deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-10142
Published: 2017-01-14
Description: An issue was discovered in the IPv6 protocol specification, related to ICMP Packet Too Big (PTB) messages. (The scope of this CVE is all affected IPv6 implementations from all vendors.) The security implications of IP fragmentation have been discussed at length in [RFC6274] and [RFC7739]. An attacker can leverage the generation of IPv6 atomic fragments to trigger the use of fragmentation in an arbitrary IPv6 flow (in scenarios in which actual fragmentation of packets is not needed) and can subsequently perform any type of fragmentation-based attack against legacy IPv6 nodes that do not implement [RFC6946]. That is, employing fragmentation where not actually needed allows for fragmentation-based attack vectors to be employed, unnecessarily. We note that, unfortunately, even nodes that already implement [RFC6946] can be subject to DoS attacks as a result of the generation of IPv6 atomic fragments. Let us assume that Host A is communicating with Host B and that, as a result of the widespread dropping of IPv6 packets that contain extension headers (including fragmentation) [RFC7872], some intermediate node filters fragments between Host B and Host A. If an attacker sends a forged ICMPv6 PTB error message to Host B, reporting an MTU smaller than 1280, this will trigger the generation of IPv6 atomic fragments from that moment on (as required by [RFC2460]). When Host B starts sending IPv6 atomic fragments (in response to the received ICMPv6 PTB error message), these packets will be dropped, since we previously noted that IPv6 packets with extension headers were being dropped between Host B and Host A. Thus, this situation will result in a DoS scenario. Another possible scenario is that in which two BGP peers are employing IPv6 transport and they implement Access Control Lists (ACLs) to drop IPv6 fragments (to avoid control-plane attacks). If the aforementioned BGP peers drop IPv6 fragments but still honor received ICMPv6 PTB error messages, an attacker could easily attack the corresponding peering session by simply sending an ICMPv6 PTB message with a reported MTU smaller than 1280 bytes. Once the attack packet has been sent, the aforementioned routers will themselves be the ones dropping their own traffic.
CVSS Score: 8.6 (HIGH)
CWE: CWE-17
References: http://rhn.redhat.com/errata/RHSA-2017-0817.html; http://www.securityfocus.com/bid/95797; http://www.securitytracker.com/id/1038256
CVE: CVE-2017-5473
Published: 2017-01-14
Description: Cross-site request forgery (CSRF) vulnerability in ntopng through 2.4 allows remote attackers to hijack the authentication of arbitrary users, as demonstrated by admin/add_user.lua, admin/change_user_prefs.lua, admin/delete_user.lua, and admin/password_reset.lua.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/95654; https://github.com/ntop/ntopng/commit/1b2ceac8f578a246af6351c4f476e3102cdf21b3; https://github.com/ntop/ntopng/commit/f91fbe3d94c[PII_REDACTED]838ae3406ae633f6f15
CVE: CVE-2017-5474
Published: 2017-01-14
Description: Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/95652; https://github.com/s9y/Serendipity/commit/[PII_REDACTED]bab2923e4573b5d54ba9a32629b0cd; http://www.securityfocus.com/bid/95652
CVE: CVE-2017-5475
Published: 2017-01-14
Description: comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/95656; https://github.com/s9y/Serendipity/issues/439; http://www.securityfocus.com/bid/95656
CVE: CVE-2017-5476
Published: 2017-01-14
Description: Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/95659; https://github.com/s9y/Serendipity/issues/439; http://www.securityfocus.com/bid/95659
CVE: CVE-2016-8201
Published: 2017-01-14
Description: A CSRF vulnerability in Brocade Virtual Traffic Manager versions released prior to and including 11.0 could allow an attacker to trick a logged-in user into making administrative changes on the traffic manager cluster.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://www.securityfocus.com/bid/95930; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA43681; https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44114
CVE: CVE-2016-8204
Published: 2017-01-14
Description: A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95695; http://www.zerodayinitiative.com/advisories/ZDI-17-049; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE: CVE-2016-8205
Published: 2017-01-14
Description: A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95694; http://www.zerodayinitiative.com/advisories/ZDI-17-050; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE: CVE-2016-8206
Published: 2017-01-14
Description: A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95692; http://www.zerodayinitiative.com/advisories/ZDI-17-051; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE: CVE-2016-8207
Published: 2017-01-14
Description: A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95691; http://www.zerodayinitiative.com/advisories/ZDI-17-052; https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03785en_us
CVE: CVE-2017-2584
Published: 2017-01-15
Description: arch/x86/kvm/emulate.c in the Linux kernel through 4.9.3 allows local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free) via a crafted application that leverages instruction emulation for fxrstor, fxsave, sgdt, and sidt.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=129a72a0d3c8e139a[PII_REDACTED]4fe5ac119e74d; http://www.debian.org/security/2017/dsa-3791; http://www.openwall.com/lists/oss-security/2017/01/13/7
CVE: CVE-2017-5487
Published: 2017-01-15
Description: wp-includes/rest-api/endpoints/class-wp-rest-users-controller.php in the REST API implementation in WordPress 4.7 before 4.7.1 does not properly restrict listings of post authors, which allows remote attackers to obtain sensitive information via a wp-json/wp/v2/users request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95391; http://www.securitytracker.com/id/1037591
CVE: CVE-2017-5488
Published: 2017-01-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in wp-admin/update-core.php in WordPress before 4.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) version header of a plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95397
CVE: CVE-2017-5489
Published: 2017-01-15
Description: Cross-site request forgery (CSRF) vulnerability in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims via vectors involving a Flash file upload.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95399
CVE: CVE-2017-5490
Published: 2017-01-15
Description: Cross-site scripting (XSS) vulnerability in the theme-name fallback functionality in wp-includes/class-wp-theme.php in WordPress before 4.7.1 allows remote attackers to inject arbitrary web script or HTML via a crafted directory name of a theme, related to wp-admin/includes/class-theme-installer-skin.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95402
CVE: CVE-2017-5491
Published: 2017-01-15
Description: wp-mail.php in WordPress before 4.7.1 might allow remote attackers to bypass intended posting restrictions via a spoofed mail server with the mail.example.com name.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1188
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95406
CVE: CVE-2017-5492
Published: 2017-01-15
Description: Cross-site request forgery (CSRF) vulnerability in the widget-editing accessibility-mode feature in WordPress before 4.7.1 allows remote attackers to hijack the authentication of unspecified victims for requests that perform a widgets-access action, related to wp-admin/includes/class-wp-screen.php and wp-admin/widgets.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95407
CVE: CVE-2017-5493
Published: 2017-01-15
Description: wp-includes/ms-functions.php in the Multisite WordPress API in WordPress before 4.7.1 does not properly choose random numbers for keys, which makes it easier for remote attackers to bypass intended access restrictions via a crafted (1) site signup or (2) user signup.
CVSS Score: 7.5 (HIGH)
CWE: CWE-338
References: http://www.debian.org/security/2017/dsa-3779; http://www.openwall.com/lists/oss-security/2017/01/14/6; http://www.securityfocus.com/bid/95401
CVE: CVE-2017-5480
Published: 2017-01-15
Description: Directory traversal vulnerability in inc/files/files.ctrl.php in b2evolution through 6.8.3 allows remote authenticated users to read or delete arbitrary files by leveraging back-office access to provide a .. (dot dot) in the fm_selected array parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/bid/95454; https://github.com/b2evolution/b2evolution/commit/26841d9c81f27ad23b2f6e4bd5eaec7f2f58dfe0; https://github.com/b2evolution/b2evolution/issues/35
CVE: CVE-2017-5494
Published: 2017-01-15
Description: Multiple cross-site scripting (XSS) vulnerabilities in the file types table in b2evolution through 6.8.3 allow remote authenticated users to inject arbitrary web script or HTML via a .swf file in a (1) comment frame or (2) avatar frame.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95452; https://github.com/b2evolution/b2evolution/commit/261dbd5b294e707af766691e65a177a290314a6e; https://github.com/b2evolution/b2evolution/issues/34
CVE: CVE-2016-7904
Published: 2017-01-16
Description: Cross-site request forgery (CSRF) vulnerability in CMS Made Simple before 2.1.6 allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.
CVSS Score: 8.0 (HIGH)
CWE: CWE-352
References: http://dev.cmsmadesimple.org/project/changelog/5392; http://www.openwall.com/lists/oss-security/2017/01/16/1; http://www.securityfocus.com/bid/95453
CVE: CVE-2017-5223
Published: 2017-01-16
Description: An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script-provided base directory. If no base directory is provided, it resolves to /, meaning that relative image URLs get treated as absolute local file paths and added as attachments. To form a remote vulnerability, the msgHTML method must be called, passed an unfiltered, user-supplied HTML document, and must not set a base directory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: http://kalilinux.co/2017/01/12/phpmailer-cve-2017-5223-local-information-disclosure-vulnerability-analysis/; http://www.securityfocus.com/bid/95328; https://github.com/PHPMailer/PHPMailer/blob/master/SECURITY.md
CVE: CVE-2017-5515
Published: 2017-01-17
Description: Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95623; https://github.com/semplon/GeniXCMS/issues/63; http://www.securityfocus.com/bid/95623
CVE: CVE-2017-5516
Published: 2017-01-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/95622; https://github.com/semplon/GeniXCMS/issues/65; http://www.securityfocus.com/bid/95622
CVE: CVE-2017-5517
Published: 2017-01-17
Description: SQL injection vulnerability in author.control.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the type parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95455; https://github.com/semplon/GeniXCMS/issues/66; http://www.securityfocus.com/bid/95455
CVE: CVE-2017-5518
Published: 2017-01-17
Description: The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP address.
CVSS Score: 7.4 (HIGH)
CWE: CWE-918
References: http://www.securityfocus.com/bid/95462; https://github.com/semplon/GeniXCMS/issues/64; http://www.securityfocus.com/bid/95462
CVE: CVE-2017-5519
Published: 2017-01-17
Description: SQL injection vulnerability in Posts.class.php in GeniXCMS through 0.0.8 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.securityfocus.com/bid/95458; https://github.com/semplon/GeniXCMS/issues/67; http://www.securityfocus.com/bid/95458
CVE: CVE-2017-5520
Published: 2017-01-17
Description: The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the `.php6`, `.php7` and `.phtml` extensions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://www.securityfocus.com/bid/95460; https://github.com/semplon/GeniXCMS/issues/62; http://www.securityfocus.com/bid/95460
CVE: CVE-2017-5521
Published: 2017-01-17
Description: An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to password disclosure via simple crafted requests to the web management server. The bug is exploitable remotely if the remote management option is set, and can also be exploited given access to the router over LAN or WLAN. When trying to access the web panel, a user is asked to authenticate; if the authentication is canceled and password recovery is not enabled, the user is redirected to a page that exposes a password recovery token. If a user supplies the correct token to the page /passwordrecovered.cgi?id=TOKEN (and password recovery is not enabled), they will receive the admin password for the router. If password recovery is set the exploit will fail, as it will ask the user for the recovery questions that were previously set when enabling that feature. This is persistent (even after disabling the recovery option, the exploit will fail) because the router will ask for the security questions.
CVSS Score: 8.1 (HIGH)
References: http://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; http://www.securityfocus.com/bid/95457; https://www.exploit-db.com/exploits/41205/
CVE: CVE-2014-9909
Published: 2017-01-18
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31676542. References: B-RB#26684.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94685; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94685
CVE: CVE-2014-9910
Published: 2017-01-18
Description: An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31746399. References: B-RB#26710.
CVSS Score: 7.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/94685; https://source.android.com/security/bulletin/2016-12-01.html; http://www.securityfocus.com/bid/94685
CVE: CVE-2014-9913
Published: 2017-01-18
Description: Buffer overflow in the list_files function in list.c in Info-Zip UnZip 6.0 allows remote attackers to cause a denial of service (crash) via vectors related to the compression method.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-119
References: http://www.openwall.com/lists/oss-security/2014/11/03/5; http://www.openwall.com/lists/oss-security/2016/12/05/13; http://www.openwall.com/lists/oss-security/2016/12/05/19
CVE: CVE-2015-8667
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in Reset Your Password module in Exponent CMS before 2.3.5 allows remote attackers to inject arbitrary web script or HTML via the Username/Email.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exponentcms.lighthouseapp.com/projects/61783/tickets/1320-exponent-cms-235-cross-site-scripting-vulnerability; https://packetstormsecurity.com/files/136763/Exponent-CMS-2.3.5-Cross-Site-Scripting.html; https://exponentcms.lighthouseapp.com/projects/61783/tickets/1320-exponent-cms-235-cross-site-scripting-vulnerability
CVE: CVE-2015-8684
Published: 2017-01-18
Description: Exponent CMS before 2.3.7 does not properly restrict the types of files that can be uploaded, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly have other unspecified impact as demonstrated by uploading a file with an .html extension, then accessing it via the elFinder functionality.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://exponentcms.lighthouseapp.com/projects/61783/tickets/1323-exponent-cms-235-file-upload-cross-site-scripting-vulnerability; https://packetstormsecurity.com/files/136762/Exponent-CMS-2.3.5-File-Upload-Cross-Site-Scripting.html; https://exponentcms.lighthouseapp.com/projects/61783/tickets/1323-exponent-cms-235-file-upload-cross-site-scripting-vulnerability
CVE: CVE-2016-2087
Published: 2017-01-18
Description: Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.
CVSS Score: 7.4 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/136564/Hexchat-IRC-Client-2.11.0-Directory-Traversal.html; http://www.securityfocus.com/bid/95881; https://www.exploit-db.com/exploits/39656/
CVE: CVE-2016-2233
Published: 2017-01-18
Description: Stack-based buffer overflow in the inbound_cap_ls function in common/inbound.c in HexChat 2.10.2 allows remote IRC servers to cause a denial of service (crash) via a large number of options in a CAP LS message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://packetstormsecurity.com/files/136563/Hexchat-IRC-Client-2.11.0-CAP-LS-Handling-Buffer-Overflow.html; http://www.securityfocus.com/bid/95920; https://www.exploit-db.com/exploits/39657/
CVE: CVE-2016-6526
Published: 2017-01-18
Description: The SpamCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.openwall.com/lists/oss-security/2016/08/05/1; http://www.securityfocus.com/bid/92330
CVE: CVE-2016-6527
Published: 2017-01-18
Description: The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to cause a denial of service (crash and reboot) or possibly gain privileges via a malformed serializable object.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://security.samsungmobile.com/smrupdate.html#SMR-AUG-2016; http://www.openwall.com/lists/oss-security/2016/08/05/1; http://www.securityfocus.com/bid/92330
CVE: CVE-2016-6823
Published: 2017-01-18
Description: Integer overflow in the BMP coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (crash) via crafted height and width values, which triggers an out-of-bounds write.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: http://www.openwall.com/lists/oss-security/2016/09/26/3; http://www.securityfocus.com/bid/93158; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=834504
CVE: CVE-2016-7101
Published: 2017-01-18
Description: The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row value in an sgi file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: http://www.openwall.com/lists/oss-security/2016/09/26/8; http://www.securityfocus.com/bid/93181; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=836776
CVE: CVE-2016-7144
Published: 2017-01-18
Description: The m_authenticate function in modules/m_sasl.c in UnrealIRCd before 3.2.10.7 and 4.x before 4.0.6 allows remote attackers to spoof certificate fingerprints and consequently log in as another user via a crafted AUTHENTICATE parameter.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: http://www.openwall.com/lists/oss-security/2016/09/04/3; http://www.openwall.com/lists/oss-security/2016/09/05/8; http://www.securityfocus.com/bid/92763
CVE: CVE-2016-7149
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to the autolink function.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/09/12/1; http://www.openwall.com/lists/oss-security/2016/09/15/4; http://www.securityfocus.com/bid/92967
CVE: CVE-2016-7150
Published: 2017-01-18
Description: Cross-site scripting (XSS) vulnerability in b2evolution 6.7.5 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the site name.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2016/09/12/1; http://www.openwall.com/lists/oss-security/2016/09/15/4; http://www.securityfocus.com/bid/92967