deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-4352
Published: 2010-12-30
Description: Stack consumption vulnerability in D-Bus (aka DBus) before 1.4.1 allows local users to cause a denial of service (daemon crash) via a message containing many nested variants.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://cgit.freedesktop.org/dbus/dbus/commit/?id=7d65a3a6ed8815e34a99c680ac3869fde49dbbd4; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052550.html
CVE: CVE-2010-4507
Published: 2010-12-30
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the iSpot 2.0.0.0 R1679, and the ClearSpot 2.0.0.0 R1512 and R1786, with firmware 1.9.9.4 allow remote attackers to hijack the authentication of administrators for requests that (1) execute arbitrary commands via the cmd parameter in an act_cmd_result action to webmain.cgi, (2) enable remote management via an enable_remote_access act_network_set action to webmain.cgi, (3) enable the TELNET service via an ENABLE_TELNET act_set_wimax_etc_config action to webmain.cgi, (4) enable TELNET sessions via a certain act_network_set action to webmain.cgi, or (5) read arbitrary files via the FILE_PATH parameter in an act_file_download action to upgrademain.cgi.
CVSS Score: 9.3 (HIGH)
CWE: CWE-352
References: http://secunia.com/advisories/42590; http://www.exploit-db.com/exploits/15728/; https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt
CVE: CVE-2010-4622
Published: 2010-12-30
Description: Directory traversal vulnerability in WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 on AIX allows remote attackers to read arbitrary files via a %uff0e%uff0e (encoded dot dot) in a URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/42727; http://securitytracker.com/id?1024927; http://www-01.ibm.com/support/docview.wss?uid=swg24028829
CVE: CVE-2010-4623
Published: 2010-12-30
Description: WebSEAL in IBM Tivoli Access Manager for e-business 6.1.1 before 6.1.1-TIV-AWS-FP0001 allows remote authenticated users to cause a denial of service (worker thread consumption) via shift-reload actions.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://www-01.ibm.com/support/docview.wss?uid=swg24028829; http://www.securityfocus.com/bid/45665; https://exchange.xforce.ibmcloud.com/vulnerabilities/64471
CVE: CVE-2010-3708
Published: 2010-12-30
Description: The serialization implementation in JBoss Drools in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 and JBoss Enterprise SOA Platform 4.2 and 4.3 supports the embedding of class files, which allows remote attackers to execute arbitrary code via a crafted static initializer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://securitytracker.com/id?1024813; http://www.redhat.com/support/errata/RHSA-2010-0937.html; http://www.redhat.com/support/errata/RHSA-2010-0938.html
CVE: CVE-2010-3862
Published: 2010-12-30
Description: The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09, and 5.1.0; and JBoss Enterprise Web Platform (aka JBEWP) 5.1.0; allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://securitytracker.com/id?1024813; http://www.redhat.com/support/errata/RHSA-2010-0937.html; http://www.redhat.com/support/errata/RHSA-2010-0938.html
CVE: CVE-2010-3878
Published: 2010-12-30
Description: Cross-site request forgery (CSRF) vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://securitytracker.com/id?1024813; http://www.redhat.com/support/errata/RHSA-2010-0937.html; http://www.redhat.com/support/errata/RHSA-2010-0938.html
CVE: CVE-2010-3923
Published: 2010-12-30
Description: Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory.
CVSS Score: 6.9 (MEDIUM)
References: http://homepage2.nifty.com/hibara/software/atcs.htm; http://jvn.jp/en/jp/JVN02175694/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html
CVE: CVE-2010-4265
Published: 2010-12-30
Description: The org.jboss.remoting.transport.bisocket.BisocketServerInvoker$SecondaryServerSocketThread.run method in JBoss Remoting 2.2.x before 2.2.3.SP4 and 2.5.x before 2.5.3.SP2 in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.3 through 4.3.0.CP09 allows remote attackers to cause a denial of service (daemon outage) by establishing a bisocket control connection TCP session, and then not sending any application data, related to a missing CVE-2010-3862 patch.  NOTE: this can be considered a duplicate of CVE-2010-3862 because a missing patch should not be assigned a separate CVE identifier.
CVSS Score: 2.6 (LOW)
References: http://securitytracker.com/id?1024840; http://www.redhat.com/support/errata/RHSA-2010-0964.html; http://www.redhat.com/support/errata/RHSA-2010-0965.html
CVE: CVE-2010-4522
Published: 2010-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in MyBB (aka MyBulletinBoard) 1.4.14, and 1.6.x before 1.6.1, allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) editpost.php, (2) member.php, and (3) newreply.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.mybb.com/2010/12/15/mybb-1-6-1-release-1-4-14-update/; http://openwall.com/lists/oss-security/2010/12/20/1; http://openwall.com/lists/oss-security/2010/12/22/2
CVE: CVE-2010-4624
Published: 2010-12-30
Description: MyBB (aka MyBulletinBoard) before 1.4.12 allows remote authenticated users to bypass intended restrictions on the number of [img] MyCodes by editing a post after it has been created.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://dev.mybboard.net/issues/728; http://openwall.com/lists/oss-security/2010/10/08/7
CVE: CVE-2010-4625
Published: 2010-12-30
Description: MyBB (aka MyBulletinBoard) before 1.4.12 does not properly handle a configuration with a visible forum that contains hidden threads, which allows remote attackers to obtain sensitive information by reading the Latest Threads block of the Portal Page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://community.mybb.com/thread-66255.html; http://dev.mybboard.net/issues/809
CVE: CVE-2010-4626
Published: 2010-12-30
Description: The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force attack.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-310
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://dev.mybboard.net/issues/843; http://dev.mybboard.net/projects/mybb/repository/revisions/4872
CVE: CVE-2010-4627
Published: 2010-12-30
Description: Cross-site request forgery (CSRF) vulnerability in usercp2.php in MyBB (aka MyBulletinBoard) before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://dev.mybboard.net/issues/852; http://openwall.com/lists/oss-security/2010/10/08/7
CVE: CVE-2010-4628
Published: 2010-12-30
Description: member.php in MyBB (aka MyBulletinBoard) before 1.4.12 makes a certain superfluous call to the SQL COUNT function, which allows remote attackers to cause a denial of service (resource consumption) by making requests to member.php that trigger scans of the entire users table.
CVSS Score: 5.0 (MEDIUM)
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://dev.mybboard.net/issues/662; http://openwall.com/lists/oss-security/2010/10/08/7
CVE: CVE-2010-4629
Published: 2010-12-30
Description: MyBB (aka MyBulletinBoard) before 1.4.12 does not properly restrict uid values for group join requests, which allows remote attackers to cause a denial of service (resource consumption) by using guest access to submit join request forms for moderated groups, related to usercp.php and managegroup.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://blog.mybb.com/2010/04/13/mybb-1-4-12-released-security-maintenance-update/; http://dev.mybboard.net/issues/722; http://dev.mybboard.net/projects/mybb/repository/revisions/4856
CVE: CVE-2010-4630
Published: 2010-12-30
Description: Cross-site scripting (XSS) vulnerability in pages/admin/surveys/create.php in the WP Survey And Quiz Tool plugin 1.2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69074; http://packetstormsecurity.org/1011-exploits/wpsurvey-xss.txt; http://secunia.com/advisories/42196
CVE: CVE-2010-4631
Published: 2010-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) countrycode parameter to contact.asp, USERNAME parameter to (2) gateway.asp and (3) cart.asp, and the specific parameter to (4) quote.asp and (5) buyitnow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8405&w=2; http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt
CVE: CVE-2010-4632
Published: 2010-12-30
Description: Multiple SQL injection vulnerabilities in ASPilot Pilot Cart 7.3 allow remote attackers to execute arbitrary SQL commands via the (1) article parameter to kb.asp, (2) specific parameter to cart.asp, (3) countrycode parameter to contact.asp, and the (4) srch parameter to search.asp.  NOTE: the article parameter to pilot.asp is already covered by CVE-2008-2688.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://advisories.ariko-security.com/november/audyt_bezpieczenstwa_745.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]8405&w=2; http://packetstormsecurity.org/1011-exploits/aspilotpilotcart-sqlxssinject.txt
CVE: CVE-2010-4633
Published: 2010-12-30
Description: SQL injection vulnerability in cart.php in digiSHOP 2.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vulnerability than CVE-2005-4614.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/digishop-sql.txt; http://www.exploit-db.com/exploits/15405; http://www.securityfocus.com/bid/44614
CVE: CVE-2010-4634
Published: 2010-12-30
Description: Directory traversal vulnerability in osTicket 1.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to module.php, a different vector than CVE-2005-1439.  NOTE: this issue has been disputed by a reliable third party
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1011-exploits/osticket-lfi.txt; http://www.attrition.org/pipermail/vim/2010-November/002468.html; http://www.attrition.org/pipermail/vim/2010-November/002469.html
CVE: CVE-2010-4635
Published: 2010-12-30
Description: SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental (VRBO) Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/68983; http://packetstormsecurity.org/1011-exploits/site2nitevr-sql.txt; http://secunia.com/advisories/42087
CVE: CVE-2010-4636
Published: 2010-12-30
Description: SQL injection vulnerability in detail.asp in Site2Nite Business e-Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/68984; http://secunia.com/advisories/42086; http://www.exploit-db.com/exploits/15399
CVE: CVE-2010-4637
Published: 2010-12-30
Description: Cross-site scripting (XSS) vulnerability in feedlist/handler_image.php in the FeedList plugin 2.61.01 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/69071; http://packetstormsecurity.org/1011-exploits/wpfeedlist-xss.txt; http://secunia.com/advisories/42197
CVE: CVE-2010-4638
Published: 2010-12-30
Description: SQL injection vulnerability in the submitSurvey function in controller.php in JQuarks4s (com_jquarks4s) component 1.0.0 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the q parameter in a submitSurvey action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://adv.salvatorefresta.net/JQuarks4s_Joomla_Component_1.0.0_Blind_SQL_Injection_Vulnerability-08112010.txt; http://secunia.com/advisories/42164; http://www.exploit-db.com/exploits/15466
CVE: CVE-2010-4639
Published: 2010-12-30
Description: SQL injection vulnerability in index.php in MySource Matrix allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1011-exploits/mysourcematrix-sql.txt; http://www.exploit-db.com/exploits/15402; http://www.securityfocus.com/bid/44612
CVE: CVE-2010-4640
Published: 2010-12-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in XWiki Watch 1.0 allow remote attackers to inject arbitrary web script or HTML via the rev parameter to (1) bin/viewrev/Main/WebHome and (2) bin/view/Blog, and the (3) register_first_name and (4) register_last_name parameters to bin/register/XWiki/Register.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42090; http://www.osvdb.org/68973; http://www.osvdb.org/68974
CVE: CVE-2010-4641
Published: 2010-12-30
Description: SQL injection vulnerability in XWiki Enterprise before 2.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/42058; http://www.osvdb.org/68976; http://www.securityfocus.com/bid/44601
CVE: CVE-2010-4642
Published: 2010-12-30
Description: Cross-site scripting (XSS) vulnerability in XWiki Enterprise before 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/42058; http://www.osvdb.org/68977; http://www.securityfocus.com/bid/44601
CVE: CVE-2010-1677
Published: 2011-01-03
Description: MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demonstrated by a <bo<bo<bo<bo<body>dy>dy>dy>dy> sequence, a different vulnerability than CVE-2010-4524.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://lists.mandriva.com/security-announce/2011-01/msg00004.php; http://savannah.nongnu.org/bugs/?32014; http://secunia.com/advisories/42694
CVE: CVE-2010-3448
Published: 2011-01-03
Description: drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not properly restrict access to the video output control state, which allows local users to cause a denial of service (system hang) via a (1) read or (2) write operation.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=565790; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=b525c06cdbd8a3963f0173ccd23f9147d4c384b5; http://openwall.com/lists/oss-security/2010/06/23/2
CVE: CVE-2010-3873
Published: 2011-01-03
Description: The X.25 implementation in the Linux kernel before 2.6.36.2 does not properly parse facilities, which allows remote attackers to cause a denial of service (heap memory corruption and panic) or possibly have unspecified other impact via malformed (1) X25_FAC_CALLING_AE or (2) X25_FAC_CALLED_AE data, related to net/x25/x25_facilities.c and net/x25/x25_in.c, a different vulnerability than CVE-2010-4164.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=a6331d6f9a4298173b413cf99a40cc86a9d92c37; http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html
CVE: CVE-2010-3875
Published: 2011-01-03
Description: The ax25_getname function in net/ax25/af_ax25.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=fe10ae53384e48c51996941b7720ee16995cbcb7; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]0898&w=2; http://openwall.com/lists/oss-security/2010/11/02/7
CVE: CVE-2010-3876
Published: 2011-01-03
Description: net/packet/af_packet.c in the Linux kernel before 2.6.37-rc2 does not properly initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory by leveraging the CAP_NET_RAW capability to read copies of the applicable structures.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=67286640f638f5ad41a946b9a3dc[PII_REDACTED]8f; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]0908&w=2; http://openwall.com/lists/oss-security/2010/11/02/10
CVE: CVE-2010-3877
Published: 2011-01-03
Description: The get_name function in net/tipc/socket.c in the Linux kernel before 2.6.37-rc2 does not initialize a certain structure, which allows local users to obtain potentially sensitive information from kernel stack memory by reading a copy of this structure.
CVSS Score: 1.9 (LOW)
CWE: CWE-909
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=88f8a5e3e7defccd3925cabb1ee4d3994e5cdb52; http://marc.info/?l=linux-netdev&m=[PII_REDACTED]0917&w=2; http://openwall.com/lists/oss-security/2010/11/02/7
CVE: CVE-2010-3907
Published: 2011-01-03
Description: Multiple integer overflows in real.c in the Real demuxer plugin in VideoLAN VLC Media Player before 1.1.6 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a zero i_subpackets value in a Real Media file, leading to a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://git.videolan.org/?p=vlc.git%3Ba=commit%3Bh=[PII_REDACTED]f906d34d4aef83237842a5376adb55; http://www.cs.brown.edu/people/drosenbe/research.html; http://www.securityfocus.com/bid/45632
CVE: CVE-2010-4162
Published: 2011-01-03
Description: Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-190
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=cb4644cac4a2797afc847e6c92736664d4b0ea34; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052513.html; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html
CVE: CVE-2010-4163
Published: 2011-01-03
Description: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=9284bcf4e335e5f18a8bc7b26461c33ab60d0689; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00001.html
CVE: CVE-2010-4164
Published: 2011-01-03
Description: Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=5ef41308f94dcbb3b7afc56cdef1c2ba53fa5d2f; http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00004.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html
CVE: CVE-2010-4348
Published: 2011-01-03
Description: Cross-site scripting (XSS) vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html; http://openwall.com/lists/oss-security/2010/12/15/4
CVE: CVE-2010-4349
Published: 2011-01-03
Description: admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to obtain sensitive information via an invalid db_type parameter, which reveals the installation path in an error message, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html; http://openwall.com/lists/oss-security/2010/12/15/4
CVE: CVE-2010-4350
Published: 2011-01-03
Description: Directory traversal vulnerability in admin/upgrade_unattended.php in MantisBT before 1.2.4 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the db_type parameter, related to an unsafe call by MantisBT to a function in the ADOdb Library for PHP.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052721.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052730.html; http://openwall.com/lists/oss-security/2010/12/15/5
CVE: CVE-2010-4524
Published: 2011-01-03
Description: Cross-site scripting (XSS) vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by <scr<body>ipt> and </scr<body>ipt> sequences.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=607693; http://lists.mandriva.com/security-announce/2011-01/msg00004.php; http://openwall.com/lists/oss-security/2010/12/21/4