 0.7.5 source code suggests that there is no id parameter being handled directly by index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pridels0.blogspot.com/2005/11/phpcomasy-id-sql-injection.html; http://secunia.com/advisories/17660; http://www.osvdb.org/20984
CVE: CVE-2005-3745
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17677; http://secunia.com/advisories/18341; http://securityreason.com/securityalert/197
CVE: CVE-2005-3746
Published: 2005-11-22
Description: SQL injection vulnerability in thread.php in APBoard allows remote attackers to execute arbitrary SQL commands via the start parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/198; http://www.osvdb.org/21289; http://www.securityfocus.com/archive/1/417298
CVE: CVE-2005-3747
Published: 2005-11-22
Description: Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters.  NOTE: this might be the same issue as CVE-2006-2758.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/17659; http://secunia.com/advisories/22669; http://sourceforge.net/project/shownotes.php?release_id=372086&group_id=7322
CVE: CVE-2005-3748
Published: 2005-11-22
Description: SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html; http://secunia.com/advisories/17638; http://www.osvdb.org/21002
CVE: CVE-2005-3749
Published: 2005-11-22
Description: Unspecified "absolute path vulnerabilities" in the diagela command (diagela.sh) in IBM AIX 5.2 and 5.3 have unknown impact and attack vectors.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/17474; http://securitytracker.com/id?1015212; http://www-1.ibm.com/support/search.wss?rs=0&q=IY78800&apar=only
CVE: CVE-2005-3750
Published: 2005-11-22
Description: Opera before 8.51 on Linux and Unix systems allows remote attackers to execute arbitrary code via shell metacharacters (backticks) in a URL that another product provides in a command line argument when launching Opera.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0677.html; http://secunia.com/advisories/16907; http://secunia.com/advisories/18111
CVE: CVE-2005-3751
Published: 2005-11-22
Description: HTTP request smuggling vulnerability in Pound before 1.9.4 allows remote attackers to poison web caches, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with conflicting Content-length and Transfer-encoding headers.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18367; http://secunia.com/advisories/18381; http://secunia.com/advisories/20215
CVE: CVE-2005-3752
Published: 2005-11-22
Description: Unspecified vulnerability in ldapdiff before 1.1.1 has unknown impact and attack vectors, related to "ldapdiff.conf path construction".
CVSS Score: 10.0 (HIGH)
References: http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz; http://webtomware.rhoen.de/ldapdiff-1.2.1.tar.gz
CVE: CVE-2005-3753
Published: 2005-11-22
Description: Linux kernel before after 2.6.12 and before 2.6.13.1 might allow attackers to cause a denial of service (Oops) via certain IPSec packets that cause alignment problems in standard multi-block cipher processors.  NOTE: it is not clear whether this issue can be triggered by an attacker.
CVSS Score: 7.8 (HIGH)
References: http://bugzilla.kernel.org/show_bug.cgi?id=5194; http://bugzilla.kernel.org/show_bug.cgi?id=5194
CVE: CVE-2005-3754
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via the proxystylesheet variable, which will be executed in the resulting error message.
CVSS Score: 4.3 (MEDIUM)
References: http://metasploit.com/research/vulns/google_proxystylesheet/; http://secunia.com/advisories/17644; http://securitytracker.com/id?1015246
CVE: CVE-2005-3755
Published: 2005-11-22
Description: Directory traversal vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to determine the existence of arbitrary files via a relative path from a style sheet directory, then comparing the resulting error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://metasploit.com/research/vulns/google_proxystylesheet/; http://secunia.com/advisories/17644; http://securitytracker.com/id?1015246
CVE: CVE-2005-3756
Published: 2005-11-22
Description: Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to port scan arbitrary hosts via URLs with modified targets and ports, then comparing the resulting error messages to determine open and closed ports.
CVSS Score: 5.0 (MEDIUM)
References: http://metasploit.com/research/vulns/google_proxystylesheet/; http://secunia.com/advisories/17644; http://securitytracker.com/id?1015246
CVE: CVE-2005-3757
Published: 2005-11-22
Description: The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.
CVSS Score: 7.5 (HIGH)
References: http://metasploit.com/research/vulns/google_proxystylesheet/; http://secunia.com/advisories/17644; http://securitytracker.com/id?1015246
CVE: CVE-2005-3758
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.
CVSS Score: 4.3 (MEDIUM)
References: http://metasploit.com/research/vulns/google_proxystylesheet/; http://secunia.com/advisories/17644; http://securitytracker.com/id?1015246
CVE: CVE-2005-3759
Published: 2005-11-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) gzip/tar and (2) css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-79
References: http://lists.horde.org/archives/announce/2005/000232.html; http://secunia.com/advisories/17599; http://secunia.com/advisories/17703
CVE: CVE-2005-3760
Published: 2005-11-22
Description: Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND).
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/17658; http://securitytracker.com/id?1015255; http://www-1.ibm.com/support/docview.wss?uid=swg1PK13936
CVE: CVE-2005-3761
Published: 2005-11-22
Description: Cross-site scripting (XSS) vulnerability in Exponent CMS 0.96.3 and later versions allows remote attackers to inject arbitrary web script or HTML via (1) Javascript in forms produced by the form generator or (2) the parameters to the installer.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218
CVE: CVE-2005-3762
Published: 2005-11-22
Description: SQL injection vulnerability in the navigation module (navigationmodule) in Exponent CMS 0.96.3 and later versions allows remote attackers to execute arbitrary SQL commands via the parent parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.osvdb.org/21023
CVE: CVE-2005-3763
Published: 2005-11-22
Description: Exponent CMS 0.96.3 and later versions includes the full installation path in the base parameter to thumb.php, which allows remote attackers to obtain sensitive information.  NOTE: this might be resultant from an absolute path traversal vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218
CVE: CVE-2005-3764
Published: 2005-11-22
Description: The image gallery (imagegallery) component in Exponent CMS 0.96.3 and later versions does not properly check the MIME type of uploaded files, with unknown impact from the preview icon, possibly involving injection of HTML.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218; http://secunia.com/advisories/17655
CVE: CVE-2005-3765
Published: 2005-11-22
Description: Exponent CMS 0.96.3 and later versions performs a chmod on uploaded files to give them execute permissions, which allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218
CVE: CVE-2005-3766
Published: 2005-11-22
Description: Exponent CMS 0.96.3 and later versions stores sensitive user pages under the web document root with insufficient access control even though certain permissions are specified, which allows attackers to access the pages by browsing uploaded files.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218
CVE: CVE-2005-3767
Published: 2005-11-22
Description: Exponent CMS 0.96.3 and later versions does not properly restrict the types of uploaded files, which allows remote attackers to upload and execute PHP files.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17505; http://secunia.com/advisories/17655; http://www.securityfocus.com/archive/1/417218
CVE: CVE-2005-3531
Published: 2005-11-23
Description: fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a directory whose name contains certain special characters.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/17691; http://secunia.com/advisories/17695; http://www.gentoo.org/security/en/glsa/glsa-200511-17.xml