deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2019-5663
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2019-5664
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2020-1768
Published: 2020-02-07
Description: The external frontend system uses numerous background calls to the backend. Each background request is treated as user activity so the SessionMaxIdleTime will not be reached. This issue affects: OTRS 7.0.x version 7.0.14 and prior versions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-613, CWE-613
References: https://otrs.com/release-notes/otrs-security-advisory-2020-04/; https://otrs.com/release-notes/otrs-security-advisory-2020-04/
CVE: CVE-2014-5288
Published: 2020-02-07
Description: A CSRF Vulnerability exists in Kemp Load Master before 7.0-18a via unspecified vectors in administrative pages.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html; https://www.exploit-db.com/exploits/36609/; http://packetstormsecurity.com/files/131284/Kemp-Load-Master-7.1-16-CSRF-XSS-DoS-Code-Execution.html
CVE: CVE-2014-5468
Published: 2020-02-07
Description: A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicious PNG file, which could let a remote malicious user obtain sensitive information or execute arbitrary code.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://packetstormsecurity.com/files/128234/Railo-4.2.1-Remote-File-Inclusion.html; http://www.exploit-db.com/exploits/34669; https://exchange.xforce.ibmcloud.com/vulnerabilities/95959
CVE: CVE-2017-3146
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2017-3147
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2017-3148
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2017-3149
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2018-5746
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2019-6466
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2019
CVE: CVE-2014-5087
Published: 2020-02-07
Description: A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html; https://vulmon.com/searchpage?page=2&q=Shayan+S; http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
CVE: CVE-2014-5091
Published: 2020-02-07
Description: A vulnerability exits in Status2K 2.5 Server Monitoring Software via the multies parameter to includes/functions.php, which could let a malicious user execute arbitrary PHP code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: http://packetstormsecurity.com/files/127719/Status2k-XSS-SQL-Injection-Command-Execution.html; http://www.exploit-db.com/exploits/34239; https://exchange.xforce.ibmcloud.com/vulnerabilities/95111
CVE: CVE-2014-5278
Published: 2020-02-07
Description: A vulnerability exists in Docker before 1.2 via container names, which may collide with and override container IDs.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/xxg1413/docker-security/tree/master/CVE-2014-5278; https://groups.google.com/forum/#%21topic/docker-announce/lK6fQY6Jy84; https://groups.google.com/forum/message/raw?msg=docker-user/jyf9_mYcMI8/EIZfwe2QNzYJ
CVE: CVE-2013-3067
Published: 2020-02-07
Description: Linksys WRT310Nv2 2.0.0.1 is vulnerable to XSS.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf; http://securityevaluators.com/knowledge/case_studies/routers/linksys_wrt310v2.php; https://www.ise.io/research/studies-and-papers/linksys_wrt310v2/
CVE: CVE-2013-3091
Published: 2020-02-07
Description: An Authentication Bypass vulnerability in Belkin N300 (F7D7301v1) router allows remote attackers to bypass authentication using "Javascript debugging."
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf; http://securityevaluators.com/knowledge/case_studies/routers/belkin_n900.php; https://www.ise.io/research/studies-and-papers/belkin_n900/
CVE: CVE-2013-3096
Published: 2020-02-07
Description: D-Link DIR865L v1.03 suffers from an "Unauthenticated Hardware Linking" vulnerability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://securityevaluators.com/knowledge/case_studies/routers/Vulnerability_Catalog.pdf; http://securityevaluators.com/knowledge/case_studies/routers/dlink_dir865l.php; https://www.ise.io/research/studies-and-papers/dlink_dir865l/
CVE: CVE-2020-6769
Published: 2020-02-07
Description: Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured to be controlled by the VSG as well as the recording storage associated with the VSG. This affects Bosch Video Streaming Gateway versions 6.45 <= 6.45.08, 6.44 <= 6.44.022, 6.43 <= 6.43.0023 and 6.42.10 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable VSG version is installed with BVMS. This affects Bosch DIVAR IP 2000 <= 3.62.0019 and DIVAR IP 5000 <= 3.80.0039 if the corresponding port 8023 has been opened in the device's firewall.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-260625-BT.html; https://psirt.bosch.com/security-advisories/BOSCH-SA-260625-BT.html
CVE: CVE-2020-8796
Published: 2020-02-07
Description: Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.
CVSS Score: 9.8 (CRITICAL)
References: https://cve.biscom.com/bis-sft-cv-0009/; https://exchange.xforce.ibmcloud.com/vulnerabilities/175922; https://cve.biscom.com/bis-sft-cv-0009/
CVE: CVE-2011-1084
Published: 2020-02-07
Description: A cross-site scripting (XSS) vulnerability in Smoothwall Express 3.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.openwall.com/lists/oss-security/2011/03/03/7; https://www.openwall.com/lists/oss-security/2011/03/03/7
CVE: CVE-2011-1085
Published: 2020-02-07
Description: CSRF vulnerability in Smoothwall Express 3.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.openwall.com/lists/oss-security/2011/03/03/7; https://www.openwall.com/lists/oss-security/2011/03/03/7
CVE: CVE-2012-6686
Published: 2020-02-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4357. Reason: This candidate is a duplicate of CVE-2013-4357. Notes: All CVE users should reference CVE-2013-4357 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2020-1700
Published: 2020-02-07
Description: A flaw was found in the way the Ceph RGW Beast front-end handles unexpected disconnects. An authenticated attacker can abuse this flaw by making multiple disconnect attempts resulting in a permanent leak of a socket connection by radosgw. This flaw could lead to a denial of service condition by pile up of CLOSE_WAIT sockets, eventually leading to the exhaustion of available resources, preventing legitimate users from connecting to the system.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00009.html; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1700; https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html
CVE: CVE-2020-1708
Published: 2020-02-07
Description: It has been found in openshift-enterprise version 3.11 and all openshift-enterprise versions from 4.1 to, including 4.3, that multiple containers modify the permissions of /etc/passwd to make them modifiable by users other than root. An attacker with access to the running container can exploit this to modify /etc/passwd to add a user and escalate their privileges. This CVE is specific to the openshift/mysql-apb.
CVSS Score: 7.0 (HIGH)
CWE: CWE-266, CWE-269
References: https://access.redhat.com/errata/RHSA-2020:0617; https://access.redhat.com/errata/RHSA-2020:0681; https://access.redhat.com/errata/RHSA-2020:0694
CVE: CVE-2020-6768
Published: 2020-02-07
Description: A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22, CWE-22
References: https://psirt.bosch.com/security-advisories/bosch-sa-815013-bt.html; https://psirt.bosch.com/security-advisories/bosch-sa-815013-bt.html
CVE: CVE-2020-6770
Published: 2020-02-07
Description: Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html; https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.html
CVE: CVE-2011-1086
Published: 2020-02-07
Description: Cross-site scripting (XSS) vulnerability in admin/system.html in Openfiler 2.3 allows remote attackers to inject arbitrary web script or HTML via the device parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://web.archive.org/web/[PII_REDACTED]0840/http://secunia.com/advisories/42507/; https://www.exploit-db.com/exploits/35125; https://www.openwall.com/lists/oss-security/2011/03/03/7
CVE: CVE-2019-13163
Published: 2020-02-07
Description: The Fujitsu TLS library allows a man-in-the-middle attack. This affects Interstage Application Development Cycle Manager V10 and other versions, Interstage Application Server V12 and other versions, Interstage Business Application Manager V2 and other versions, Interstage Information Integrator V11 and other versions, Interstage Job Workload Server V8, Interstage List Works V10 and other versions, Interstage Studio V12 and other versions, Interstage Web Server Express V11, Linkexpress V5, Safeauthor V3, ServerView Resource Orchestrator V3, Systemwalker Cloud Business Service Management V1, Systemwalker Desktop Keeper V15, Systemwalker Desktop Patrol V15, Systemwalker IT Change Manager V14, Systemwalker Operation Manager V16 and other versions, Systemwalker Runbook Automation V15 and other versions, Systemwalker Security Control V1, and Systemwalker Software Configuration Manager V15.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-326
References: https://www.fujitsu.com/jp/products/software/resources/condition/security/products-fujitsu/solution/interstage-systemwalker-tls-202001.html; https://www.fujitsu.com/jp/products/software/resources/condition/security/products-fujitsu/solution/interstage-systemwalker-tls-202001.html
CVE: CVE-2019-19356
Published: 2020-02-07
Description: Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. The vulnerability has been found in firmware version V1.2.31805 and V2.2.36123. After one is connected to this page, it is possible to execute system commands as root through the tracert diagnostic tool because of lack of user input sanitizing.
CVSS Score: 7.5 (HIGH)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/156588/Netis-WF2419-2.2.36123-Remote-Code-Execution.html; https://github.com/shadowgatt/CVE-2019-19356; https://www.digital.security/en/blog/netis-routers-remote-code-execution-cve-2019-19356
CVE: CVE-2020-8808
Published: 2020-02-07
Description: The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers in CORSAIR iCUE before 3.25.60 allow local non-privileged users (including low-integrity level processes) to read and write to arbitrary physical memory locations, and consequently gain NT AUTHORITY\SYSTEM privileges, via a function call such as MmMapIoSpace.
CVSS Score: 7.8 (HIGH)
References: https://forum.corsair.com/v3/showthread.php?t=193831; https://github.com/active-labs/Advisories/blob/master/2020/ACTIVE-2020-001.md; https://forum.corsair.com/v3/showthread.php?t=193831
CVE: CVE-2020-8811
Published: 2020-02-07
Description: ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://github.com/bludit/bludit/issues/1131; https://github.com/bludit/bludit/issues/1131
CVE: CVE-2020-8812
Published: 2020-02-07
Description: Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that this is "not a bug.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/bludit/bludit/issues/1132; https://github.com/bludit/bludit/issues/1132
CVE: CVE-2019-13333
Published: 2020-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8773.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-19-858/; https://www.zerodayinitiative.com/advisories/ZDI-19-858/
CVE: CVE-2019-13334
Published: 2020-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8774.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-19-859/; https://www.zerodayinitiative.com/advisories/ZDI-19-859/
CVE: CVE-2019-17135
Published: 2020-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8775.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.zerodayinitiative.com/advisories/ZDI-19-860/; https://www.zerodayinitiative.com/advisories/ZDI-19-860/
CVE: CVE-2019-17136
Published: 2020-02-08
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.5.0.20723. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the conversion of DXF files to PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-8776.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://www.zerodayinitiative.com/advisories/ZDI-19-861/; https://www.zerodayinitiative.com/advisories/ZDI-19-861/
CVE: CVE-2019-11481
Published: 2020-02-08
Description: Kevin Backhouse discovered that apport would read a user-supplied configuration file with elevated privileges. By replacing the file with a symbolic link, a user could get apport to read any file on the system as root, with unknown consequences.
CVSS Score: 3.8 (LOW)
CWE: CWE-59
References: http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html; https://usn.ubuntu.com/usn/usn-4171-1; https://usn.ubuntu.com/usn/usn-4171-2
CVE: CVE-2019-11482
Published: 2020-02-08
Description: Sander Bos discovered a time of check to time of use (TOCTTOU) vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-367
References: https://usn.ubuntu.com/usn/usn-4171-1; https://usn.ubuntu.com/usn/usn-4171-2; https://usn.ubuntu.com/usn/usn-4171-1
CVE: CVE-2019-11483
Published: 2020-02-08
Description: Sander Bos discovered Apport mishandled crash dumps originating from containers. This could be used by a local attacker to generate a crash report for a privileged process that is readable by an unprivileged user.
CVSS Score: 7.0 (HIGH)
References: https://usn.ubuntu.com/usn/usn-4171-1; https://usn.ubuntu.com/usn/usn-4171-2; http://seclists.org/fulldisclosure/2025/Jun/9
CVE: CVE-2019-11484
Published: 2020-02-08
Description: Kevin Backhouse discovered an integer overflow in bson_ensure_space, as used in whoopsie.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-190, CWE-190
References: http://packetstormsecurity.com/files/172858/Ubuntu-Apport-Whoopsie-DoS-Integer-Overflow.html; https://usn.ubuntu.com/usn/usn-4170-1; https://usn.ubuntu.com/usn/usn-4170-2
CVE: CVE-2019-11485
Published: 2020-02-08
Description: Sander Bos discovered Apport's lock file was in a world-writable directory which allowed all users to prevent crash handling.
CVSS Score: 3.3 (LOW)
CWE: CWE-412
References: https://usn.ubuntu.com/usn/usn-4171-1; https://usn.ubuntu.com/usn/usn-4171-2; https://usn.ubuntu.com/usn/usn-4171-1
CVE: CVE-2011-3642
Published: 2020-02-08
Description: Cross-site scripting (XSS) vulnerability in Flowplayer Flash 3.2.7 through 3.2.16, as used in the News system (news) extension for TYPO3 and Mahara, allows remote attackers to inject arbitrary web script or HTML via the plugin configuration directive in a reference to an external domain plugin.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: http://appsec.ws/Presentations/FlashFlooding.pdf; http://secunia.com/advisories/52074; http://secunia.com/advisories/54206
CVE: CVE-2014-2225
Published: 2020-02-08
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Ubiquiti Networks UniFi Controller before 3.2.1 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new admin user via a request to api/add/admin; (2) have unspecified impact via a request to api/add/wlanconf; change the guest (3) password, (4) authentication method, or (5) restricted subnets via a request to api/set/setting/guest_access; (6) block, (7) unblock, or (8) reconnect users by MAC address via a request to api/cmd/stamgr; change the syslog (9) server or (10) port via a request to api/set/setting/rsyslogd; (11) have unspecified impact via a request to api/set/setting/smtp; change the syslog (12) server, (13) port, or (14) authentication settings via a request to api/cmd/cfgmgr; or (15) change the Unifi Controller name via a request to api/set/setting/identity.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://seclists.org/fulldisclosure/2014/Jul/126; http://sethsec.blogspot.com/2014/07/cve-2014-2225.html; http://seclists.org/fulldisclosure/2014/Jul/126
CVE: CVE-2014-7863
Published: 2020-02-08
Description: The FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine Applications Manager before 11.9 build 11912, OpManager 8 through 11.5 build 11400, and IT360 10.5 and earlier does not properly restrict access, which allows remote attackers and remote authenticated users to (1) read arbitrary files via the fileName parameter in a copyfile operation or (2) obtain sensitive information via a directory listing in a listdirectory operation to servlet/FailOverHelperServlet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://packetstormsecurity.com/files/130162/ManageEngine-File-Download-Content-Disclosure-SQL-Injection.html; http://seclists.org/fulldisclosure/2015/Jan/114; http://www.securityfocus.com/archive/1/archive/1/534575/100/0/threaded
CVE: CVE-2014-9126
Published: 2020-02-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Open-School Community Edition 2.2 allow remote attackers to inject arbitrary web script or HTML via the YII_CSRF_TOKEN HTTP cookie or the StudentDocument, StudentCategories, StudentPreviousDatas parameters to index.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html; http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html
CVE: CVE-2014-9127
Published: 2020-02-08
Description: Open-School Community Edition 2.2 does not properly restrict access to the export functionality, which allows remote authenticated users to obtain sensitive information via the r parameter with the value export to index.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html; http://packetstormsecurity.com/files/130090/OpenSchool-Community-Edition-2.2-XSS-Access-Bypass.html
CVE: CVE-2014-9470
Published: 2020-02-08
Description: Cross-site scripting (XSS) vulnerability in the loadForm function in Frontend/Modules/Search/Actions/Index.php in Fork CMS before 3.8.4 allows remote attackers to inject arbitrary web script or HTML via the q_widget parameter to en/search.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2015/Jan/38; http://www.fork-cms.com/blog/detail/fork-3.8.4-released; http://www.itas.vn/news/itas-team-found-out-a-cross-site-scripting-vulnerability-in-fork-cms-70.html