deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-4838
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) el/functions.jsp, (2) el/implicit-objects.jsp, and (3) jspx/textRotate.jspx in examples/jsp2/, as demonstrated via script in a request to snp/snoop.jsp.  NOTE: other XSS issues in the manager were simultaneously reported, but these require admin access and do not cross privilege boundaries.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065598.html; http://marc.info/?l=tomcat-dev&m=[PII_REDACTED]1536&w=2; http://marc.info/?l=tomcat-dev&m=[PII_REDACTED]6951&w=2
CVE: CVE-2005-4839
Published: 2005-12-31
Description: PureTLS before 0.9b5 does not clear optional Extensions and Algorithm.Parameters values before parsing, which might trigger an information leak of values from earlier certificates.
CVSS Score: 5.0 (MEDIUM)
References: http://www.rtfm.com/puretls/; http://www1.ietf.org/mail-archive/web/tls/current/msg00229.html; http://www.rtfm.com/puretls/
CVE: CVE-2005-4840
Published: 2005-12-31
Description: The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html; http://www.osvdb.org/26836; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4841
Published: 2005-12-31
Description: The Outlook Progress Ctl control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/archive/1/391803; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4842
Published: 2005-12-31
Description: The System Monitor Source Properties control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/archive/1/391803; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4843
Published: 2005-12-31
Description: The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/archive/1/391803; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4844
Published: 2005-12-31
Description: The CLSID_ApprenticeICW control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
CVSS Score: 7.1 (HIGH)
References: http://www.securityfocus.com/archive/1/391803; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4845
Published: 2005-12-31
Description: The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://www.securityfocus.com/archive/1/391803; http://www.securityfocus.com/archive/1/391803
CVE: CVE-2005-4846
Published: 2005-12-31
Description: Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://sourceforge.net/forum/forum.php?forum_id=514029; http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6; http://spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log
CVE: CVE-2005-4847
Published: 2005-12-31
Description: Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to compromise," a different issue than CVE-2005-4846.
CVSS Score: 10.0 (HIGH)
References: http://sourceforge.net/forum/forum.php?forum_id=514029; http://www.osvdb.org/38887; http://sourceforge.net/forum/forum.php?forum_id=514029
CVE: CVE-2005-4848
Published: 2005-12-31
Description: Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might allow remote attackers to execute arbitrary code via certain data packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://blog2.lemondeinformatique.fr/management_du_si/2006/05/notre_ami_imad_.html; http://www.blackberry.com/btsc/articles/669/KB04075_f.SAL_Public.html; http://www.lemonde.fr/web/article/0%2C1-0%402-3208%2C36-777732%2C0.html
CVE: CVE-2005-4849
Published: 2005-12-31
Description: Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://db.apache.org/derby/releases/release-10.1.2.1.html; http://issues.apache.org/jira/browse/DERBY-530; http://issues.apache.org/jira/browse/DERBY-559
CVE: CVE-2005-4850
Published: 2005-12-31
Description: eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which allows remote attackers to edit data submitted by arbitrary anonymous users.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/6680; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4851
Published: 2005-12-31
Description: eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-287
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/6841; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4852
Published: 2005-12-31
Description: The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric characters in a URI to '_' (underscore), which allows remote attackers to bypass access restrictions by inserting certain characters in a URI, as demonstrated by a request for /admin:de, which matches a rule allowing only /admin_de to access /admin.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/7025; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4853
Published: 2005-12-31
Description: The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050818 does not restrict edit permissions to a posting's owner, which allows remote authenticated users to edit arbitrary postings.
CVSS Score: 9.4 (HIGH)
CWE: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/7052; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4854
Published: 2005-12-31
Description: eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/6355; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4855
Published: 2005-12-31
Description: Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 before 20050922 does not restrict Image datatype uploads to image content types, which allows remote authenticated users to upload certain types of files, as demonstrated by .js files, which may enable cross-site scripting (XSS) attacks or other attacks.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/5984; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4856
Published: 2005-12-31
Description: The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does not properly handle authorization errors, which allows remote attackers to obtain sensitive information and see the admin pagelayout and associated templates via a request with (1) "anything after the url" or (2) a "wrong url".
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-19
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/6703; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4857
Published: 2005-12-31
Description: eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service (Apache httpd segmentation fault) via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a "memory addressing error".
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0; http://issues.ez.no/7459; http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0
CVE: CVE-2005-4858
Published: 2005-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters associated with the (1) name, (2) title, and (3) comment sections, as demonstrated by referencing a remote document through the SRC attribute of an IFRAME element.
CVSS Score: 4.3 (MEDIUM)
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt; http://www.securityfocus.com/bid/14778; http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
CVE: CVE-2005-4859
Published: 2005-12-31
Description: mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mimic2.dat.
CVSS Score: 6.4 (MEDIUM)
References: http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt; http://www.securityfocus.com/bid/14779; http://exploitlabs.com/files/advisories/EXPL-A-2005-013-mimic2.txt
CVE: CVE-2005-4860
Published: 2005-12-31
Description: Spectrum Cash Receipting System before 6.504 uses weak cryptography (static substitution) in the PASSFILE password file, which makes it easier for local users to gain privileges by decrypting a password.
CVSS Score: 7.8 (HIGH)
CWE: CWE-327
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7550&w=2; http://secunia.com/advisories/13985; http://www.portcullis.co.uk/uplds/advisories/Portcullis%20Security%20Advisory%2005-002%20Spectrum%20Cash%20Receipting%20System%20Weak%20Password%20Protection%20Vulnerability.txt
CVE: CVE-2005-4861
Published: 2005-12-31
Description: functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is not properly handled by the CHECK_AUTH function.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://archives.neohapsis.com/archives/bugtraq/2005-07/0522.html; http://secunia.com/advisories/16287; http://www.jasio.net/index.php?categoryid=3&p13_sectionid=2&p13_fileid=6
CVE: CVE-2005-4862
Published: 2005-12-31
Description: The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-255
References: http://jira.xwiki.org/jira/browse/XWIKI-70; http://jira.xwiki.org/jira/browse/XWIKI-70
CVE: CVE-2005-4863
Published: 2005-12-31
Description: Stack-based buffer overflow in db2fmp in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long parameter.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3579&w=2; http://secunia.com/advisories/12733; http://www-1.ibm.com/support/docview.wss?uid=swg21181228
CVE: CVE-2005-4864
Published: 2005-12-31
Description: Stack-based buffer overflow in libdb2.so in IBM DB2 7.x and 8.1 allows local users to execute arbitrary code via a long DB2LPORT environment variable.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]5541&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg1IY62042
CVE: CVE-2005-4865
Published: 2005-12-31
Description: Stack-based buffer overflow in call in IBM DB2 7.x and 8.1 allows remote attackers to execute arbitrary code via a long libname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1208&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg1IY62041
CVE: CVE-2005-4866
Published: 2005-12-31
Description: Stack-based buffer overflow in JDBC Applet Server in IBM DB2 8.1 allows remote attackers to execute arbitrary by connecting and sending a long username, then disconnecting gracefully and reconnecting and sending a short username and an unexpected db2java.zip version, which causes a null terminator to be removed and leads to the overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1381&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg1IY61492
CVE: CVE-2005-4867
Published: 2005-12-31
Description: Stack-based buffer overflow in the SATENCRYPT function in IBM DB2 8.1, when Satellite Administration (SATADMIN) is enabled, allows remote attackers to execute arbitrary code via a long parameter.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1120&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg21181228
CVE: CVE-2005-4868
Published: 2005-12-31
Description: Shared memory sections and events in IBM DB2 8.1 have default permissions of read and write for the Everyone group, which allows local users to gain unauthorized access, gain sensitive information, such as cleartext passwords, and cause a denial of service.
CVSS Score: 7.1 (HIGH)
CWE: CWE-732
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1836&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg21181228
CVE: CVE-2005-4869
Published: 2005-12-31
Description: The (1) to_char and (2) to_date function in IBM DB2 8.1 allows local users to cause a denial of service (application crash) via an empty string in the second parameter, which causes a null pointer dereference.
CVSS Score: 2.1 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1494&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg1IY61781
CVE: CVE-2005-4870
Published: 2005-12-31
Description: Stack-based buffer overflows in the (1) xmlvarcharfromfile, (2) xmlclobfromfile, (3) xmlfilefromvarchar, and (4) xmlfilefromclob function calls in IBM DB2 8.1 allow remote attackers to execute arbitrary code via a 94-byte second argument, which causes the return address to be overwritten with a pointer to the argument.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7717&w=2; http://secunia.com/advisories/12733/; http://www-1.ibm.com/support/docview.wss?uid=swg1IY62297
CVE: CVE-2005-4871
Published: 2005-12-31
Description: Certain XML functions in IBM DB2 8.1 run with the privileges of DB2 instead of the logged-in user, which allows remote attackers to create or overwrite files via (1) XMLFileFromVarchar or (2) XMLFileFromClob, or read files via (3) XMLVarcharFromFile or (4) XMLClobFromFile.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3954&w=2; http://secunia.com/advisories/12733/; http://www.ngssoftware.com/advisories/db205012005I.txt
CVE: CVE-2005-4872
Published: 2005-12-31
Description: Perl-Compatible Regular Expression (PCRE) library before 6.2 does not properly count the number of named capturing subpatterns, which allows context-dependent attackers to cause a denial of service (crash) via a regular expression with a large number of named subpatterns, which triggers a buffer overflow.  NOTE: this issue was originally subsumed by CVE-2006-7224, but that CVE has been REJECTED and split.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html; http://scary.beasts.org/security/CESA-2007-006.html; http://secunia.com/advisories/27582
CVE: CVE-2005-4873
Published: 2005-12-31
Description: Multiple stack-based buffer overflows in the phpcups PHP module for CUPS 1.1.23rc1 might allow context-dependent attackers to execute arbitrary code via vectors that result in long function parameters, as demonstrated by the cups_get_dest_options function in phpcups.c.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.cups.org/str.php?L1102; https://exchange.xforce.ibmcloud.com/vulnerabilities/41497; http://www.cups.org/str.php?L1102
CVE: CVE-2005-4874
Published: 2005-12-31
Description: The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication passwords via a request with a "Max-Forwards: 0" header or (2) arbitrary local passwords on the web server that hosts this object.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-94
References: https://bugzilla.mozilla.org/show_bug.cgi?id=297078; https://bugzilla.mozilla.org/show_bug.cgi?id=302489; https://exchange.xforce.ibmcloud.com/vulnerabilities/41553
CVE: CVE-2005-4875
Published: 2005-12-31
Description: TYPO3 3.8.0 and earlier allows remote attackers to obtain sensitive information via a direct request to misc/phpcheck/, which invokes the phpinfo function and prints values of unspecified environment variables.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://bugs.typo3.org/view.php?id=1250; http://typo3.org/teams/security/security-bulletins/typo3-20050725-1/; https://exchange.xforce.ibmcloud.com/vulnerabilities/42457
CVE: CVE-2005-4876
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions before 2.3.0 Beta 2, allows remote attackers to inject arbitrary web script or HTML via the username parameter, a different vulnerability than CVE-2005-4877.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.igniterealtime.org/issues/browse/JM-430; https://exchange.xforce.ibmcloud.com/vulnerabilities/44689; http://www.igniterealtime.org/issues/browse/JM-430
CVE: CVE-2005-4877
Published: 2005-12-31
Description: Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote attackers to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability than CVE-2005-4876.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.igniterealtime.org/issues/browse/JM-430; https://exchange.xforce.ibmcloud.com/vulnerabilities/44690; http://www.igniterealtime.org/issues/browse/JM-430
CVE: CVE-2006-0064
Published: 2006-01-03
Description: PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute arbitrary PHP code via a URL in the glob[rootDir] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.vupen.com/english/advisories/2006/0016; https://www.exploit-db.com/exploits/1398; http://www.vupen.com/english/advisories/2006/0016
CVE: CVE-2006-0065
Published: 2006-01-03
Description: SQL injection vulnerability in (1) functions.php, (2) functions_update.php, and (3) functions_display.php in VEGO Web Forum 1.26 and earlier allows remote attackers to execute arbitrary SQL commands via the theme_id parameter in index.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/1/summary.html; http://secunia.com/advisories/18273; http://securityreason.com/securityalert/315
CVE: CVE-2006-0066
Published: 2006-01-03
Description: SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands via the readold parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/9/summary.html; http://secunia.com/advisories/18265; http://www.osvdb.org/22149
CVE: CVE-2006-0067
Published: 2006-01-03
Description: SQL injection vulnerability in login.php in VEGO Links Builder 2.00 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/2/summary.html; http://secunia.com/advisories/18272; http://www.osvdb.org/22139
CVE: CVE-2006-0068
Published: 2006-01-03
Description: SQL injection vulnerability in Primo Cart 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) q parameter to search.php and (2) email parameter to user.php.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2006/01/primo-cart-sql-inj.html; http://secunia.com/advisories/18264; http://www.osvdb.org/22146
CVE: CVE-2006-0069
Published: 2006-01-03
Description: Cross-site scripting (XSS) vulnerability in addentry.php in Chipmunk Guestbook 1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/4/summary.html; http://secunia.com/advisories/18270; http://www.securityfocus.com/archive/1/420667/100/0/threaded
CVE: CVE-2006-0070
Published: 2006-01-04
Description: Drupal allows remote attackers to conduct cross-site scripting (XSS) attacks via an IMG tag with an unusual encoded Javascript function name, as demonstrated using variations of the alert() function.  NOTE: a followup by the vendor suggests that the issue does not exist in 4.5.6 or 4.6.4 when "Filtered HTML" is enabled, and since "Full HTML" would not filter HTML by design, perhaps this should not be included in CVE
CVSS Score: 4.3 (MEDIUM)
References: http://www.securityfocus.com/archive/1/420671/100/0/threaded; http://www.securityfocus.com/archive/1/420683/100/0/threaded; http://www.securityfocus.com/archive/1/420671/100/0/threaded
CVE: CVE-2006-0071
Published: 2006-01-04
Description: The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.
CVSS Score: 6.6 (MEDIUM)
References: http://secunia.com/advisories/18284; http://www.gentoo.org/security/en/glsa/glsa-200601-01.xml; http://www.osvdb.org/22211