deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-2603
Published: 2008-07-15
Description: Unspecified vulnerability in the Resource Manager component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.6, and Database Control in Enterprise Manager, has unknown impact and remote authenticated attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via the REFRESHCHOICE parameter in multiple web pages.
CVSS Score: 3.5 (LOW)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2604
Published: 2008-07-15
Description: Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2605.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2605
Published: 2008-07-15
Description: Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2604.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2606
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2586.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2607
Published: 2008-07-15
Description: Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to SYS.DBMS_AQELM.  NOTE: the previous information was obtained from the Oracle July 2008 CPU.  Oracle has not commented on reliable researcher claims that this issue is a buffer overflow that allows attackers to cause a denial of service (database corruption) and possibly execute arbitrary code via a long argument to an unspecified procedure.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=726; http://secunia.com/advisories/31087
CVE: CVE-2008-2608
Published: 2008-07-15
Description: Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and remote authenticated attack vectors related to SYS.KUPF$FILE_INT.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2609
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.4.2 has unknown impact and remote attack vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2610
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.4 has unknown impact and remote authenticated attack vectors.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2611
Published: 2008-07-15
Description: Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.6 has unknown impact and remote authenticated attack vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2612
Published: 2008-07-15
Description: Unspecified vulnerability in the Hyperion BI Plus component in Oracle Application Server 8.3.2.4, 8.5.0.3, 9.2.0.3, 9.2.1.0, and 9.3.1.0 has unknown impact and remote attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2613
Published: 2008-07-15
Description: Unspecified vulnerability in the Database Scheduler component in Oracle Database 10.2.0.4 and 11.1.0.6 has unknown impact and local attack vectors. NOTE: the previous information was obtained from the Oracle July 2008 CPU. Oracle has not commented on reliable researcher claims that this is an untrusted search path issue that allows local users to gain privileges via a malicious (1) libclntsh.so or (2) libnnz10.so library.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=727; http://secunia.com/advisories/31087
CVE: CVE-2008-2614
Published: 2008-07-15
Description: Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 9.0.4.3, 10.1.2.3, and 10.1.3.3 has unknown impact and remote attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2615
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2616
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2617
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2618, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2618
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620, CVE-2008-2621, and CVE-2008-2622.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2620
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2621, and CVE-2008-2622.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2621
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2622.
CVSS Score: 4.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-2622
Published: 2008-07-15
Description: Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2618, CVE-2008-2620, and CVE-2008-2621.
CVSS Score: 6.5 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31087; http://secunia.com/advisories/31113
CVE: CVE-2008-3145
Published: 2008-07-16
Description: The fragment_add_work function in epan/reassemble.c in Wireshark 0.8.19 through 1.0.1 allows remote attackers to cause a denial of service (crash) via a series of fragmented packets with non-sequential fragmentation offset values, which lead to a buffer over-read.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://anonsvn.wireshark.org/viewvc/index.py?view=rev&revision=25343; http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html; http://secunia.com/advisories/31044
CVE: CVE-2008-3189
Published: 2008-07-16
Description: SQL injection vulnerability in dreamnews-rss.php in DreamNews Manager allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31032; http://www.securityfocus.com/bid/30170; http://www.vupen.com/english/advisories/2008/2058/references
CVE: CVE-2008-3190
Published: 2008-07-16
Description: Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31053; http://securityreason.com/securityalert/4001; http://www.securityfocus.com/bid/30227
CVE: CVE-2008-3191
Published: 2008-07-16
Description: Multiple SQL injection vulnerabilities in usercp.php in mForum 0.1a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) City, (2) Interest, (3) Email, (4) Icq, (5) msn, or (6) Yahoo Messenger field in an edit_profile action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://securityreason.com/securityalert/4003; http://www.securityfocus.com/bid/30214; https://exchange.xforce.ibmcloud.com/vulnerabilities/43757
CVE: CVE-2008-3192
Published: 2008-07-16
Description: Directory traversal vulnerability in index.php in jSite 1.0 OE allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the module parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31049; http://securityreason.com/securityalert/3999; http://www.securityfocus.com/bid/30206
CVE: CVE-2008-3193
Published: 2008-07-16
Description: SQL injection vulnerability in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the page parameter to the default URI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31049; http://securityreason.com/securityalert/3999; http://www.securityfocus.com/bid/30206
CVE: CVE-2008-3194
Published: 2008-07-16
Description: Multiple directory traversal vulnerabilities in data/inc/themes/predefined_variables.php in pluck 4.5.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) langpref, (2) file, (3) blogpost, or (4) cat parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31088; http://securityreason.com/securityalert/3996; http://www.bugreport.ir/index_48.htm
CVE: CVE-2008-3196
Published: 2008-07-16
Description: skeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side, which allows context-dependent attackers to cause an out-of-bounds stack access when the yacc stack pointer points to the end of the stack.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://marc.info/?l=openbsd-cvs&m=[PII_REDACTED]1393&w=2; http://marc.info/?l=openbsd-cvs&m=[PII_REDACTED]2044&w=2; http://secunia.com/advisories/31073
CVE: CVE-2008-3197
Published: 2008-07-16
Description: Cross-site request forgery (CSRF) vulnerability in phpMyAdmin before 2.11.7.1 allows remote attackers to perform unauthorized actions via a link or IMG tag to (1) the db parameter in the "Creating a Database" functionality (db_create.php), and (2) the convcharset and collation_connection parameters related to an unspecified program that modifies the connection character set.
CVSS Score: 3.5 (LOW)
CWE: CWE-352
References: http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00000.html; http://secunia.com/advisories/31097; http://secunia.com/advisories/31115
CVE: CVE-2008-1665
Published: 2008-07-17
Description: Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01502023; http://secunia.com/advisories/31148; http://www.securityfocus.com/bid/30250
CVE: CVE-2008-1666
Published: 2008-07-17
Description: Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, possibly related to the July 2008 Oracle Critical Patch Update.
CVSS Score: 10.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00727143; http://secunia.com/advisories/31113; http://www.vupen.com/english/advisories/2008/2115
CVE: CVE-2008-2232
Published: 2008-07-17
Description: The expand_template function in afuse.c in afuse 0.2 allows local users to gain privileges via shell metacharacters in a pathname.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490921; http://secunia.com/advisories/31086; http://secunia.com/advisories/31131
CVE: CVE-2008-2933
Published: 2008-07-17
Description: Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely handled by a vector application, as exploited in conjunction with CVE-2008-2540.  NOTE: this issue exists because of an insufficient fix for CVE-2005-2267.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/31106; http://secunia.com/advisories/31120; http://secunia.com/advisories/31121
CVE: CVE-2008-3198
Published: 2008-07-17
Description: Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page.  NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.mozilla.org/security/announce/2008/mfsa2008-35.html; http://www.securityfocus.com/bid/30244; https://bugzilla.mozilla.org/show_bug.cgi?id=441169
CVE: CVE-2008-3199
Published: 2008-07-17
Description: Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/31251; http://www.resiprocate.org/ReSIProcate_1.3.4_Release; http://www.securityfocus.com/bid/30399
CVE: CVE-2008-3200
Published: 2008-07-17
Description: SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affich_message action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/4005; http://www.securityfocus.com/bid/30202; https://exchange.xforce.ibmcloud.com/vulnerabilities/43740
CVE: CVE-2008-3201
Published: 2008-07-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Pagefusion 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) acct_fname and (2) acct_lname parameters in an edit action, and the (3) PID, (4) PGID, and (5) rez parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/30155.html; http://secunia.com/advisories/31050; http://www.securityfocus.com/bid/30155
CVE: CVE-2008-3202
Published: 2008-07-17
Description: Cross-site scripting (XSS) vulnerability in index.php in Xomol CMS 1.2 allows remote attackers to inject arbitrary web script or HTML via the current_url parameter in a tellafriend action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/30156.html; http://secunia.com/advisories/31015; http://www.securityfocus.com/bid/30156
CVE: CVE-2008-3203
Published: 2008-07-17
Description: js/pages/pages_data.php in AuraCMS 2.2 through 2.2.2 does not perform authentication, which allows remote attackers to add, edit, and delete web content via a modified id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/31000; http://www.auracms.org/; http://www.securityfocus.com/bid/30169
CVE: CVE-2008-3204
Published: 2008-07-17
Description: SQL injection vulnerability in tops_top.php in E-topbiz Million Pixels 3 allows remote attackers to execute arbitrary SQL commands via the id_cat parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31059; http://securityreason.com/securityalert/4006; http://www.securityfocus.com/bid/30190
CVE: CVE-2008-3205
Published: 2008-07-17
Description: Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/31061; http://securityreason.com/securityalert/4007; http://www.securityfocus.com/bid/30183
CVE: CVE-2008-3206
Published: 2008-07-18
Description: SQL injection vulnerability in browse.groups.php in Yuhhu Pubs Black Cat allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31077; http://securityreason.com/securityalert/4008; http://www.securityfocus.com/archive/1/494319/100/0/threaded
CVE: CVE-2008-3207
Published: 2008-07-18
Description: PHP remote file inclusion vulnerability in cms/modules/form.lib.php in Pragyan CMS 2.6.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) sourceFolder or (2) moduleFolder parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/31101; http://securityreason.com/securityalert/4010; http://www.securityfocus.com/bid/30235
CVE: CVE-2008-3208
Published: 2008-07-18
Description: Simple DNS Plus 4.1, 5.0, and possibly other versions before 5.1.101 allows remote attackers to cause a denial of service via multiple DNS reply packets.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://securityreason.com/securityalert/4011; http://www.blackhat.org.il/index.php/simple-dns-plus-5041-remote-denial-of-service-exploit/; http://www.securityfocus.com/archive/1/494304/100/0/threaded
CVE: CVE-2008-3209
Published: 2008-07-18
Description: Heap-based buffer overflow in the OpenGifFile function in BiGif.dll in Black Ice Document Imaging SDK 10.95 allows remote attackers to execute arbitrary code via a long string argument to the GetNumberOfImagesInGifFile method in the BIImgFrm Control ActiveX control in biimgfrm.ocx.  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/31095; http://securityreason.com/securityalert/4012; http://www.securityfocus.com/bid/30243
CVE: CVE-2008-3210
Published: 2008-07-18
Description: rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://labs.mudynamics.com/advisories/MU-200807-01.txt; http://secunia.com/advisories/31058; http://securityreason.com/securityalert/4013
CVE: CVE-2008-3211
Published: 2008-07-18
Description: Scripteen Free Image Hosting Script 1.2 and 1.2.1 allows remote attackers to bypass authentication and gain administrative access by setting the cookid cookie value to 1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://secunia.com/advisories/31083; http://securityreason.com/securityalert/4014; http://www.securityfocus.com/bid/30217
CVE: CVE-2008-3212
Published: 2008-07-18
Description: Multiple SQL injection vulnerabilities in Scripteen Free Image Hosting Script 1.2.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to admin/login.php, or the (3) uname or (4) pass parameter to login.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31083; http://www.securityfocus.com/bid/30216; https://exchange.xforce.ibmcloud.com/vulnerabilities/43772
CVE: CVE-2008-3213
Published: 2008-07-18
Description: SQL injection vulnerability in secciones/tablon/tablon.php in WebCMS Portal Edition allows remote attackers to execute arbitrary SQL commands via the id parameter to portal/index.php in a tablon action. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/31047; http://securityreason.com/securityalert/4009; http://www.securityfocus.com/bid/30204