deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-6742
Published: 2011-04-21
Description: The get_filter_list function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0006 does not properly perform certain sub filter parsing, which allows remote authenticated users to cause a denial of service (infinite loop) via a malformed search filter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO07450; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO07450
CVE: CVE-2007-6743
Published: 2011-04-21
Description: Double free vulnerability in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0005 allows remote authenticated users to cause a denial of service (ABEND) via search operations that trigger recursive filter_free calls.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO07174; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO07174
CVE: CVE-2008-7287
Published: 2011-04-21
Description: Multiple memory leaks in the (1) ldap_init and (2) ldap_url_search_direct API functions in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allow remote authenticated users to cause a denial of service (memory consumption) by making many function calls.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO09650; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO09650
CVE: CVE-2008-7288
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 on AIX allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO09666; http://www.ibm.com/support/docview.wss?uid=swg2402966; http://www.ibm.com/support/docview.wss?uid=swg1IO09666
CVE: CVE-2008-7289
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 does not properly handle the simultaneous changing of multiple passwords, which makes it easier for remote authenticated users to cause a denial of service (DB2 daemon deadlock) by making password changes that trigger updates to a DB2 password-history table.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg1IO09667; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO09667
CVE: CVE-2008-7290
Published: 2011-04-21
Description: Memory leak in the ldap_explode_rdn API function in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007 allows remote authenticated users to cause a denial of service (memory consumption) by making many function calls.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO09680; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO09680
CVE: CVE-2009-5072
Published: 2011-04-21
Description: Memory leak in the ldap_explode_dn function in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.61 (aka 6.0.0.8-TIV-ITDS-IF0003) allows remote authenticated users to cause a denial of service (memory consumption) via an empty string argument.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO11407; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO11407
CVE: CVE-2009-5073
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.59 (aka 6.0.0.8-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (infinite loop and daemon hang) by adding a nested group that contains the Distinguished Name (DN) of its parent entry.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO10802; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO10802
CVE: CVE-2010-4785
Published: 2011-04-21
Description: The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) on Linux, Solaris, and Windows allows remote authenticated users to cause a denial of service (ABEND) via a malformed LDAP extended operation that triggers certain comparisons involving the NULL operation OID.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO11814; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO11814
CVE: CVE-2010-4786
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon crash or hang) via a paged search, as demonstrated by a certain idsldapsearch command, related to an improper ibm-slapdIdleTimeOut configuration setting.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO12316; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO12316
CVE: CVE-2010-4787
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.63 (aka 6.0.0.8-TIV-ITDS-IF0005) allows remote authenticated users to cause a denial of service (daemon hang) via a paged search that triggers improper mutex processing.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO12476; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO12476
CVE: CVE-2010-4788
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.62 (aka 6.0.0.8-TIV-ITDS-IF0004) does not perform certain locking of linked-list access, which allows remote authenticated users to cause a denial of service (daemon crash) via a paged search.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://www.ibm.com/support/docview.wss?uid=swg1IO11943; http://www.ibm.com/support/docview.wss?uid=swg24029672; http://www.ibm.com/support/docview.wss?uid=swg1IO11943
CVE: CVE-2010-4789
Published: 2011-04-21
Description: Use-after-free vulnerability in the proxy-server implementation in IBM Tivoli Directory Server (TDS) 6.0 before 6.0.0.65 (aka 6.0.0.8-TIV-ITDS-IF0007) and 6.3 before 6.3.0.1 (aka 6.3.0.0-TIV-ITDS-IF0001) allows remote authenticated users to cause a denial of service (daemon crash) via a paged search that is interrupted by an LDAP Unbind operation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO13364; http://www.ibm.com/support/docview.wss?uid=swg1IO13451; http://www.ibm.com/support/docview.wss?uid=swg24029659
CVE: CVE-2011-1149
Published: 2011-04-21
Description: Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://android.git.kernel.org/?p=kernel/common.git%3Ba=commit%3Bh=c98a285075f26e2b17a5baa2cb3eb6356a75597e; http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=25b15be9120bcdaa0aba622c67ad2c835d9e91ca; http://c-skills.blogspot.com/2011/01/adb-trickery-again.html
CVE: CVE-2011-1206
Published: 2011-04-21
Description: Stack-based buffer overflow in the server process in ibmslapd.exe in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) allows remote attackers to execute arbitrary code via a crafted LDAP request.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/44184; http://securityreason.com/securityalert/8213; http://securitytracker.com/id?1025358
CVE: CVE-2011-1820
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010, 6.0 before 6.0.0.67 (aka 6.0.0.8-TIV-ITDS-IF0009), 6.1 before 6.1.0.40 (aka 6.1.0.5-TIV-ITDS-IF0003), 6.2 before 6.2.0.16 (aka 6.2.0.3-TIV-ITDS-IF0002), and 6.3 before 6.3.0.3 (aka 6.3.0.0-TIV-ITDS-IF0003) does not properly handle the ibm-auditAttributesOnGroupEvalOp setting for auditing of extended operations, which might allow attackers to obtain sensitive information by reading the audit log.
CVSS Score: 1.7 (LOW)
CWE: CWE-200
References: http://secunia.com/advisories/44184; http://securitytracker.com/id?1025358; http://www.ibm.com/support/docview.wss?uid=swg1IO14023
CVE: CVE-2011-1821
Published: 2011-04-21
Description: IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0010 on Windows allows remote authenticated users to cause a denial of service (daemon hang) via a cn=changelog search.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www.ibm.com/support/docview.wss?uid=swg1IO13000; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO13000
CVE: CVE-2011-1822
Published: 2011-04-21
Description: The LDAP_ADD implementation in IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-IF0009 stores a cleartext SHA password in the change log, which might allow local users to obtain sensitive information by reading this log.
CVSS Score: 2.1 (LOW)
CWE: CWE-255
References: http://www.ibm.com/support/docview.wss?uid=swg1IO11882; http://www.ibm.com/support/docview.wss?uid=swg24029663; http://www.ibm.com/support/docview.wss?uid=swg1IO11882
CVE: CVE-2011-1421
Published: 2011-04-22
Description: EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5, when the client push feature is enabled, uses weak permissions for an unspecified file, which allows local users to gain privileges via unknown vectors.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/44237; http://securityreason.com/securityalert/8214; http://securitytracker.com/id?1025383
CVE: CVE-2011-1422
Published: 2011-04-22
Description: Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in EMC RSA Adaptive Authentication On-Premise (AAOP) 2.x, 5.7.x, and 6.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/44236; http://securityreason.com/securityalert/8215; http://securitytracker.com/id?1025382
CVE: CVE-2011-1534
Published: 2011-04-22
Description: Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x allows remote authenticated users to obtain access to processes via unknown vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1216&w=2; http://secunia.com/advisories/44230; http://www.securitytracker.com/id?1025386
CVE: CVE-2011-1685
Published: 2011-04-22
Description: Best Practical Solutions RT 3.8.0 through 3.8.9 and 4.0.0rc through 4.0.0rc7, when the CustomFieldValuesSources (aka external custom field) option is enabled, allows remote authenticated users to execute arbitrary code via unspecified vectors, as demonstrated by a cross-site request forgery (CSRF) attack.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2011-1686
Published: 2011-04-22
Description: Multiple SQL injection vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors, as demonstrated by reading data.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2011-1687
Published: 2011-04-22
Description: Best Practical Solutions RT 3.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote authenticated users to obtain sensitive information by using the search interface, as demonstrated by retrieving encrypted passwords.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2011-1688
Published: 2011-04-22
Description: Directory traversal vulnerability in Best Practical Solutions RT 3.2.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allows remote attackers to read arbitrary files via a crafted HTTP request.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2011-1689
Published: 2011-04-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in Best Practical Solutions RT 2.0.0 through 3.6.10, 3.8.0 through 3.8.9, and 4.0.0rc through 4.0.0rc7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2011-1690
Published: 2011-04-22
Description: Best Practical Solutions RT 3.6.0 through 3.6.10 and 3.8.0 through 3.8.8 allows remote attackers to trick users into sending credentials to an arbitrary server via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-255
References: http://blog.bestpractical.com/2011/04/security-vulnerabilities-in-rt.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000187.html; http://lists.bestpractical.com/pipermail/rt-announce/2011-April/000188.html
CVE: CVE-2010-2787
Published: 2011-04-27
Description: api.php in MediaWiki before 1.15.5 does not prevent use of public caching headers for private data, which allows remote attackers to bypass intended access restrictions and obtain sensitive information by retrieving documents from an HTTP proxy cache that has been used by a victim.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
CVE: CVE-2010-2788
Published: 2011-04-27
Description: Cross-site scripting (XSS) vulnerability in profileinfo.php in MediaWiki before 1.15.5, when wgEnableProfileInfo is enabled, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html
CVE: CVE-2010-2789
Published: 2011-04-27
Description: PHP remote file inclusion vulnerability in MediaWikiParserTest.php in MediaWiki 1.16 beta, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html; http://openwall.com/lists/oss-security/2010/07/29/4; http://lists.wikimedia.org/pipermail/mediawiki-announce/2010-July/000092.html
CVE: CVE-2010-3260
Published: 2011-04-27
Description: oxf/xml/xerces/XercesSAXParserFactoryImpl.java in the xforms-server component in the XForms service in Orbeon Forms before 3.9 does not properly restrict DTDs in Ajax requests, which allows remote attackers to read arbitrary files or send HTTP requests to intranet servers via an entity declaration in conjunction with an entity reference, related to an "XML injection" issue.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://wiki.orbeon.com/forms/doc/developer-guide/release-notes/39; http://www.securityfocus.com/bid/47362; http://www.stratsec.net/Research/Advisories/Orbeon-Forms-XML-Entity-Dereferencing-%28SS-2011-004
CVE: CVE-2010-4790
Published: 2011-04-27
Description: Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1010-exploits/filterftp-traversal.txt; http://secunia.com/advisories/41737; http://securityreason.com/securityalert/8218
CVE: CVE-2010-4791
Published: 2011-04-27
Description: SQL injection vulnerability in infusions/mg_user_fotoalbum_panel/mg_user_fotoalbum.php in the MG User-Fotoalbum (mg_user_fotoalbum_panel) module 1.0.1 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the album_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/phpfusionmguser-sql.txt; http://secunia.com/advisories/41752; http://securityreason.com/securityalert/8219
CVE: CVE-2010-4792
Published: 2011-04-27
Description: Cross-site scripting (XSS) vulnerability in title.php in OPEN IT OverLook 5.0 allows remote attackers to inject arbitrary web script or HTML via the frame parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://anatoliasecurity.com/adv/as-adv-2010-002.txt; http://packetstormsecurity.org/1010-exploits/overlook-xss.txt; http://secunia.com/advisories/41771
CVE: CVE-2010-4793
Published: 2011-04-27
Description: SQL injection vulnerability in detail.asp in Site2Nite Auto e-Manager allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/autoemanager-sql.txt; http://secunia.com/advisories/41750; http://securityreason.com/securityalert/8221
CVE: CVE-2010-4794
Published: 2011-04-27
Description: Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt; http://secunia.com/advisories/41766; http://securityreason.com/securityalert/8223
CVE: CVE-2010-4795
Published: 2011-04-27
Description: SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt; http://secunia.com/advisories/41766; http://securityreason.com/securityalert/8223
CVE: CVE-2010-4796
Published: 2011-04-27
Description: Multiple SQL injection vulnerabilities in PHPYun 1.1.6 allow remote attackers to execute arbitrary SQL commands via the (1) provinceid parameter to search.php and the (2) e parameter to resumeview.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://bbs.wolvez.org/viewtopic.php?id=172; http://secunia.com/advisories/41756; http://www.securityfocus.com/bid/43907
CVE: CVE-2010-4797
Published: 2011-04-27
Description: Multiple SQL injection vulnerabilities in the log-in form in Truworth Flex Timesheet allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/flextimesheet-sql.txt; http://secunia.com/advisories/41763; http://securityreason.com/securityalert/8222
CVE: CVE-2010-4798
Published: 2011-04-27
Description: Directory traversal vulnerability in index.php in OrangeHRM 2.6.0.1 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uri parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://www.exploit-db.com/exploits/15232; http://www.securityfocus.com/bid/43905; https://exchange.xforce.ibmcloud.com/vulnerabilities/62388
CVE: CVE-2010-4799
Published: 2011-04-27
Description: Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to authenticate.php and the (3) ID parameter to pwn.php. NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/chipmunkpwngame-sql.txt; http://secunia.com/advisories/41760; http://securityreason.com/securityalert/8224
CVE: CVE-2010-4800
Published: 2011-04-27
Description: SQL injection vulnerability in doadd.php in BaconMap 1.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1010-exploits/baconmap10-sql.txt; http://secunia.com/advisories/41749; http://securityreason.com/securityalert/8225
CVE: CVE-2010-4801
Published: 2011-04-27
Description: Directory traversal vulnerability in admin/updatelist.php in BaconMap 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filepath parameter.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1010-exploits/baconmap10-lfi.txt; http://secunia.com/advisories/41749; http://securityreason.com/securityalert/8229
CVE: CVE-2011-1507
Published: 2011-04-27
Description: Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://downloads.digium.com/pub/security/AST-2011-005.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html
CVE: CVE-2011-1578
Published: 2011-04-27
Description: Cross-site scripting (XSS) vulnerability in MediaWiki before 1.16.3, when Internet Explorer 6 or earlier is used, allows remote attackers to inject arbitrary web script or HTML via an uploaded file accessed with a dangerous extension such as .html at the end of the query string, in conjunction with a modified URI path that has a %2E sequence in place of the . (dot) character.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058588.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058910.html; http://lists.fedoraproject.org/pipermail/package-announce/2011-April/059232.html