deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3436
Published: 2009-09-28
Description: Multiple SQL injection vulnerabilities in forum.asp in MaxWebPortal allow remote attackers to execute arbitrary SQL commands via the (1) FORUM_ID or (2) CAT_ID parameter.  NOTE: this might overlap CVE-2005-1417.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0909-exploits/maxwebportal-sql.txt; http://www.securityfocus.com/bid/36480; https://exchange.xforce.ibmcloud.com/vulnerabilities/53435
CVE: CVE-2009-3437
Published: 2009-09-28
Description: Cross-site scripting (XSS) vulnerability in the live preview feature in the Markdown Preview module 6.x for Drupal allows remote attackers to inject arbitrary web script or HTML via "Markdown input."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/585790; http://www.securityfocus.com/bid/36505; http://drupal.org/node/585790
CVE: CVE-2009-3438
Published: 2009-09-28
Description: SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0909-exploits/joomlafb-sql.txt; http://www.securityfocus.com/bid/36484; http://www.vupen.com/english/advisories/2009/2731
CVE: CVE-2009-3439
Published: 2009-09-28
Description: Multiple SQL injection vulnerabilities in Open Source Security Information Management (OSSIM) before 2.1.2 allow remote authenticated users to execute arbitrary SQL commands via the id_document parameter to (1) repository_document.php, (2) repository_links.php, and (3) repository_editdocument.php in repository/; the (4) group parameter to policy/getpolicy.php; the name parameter to (5) host/newhostgroupform.php and (6) net/modifynetform.php; and unspecified other vectors related to the policy menu.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://dsecrg.com/pages/vul/show.php?id=155; http://secunia.com/advisories/36867; http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE: CVE-2009-3440
Published: 2009-09-28
Description: Cross-site scripting (XSS) vulnerability in Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the option parameter to the default URI (aka the main menu).
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dsecrg.com/pages/vul/show.php?id=155; http://secunia.com/advisories/36867; http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE: CVE-2009-3441
Published: 2009-09-28
Description: Open Source Security Information Management (OSSIM) before 2.1.2 allows remote attackers to bypass authentication, and read graphs or infrastructure information, via a direct request to (1) graphs/alarms_events.php or (2) host/draw_tree.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://dsecrg.com/pages/vul/show.php?id=155; http://secunia.com/advisories/36867; http://www.securityfocus.com/archive/1/506663/100/0/threaded
CVE: CVE-2009-3442
Published: 2009-09-28
Description: The Meta tags (aka Nodewords) module before 6.x-1.1 for Drupal does not properly follow permissions during assignment of node meta tags, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/585706; http://drupal.org/node/585710; http://osvdb.org/58314
CVE: CVE-2009-3443
Published: 2009-09-28
Description: SQL injection vulnerability in the Fastball (com_fastball) component 1.1.0 through 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the league parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt; http://secunia.com/advisories/36878; http://packetstormsecurity.org/0909-exploits/joomlafastball-sql.txt
CVE: CVE-2009-3444
Published: 2009-09-28
Description: Cross-site scripting (XSS) vulnerability in email.php in e107 0.7.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header in a news.1 (aka news to email) action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/58363; http://secunia.com/advisories/36832; http://websecurity.com.ua/3528
CVE: CVE-2009-3445
Published: 2009-09-28
Description: Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/36888; http://www.code-crafters.com/abilitymailserver/updatelog.html; http://www.securityfocus.com/bid/36519
CVE: CVE-2009-3446
Published: 2009-09-28
Description: SQL injection vulnerability in the MyRemote Video Gallery (com_mytube) component 1.0 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a videos action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9733; http://www.securityfocus.com/bid/36470; https://exchange.xforce.ibmcloud.com/vulnerabilities/53401
CVE: CVE-2009-3447
Published: 2009-09-29
Description: Unrestricted file upload vulnerability in RADactive I-Load before 2008.2.5.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, and then sending a request for a predictable filename during a short time window.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-362
References: http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339; http://secunia.com/advisories/23807; http://www.osvdb.org/58197
CVE: CVE-2009-3448
Published: 2009-09-29
Description: npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows remote attackers to cause a denial of service (daemon crash) via a packet to (1) TCP or (2) UDP port 20031 with a large value in an unspecified size field, which is not properly handled in a malloc operation.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://osvdb.org/58329; http://secunia.com/advisories/36847; http://www.insight-tech.org/index.php?p=bakbone-netvault-backup-8-22-build-29-remote-dos
CVE: CVE-2009-3449
Published: 2009-09-29
Description: MP3 Collector 2.3 allows remote attackers to cause a denial of service (application crash) via a long URL in a .m3u playlist file.
CVSS Score: 4.3 (MEDIUM)
References: http://www.exploit-db.com/exploits/9689; http://www.exploit-db.com/exploits/9689
CVE: CVE-2009-3450
Published: 2009-09-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with __ (underscore underscore) sequences, which are incompatible with an XSS protection mechanism provided by Microsoft ASP.NET.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339; http://secunia.com/advisories/23807; http://www.osvdb.org/58195
CVE: CVE-2009-3451
Published: 2009-09-29
Description: Directory traversal vulnerability in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339; http://secunia.com/advisories/23807; http://www.osvdb.org/58196
CVE: CVE-2009-3452
Published: 2009-09-29
Description: WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allows remote attackers to obtain sensitive information via unspecified requests that trigger responses containing the saved-image folder pathname.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://radnet.radactive.com/forum/Default.aspx?g=posts&t=339; http://secunia.com/advisories/23807; http://www.osvdb.org/58194
CVE: CVE-2009-2681
Published: 2009-09-29
Description: Unspecified vulnerability in HP ProCurve Identity Driven Manager (IDM) A.02.x through A.02.03 and A.03.x through A.03.00, on Windows Server 2003 with IAS and Windows Server 2008 with NPS, allows local users to gain privileges via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01798159; http://secunia.com/advisories/36792; http://securitytracker.com/id?1022915
CVE: CVE-2009-2683
Published: 2009-09-29
Description: Unspecified vulnerability in the Sender module in HP Remote Graphics Software (RGS) 5.1.3 through 5.2.6 allows remote authenticated users to execute arbitrary code via unknown vectors.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/archive/1/506783/100/0/threaded; http://www.securityfocus.com/archive/1/506783/100/0/threaded
CVE: CVE-2009-3453
Published: 2009-09-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in IBM Lotus Quickr 8.1.0 services for WebSphere Portal allow remote attackers to inject arbitrary web script or HTML via the filename of a .odt file in a Lotus Quickr place, related to the Library template.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/58384; http://secunia.com/advisories/36899; http://www-01.ibm.com/support/docview.wss?uid=swg1LO36646
CVE: CVE-2009-3454
Published: 2009-09-29
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-2510.  Reason: This candidate is a duplicate of CVE-2009-2510.  Notes: All CVE users should reference CVE-2009-2510 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3455
Published: 2009-09-29
Description: Apple Safari, possibly before 4.0.3, on Mac OS X does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html; http://www.securityfocus.com/bid/36477; http://www.networkworld.com/news/2009/091709-microsoft-ie-security-hole.html
CVE: CVE-2009-3456
Published: 2009-09-29
Description: Google Chrome, possibly 3.0.195.21 and earlier, does not properly handle a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/bid/36479; http://www.securityfocus.com/bid/36479
CVE: CVE-2009-3457
Published: 2009-09-29
Description: Cisco ACE XML Gateway (AXG) and ACE Web Application Firewall (WAF) before 6.1 allow remote attackers to obtain sensitive information via an HTTP request that lacks a handler, as demonstrated by (1) an OPTIONS request or (2) a crafted GET request, leading to a Message-handling Errors message containing a certain client intranet IP address, aka Bug ID CSCtb82159.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://seclists.org/fulldisclosure/2009/Sep/0369.html; http://secunia.com/advisories/36879; http://www.brainoverflow.org/advisories/cisco_ace_xml_gw_ip_disclosure.txt
CVE: CVE-2009-2905
Published: 2009-09-29
Description: Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-119
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00004.html; http://lists.vmware.com/pipermail/security-announce/2010/000082.html
CVE: CVE-2009-3468
Published: 2009-09-29
Description: Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control (MAC) policy via unknown vectors, related to a menu typo and the Style Manager.
CVSS Score: 6.9 (MEDIUM)
References: http://osvdb.org/58319; http://secunia.com/advisories/36822; http://sunsolve.sun.com/search/document.do?assetkey=1-21-126365-15-1
CVE: CVE-2009-3469
Published: 2009-09-29
Description: Cross-site scripting (XSS) vulnerability in profiles/html/simpleSearch.do in IBM Lotus Connections 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/58320; http://secunia.com/advisories/36849; http://www-01.ibm.com/support/docview.wss?uid=swg24024414
CVE: CVE-2009-3470
Published: 2009-09-29
Description: IBM Informix Dynamic Server (IDS) 10.00 before 10.00.xC11, 11.10 before 11.10.xC4, and 11.50 before 11.50.xC5 allows remote attackers to cause a denial of service (memory corruption, assertion failure, and daemon crash) by sending a long password over a JDBC connection.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/36853; http://www-01.ibm.com/support/docview.wss?uid=swg1IC61195; http://www.securityfocus.com/bid/36538
CVE: CVE-2009-3471
Published: 2009-09-29
Description: IBM DB2 8 before FP18, 9.1 before FP8, 9.5 before FP4, and 9.7 before FP2 does not perform the expected drops of certain table functions upon a loss of privileges by the functions' definers, which has unspecified impact and remote attack vectors.
CVSS Score: 7.5 (HIGH)
References: ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://osvdb.org/58477; http://secunia.com/advisories/36890
CVE: CVE-2009-3472
Published: 2009-09-29
Description: IBM DB2 8 before FP18, 9.1 before FP8, and 9.5 before FP4 allows remote authenticated users to bypass intended access restrictions, and update, insert, or delete table rows, via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-264
References: http://osvdb.org/58478; http://secunia.com/advisories/36890; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ50074
CVE: CVE-2009-3473
Published: 2009-09-29
Description: IBM DB2 9.1 before FP8 does not require the SETSESSIONUSER privilege for the SET SESSION AUTHORIZATION statement, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/58479; http://secunia.com/advisories/36890; http://www-01.ibm.com/support/docview.wss?uid=swg1IZ55883
CVE: CVE-2009-3474
Published: 2009-09-29
Description: OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remote attackers to use a certificate for both signing and encryption when it is designated for just one purpose, potentially weakening the intended security application of the certificate.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/36855; http://secunia.com/advisories/36868; http://secunia.com/advisories/36876
CVE: CVE-2009-3475
Published: 2009-09-29
Description: Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validation, does not properly handle a '\0' character in the subject or subjectAltName fields of a certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/36855; http://secunia.com/advisories/36861; http://secunia.com/advisories/36876
CVE: CVE-2009-3476
Published: 2009-09-29
Description: Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, and XMLTooling before 1.2.2 as used in Internet2 Shibboleth Service Provider software 2.x before 2.2.1, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a malformed encoded URL.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36869; http://secunia.com/advisories/36870; http://shibboleth.internet2.edu/secadv/secadv_20090826.txt
CVE: CVE-2009-3477
Published: 2009-09-29
Description: The Blackberry Browser in RIM BlackBerry Device Software 4.5.0 before 4.5.0.173, 4.6.0 before 4.6.0.303, 4.6.1 before 4.6.1.309, 4.7.0 before 4.7.0.179, and 4.7.1 before 4.7.1.57 does not properly handle "hidden" characters including a '\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows remote man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/36875; http://www.blackberry.com/btsc/viewContent.do?externalId=KB19552; http://www.securityfocus.com/bid/36528
CVE: CVE-2009-3478
Published: 2009-09-29
Description: Argument injection vulnerability in (1) src/content/js/connection/sftp.js and (2) src/content/js/connection/controlSocket.js.in in FireFTP Extension 1.0.5 for Firefox allows remote authenticated SFTP users to cause victims to alter permissions, delete, download, or move the wrong file via a filename containing " (double quotes), which is not properly filtered or encoded when FireFTP constructs the command to send to psftp.exe.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/36860; http://vuln.sg/fireftp105-en.html; http://www.mozdev.org/source/browse/fireftp/src/content/js/connection/controlSocket.js.in.diff?r1=1.74%3Br2=1.75%3Bf=h
CVE: CVE-2009-3479
Published: 2009-09-30
Description: Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/534744; http://drupal.org/node/534752; http://drupal.org/node/534842
CVE: CVE-2009-3480
Published: 2009-09-30
Description: SQL injection vulnerability in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! allows remote attackers to execute arbitrary SQL commands via the p3 parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/58381; http://secunia.com/advisories/36892; http://www.securityfocus.com/bid/36533
CVE: CVE-2009-3481
Published: 2009-09-30
Description: A certain interface in the iCRM Basic (com_icrmbasic) component 1.4.2.31 for Joomla! does not require administrative authentication, which has unspecified impact and remote attack vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/36892; http://www.osvdb.org/58382; http://www.securityfocus.com/bid/36533
CVE: CVE-2009-3482
Published: 2009-09-30
Description: TrustPort Antivirus before 2.8.0.2266 and PC Security before 2.0.0.1291 use weak permissions (Everyone: Full Control) for files under %PROGRAMFILES%, which allows local users to gain privileges by replacing executables with Trojan horse programs.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732, CWE-732
References: http://secunia.com/advisories/36880; http://www.securityfocus.com/archive/1/506751/100/0/threaded; http://www.trustport.com/en/notices/security-update-of-trustport-products
CVE: CVE-2009-3483
Published: 2009-09-30
Description: Heap-based buffer overflow in the Create New Site feature in GlobalSCAPE CuteFTP Professional, Home, and Lite 8.3.3 and 8.3.3.0054 allows user-assisted remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a site list containing an entry with a long label.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36874; http://www.osvdb.org/58387; http://www.packetstormsecurity.org/0909-exploits/Dr_IDE-CuteFTP_FTP_8.3.3-PoC.py.txt
CVE: CVE-2009-3484
Published: 2009-09-30
Description: Stack-based buffer overflow in Core FTP 2.1 build 1612 allows user-assisted remote attackers to execute arbitrary code via a long hostname in an FTP server entry in a site backup file.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/58385; http://secunia.com/advisories/36872; http://www.packetstormsecurity.org/0909-exploits/coreftp_local.py.txt
CVE: CVE-2009-3485
Published: 2009-09-30
Description: Cross-site scripting (XSS) vulnerability in the J-Web interface in Juniper JUNOS 8.5R1.14 and 9.0R1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/36829; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-08; http://www.securityfocus.com/bid/36537
CVE: CVE-2009-3486
Published: 2009-09-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to (1) the pinghost program, reachable through the diagnose program; or (2) the traceroute program, reachable through the diagnose program; or (3) the probe-limit parameter to the configuration program; the (4) wizard-ids or (5) pager-new-identifier parameter in a firewall-filters action to the configuration program; (6) the cos-physical-interface-name parameter in a cos-physical-interfaces-edit action to the configuration program; the (7) wizard-args or (8) wizard-ids parameter in an snmp action to the configuration program; the (9) username or (10) fullname parameter in a users action to the configuration program; or the (11) certname or (12) certbody parameter in a local-cert (aka https) action to the configuration program.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/36829; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-09; http://www.securityfocus.com/bid/36537
CVE: CVE-2009-3487
Published: 2009-09-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via (1) the JEXEC_OUTID parameter in a JEXEC_MODE_RELAY_OUTPUT action to the jexec program; the (2) act, (3) refresh-time, or (4) ifid parameter to scripter.php; (5) the revision parameter in a rollback action to the configuration program; the m[] parameter to the (6) monitor, (7) manage, (8) events, (9) configuration, or (10) alarms program; (11) the m[] parameter to the default URI; (12) the m[] parameter in a browse action to the default URI; (13) the wizard-next parameter in an https action to the configuration program; or the (14) Contact Information, (15) System Description, (16) Local Engine ID, (17) System Location, or (18) System Name Override SNMP parameter, related to the configuration program.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://secunia.com/advisories/36829; http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr09-10; http://www.securityfocus.com/bid/36537