deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4302
Published: 2012-07-11
Description: mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=54941685e3e86ec085641dcb7ebb1f96f06735b2; http://moodle.org/mod/forum/discuss.php?d=188314; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4303
Published: 2012-07-11
Description: lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ca896fdfcfcc87846fa91a297d0aa6999a68c48a; http://moodle.org/mod/forum/discuss.php?d=188315; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4304
Published: 2012-07-11
Description: The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-200
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=d0157d827bc254ba386a5e5b41b13be2698ee76e; http://moodle.org/mod/forum/discuss.php?d=188316; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4305
Published: 2012-07-11
Description: message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zero wait time for message refreshing.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=97f258fabb3ebfa7acc7c02cb59de92b01710f99; http://moodle.org/mod/forum/discuss.php?d=188318; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4306
Published: 2012-07-11
Description: Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or HTML via crafted data.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=4a2acd8c7e6c869d5fd5aa686e6e0a3f20c97f15; http://moodle.org/mod/forum/discuss.php?d=188319; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4307
Published: 2012-07-11
Description: Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary web script or HTML via the section parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=41017112cff7f5bd7969c72d321320f3090e7c68; http://moodle.org/mod/forum/discuss.php?d=188321; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2011-4308
Published: 2012-07-11
Description: mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-264
References: http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615; http://moodle.org/mod/forum/discuss.php?d=188322; http://www.debian.org/security/2012/dsa-2421
CVE: CVE-2011-4309
Published: 2012-07-11
Description: Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=5eb1cec34f013fdcb559b66bc401f2845ce0bbb7; http://moodle.org/mod/forum/discuss.php?d=188323; https://bugzilla.redhat.com/show_bug.cgi?id=747444
CVE: CVE-2012-3889
Published: 2012-07-11
Description: The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a .IT file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://forums.winamp.com/showthread.php?t=345684; http://secunia.com/advisories/46624; http://www.securityfocus.com/bid/54131
CVE: CVE-2012-3890
Published: 2012-07-11
Description: The in_mod plugin in Winamp before 5.63 allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a .IT file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://forums.winamp.com/showthread.php?t=345684; http://secunia.com/advisories/46624; http://www.securityfocus.com/bid/54131
CVE: CVE-2012-2486
Published: 2012-07-12
Description: The Cisco Discovery Protocol (CDP) implementation on Cisco TelePresence Multipoint Switch before 1.9.0, Cisco TelePresence Immersive Endpoint Devices before 1.9.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server before 1.8.1 allows remote attackers to execute arbitrary code by leveraging certain adjacency and sending a malformed CDP packet, aka Bug IDs CSCtz40953, CSCtz40947, CSCtz40965, and CSCtz40953.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
CVE: CVE-2012-3073
Published: 2012-07-12
Description: The IP implementation on Cisco TelePresence Multipoint Switch before 1.8.1, Cisco TelePresence Manager before 1.9.0, and Cisco TelePresence Recording Server 1.8 and earlier allows remote attackers to cause a denial of service (networking outage or process crash) via (1) malformed IP packets, (2) a high rate of TCP connection requests, or (3) a high rate of TCP connection terminations, aka Bug IDs CSCti21830, CSCti21851, CSCtj19100, CSCtj19086, CSCtj19078, CSCty11219, CSCty11299, CSCty11323, and CSCty11338.
CVSS Score: 7.8 (HIGH)
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctms; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctsman
CVE: CVE-2012-3074
Published: 2012-07-12
Description: An unspecified API on Cisco TelePresence Immersive Endpoint Devices before 1.9.1 allows remote attackers to execute arbitrary commands by leveraging certain adjacency and sending a malformed request on TCP port 61460, aka Bug ID CSCtz38382.
CVSS Score: 8.3 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
CVE: CVE-2012-3075
Published: 2012-07-12
Description: The administrative web interface on Cisco TelePresence Immersive Endpoint Devices before 1.7.4 allows remote authenticated users to execute arbitrary commands via a malformed request on TCP port 443, aka Bug ID CSCtn99724.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-cts
CVE: CVE-2012-3076
Published: 2012-07-12
Description: The administrative web interface on Cisco TelePresence Recording Server before 1.8.0 allows remote authenticated users to execute arbitrary commands via unspecified vectors, aka Bug ID CSCth85804.
CVSS Score: 9.0 (HIGH)
CWE: CWE-78
References: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs; http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120711-ctrs
CVE: CVE-2012-0911
Published: 2012-07-12
Description: TikiWiki CMS/Groupware before 6.7 LTS and before 8.4 allows remote attackers to execute arbitrary PHP code via a crafted serialized object in the (1) cookieName to lib/banners/bannerlib.php; (2) printpages or (3) printstructures parameter to (a) tiki-print_multi_pages.php or (b) tiki-print_pages.php; or (4) sendpages, (5) sendstructures, or (6) sendarticles parameter to tiki-send_objects.php, which is not properly handled when processed by the unserialize function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html; http://dev.tiki.org/item4109; http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS
CVE: CVE-2012-1620
Published: 2012-07-12
Description: slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://hg.suckless.org/slock/rev/891a4984aba6; http://secunia.com/advisories/48700; http://www.openwall.com/lists/oss-security/2012/04/06/1
CVE: CVE-2012-2763
Published: 2012-07-12
Description: Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and possibly 2.6.13, allows remote attackers to execute arbitrary code via a long string in a command to the script-fu server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://git.gnome.org/browse/gimp/commit/?h=gimp-2-6&id=744f7a4a2b5acb8b531a6f5dd8744ebb95348fc2; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html; http://lists.opensuse.org/opensuse-updates/2012-09/msg00043.html
CVE: CVE-2012-3376
Published: 2012-07-12
Description: DataNodes in Apache Hadoop 2.0.0 alpha does not check the BlockTokens of clients when Kerberos is enabled and the DataNode has checked out the same BlockPool twice from a NodeName, which might allow remote clients to read arbitrary blocks, write to blocks to which they only have read access, and have other unspecified impacts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-310
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0049.html; http://www.securityfocus.com/bid/54358; https://www.cloudera.com/documentation/other/security-bulletins/topics/csb_topic_1.html
CVE: CVE-2012-3399
Published: 2012-07-12
Description: Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0002.html; http://archives.neohapsis.com/archives/bugtraq/2012-07/0043.html; http://www.exploit-db.com/exploits/19631
CVE: CVE-2012-3805
Published: 2012-07-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in the getAllPassedParams function in system/functions.php in Kajona before 3.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) absender_name, (2) absender_email, or (3) absender_nachricht parameter to the content page; (4) comment_name, (5) comment_subject, or (6) comment_message parameter to the postacomment module; (7) module parameter to index.php; (8) action parameter to the admin login page; (9) pv or (10) pe parameter in a list action to the user module; (11) user_username, (12) user_email, (13) user_forename, (14) user_name, (15) user_street, (16) user_postal, (17) user_city, (18) user_tel, or (19) user_mobil parameter in a newUser action to the user module; (20) group_name or (21) group_desc parameter in a groupNew action to the user module; (22) name, (23) browsername, (24) seostring, (25) keywords, or (26) folder_id parameter in a newPage action to the pages module; (27) element_name or (28) element_cachetime parameter in a newElement action in the pages module; (29) aspect_name parameter in a newAspect action in the system module; (30) filemanager_name, (31) filemanager_path, (32) filemanager_upload_filter, or (33) filemanager_view_filter parameter in a NewRepo action to the filemanager module; or (34) archive_title or (35) archive_path parameter in a newArchive action to the downloads module.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0058.html; http://secunia.com/advisories/49849; http://www.kajona.de/changelog_34x.de.html
CVE: CVE-2012-3881
Published: 2012-07-12
Description: Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2 0.9.2 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) 95.php, (2) view.php, or (3) rtg.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2012/07/09/2; https://code.google.com/p/rtg2/issues/detail?id=35; http://www.openwall.com/lists/oss-security/2012/07/09/2
CVE: CVE-2012-3996
Published: 2012-07-12
Description: TikiWiki CMS/Groupware 8.3 and earlier allows remote attackers to obtain the installation path via a direct request to (1) admin/include_calendar.php, (2) tiki-rss_error.php, or (3) tiki-watershed_service.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0020.html; http://dev.tiki.org/item4109; http://info.tiki.org/article190-Tiki-Wiki-CMS-Groupware-Updates-Tiki-6-7-LTS
CVE: CVE-2012-0215
Published: 2012-07-12
Description: model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenticated users to modify the privileges of arbitrary users via a (1) create, (2) write, (3) delete, or (4) copy rpc call.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-264
References: http://hg.tryton.org/trytond/rev/8e64d52ecea4; http://news.tryton.org/2012/03/security-releases-for-all-supported.html; http://www.debian.org/security/2012/dsa-2444
CVE: CVE-2012-1037
Published: 2012-07-12
Description: PHP remote file inclusion vulnerability in front/popup.php in GLPI 0.78 through 0.80.61 allows remote authenticated users to execute arbitrary PHP code via a URL in the sub_type parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://seclists.org/fulldisclosure/2012/Feb/157; http://www.mandriva.com/security/advisories?name=MDVSA-2012:016; https://forge.indepnet.net/issues/3338
CVE: CVE-2012-1162
Published: 2012-07-12
Description: Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://nih.at/listarchive/libzip-discuss/msg00252.html; http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2012:034
CVE: CVE-2012-1163
Published: 2012-07-12
Description: Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an information leak.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://nih.at/listarchive/libzip-discuss/msg00252.html; http://www.gentoo.org/security/en/glsa/glsa-201203-23.xml; http://www.mandriva.com/security/advisories?name=MDVSA-2012:034
CVE: CVE-2012-1174
Published: 2012-07-12
Description: The rm_rf_children function in util.c in the systemd-logind login manager in systemd before 44, when logging out, allows local users to delete arbitrary files via a symlink attack on unspecified files, related to "particular records related with user session."
CVSS Score: 3.3 (LOW)
CWE: CWE-362
References: http://cgit.freedesktop.org/systemd/systemd/commit/?id=5ebff5337594d690b322078c512eb222d34aaa82; http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079075.html; http://www.mandriva.com/security/advisories?name=MDVSA-2012:030
CVE: CVE-2012-2351
Published: 2012-07-12
Description: The default configuration of the auth/saml plugin in Mahara before 1.4.2 sets the "Match username attribute to Remote username" option to false, which allows remote SAML IdP servers to spoof users of other SAML IdP servers by using the same internal username.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16, CWE-284, CWE-287
References: http://gitorious.org/mahara/mahara/commit/f07be6020e70fa8f53cd77fdcd63e7fd7ff8aaea; http://www.debian.org/security/2012/dsa-2467; http://www.openwall.com/lists/oss-security/2012/05/11/9
CVE: CVE-2012-2653
Published: 2012-07-12
Description: arpwatch 2.1a15, as used by Red Hat, Debian, Fedora, and possibly others, does not properly drop supplementary groups, which might allow attackers to gain root privileges by leveraging other vulnerabilities in the daemon.
CVSS Score: 10.0 (HIGH)
References: http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082553.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082565.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082569.html
CVE: CVE-2012-3362
Published: 2012-07-12
Description: Cross-site request forgery (CSRF) vulnerability in eXtplorer 2.1 RC3 and earlier allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via an adduser admin action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://www.autosectools.com/Advisories/eXtplorer.2.1.RC3_Cross-site.Request.Forgery_174.html; http://www.debian.org/security/2012/dsa-2510; http://www.openwall.com/lists/oss-security/2012/06/24/1
CVE: CVE-2012-1661
Published: 2012-07-12
Description: ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map (.mxd) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/files/113644/ESRI-ArcMap-Arbitrary-Code-Execution.html; http://www.cs.umb.edu/~joecohen/exploits/CVE-2012-1661/; http://www.exploit-db.com/exploits/19138
CVE: CVE-2012-2614
Published: 2012-07-12
Description: Buffer overflow in programmer.exe in Lattice Diamond Programmer 1.4.2 allows user-assisted remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long string in a version attribute of an ispXCF element in an .xcf file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2012-06/0136.html; http://secunia.com/advisories/48431; http://www.coresecurity.com/content/lattice-diamond-programmer-buffer-overflow
CVE: CVE-2012-2842
Published: 2012-07-12
Description: Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to counter handling.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=129898; http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
CVE: CVE-2012-2843
Published: 2012-07-12
Description: Use-after-free vulnerability in Google Chrome before 20.0.1132.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to layout height tracking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399
References: http://code.google.com/p/chromium/issues/detail?id=130595; http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html; http://lists.apple.com/archives/security-announce/2012/Sep/msg00001.html
CVE: CVE-2012-2844
Published: 2012-07-12
Description: The PDF functionality in Google Chrome before 20.0.1132.57 does not properly handle JavaScript code, which allows remote attackers to cause a denial of service (incorrect object access) or possibly have unspecified other impact via a crafted document.
CVSS Score: 9.3 (HIGH)
References: http://code.google.com/p/chromium/issues/detail?id=133450; http://googlechromereleases.blogspot.com/2012/07/stable-channel-update.html; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15039
CVE: CVE-2012-3236
Published: 2012-07-12
Description: fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a malformed XTENSION header of a .fit file, as demonstrated using a long string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: http://archives.neohapsis.com/archives/bugtraq/2012-06/0192.html; http://git.gnome.org/browse/gimp/commit/plug-ins/file-fits/fits-io.c?id=ace45631595e8781a[PII_REDACTED]d[PII_REDACTED]3c; http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00000.html
CVE: CVE-2012-3350
Published: 2012-07-12
Description: SQL injection vulnerability in index.php in Webmatic 3.1.1 allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-07/0026.html; http://osvdb.org/83538; http://www.exploit-db.com/exploits/19629
CVE: CVE-2012-3377
Published: 2012-07-12
Description: Heap-based buffer overflow in the Ogg_DecodePacket function in the OGG demuxer (modules/demux/ogg.c) in VideoLAN VLC media player before 2.0.2 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted OGG file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://git.videolan.org/?p=vlc/vlc-2.0.git%3Ba=commitdiff%3Bh=16e9e126333fb7acb47d363366fee3deadc8331e; http://secunia.com/advisories/49835; http://www.openwall.com/lists/oss-security/2012/07/06/1
CVE: CVE-2012-3382
Published: 2012-07-12
Description: Cross-site scripting (XSS) vulnerability in the ProcessRequest function in mcs/class/System.Web/System.Web/HttpForbiddenHandler.cs in Mono 2.10.8 and earlier allows remote attackers to inject arbitrary web script or HTML via a file with a crafted name and a forbidden extension, which is not properly handled in an error message.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.mandriva.com/security/advisories?name=MDVSA-2012:140; http://www.openwall.com/lists/oss-security/2012/07/06/11; https://bugzilla.novell.com/show_bug.cgi?id=769799
CVE: CVE-2012-3997
Published: 2012-07-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to inject arbitrary web script or HTML via the (1) paste_user or (2) paste_lang parameter to (a) list.php or (b) show.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083120.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083169.html
CVE: CVE-2012-3998
Published: 2012-07-12
Description: Multiple SQL injection vulnerabilities in Sticky Notes before 0.2.27052012.5 allow remote attackers to execute arbitrary SQL commands via the (1) paste id in admin/modules/mod_pastes.php or (2) show.php, (3) user id to admin/modules/mod_users.php, (4) project to list.php, or (5) session id to show.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://gitorious.org/sticky-notes/sticky-notes/commit/d97475f07520d61af3d20fbaeb2e9a974c190308; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083120.html; http://lists.fedoraproject.org/pipermail/package-announce/2012-June/083169.html