deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1780
Published: 2009-05-22
Description: admin.php in Frax.dk Php Recommend 1.3 and earlier does not require authentication when the user password is changed, which allows remote attackers to gain administrative privileges via modified form_admin_user and form_admin_pass parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.securityfocus.com/bid/34909; http://www.vupen.com/english/advisories/2009/1287; https://www.exploit-db.com/exploits/8658
CVE: CVE-2009-1781
Published: 2009-05-22
Description: Static code injection vulnerability in admin.php in Frax.dk Php Recommend 1.3 and earlier allows remote attackers to inject arbitrary PHP code into phpre_config.php via the form_aula parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: http://www.securityfocus.com/bid/34909; http://www.vupen.com/english/advisories/2009/1287; https://www.exploit-db.com/exploits/8658
CVE: CVE-2009-1782
Published: 2009-05-22
Description: Multiple F-Secure anti-virus products, including Anti-Virus for Microsoft Exchange 7.10 and earlier; Internet Gatekeeper for Windows 6.61 and earlier, Windows 6.61 and earlier, and Linux 2.16 and earlier; Internet Security 2009 and earlier, Anti-Virus 2009 and earlier, Client Security 8.0 and earlier, and others; allow remote attackers to bypass malware detection via a crafted (1) ZIP and (2) RAR archive.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/35008; http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2009-1.html; http://www.securityfocus.com/bid/34849
CVE: CVE-2009-1783
Published: 2009-05-22
Description: Multiple FRISK Software F-Prot anti-virus products, including Antivirus for Exchange, Linux on IBM zSeries, Linux x86 File Servers, Linux x86 Mail Servers, Linux x86 Workstations, Solaris Mail Servers, Antivirus for Windows, and others, allow remote attackers to bypass malware detection via a crafted CAB archive.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://blog.zoller.lu/2009/04/advisory-f-prot-frisk-cab-bypass.html; http://www.securityfocus.com/archive/1/503393/100/0/threaded; http://www.securityfocus.com/bid/34896
CVE: CVE-2009-1784
Published: 2009-05-22
Description: The AVG parsing engine 8.5 323, as used in multiple AVG anti-virus products including Anti-Virus Network Edition, Internet Security Netzwerk Edition, Server Edition für Linux/FreeBSD, Anti-Virus SBS Edition, and others allows remote attackers to bypass malware detection via a crafted (1) RAR and (2) ZIP archive.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://blog.zoller.lu/2009/04/avg-zip-evasion-bypass.html; http://www.securityfocus.com/archive/1/503392/100/0/threaded; http://www.securityfocus.com/bid/34895
CVE: CVE-2009-1785
Published: 2009-05-22
Description: Cross-site scripting (XSS) vulnerability in Ulteo Open Virtual Desktop 1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter to header.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/34923; http://www.ulteo.com/home/en/ovdi/openvirtualdesktop/downloadnow?autolang=en; http://secunia.com/advisories/34923
CVE: CVE-2009-1373
Published: 2009-05-26
Description: Buffer overflow in the XMPP SOCKS5 bytestream server in Pidgin (formerly Gaim) before 2.5.6 allows remote authenticated users to execute arbitrary code via vectors involving an outbound XMPP file transfer.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://debian.org/security/2009/dsa-1805; http://secunia.com/advisories/35188; http://secunia.com/advisories/35194
CVE: CVE-2009-1374
Published: 2009-05-26
Description: Buffer overflow in the decrypt_out function in Pidgin (formerly Gaim) before 2.5.6 allows remote attackers to cause a denial of service (application crash) via a QQ packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/35188; http://secunia.com/advisories/35194; http://secunia.com/advisories/35202
CVE: CVE-2009-1375
Published: 2009-05-26
Description: The PurpleCircBuffer implementation in Pidgin (formerly Gaim) before 2.5.6 does not properly maintain a certain buffer, which allows remote attackers to cause a denial of service (memory corruption and application crash) via vectors involving the (1) XMPP or (2) Sametime protocol.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://debian.org/security/2009/dsa-1805; http://osvdb.org/54649; http://secunia.com/advisories/35188
CVE: CVE-2009-1376
Published: 2009-05-26
Description: Multiple integer overflows in the msn_slplink_process_msg functions in the MSN protocol handler in (1) libpurple/protocols/msn/slplink.c and (2) libpurple/protocols/msnp9/slplink.c in Pidgin (formerly Gaim) before 2.5.6 on 32-bit platforms allow remote attackers to execute arbitrary code via a malformed SLP message with a crafted offset value, leading to buffer overflows.  NOTE: this issue exists because of an incomplete fix for CVE-2008-2927.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://debian.org/security/2009/dsa-1805; http://secunia.com/advisories/35188; http://secunia.com/advisories/35194
CVE: CVE-2009-1476
Published: 2009-05-26
Description: Buffer overflow in lib/load_http.c in ippool in Darren Reed IPFilter (aka IP Filter) 4.1.31 allows local users to gain privileges via vectors involving a long hostname in a URL.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c; http://cvsweb.netbsd.org/bsdweb.cgi/src/dist/ipf/lib/load_http.c.diff?r1=1.1&r2=1.2&f=h; http://securityreason.com/achievement_securityalert/62
CVE: CVE-2009-1634
Published: 2009-05-26
Description: The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/35177; http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1; http://www.securityfocus.com/bid/35066
CVE: CVE-2009-1636
Published: 2009-05-26
Description: Multiple buffer overflows in the Internet Agent (aka GWIA) component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 allow remote attackers to execute arbitrary code via (1) a crafted e-mail address in an SMTP session or (2) an SMTP command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54644; http://osvdb.org/54645; http://secunia.com/advisories/35177
CVE: CVE-2009-1754
Published: 2009-05-26
Description: The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application's installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287
References: http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=5d6d773fab559fdc12e553d60d789f3991ac552c; http://www.ocert.org/advisories/ocert-2009-006.html; http://www.openwall.com/lists/oss-security/2009/05/22/14
CVE: CVE-2009-1786
Published: 2009-05-26
Description: The malloc subsystem in libc in IBM AIX 5.3 and 6.1 allows local users to create or overwrite arbitrary files via a symlink attack on the log file associated with the MALLOCDEBUG environment variable.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-362
References: http://aix.software.ibm.com/aix/efixes/security/libc_advisory.asc; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=802; http://secunia.com/advisories/35146
CVE: CVE-2009-1787
Published: 2009-05-26
Description: Multiple SQL injection vulnerabilities in PHP Dir Submit (aka WebsiteSubmitter and Submitter Script) allow remote attackers to bypass authentication and gain administrative access via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35125; http://www.securityfocus.com/bid/35003; http://www.vupen.com/english/advisories/2009/1365
CVE: CVE-2009-1788
Published: 2009-05-26
Description: Heap-based buffer overflow in voc_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a VOC file with an invalid header value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/35076; http://secunia.com/advisories/35126; http://secunia.com/advisories/35247
CVE: CVE-2009-1789
Published: 2009-05-26
Description: mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy.  NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-05/0129.html; http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=528778; http://cvs.eggheads.org/viewvc/viewvc.cgi/eggdrop1.6/doc/Changes1.6?revision=1.20&view=markup
CVE: CVE-2009-1790
Published: 2009-05-26
Description: Cross-site scripting (XSS) vulnerability in CGI RESCUE Trees before 2.11 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN28521500/index.html; http://jvndb.jvn.jp/en/contents/2009/JVNDB-2009-000028.html; http://osvdb.org/54545
CVE: CVE-2009-1791
Published: 2009-05-26
Description: Heap-based buffer overflow in aiff_read_header in libsndfile 1.0.15 through 1.0.19, as used in Winamp 5.552 and possibly other media programs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an AIFF file with an invalid header value.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/35076; http://secunia.com/advisories/35247; http://secunia.com/advisories/35443
CVE: CVE-2008-3869
Published: 2009-05-26
Description: Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/32473; http://secunia.com/advisories/35191; http://secunia.com/secunia_research/2008-45/
CVE: CVE-2008-3870
Published: 2009-05-26
Description: Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/32473; http://secunia.com/advisories/35191; http://secunia.com/secunia_research/2008-47/
CVE: CVE-2009-1796
Published: 2009-05-26
Description: Cross-site scripting (XSS) vulnerability in Sun Java System Portal Server 6.3.1, 7.1, and 7.2 allows remote attackers to inject arbitrary web script or HTML via vectors related to an error page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54705; http://secunia.com/advisories/35221; http://sunsolve.sun.com/search/document.do?assetkey=1-21-118950-38-1
CVE: CVE-2009-0588
Published: 2009-05-27
Description: agent/request/op.cgi in the Registration Authority (RA) component in Red Hat Certificate System (RHCS) 7.3 and Dogtag Certificate System allows remote authenticated users to approve certificate requests queued for arbitrary agent groups via a modified request ID field.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/35242; http://secunia.com/advisories/35263; http://www.redhat.com/support/errata/RHSA-2009-1065.html
CVE: CVE-2009-1472
Published: 2009-05-27
Description: The Java client program for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 has a hardcoded AES encryption key, which makes it easier for man-in-the-middle attackers to (1) execute arbitrary Java code, or (2) gain access to machines connected to the switch, by hijacking a session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/503827/100/0/threaded; http://www.securityfocus.com/bid/35108; http://www.securityfocus.com/archive/1/503827/100/0/threaded
CVE: CVE-2009-1473
Published: 2009-05-27
Description: The (1) Windows and (2) Java client programs for the ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not properly use RSA cryptography for a symmetric session-key negotiation, which makes it easier for remote attackers to (a) decrypt network traffic, or (b) conduct man-in-the-middle attacks, by repeating unspecified "client-side calculations."
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/35241; http://www.securityfocus.com/archive/1/503827/100/0/threaded; http://www.securityfocus.com/bid/35108
CVE: CVE-2009-1474
Published: 2009-05-27
Description: The ATEN KH1516i IP KVM switch with firmware 1.0.063 and the KN9116 IP KVM switch with firmware 1.1.104 do not (1) encrypt mouse events, which makes it easier for man-in-the-middle attackers to perform mouse operations on machines connected to the switch by injecting network traffic; and do not (2) set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.
CVSS Score: 7.6 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/35241; http://www.securityfocus.com/archive/1/503827/100/0/threaded; http://www.securityfocus.com/bid/35108
CVE: CVE-2009-1477
Published: 2009-05-27
Description: The https web interfaces on the ATEN KH1516i IP KVM switch with firmware 1.0.063, the KN9116 IP KVM switch with firmware 1.1.104, and the PN9108 power-control unit have a hardcoded SSL private key, which makes it easier for remote attackers to decrypt https sessions by extracting this key from their own switch and then sniffing network traffic to a switch owned by a different customer.
CVSS Score: 10.0 (HIGH)
CWE: CWE-310
References: http://www.securityfocus.com/archive/1/503827/100/0/threaded; http://www.securityfocus.com/bid/35108; https://exchange.xforce.ibmcloud.com/vulnerabilities/50851
CVE: CVE-2008-6814
Published: 2009-05-28
Description: Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/com_simpleboard/, a different vulnerability than CVE-2006-3528.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://www.securityfocus.com/bid/31981; https://exchange.xforce.ibmcloud.com/vulnerabilities/46223; https://www.exploit-db.com/exploits/6868
CVE: CVE-2008-6815
Published: 2009-05-28
Description: mykdownload.php in MyKtools 2.4 does not require administrative authentication, which allows remote attackers to read a database backup by making a direct request, and then sending an unspecified request to the download page for the backup.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/31950; https://exchange.xforce.ibmcloud.com/vulnerabilities/46145; https://www.exploit-db.com/exploits/6855
CVE: CVE-2008-6816
Published: 2009-05-28
Description: Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://download.mgeops.com/install/win32/nsm/release_note_nsm_320.txt; http://osvdb.org/50051; http://secunia.com/advisories/32456
CVE: CVE-2009-1799
Published: 2009-05-28
Description: Multiple SQL injection vulnerabilities in the getGalleryImage function in st_admin/gallery_output.php in ST-Gallery 0.1 alpha, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) gallery_category or (2) gallery_show parameter to example.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1782&w=2; http://www.securityfocus.com/bid/34875; https://exchange.xforce.ibmcloud.com/vulnerabilities/50378
CVE: CVE-2009-1800
Published: 2009-05-28
Description: Stack-based buffer overflow in the Chinagames CGAgent ActiveX control 1.x in CGAgent.dll, as distributed in Chinagames iGame 2009, allows remote attackers to execute arbitrary code via a long argument to the CreateChinagames method, as exploited in the wild in April and May 2009.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://bbs.pediy.com/showthread.php?t=87615; http://downloads.securityfocus.com/vulnerabilities/exploits/34871.html; http://hi.baidu.com/wi4r/blog/item/8b1c06fb2e3de8819f514671.html
CVE: CVE-2009-1801
Published: 2009-05-28
Description: Multiple cross-site scripting (XSS) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to inject arbitrary web script or HTML via the (1) display parameter to reports.php, the (2) order and (3) extdisplay parameters to config.php, and the (4) sort parameter to recordings/index.php. NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://freepbx.org/trac/ticket/3660; http://osvdb.org/54259; http://osvdb.org/54260
CVE: CVE-2009-1802
Published: 2009-05-28
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, allow remote attackers to hijack the authentication of admins for requests that create a new admin account or have unspecified other impact.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://freepbx.org/trac/ticket/3660; http://osvdb.org/54262; http://secunia.com/advisories/34772
CVE: CVE-2009-1803
Published: 2009-05-28
Description: FreePBX 2.5.1, and other 2.4.x, 2.5.x, and pre-release 2.6.x versions, generates different error messages for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://freepbx.org/trac/ticket/3660; http://secunia.com/advisories/34772; http://www.osvdb.org/54263
CVE: CVE-2009-1804
Published: 2009-05-28
Description: Multiple SQL injection vulnerabilities in admin/index.php in VideoScript.us YouTube Video Script allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/34868; https://exchange.xforce.ibmcloud.com/vulnerabilities/50373; https://www.exploit-db.com/exploits/8635
CVE: CVE-2009-1195
Published: 2009-05-28
Description: The Apache HTTP Server 2.2.11 and earlier 2.2 versions does not properly handle Options=IncludesNOEXEC in the AllowOverride directive, which allows local users to gain privileges by configuring (1) Options Includes, (2) Options +Includes, or (3) Options +IncludesNOEXEC in a .htaccess file, and then inserting an exec element in a .shtml file.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-16
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-10/msg00006.html; http://marc.info/?l=apache-httpd-dev&m=[PII_REDACTED]6302&w=2
CVE: CVE-2009-1384
Published: 2009-05-28
Description: pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise Linux (RHEL) 5, generates different password prompts depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://osvdb.org/54791; http://secunia.com/advisories/35230; http://secunia.com/advisories/43314
CVE: CVE-2009-1633
Published: 2009-05-28
Description: Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service (memory corruption) and possibly have unspecified other impact via (1) a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or (2) long Unicode characters, related to fs/cifs/cifssmb.c and the cifs_readdir function in fs/cifs/readdir.c.
CVSS Score: 7.1 (HIGH)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=7b0c8fcff47a885743125dd843db64af41af5a61; http://git.kernel.org/?p=linux/kernel/git/sfrench/cifs-2.6.git%3Ba=commit%3Bh=968460ebd8006d55661dec0fb86712b40d71c413; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=27b87fe52baba0a55e9723030e76fce94fabcea4
CVE: CVE-2009-1806
Published: 2009-05-28
Description: Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server (VIOS) partitions.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
References: http://www-1.ibm.com/support/docview.wss?uid=isg1MB03011; http://www-933.ibm.com/support/fixcentral/firmware/readme?fixid=MH01181; http://www.securityfocus.com/bid/35113
CVE: CVE-2009-1807
Published: 2009-05-28
Description: Unspecified vulnerability in Config.dll in Baofeng products 3.09.04.17 and earlier allows remote attackers to execute arbitrary code by calling the SetAttributeValue method, as exploited in the wild in April and May 2009.
CVSS Score: 9.3 (HIGH)
References: http://www.cisrt.org/enblog/read.php?245; http://www.vupen.com/english/advisories/2009/1392; http://www.cisrt.org/enblog/read.php?245
CVE: CVE-2009-1808
Published: 2009-05-28
Description: Microsoft Windows XP SP3 allows local users to cause a denial of service (system crash) by making an SPI_SETDESKWALLPAPER SystemParametersInfo call with an improperly terminated pvParam argument, followed by an SPI_GETDESKWALLPAPER SystemParametersInfo call.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/35323; http://www.ragestorm.net/blogs/?p=78; http://www.securityfocus.com/bid/35120
CVE: CVE-2009-1809
Published: 2009-05-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in myColex 1.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the year parameter to modules/kalender.php, (2) the Page parameter in a List action to modules/ereignis.php, (3) the Kontext parameter in a Search action to modules/kategorie.php, or (4) the image parameter to modules/image.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35112; http://www.securityfocus.com/bid/34997; http://www.vupen.com/english/advisories/2009/1344
CVE: CVE-2009-1810
Published: 2009-05-29
Description: Multiple SQL injection vulnerabilities in myColex 1.4.2 allow remote attackers to execute arbitrary SQL commands via (1) the formUser parameter (aka the Name field) to common/login.php, and allow remote authenticated users to execute arbitrary SQL commands via the ID parameter in a Detail action to (2) kategorie.php, (3) medium.php, (4) person.php, or (5) schlagwort.php in modules/, related to classes/class.perform.php.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35111; http://www.collector.ch/drupal5/?q=node/39; http://www.securityfocus.com/bid/34997