deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3375
Published: 2005-10-30
Description: Multiple interpretation error in Ikarus demo version allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3376
Published: 2005-10-30
Description: Multiple interpretation error in Kaspersky 5.0.372 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3377
Published: 2005-10-30
Description: Multiple interpretation error in (1) McAfee Internet Security Suite 7.1.5 version 9.1.08 with the 4.4.00 engine and (2) McAfee Corporate 8.0.0 patch 10 with the 4400 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3378
Published: 2005-10-30
Description: Multiple interpretation error in Norman 5.81 with the 5.83.02 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3379
Published: 2005-10-30
Description: Multiple interpretation error in Trend Micro (1) PC-Cillin 2005 12.0.1244 with the 7.510.1002 engine and (2) OfficeScan 7.0 with the 7.510.1002 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.1 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3380
Published: 2005-10-30
Description: Multiple interpretation error in Panda Titanium 2005 4.02.01 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3381
Published: 2005-10-30
Description: Multiple interpretation error in Ukrainian National Antivirus (UNA) 1.83.2.16 with kernel 265 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3382
Published: 2005-10-30
Description: Multiple interpretation error in Sophos 3.91 with the 2.28.4 engine allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://www.securityelf.org/magicbyte.html; http://www.securityelf.org/magicbyteadv.html
CVE: CVE-2005-3383
Published: 2005-10-30
Description: SQL injection vulnerability in Techno Dreams Announcement script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0381&w=2; http://secunia.com/advisories/17354/; http://www.kapda.ir/advisory-103.html
CVE: CVE-2005-3384
Published: 2005-10-30
Description: SQL injection vulnerability in Techno Dreams Guest Book script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0381&w=2; http://secunia.com/advisories/17354/; http://www.kapda.ir/advisory-103.html
CVE: CVE-2005-3385
Published: 2005-10-30
Description: SQL injection vulnerability in Techno Dreams Mailing List script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0381&w=2; http://secunia.com/advisories/17354/; http://www.kapda.ir/advisory-103.html
CVE: CVE-2005-3386
Published: 2005-10-30
Description: SQL injection vulnerability in Techno Dreams Web Directory script allows remote attackers to execute arbitrary SQL commands and bypass authentication via the userid parameter in admin/login.asp.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0381&w=2; http://secunia.com/advisories/17354/; http://securityreason.com/securityalert/120
CVE: CVE-2005-3122
Published: 2005-10-30
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3424, CVE-2005-3425.  Reason: this candidate was intended for one issue, but two different authoritative sources used it for two distinct issues. Notes: All CVE users should consult CVE-2005-3424 and CVE-2005-3425 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3123
Published: 2005-10-30
Description: Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html; http://secunia.com/advisories/17351; http://secunia.com/advisories/17559
CVE: CVE-2005-3315
Published: 2005-10-30
Description: Multiple SQL injection vulnerabilities in Novell ZENworks Patch Management 6.x before 6.2.2.181 allow remote attackers to execute arbitrary SQL commands via the (1) Direction parameter to computers/default.asp, and the (2) SearchText, (3) StatusFilter, and (4) computerFilter parameters to reports/default.asp.
CVSS Score: 7.5 (HIGH)
References: http://cirt.dk/advisories/cirt-39-advisory.pdf; http://secunia.com/advisories/17358; http://securityreason.com/securityalert/124
CVE: CVE-2005-2739
Published: 2005-11-01
Description: Keychain Access in Mac OS X 10.4.2 and earlier keeps a password visible even if a keychain times out while the password is being viewed, which could allow attackers with physical access to obtain the password.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html; http://secunia.com/advisories/17368; http://securitytracker.com/id?1015126
CVE: CVE-2005-2749
Published: 2005-11-01
Description: Unspecified vulnerability in the Finder Get Info window for Mac OS X 10.4 up to 10.4.2 causes Finder to misrepresent file and group ownership information.  NOTE: it is not clear whether this issue satisfies the CVE definition of a vulnerability.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html; http://secunia.com/advisories/17368; http://securitytracker.com/id?1015123
CVE: CVE-2005-2750
Published: 2005-11-01
Description: Software Update in Mac OS X 10.4.2, when the user marks all updates to be ignored, exits without asking the user to reset the status of the updates, which could prevent important, security-relevant updates from being installed.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html; http://secunia.com/advisories/17368; http://securitytracker.com/id?1015124
CVE: CVE-2005-2751
Published: 2005-11-01
Description: memberd in Mac OS X 10.4 up to 10.4.2, in certain situations, does not quickly synchronize access control checks with changes in group membership, which could allow users to access files and other resources after they have been removed from a group.
CVSS Score: 2.1 (LOW)
References: http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html; http://secunia.com/advisories/17368; http://securitytracker.com/id?1015125
CVE: CVE-2005-2752
Published: 2005-11-01
Description: An unspecified kernel interface in Mac OS X 10.4.2 and earlier does not properly clear memory before reusing it, which could allow attackers to obtain sensitive information, a different vulnerability than CVE-2005-1126 and CVE-2005-1406.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2005/Oct/msg00000.html; http://secunia.com/advisories/17368; http://securitytracker.com/id?1015127
CVE: CVE-2005-2977
Published: 2005-11-01
Description: The SELinux version of PAM before 0.78 r3 allows local users to perform brute force password guessing attacks via unix_chkpwd, which does not log failed guesses or delay its responses.
CVSS Score: 2.1 (LOW)
References: http://cvs.sourceforge.net/viewcvs.py/pam/Linux-PAM/NEWS?rev=1.6&view=markup; http://secunia.com/advisories/17346; http://secunia.com/advisories/17350
CVE: CVE-2005-3313
Published: 2005-11-01
Description: The IRC protocol dissector in Ethereal 0.10.13 allows remote attackers to cause a denial of service (infinite loop).
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U; http://secunia.com/advisories/17370; http://secunia.com/advisories/17377
CVE: CVE-2005-3387
Published: 2005-11-01
Description: The startup script in packages/RedHat/ntop.init in ntop before 3.2, when ntop.conf is writable by users besides root, creates temporary files insecurely, which allows remote attackers to execute arbitrary code.
CVSS Score: 4.6 (MEDIUM)
References: http://listgateway.unipi.it/pipermail/ntop-dev/2005-March/005296.html; http://secunia.com/advisories/17382; http://www.securityfocus.com/bid/15242
CVE: CVE-2005-3388
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL with a "stacked array assignment."
CVSS Score: 4.3 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522; http://rhn.redhat.com/errata/RHSA-2006-0549.html; http://secunia.com/advisories/17371
CVE: CVE-2005-3389
Published: 2005-11-01
Description: The parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one parameter, allows remote attackers to enable the register_globals directive via inputs that cause a request to be terminated due to the memory_limit setting, which causes PHP to set an internal flag that enables register_globals and allows attackers to exploit vulnerabilities in PHP applications that would otherwise be protected.
CVSS Score: 5.0 (MEDIUM)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522; http://rhn.redhat.com/errata/RHSA-2006-0549.html; http://secunia.com/advisories/17371
CVE: CVE-2005-3390
Published: 2005-11-01
Description: The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modify the GLOBALS array and bypass security protections of PHP applications via a multipart/form-data POST request with a "GLOBALS" fileupload field.
CVSS Score: 7.5 (HIGH)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522; http://rhn.redhat.com/errata/RHSA-2006-0549.html; http://secunia.com/advisories/17371
CVE: CVE-2005-3391
Published: 2005-11-01
Description: Multiple vulnerabilities in PHP before 4.4.1 allow remote attackers to bypass safe_mode and open_basedir restrictions via unknown attack vectors in (1) ext/curl and (2) ext/gd.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=303382; http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
CVE: CVE-2005-3392
Published: 2005-11-01
Description: Unspecified vulnerability in PHP before 4.4.1, when using the virtual function on Apache 2, allows remote attackers to bypass safe_mode and open_basedir directives.
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=303382; http://itrc.hp.com/service/cki/docDisplay.do?docId=c00786522; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html
CVE: CVE-2005-3393
Published: 2005-11-01
Description: Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of the dhcp-option command option.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1059&w=2; http://openvpn.net/changelog.html; http://secunia.com/advisories/17376
CVE: CVE-2005-3394
Published: 2005-11-01
Description: Multiple SQL injection vulnerabilities in forum.php in oaboard forum 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) channel parameter in the topics module and (2) topic parameter in the posting module.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17373; http://www.osvdb.org/20420; http://www.securityfocus.com/archive/1/415299
CVE: CVE-2005-3395
Published: 2005-11-01
Description: SQL injection vulnerability in Invision Gallery 2.0.3 allows remote attackers to execute arbitrary SQL commands via the st parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17375; http://www.osvdb.org/20419; http://www.securityfocus.com/archive/1/415297
CVE: CVE-2005-3396
Published: 2005-11-01
Description: Buffer overflow in the chcons (chcon) command in IBM AIX 5.2 and 5.3, when DEBUG MALLOC is enabled, might allow attackers to execute arbitrary code via a long command line argument.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17380; http://securityreason.com/securityalert/261; http://securitytracker.com/id?1015122
CVE: CVE-2005-3397
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in Comersus BackOffice allows remote attackers to inject arbitrary web script or HTML via the error parameter to comersus_backoffice_supportError.asp.  NOTE: the comersus_backoffice_message.asp/message vector is already covered by CVE-2005-2191 item 2.
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/bid/15251; http://www.securityfocus.com/bid/15251
CVE: CVE-2005-3398
Published: 2005-11-01
Description: The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/17334; http://securitytracker.com/id?1015112; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1
CVE: CVE-2005-3399
Published: 2005-11-01
Description: Multiple interpretation error in CAT-QuickHeal 8.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6435&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2
CVE: CVE-2005-3400
Published: 2005-11-01
Description: Multiple interpretation error in Fortinet 2.48.0.0 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6435&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2
CVE: CVE-2005-3401
Published: 2005-11-01
Description: Multiple interpretation error in TheHacker 5.8.4.128 allows remote attackers to bypass virus scanning via a file such as BAT, HTML, and EML with an "MZ" magic byte sequence which is normally associated with EXE, which causes the file to be treated as a safe type that could still be executed as a dangerous file type by applications on the end system, as demonstrated by a "triple headed" program that contains EXE, EML, and HTML content, aka the "magic byte bug."
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2703&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6435&w=2; http://securityreason.com/securityalert/114
CVE: CVE-2005-3402
Published: 2005-11-01
Description: The SMTP client in Mozilla Thunderbird 1.0.5 BETA, 1.0.7, and possibly other versions, does not notify users when it cannot establish a secure channel with the server, which allows remote attackers to obtain authentication information without detection via a man-in-the-middle (MITM) attack that bypasses TLS authentication or downgrades CRAM-MD5 authentication to plain authentication.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8146&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]9653&w=2; http://www.securityfocus.com/bid/15106
CVE: CVE-2005-3403
Published: 2005-11-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to inject arbitrary web script or HTML via (1) the _base_href parameter in translate.php, (2) the _base_path parameter in news.inc.php, and (3) the p parameter in add_note.php.
CVSS Score: 4.3 (MEDIUM)
References: http://atutor.ca/view/3/6158/1.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]1049&w=2; http://secunia.com/advisories/16915/
CVE: CVE-2005-3404
Published: 2005-11-01
Description: Multiple PHP file inclusion vulnerabilities in ATutor 1.4.1 through 1.5.1-pl1 allow remote attackers to include arbitrary files via the section parameter followed by a null byte (%00) in (1) body_header.inc.php and (2) print.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1049&w=2; http://secunia.com/advisories/16915/; http://secunia.com/secunia_research/2005-55/advisory/
CVE: CVE-2005-3405
Published: 2005-11-01
Description: ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the (1) asc or (2) desc parameters set, possibly due to an eval injection vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1049&w=2; http://secunia.com/advisories/16915/; http://secunia.com/secunia_research/2005-55/advisory/
CVE: CVE-2005-3406
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in phpESP 1.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain; http://secunia.com/advisories/17333; http://www.osvdb.org/20357
CVE: CVE-2005-3407
Published: 2005-11-01
Description: SQL injection vulnerability in phpESP 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/phpesp/phpESP/docs/CHANGES?rev=.&content-type=text/plain; http://secunia.com/advisories/17333; http://www.osvdb.org/20358
CVE: CVE-2005-3408
Published: 2005-11-01
Description: SQL injection vulnerability in news.php in gCards version 1.43 allows remote attackers to execute arbitrary SQL commands via the limit parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17353; http://securitytracker.com/id?1015106; http://www.fr33d0m.net/content-1783.html
CVE: CVE-2005-3411
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in post.asp in Snitz Forums 2000 3.4.05 allows remote attackers to inject arbitrary web script or HTML via the type parameter in a Topic method.
CVSS Score: 4.3 (MEDIUM)
References: http://forum.snitz.com/forum/topic.asp?TOPIC_ID=60011; http://secunia.com/advisories/17385; http://www.osvdb.org/20421
CVE: CVE-2005-3412
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrary web script or HTML via a Post Reply to a topic, in which the reply contains a javascript: URL in an <img> tag.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8736&w=2; http://secunia.com/advisories/17341; http://securityreason.com/securityalert/136
CVE: CVE-2005-3413
Published: 2005-11-01
Description: Cross-site scripting (XSS) vulnerability in desktop.php in eyeOS 0.8.4 allows remote attackers to inject arbitrary web script or HTML via the motd parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17105; http://www.osvdb.org/20410; http://www.securityfocus.com/bid/15255