deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5836
Published: 2006-11-10
Description: The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a file descriptor with an unrecognized file type.
CVSS Score: 7.2 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://projects.info-pull.com/mokb/MOKB-09-11-2006.html
CVE: CVE-2006-5837
Published: 2006-11-10
Description: Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to inject arbitrary PHP code into chat_log.php via the msg parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22748; http://www.securityfocus.com/bid/20947; http://www.vupen.com/english/advisories/2006/4376
CVE: CVE-2006-5838
Published: 2006-11-10
Description: PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1835; http://www.securityfocus.com/archive/1/450823/100/0/threaded; http://www.securityfocus.com/bid/20893
CVE: CVE-2006-5839
Published: 2006-11-10
Description: PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _mygamefile parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.vupen.com/english/advisories/2006/4413; https://exchange.xforce.ibmcloud.com/vulnerabilities/30091; https://www.exploit-db.com/exploits/2736
CVE: CVE-2006-5840
Published: 2006-11-10
Description: Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853.  NOTE: the vendor has notified CVE that the current version only creates static pages, and that slistl.php/slid never existed in any version
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://attrition.org/pipermail/vim/2006-December/001190.html; http://s-a-p.ca/index.php?page=OurAdvisories&id=7; http://secunia.com/advisories/22792
CVE: CVE-2006-5841
Published: 2006-11-10
Description: Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dodosmail_header_file or (2) dodosmail_footer_file parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22775; http://www.osvdb.org/30248; http://www.securityfocus.com/archive/1/452130/100/0/threaded
CVE: CVE-2006-5842
Published: 2006-11-10
Description: The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/22765; http://sourceforge.net/project/shownotes.php?release_id=461942; http://www.securityfocus.com/bid/20981
CVE: CVE-2006-5843
Published: 2006-11-10
Description: Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2656&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=9; http://secunia.com/advisories/22788
CVE: CVE-2006-5844
Published: 2006-11-10
Description: Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) searchText[] parameters in (a) index.php, and (b) a direct request to upload.php without any parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2656&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=9; http://securitytracker.com/id?1017201
CVE: CVE-2006-5845
Published: 2006-11-10
Description: Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]2656&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=9; http://secunia.com/advisories/22788
CVE: CVE-2006-5846
Published: 2006-11-10
Description: Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6694&w=2; http://secunia.com/advisories/22786; http://securitytracker.com/id?1017200
CVE: CVE-2006-5847
Published: 2006-11-10
Description: Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6694&w=2; http://secunia.com/advisories/22786; http://securitytracker.com/id?1017200
CVE: CVE-2006-5848
Published: 2006-11-10
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-5878.  Reason: This candidate is a duplicate of CVE-2006-5878.  Notes: All CVE users should reference CVE-2006-5878 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-5849
Published: 2006-11-10
Description: PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execute arbitrary PHP code via a URL in the irayodirhack parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.vupen.com/english/advisories/2006/4415; https://exchange.xforce.ibmcloud.com/vulnerabilities/30097; https://www.exploit-db.com/exploits/2741
CVE: CVE-2006-5850
Published: 2006-11-10
Description: Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050537.html; http://secunia.com/advisories/22718; http://securityreason.com/securityalert/1846
CVE: CVE-2006-5851
Published: 2006-11-10
Description: openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328.
CVSS Score: 2.1 (LOW)
CWE: CWE-59
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0758&w=2; http://secunia.com/advisories/22742; http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt
CVE: CVE-2006-5852
Published: 2006-11-10
Description: Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327.
CVSS Score: 4.6 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0758&w=2; http://secunia.com/advisories/22742; http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt
CVE: CVE-2006-5853
Published: 2006-11-10
Description: Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is returned to the client in a lang cookie.
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/1845; http://www.procheckup.com/Vulner_PR0506.php; http://www.securityfocus.com/archive/1/450960
CVE: CVE-2006-5487
Published: 2006-11-10
Description: Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/22806; http://securityreason.com/securityalert/1857; http://securitytracker.com/id?1017209
CVE: CVE-2006-5821
Published: 2006-11-10
Description: Heap-based buffer overflow in the IMA_SECURE_DecryptData1 function in ImaSystem.dll for Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to execute arbitrary code via requests to the Independent Management Architecture (IMA) service (ImaSrv.exe) with invalid size values that trigger the overflow during decryption.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22802; http://securitytracker.com/id?1017205; http://support.citrix.com/article/CTX111186
CVE: CVE-2006-5861
Published: 2006-11-10
Description: The Independent Management Architecture (IMA) service (ImaSrv.exe) in Citrix MetaFrame XP 1.0 and 2.0, and Presentation Server 3.0 and 4.0, allows remote attackers to cause a denial of service (service exit) via a crafted packet that causes the service to access an unmapped memory address and triggers an unhandled exception.
CVSS Score: 5.0 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=441; http://secunia.com/advisories/22802; http://securitytracker.com/id?1017205
CVE: CVE-2006-5862
Published: 2006-11-11
Description: Directory traversal vulnerability in the session mechanism of the web interface for Network Administration Visualized (NAV) before 3.1.1 allows attackers with filesystem write access to have an unknown impact via unknown attack vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/22766; http://sourceforge.net/project/shownotes.php?release_id=461986; http://www.securityfocus.com/bid/20995
CVE: CVE-2006-5863
Published: 2006-11-11
Description: PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22804; http://www.osvdb.org/30275; http://www.securityfocus.com/bid/20980
CVE: CVE-2006-5864
Published: 2006-11-11
Description: Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers.  NOTE: this issue can be exploited through other products that use gv such as evince.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/22787; http://secunia.com/advisories/22932; http://secunia.com/advisories/23006
CVE: CVE-2006-5865
Published: 2006-11-11
Description: PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langs_dir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22619; http://www.osvdb.org/30280; http://www.securityfocus.com/archive/1/452140
CVE: CVE-2006-5866
Published: 2006-11-11
Description: Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to read and include arbitrary files via ".." sequences in the file parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22734; http://www.securityfocus.com/archive/1/451318/100/0/threaded; http://www.securityfocus.com/bid/21008
CVE: CVE-2006-4251
Published: 2006-11-14
Description: Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.
CVSS Score: 7.5 (HIGH)
References: http://doc.powerdns.com/powerdns-advisory-2006-01.html; http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html; http://secunia.com/advisories/22824
CVE: CVE-2006-5878
Published: 2006-11-14
Description: Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22789; http://secunia.com/advisories/22868; http://secunia.com/advisories/23357
CVE: CVE-2006-5879
Published: 2006-11-14
Description: SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll_ID parameter, a different vector than CVE-2006-1353.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22845; http://www.securityfocus.com/archive/1/451384/100/0/threaded; http://www.securityfocus.com/bid/21039
CVE: CVE-2006-5880
Published: 2006-11-14
Description: SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22844; http://www.securityfocus.com/bid/21044; http://www.vupen.com/english/advisories/2006/4464
CVE: CVE-2006-5881
Published: 2006-11-14
Description: SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the cl_cat_ID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22827; http://securityreason.com/securityalert/1853; http://securitytracker.com/id?1017214
CVE: CVE-2006-5882
Published: 2006-11-14
Description: Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field.
CVSS Score: 8.3 (HIGH)
CWE: CWE-119
References: http://projects.info-pull.com/mokb/MOKB-11-11-2006.html; http://secunia.com/advisories/22831; http://securitytracker.com/id?1017212
CVE: CVE-2006-5883
Published: 2006-11-14
Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.
CVSS Score: 3.5 (LOW)
References: http://aria-security.net/advisory/cpanel.txt; http://secunia.com/advisories/22825; http://securityreason.com/securityalert/1847
CVE: CVE-2006-4252
Published: 2006-11-14
Description: PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.
CVSS Score: 5.0 (MEDIUM)
References: http://doc.powerdns.com/powerdns-advisory-2006-02.html; http://lists.suse.com/archive/suse-security-announce/2006-Nov/0007.html; http://secunia.com/advisories/22824
CVE: CVE-2006-3445
Published: 2006-11-14
Description: Integer overflow in the ReadWideString function in agentdpv.dll in Microsoft Agent on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via a large length value in an .ACF file, which results in a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/22878; http://securitytracker.com/id?1017222; http://www.coseinc.com/alert.html
CVE: CVE-2006-4687
Published: 2006-11-14
Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-119
References: http://securitytracker.com/id?1017223; http://www.kb.cert.org/vuls/id/197852; http://www.osvdb.org/31323
CVE: CVE-2006-4691
Published: 2006-11-14
Description: Stack-based buffer overflow in the NetpManageIPCConnect function in the Workstation service (wkssvc.dll) in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to execute arbitrary code via NetrJoinDomain2 RPC messages with a long hostname.
CVSS Score: 10.0 (HIGH)
References: http://research.eeye.com/html/advisories/published/AD20061114.html; http://secunia.com/advisories/22883; http://securitytracker.com/id?1017221
CVE: CVE-2006-5198
Published: 2006-11-14
Description: The WZFILEVIEW.FileViewCtrl.61 ActiveX control (aka Sky Software "FileView" ActiveX control) for WinZip 10.0 before build 7245 allows remote attackers to execute arbitrary code via unspecified "unsafe methods."
CVSS Score: 4.0 (MEDIUM)
References: http://isc.sans.org/diary.php?storyid=1861; http://secunia.com/advisories/22891; http://securitytracker.com/id?1017226
CVE: CVE-2006-5884
Published: 2006-11-14
Description: Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly related to (1) Danim.dll and (2) Lmrt.dll, a different set of vulnerabilities than CVE-2006-4446 and CVE-2006-4777.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/31324; http://www.us-cert.gov/cas/techalerts/TA06-318A.html; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
CVE: CVE-2006-4688
Published: 2006-11-14
Description: Buffer overflow in Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to execute arbitrary code via crafted messages, aka "Client Service for NetWare Memory Corruption Vulnerability."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22866; http://securitytracker.com/id?1017224; http://www.securityfocus.com/archive/1/451844/100/0/threaded
CVE: CVE-2006-4689
Published: 2006-11-14
Description: Unspecified vulnerability in the driver for the Client Service for NetWare (CSNW) in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 up to SP1 allows remote attackers to cause a denial of service (hang and reboot) via has unknown attack vectors, aka "NetWare Driver Denial of Service Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22866; http://securitytracker.com/id?1017224; http://www.securityfocus.com/archive/1/451844/100/0/threaded
CVE: CVE-2006-5461
Published: 2006-11-14
Description: Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.
CVSS Score: 2.1 (LOW)
References: http://avahi.org/milestone/Avahi%200.6.15; http://secunia.com/advisories/22807; http://secunia.com/advisories/22852
CVE: CVE-2006-5885
Published: 2006-11-14
Description: SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22829; http://securityreason.com/securityalert/1856; http://securitytracker.com/id?1017216
CVE: CVE-2006-5886
Published: 2006-11-14
Description: SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22828; http://securityreason.com/securityalert/1850; http://www.securityfocus.com/archive/1/451331/100/0/threaded
CVE: CVE-2006-5887
Published: 2006-11-14
Description: SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22830; http://securityreason.com/securityalert/1855; http://securitytracker.com/id?1017217
CVE: CVE-2006-5888
Published: 2006-11-14
Description: SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22840; http://www.securityfocus.com/archive/1/451372/100/0/threaded; http://www.vupen.com/english/advisories/2006/4463
CVE: CVE-2006-5889
Published: 2006-11-14
Description: SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22810; http://www.craigheffner.com/security/exploits/brewblogger1.3.1.txt; http://www.securityfocus.com/bid/21026
CVE: CVE-2006-5890
Published: 2006-11-14
Description: SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22839; http://www.vupen.com/english/advisories/2006/4465; https://exchange.xforce.ibmcloud.com/vulnerabilities/30189
CVE: CVE-2006-5891
Published: 2006-11-14
Description: SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22838; http://securityreason.com/securityalert/1851; http://www.securityfocus.com/archive/1/451307/100/0/threaded
CVE: CVE-2006-5892
Published: 2006-11-14
Description: SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22796; http://www.securityfocus.com/archive/1/451320/100/0/threaded; http://www.securityfocus.com/bid/20987
CVE: CVE-2006-5893
Published: 2006-11-14
Description: Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4388&w=2; http://securitytracker.com/id?1017252; http://sourceforge.net/project/shownotes.php?release_id=463892&group_id=95217
CVE: CVE-2006-5894
Published: 2006-11-14
Description: Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22847; http://www.rahim.webd.pl/exploit127.html; http://www.securityfocus.com/bid/21009
CVE: CVE-2006-5895
Published: 2006-11-14
Description: PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22820; http://securityreason.com/securityalert/1848; http://www.attrition.org/pipermail/vim/2006-November/001123.html