deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-2203
Published: 2005-07-11
Description: login.php in phpWishlist before 0.1.15 allows remote attackers to bypass authentication via a direct request to admin.php.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014432; http://unix.freshmeat.net/projects/phpwishlist/?branch_id=53897&release_id=200925; http://securitytracker.com/id?1014432
CVE: CVE-2005-2204
Published: 2005-07-11
Description: Cross-site scripting (XSS) vulnerability in Computer Associates (CA) eTrust SiteMinder 5.5, when the "CSSChecking" parameter is set to "NO," allows remote attackers to inject arbitrary web script or HTML via the (1) PASSWORD or (2) BUFFER parameters to smpwservicescgi.exe, (3) the TARGET parameter to login.fcc, and possibly other vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4959&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6714&w=2; http://secunia.com/advisories/15956
CVE: CVE-2005-2205
Published: 2005-07-11
Description: The ReadLog function in kaiseki.cgi in pngren allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/bugtraq/2005/Jul/0097.html; http://secunia.com/advisories/15981; http://securitytracker.com/id?1014426
CVE: CVE-2005-2206
Published: 2005-07-11
Description: Multiple SQL injection vulnerabilities in CartWIZ allow remote attackers to modify SQL statements via the (1) idProduct parameter to tellAFriend.asp, (2) sortType parameter to viewSupportTickets.asp, or the id parameter to (3) updateCreditCards.asp or (4) deleteCreditCards.asp.
CVSS Score: 7.5 (HIGH)
References: http://digitalparadox.org/viewadvisories.ah?view=42; http://securitytracker.com/id?1014418; http://digitalparadox.org/viewadvisories.ah?view=42
CVE: CVE-2005-2207
Published: 2005-07-11
Description: Cross-site scripting (XSS) vulnerability in store/login.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://digitalparadox.org/viewadvisories.ah?view=42; http://securitytracker.com/id?1014418; http://digitalparadox.org/viewadvisories.ah?view=42
CVE: CVE-2005-2208
Published: 2005-07-11
Description: PrivaShare 1.1b allows remote attackers to cause a denial of service (crash) via a malformed message.
CVSS Score: 5.0 (MEDIUM)
References: http://k.domaindlx.com/shellcore/advisories.asp?bug_report=display&infamous_group=66; http://secunia.com/advisories/15933; http://securitytracker.com/id?1014412
CVE: CVE-2005-2209
Published: 2005-07-11
Description: Capturix ScanShare 1.06 build 50 stores sensitive information such as the password in cleartext in capturixss_cfg.ini, which is readable by local users.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: http://secunia.com/advisories/15995; http://securitytracker.com/id?1014409; http://secunia.com/advisories/15995
CVE: CVE-2005-2210
Published: 2005-07-11
Description: Stack-based buffer overflow in Internet Download Manager 4.05 allows remote attackers to execute arbitrary code via a long URL.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014404; http://www.ihsteam.com/download/ihsexpl/dlm.c; http://securitytracker.com/id?1014404
CVE: CVE-2005-2211
Published: 2005-07-11
Description: Backup Manager 0.5.8a creates temporary files insecurely, which allows local users to conduct unauthorized file operations when a user is burning a CDR.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/15989; http://www.sukria.net/packages/backup-manager/; http://secunia.com/advisories/15989
CVE: CVE-2005-2212
Published: 2005-07-11
Description: Backup Manager 0.5.8a creates an archive repository with world readable and writable permissions, which allows attackers to modify or read the repository.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/15989; http://www.sukria.net/packages/backup-manager/; http://secunia.com/advisories/15989
CVE: CVE-2005-2213
Published: 2005-07-11
Description: Buffer overflow in the mms_interp_header function in mms.c in MMS Ripper before 0.6.4 might allow remote attackers to execute arbitrary code via a file with more than 20 streams.
CVSS Score: 7.5 (HIGH)
References: http://nbenoit.tuxfamily.org/projects/mmsrip/ChangeLog; http://secunia.com/advisories/15987; http://nbenoit.tuxfamily.org/projects/mmsrip/ChangeLog
CVE: CVE-2005-2214
Published: 2005-07-11
Description: apt-setup in Debian GNU/Linux installs the apt.conf file with insecure permissions, which allows local users to obtain sensitive information such as passwords.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=305142; http://secunia.com/advisories/15955; http://www.securityfocus.com/bid/14173
CVE: CVE-2005-0564
Published: 2005-07-12
Description: Stack-based buffer overflow in Microsoft Word 2000 and Word 2002, and Microsoft Works Suites 2000 through 2004, might allow remote attackers to execute arbitrary code via a .doc file with long font information.
CVSS Score: 7.5 (HIGH)
References: http://www.idefense.com/application/poi/display?id=281&type=vulnerabilities; http://www.kb.cert.org/vuls/id/218621; http://www.us-cert.gov/cas/techalerts/TA05-193A.html
CVE: CVE-2005-1219
Published: 2005-07-12
Description: Buffer overflow in the Microsoft Color Management Module for Windows allows remote attackers to execute arbitrary code via an image with crafted ICC profile format tags.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16004/; http://www.kb.cert.org/vuls/id/720742; http://www.securityfocus.com/bid/14214
CVE: CVE-2005-1859
Published: 2005-07-12
Description: Unknown vulnerability in arshell in the Array Service (arrayd) for SGI ProPack 3 with SP 5 and 6, and SGI ProPack 4, allows local users to execute arbitrary shells as root on other hosts in the cluster or array.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20050701-01-P.asc; http://securitytracker.com/id?1014454; ftp://patches.sgi.com/support/free/security/advisories/20050701-01-P.asc
CVE: CVE-2005-2215
Published: 2005-07-12
Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.4.x before 1.4.6 and 1.5 before 1.5beta3 allows remote attackers to inject arbitrary web script or HTML via a parameter in the page move template, a different vulnerability than CVE-2005-1888.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/15950; http://sourceforge.net/project/shownotes.php?release_id=340290; http://www.novell.com/linux/security/advisories/2005_19_sr.html
CVE: CVE-2005-2216
Published: 2005-07-12
Description: PHP remote file inclusion vulnerability in gals.php in PhotoGal Photo Gallery 1.5 and earlier allows remote attackers to execute arbitrary code via the news_file parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1014397; http://securitytracker.com/id?1014397
CVE: CVE-2005-2217
Published: 2005-07-12
Description: Dansie Shopping Cart stores the vars.dat file under the web root with insufficient access control, which might allow remote attackers to obtain sensitive information such as program variables.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014396; http://securitytracker.com/id?1014396
CVE: CVE-2005-2219
Published: 2005-07-12
Description: Hosting Controller 6.1 Hotfix 2.1 allows remote authenticated users to perform unauthorized actions, such as modifying the credit limit, via a direct request to AccountActions.asp and modifying the CreditLimit parameter in an UpdateCreditLimit action.
CVSS Score: 4.6 (MEDIUM)
References: http://securitytracker.com/id?1014443; http://securitytracker.com/id?1014443
CVE: CVE-2005-2220
Published: 2005-07-12
Description: Dragonfly Commerce allows remote attackers to change a product price by modifying the x_DragonflyCartProductPrice hidden field to (1) dc_Categorieslist.asp, (2) dc_Categoriesview.asp, (3) dc_productslist.asp, and (4) dc_productslist_Clearance.asp.  NOTE: the vendor has disputed this issue, saying that "Dragonfly Commerce does not allow for editing prices nor does it allow for viewing information about clients stored in the database except by the store owner and authorized staff as appointed in the store administration."  However, SecurityTracker claims that they have been able to confirm the problem
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8341&w=2; http://securitytracker.com/id?1014451; http://www.digitalparadox.org/viewadvisories.ah?view=46
CVE: CVE-2005-2221
Published: 2005-07-12
Description: Multiple SQL injection vulnerabilities in Dragonfly Commerce allows remote attackers to modify SQL statements and possibly execute arbitrary SQL commands via the (1) key parameter to dc_Categoriesview.asp, (2) dc_productslist_Clearance.asp, (3) PID parameter to ratings.asp, (4) dc_Productsview.asp, (5) start, (6) key_mp, (7) searchtype, or (8) psearch parameters to dc_forum_Postslist.asp.  NOTE: the vendor has disputed this issue, saying that the error messages arise from invalid category and product numbers.  Assuming that this is the case, the issue still satisfies the CVE definition of "exposure.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8341&w=2; http://www.digitalparadox.org/viewadvisories.ah?view=46; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8341&w=2
CVE: CVE-2005-2222
Published: 2005-07-12
Description: Unknown vulnerability in the HTTPMail service in MailEnable Professional before 1.6 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1014427; http://www.mailenable.com/professionalhistory.asp; http://securitytracker.com/id?1014427
CVE: CVE-2005-2223
Published: 2005-07-12
Description: Unknown vulnerability in the SMTP service in MailEnable Standard before 1.9 and Professional before 1.6 allows remote attackers to cause a denial of service (crash) during authentication.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014427; http://www.mailenable.com/professionalhistory.asp; http://www.mailenable.com/standardhistory.asp
CVE: CVE-2005-2224
Published: 2005-07-12
Description: aspnet_wp.exe in Microsoft ASP.NET web services allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a crafted SOAP message to an RPC/Encoded method.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-835
References: http://secunia.com/advisories/16005; http://www.securityfocus.com/bid/14217; http://www.spidynamics.com/spilabs/advisories/aspRCP.html
CVE: CVE-2005-2225
Published: 2005-07-12
Description: Microsoft MSN Messenger allows remote attackers to cause a denial of service via a plaintext message containing the ".pif" string, which is interpreted as a malicious file extension and causes users to be kicked from a group conversation. NOTE: it has been reported that Gaim is also affected, so this may be an issue in the protocol or MSN servers.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014444; http://www.digitalparadox.org/viewadvisories.ah?view=45; http://www.messenger-blog.com/?p=146
CVE: CVE-2005-2226
Published: 2005-07-12
Description: Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://support.microsoft.com/default.aspx/kb/900930; http://www.securityfocus.com/bid/14225; http://support.microsoft.com/default.aspx/kb/900930
CVE: CVE-2005-2227
Published: 2005-07-12
Description: Softiacom wMailserver 1.0 stores passwords in plaintext in the Darsite\MAILSRV\Admin key, which allows local users to gain administrator privileges.
CVSS Score: 7.2 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8592&w=2; http://securitytracker.com/id?1014450; http://www.securityfocus.com/bid/14212
CVE: CVE-2005-2228
Published: 2005-07-12
Description: Web Wiz Forums 7.9 and 8.0 allows remote attackers to view message titles of a hidden forum.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/14207; http://www.securityfocus.com/bid/14207
CVE: CVE-2005-2229
Published: 2005-07-12
Description: Blog Torrent 0.92 and earlier stores sensitive files under the web document root in the (1) data or (2) torrents directories with insufficient access control, which allows remote attackers to obtain sensitive information such as account names and password hashes, as demonstrated using data/newusers.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1563&w=2; http://secunia.com/advisories/15983; http://securitytracker.com/id?1014449
CVE: CVE-2005-2230
Published: 2005-07-12
Description: Electronic Mail Operator (elmo) 1.3.2-r1 and earlier creates the elmostats temporary file insecurely, which allows local users to overwrite arbitrary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/15977; http://www.securityfocus.com/bid/14235; http://www.zataz.net/adviso/elmo-06272005.txt
CVE: CVE-2005-2231
Published: 2005-07-12
Description: High Availability Linux Project Heartbeat 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16039; http://www.debian.org/security/2005/dsa-761; http://secunia.com/advisories/16039
CVE: CVE-2005-2232
Published: 2005-07-12
Description: Buffer overflow in invscout in IBM AIX 5.1.0 through 5.3.0 might allow local users to execute arbitrary code via a long command line argument.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/15636; http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0002.txt
CVE: CVE-2005-2233
Published: 2005-07-12
Description: Buffer overflow in multiple "p" commands in IBM AIX 5.1, 5.2 and 5.3 might allow local users to execute arbitrary code via long command line arguments to (1) penable or other hard-linked files including (2) pdisable, (3) pstart, (4) phold, (5) pdelay, or (6) pshare.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15636; http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0006.txt
CVE: CVE-2005-2234
Published: 2005-07-12
Description: Buffer overflow in the getlvname command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15636; http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0005.txt
CVE: CVE-2005-2235
Published: 2005-07-12
Description: Buffer overflow in the diagTasksWebSM command in IBM AIX 5.1, 5.2 and 5.3, might allow local users to execute arbitrary code via long command line arguments.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/15636; http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0004.txt
CVE: CVE-2005-2236
Published: 2005-07-12
Description: Format string vulnerability in the paginit command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via format strings in command line arguments.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0003.txt; http://www.securityfocus.com/bid/13911
CVE: CVE-2005-2237
Published: 2005-07-12
Description: Format string vulnerability in the swcons command in IBM AIX 5.3, and possibly other versions, might allow local users to execute arbitrary code via long command line arguments.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1014132; http://www.caughq.org/advisories/CAU-2005-0007.txt; http://www.securityfocus.com/bid/13921
CVE: CVE-2005-2238
Published: 2005-07-12
Description: ftpd in IBM AIX 5.1, 5.2 and 5.3 allows remote authenticated users to cause a denial of service (port exhaustion and memory consumption) by using all ephemeral ports.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1014421; http://securitytracker.com/id?1014421
CVE: CVE-2005-2239
Published: 2005-07-12
Description: oftpd 0.3.7 allows remote attackers to cause a denial of service via a USER command with a large number of null (\0) characters.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1014413; http://securitytracker.com/id?1014413
CVE: CVE-2005-2240
Published: 2005-07-12
Description: xpvm.tcl in xpvm 1.2.5 allows local users to overwrite arbitrary files via a symlink attack on the xpvm.trace.$user temporary file.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16040; http://secunia.com/advisories/19251; http://www.debian.org/security/2006/dsa-1003
CVE: CVE-2005-2241
Published: 2005-07-12
Description: Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 does not quickly time out Realtime Information Server Data Collection (RISDC) sockets, which results in a "resource leak" that allows remote attackers to cause a denial of service (memory and connection consumption) in RisDC.exe.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml; http://www.securityfocus.com/bid/14250; http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml
CVE: CVE-2005-2242
Published: 2005-07-12
Description: Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to cause a denial of service (memory consumption and restart) via crafted packets to (1) the CTI Manager (ctimgr.exe) or (2) the CallManager (ccm.exe).
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml; http://www.securityfocus.com/bid/14251; http://www.securityfocus.com/bid/14252
CVE: CVE-2005-2243
Published: 2005-07-12
Description: Memory leak in inetinfo.exe in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1, when Multi Level Admin (MLA) is enabled, allows remote attackers to cause a denial of service (memory consumption) via a large number of Admin Service Tool (AST) logins that fail.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml; http://www.securityfocus.com/bid/14253; http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml
CVE: CVE-2005-2244
Published: 2005-07-12
Description: The aupair service (aupair.exe) in Cisco CallManager (CCM) 3.2 and earlier, 3.3 before 3.3(5), 4.0 before 4.0(2a)SR2b, and 4.1 4.1 before 4.1(3)SR1 allows remote attackers to execute arbitrary code or corrupt memory via crafted packets that trigger a memory allocation failure and lead to a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://www.cisco.com/warp/public/707/cisco-sa-20050712-ccm.shtml; http://www.securityfocus.com/bid/14255; https://exchange.xforce.ibmcloud.com/vulnerabilities/19053
CVE: CVE-2005-2245
Published: 2005-07-12
Description: Unknown vulnerability in F5 BIG-IP 9.0.2 through 9.1 allows attackers to "subvert the authentication of SSL transactions," via unknown attack vectors, possibly involving NATIVE ciphers.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16008; http://securitytracker.com/id?1014452; http://tech.f5.com/home/bigip-next/solutions/security/sol4944.html
CVE: CVE-2005-2246
Published: 2005-07-12
Description: Multiple PHP remote file inclusion vulnerabilities in iPhotoAlbum 1.1 allow remote attackers to execute arbitrary code via the (1) doc_path parameter to getpage.php or (2) set_menu parameter to lib/static/header.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/16031; http://securitytracker.com/id?1014448; http://www.attrition.org/pipermail/vim/2007-March/001474.html
CVE: CVE-2005-2247
Published: 2005-07-12
Description: Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://moodle.org/doc/?frame=release.html; http://secunia.com/advisories/16028; http://moodle.org/doc/?frame=release.html
CVE: CVE-2005-2095
Published: 2005-07-13
Description: options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, which allows remote attackers to modify or read the preferences of other users, conduct cross-site scripting XSS) attacks, and write arbitrary files.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.apple.com/archives/security-announce/2005//Aug/msg00001.html; http://lists.apple.com/archives/security-announce/2005/Aug/msg00000.html; http://www.debian.org/security/2005/dsa-756
CVE: CVE-2005-2248
Published: 2005-07-13
Description: Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the download folder.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/16003; http://www.securityfocus.com/bid/14211; http://secunia.com/advisories/16003
CVE: CVE-2005-2249
Published: 2005-07-13
Description: Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability.
CVSS Score: 10.0 (HIGH)
References: http://freshmeat.net/projects/jinzora/?branch_id=43140&release_id=200390; http://secunia.com/advisories/15952; http://freshmeat.net/projects/jinzora/?branch_id=43140&release_id=200390
CVE: CVE-2005-2250
Published: 2005-07-13
Description: Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbitrary code via a long filename in an OBEX file share.
CVSS Score: 7.5 (HIGH)
References: http://affix.sourceforge.net/affix_212_sec.patch; http://www.debian.org/security/2005/dsa-762; http://www.digitalmunition.com/DMA%5B2005-0712a%5D.txt
CVE: CVE-2005-2251
Published: 2005-07-13
Description: PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote attackers to execute arbitrary code via the cfgProgDir parameter, a variant of CVE-2001-1468.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15994; http://securitytracker.com/id?1014410; http://www.securityfocus.com/bid/14201
CVE: CVE-2005-2252
Published: 2005-07-13
Description: PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPAUCTION_RM_ID cookie to the user ID.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15967; http://securitytracker.com/id?1014423; http://secunia.com/advisories/15967
CVE: CVE-2005-2253
Published: 2005-07-13
Description: SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter to adsearch.php. NOTE: there is evidence that viewnews.php may not be part of the PhpAuction product, so it is not included in this description.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/15967; http://securitytracker.com/id?1014423; http://secunia.com/advisories/15967
CVE: CVE-2005-2254
Published: 2005-07-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web script or HTML via the lan parameter to (1) index.php or (2) admin/index.php, or (3) the auction_id parameter to profile.php.  NOTE: there is evidence that viewnews.php and login.php may not be part of the PhpAuction product, so they are not included in this description.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/15967; http://securitytracker.com/id?1014423; http://secunia.com/advisories/15967
CVE: CVE-2005-2255
Published: 2005-07-13
Description: Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP files, or obtain sensitive path information via ".."  sequences in the lan parameter to (1) index.php or (2) admin/index.php.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/15967; http://securitytracker.com/id?1014423; http://secunia.com/advisories/15967