deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-3147
Published: 2010-08-27
Description: Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows local users to gain privileges via a Trojan horse wab32res.dll file in the current working directory, as demonstrated by a directory that contains a Windows Address Book (WAB), VCF (aka vCard), or P7C file, aka "Insecure Library Loading Vulnerability."  NOTE: the codebase for this product may overlap the codebase for the product referenced in CVE-2010-3143.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41050; http://www.attackvector.org/new-dll-hijacking-exploits-many/; http://www.exploit-db.com/exploits/14745/
CVE: CVE-2010-3148
Published: 2010-08-27
Description: Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka "Microsoft Visio Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14744/; http://www.us-cert.gov/cas/techalerts/TA11-193A.html; http://www.vupen.com/english/advisories/2010/2192
CVE: CVE-2010-3149
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe Device Central CS5 3.0.0(376), 3.0.1.0 (3027), and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse qtcf.dll that is located in the same folder as an ADCP file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/67533; http://secunia.com/advisories/41118; http://www.exploit-db.com/exploits/14755/
CVE: CVE-2010-3150
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe Premier Pro CS4 4.0.0 (314 (MC: 160820)) allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as a .pproj, .prfpset, .prexport, .prm, .prmp, .prpreset, .prproj, .prsl, .prtl, or .vpr file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14771/; http://www.securityfocus.com/archive/1/513336/100/0/threaded; http://www.vupen.com/english/advisories/2010/2209
CVE: CVE-2010-3151
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe On Location CS4 Build 315 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an OLPROJ file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14772/; http://www.securityfocus.com/archive/1/513332/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/64445
CVE: CVE-2010-3152
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe Illustrator CS4 14.0.0, CS5 15.0.1 and earlier, and possibly other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll or aires.dll that is located in the same folder as an .ait or .eps file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/67534; http://secunia.com/advisories/41134; http://www.adobe.com/support/security/bulletins/apsb10-29.html
CVE: CVE-2010-3153
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe InDesign CS4 6.0, InDesign CS5 7.0.2 and earlier, Adobe InDesign Server CS5 7.0.2 and earlier, and Adobe InCopy CS5 7.0.2 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse ibfs32.dll that is located in the same folder as an .indl, .indp, .indt, or .inx file.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41126; http://www.adobe.com/support/security/bulletins/apsb10-24.html; http://www.exploit-db.com/exploits/14775/
CVE: CVE-2010-3154
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe Extension Manager CS5 5.0.298 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .mxi or .mxp file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14784/; http://www.exploit-db.com/exploits/14784/
CVE: CVE-2010-3155
Published: 2010-08-27
Description: Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file.
CVSS Score: 9.3 (HIGH)
References: http://www.exploit-db.com/exploits/14785/; http://www.vupen.com/english/advisories/2010/2213; http://www.exploit-db.com/exploits/14785/
CVE: CVE-2010-0116
Published: 2010-08-30
Description: Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/41096; http://secunia.com/advisories/41154; http://secunia.com/secunia_research/2010-3/
CVE: CVE-2010-0117
Published: 2010-08-30
Description: RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41096; http://secunia.com/advisories/41154; http://secunia.com/secunia_research/2010-5/
CVE: CVE-2010-0120
Published: 2010-08-30
Description: Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/41096; http://secunia.com/advisories/41154; http://secunia.com/secunia_research/2010-8/
CVE: CVE-2010-2363
Published: 2010-08-30
Description: The IPv6 Unicast Reverse Path Forwarding (RPF) implementation on the SEIL/X1, SEIL/X2, and SEIL/B1 routers with firmware 1.00 through 2.73, when strict mode is used, does not properly drop packets, which might allow remote attackers to bypass intended access restrictions via a spoofed IP address.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264
References: http://jvn.jp/en/jp/JVN12683004/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000032.html; http://secunia.com/advisories/41088
CVE: CVE-2010-2792
Published: 2010-08-30
Description: Race condition in the SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to obtain sensitive information, and conduct man-in-the-middle attacks, by providing a UNIX socket for communication between this plug-in and the client (aka qspice-client) in qspice 0.3.0, and then accessing this socket.
CVSS Score: 3.3 (LOW)
CWE: CWE-362
References: http://osvdb.org/67619; http://secunia.com/advisories/41120; http://www.redhat.com/support/errata/RHSA-2010-0632.html
CVE: CVE-2010-2794
Published: 2010-08-30
Description: The SPICE (aka spice-xpi) plug-in 2.2 for Firefox allows local users to overwrite arbitrary files via a symlink attack on an unspecified log file.
CVSS Score: 3.3 (LOW)
CWE: CWE-59
References: http://osvdb.org/67620; http://secunia.com/advisories/41120; http://www.redhat.com/support/errata/RHSA-2010-0651.html
CVE: CVE-2010-2940
Published: 2010-08-30
Description: The auth_send function in providers/ldap/ldap_auth.c in System Security Services Daemon (SSSD) 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pam_authenticate via an empty password.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/41159; https://bugzilla.redhat.com/show_bug.cgi?id=625189; https://exchange.xforce.ibmcloud.com/vulnerabilities/61399
CVE: CVE-2010-2945
Published: 2010-08-30
Description: The default configuration of SLiM before 1.3.2 places ./ (dot slash) at the beginning of the default_path option, which might allow local users to gain privileges via a Trojan horse program in the current working directory, related to slim.conf and cfg.cpp.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-16
References: http://secunia.com/advisories/41005; http://svn.berlios.de/viewvc/slim?view=revision&revision=171; http://www.openwall.com/lists/oss-security/2010/08/19/8
CVE: CVE-2010-2996
Published: 2010-08-30
Description: Array index error in RealNetworks RealPlayer 11.0 through 11.1 on Windows allows remote attackers to execute arbitrary code via a malformed header in a RealMedia .IVR file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/41154; http://service.real.com/realplayer/security/08262010_player/en/; http://www.securityfocus.com/archive/1/513381/100/0/threaded
CVE: CVE-2010-3000
Published: 2010-08-30
Description: Multiple integer overflows in the ParseKnownType function in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allow remote attackers to execute arbitrary code via crafted (1) HX_FLV_META_AMF_TYPE_MIXEDARRAY or (2) HX_FLV_META_AMF_TYPE_ARRAY data in an FLV file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://secunia.com/advisories/41096; http://secunia.com/advisories/41154; http://service.real.com/realplayer/security/08262010_player/en/
CVE: CVE-2010-3001
Published: 2010-08-30
Description: Unspecified vulnerability in an ActiveX control in the Internet Explorer (IE) plugin in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows has unknown impact and attack vectors related to "multiple browser windows."
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41096; http://secunia.com/advisories/41154; http://service.real.com/realplayer/security/08262010_player/en/
CVE: CVE-2010-3002
Published: 2010-08-30
Description: Unspecified vulnerability in RealNetworks RealPlayer 11.0 through 11.1 allows attackers to bypass intended access restrictions on files via unknown vectors.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41154; http://service.real.com/realplayer/security/08262010_player/en/; http://www.securitytracker.com/id?1024370
CVE: CVE-2010-3186
Published: 2010-08-30
Description: IBM WebSphere Application Server (WAS) 7.x before 7.0.0.13, and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, when a JAX-WS application is used, does not properly handle an IncludeTimestamp setting in the WS-Security policy, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/67570; http://secunia.com/advisories/41173; http://www-01.ibm.com/support/docview.wss?uid=swg1PM08360
CVE: CVE-2010-3187
Published: 2010-08-30
Description: Buffer overflow in ftpd in IBM AIX 5.3 and earlier allows remote attackers to execute arbitrary code via a long NLST command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aix.software.ibm.com/aix/efixes/security/ftpd_advisory.asc; http://seclists.org/fulldisclosure/2010/Jul/281; http://seclists.org/fulldisclosure/2010/Jul/317
CVE: CVE-2010-2575
Published: 2010-08-30
Description: Heap-based buffer overflow in the RLE decompression functionality in the TranscribePalmImageToJPEG function in generators/plucker/inplug/image.cpp in Okular in KDE SC 4.3.0 through 4.5.0 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted image in a PDB file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046448.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046524.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046542.html
CVE: CVE-2010-2712
Published: 2010-08-30
Description: Unspecified vulnerability in Software Distributor (sd) in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02285980; http://secunia.com/advisories/41163; http://securitytracker.com/id?1024367
CVE: CVE-2010-3035
Published: 2010-08-30
Description: Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of service (peering reset) via a crafted prefix announcement, as demonstrated in the wild in August 2010 with attribute type code 99, aka Bug ID CSCti62211.
CVSS Score: 7.5 (HIGH)
References: http://mailman.nanog.org/pipermail/nanog/2010-August/024837.html; http://osvdb.org/67696; http://secunia.com/advisories/41190
CVE: CVE-2010-1818
Published: 2010-08-31
Description: The IPersistPropertyBag2::Read function in QTPlugin.ocx in Apple QuickTime 6.x, 7.x before 7.6.8, and other versions allows remote attackers to execute arbitrary code via the _Marshaled_pUnk attribute, which triggers unmarshalling of an untrusted pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-824
References: http://lists.apple.com/archives/security-announce/2010/Sep/msg00003.html; http://reversemode.com/index.php?option=com_content&task=view&id=69&Itemid=1; http://support.apple.com/kb/ht4339
CVE: CVE-2010-3188
Published: 2010-08-31
Description: SQL injection vulnerability in search.aspx in BugTracker.NET 3.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via a custom field to the search page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/41150; http://sourceforge.net/projects/btnet/files/btnet_3_4_4_release_notes.txt/view; http://www.securityfocus.com/archive/1/513385/100/0/threaded
CVE: CVE-2010-3189
Published: 2010-08-31
Description: The extSetOwner function in the UfProxyBrowserCtrl ActiveX control (UfPBCtrl.dll) in Trend Micro Internet Security Pro 2010 allows remote attackers to execute arbitrary code via an invalid address that is dereferenced as a pointer.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://esupport.trendmicro.com/pages/Hot-Fix-UfPBCtrldll-is-vulnerable-to-remote-attackers.aspx; http://secunia.com/advisories/41140; http://www.securityfocus.com/archive/1/513327/100/0/threaded
CVE: CVE-2010-3190
Published: 2010-08-31
Description: Untrusted search path vulnerability in the Microsoft Foundation Class (MFC) Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain privileges via a Trojan horse dwmapi.dll file in the current working directory during execution of an MFC application such as AtlTraceTool8.exe (aka ATL MFC Trace Tool), as demonstrated by a directory that contains a TRC, cur, rs, rct, or res file, aka "MFC Insecure Library Loading Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-426
References: http://lists.apple.com/archives/security-announce/2015/Sep/msg00003.html; http://secunia.com/advisories/41212; http://www.corelan.be:8800/index.php/2010/08/25/dll-hijacking-kb-2269637-the-unofficial-list/
CVE: CVE-2010-3191
Published: 2010-08-31
Description: Untrusted search path vulnerability in Adobe Captivate 5.0.0.596, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .cptx file.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/41233; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7470; http://secunia.com/advisories/41233
CVE: CVE-2010-2364
Published: 2010-08-31
Description: Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://common1.biz/cgi_bug.html; http://jvn.jp/en/jp/JVN24423311/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000033.html
CVE: CVE-2010-2365
Published: 2010-08-31
Description: Cross-site scripting (XSS) vulnerability in Free CGI Moo moobbs2 before 1.03 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://common1.biz/cgi_bug.html; http://jvn.jp/en/jp/JVN75101998/index.html; http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000034.html
CVE: CVE-2010-3193
Published: 2010-08-31
Description: Unspecified vulnerability in the DB2STST program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://secunia.com/advisories/41218; http://www-01.ibm.com/support/docview.wss?uid=swg1IC65408
CVE: CVE-2010-3194
Published: 2010-08-31
Description: The DB2DART program in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows attackers to bypass intended file access restrictions via unspecified vectors related to overwriting files owned by an instance owner.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://secunia.com/advisories/41218; http://www-01.ibm.com/support/docview.wss?uid=swg1IC65749
CVE: CVE-2010-3195
Published: 2010-08-31
Description: Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service (trap) via vectors involving "special group and user enumeration."
CVSS Score: 5.0 (MEDIUM)
References: ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT; http://secunia.com/advisories/41218; http://www-01.ibm.com/support/docview.wss?uid=swg1IC66099
CVE: CVE-2010-3196
Published: 2010-08-31
Description: IBM DB2 9.7 before FP2, when AUTO_REVAL is IMMEDIATE, allows remote authenticated users to cause a denial of service (loss of privileges) to a view owner by defining a dependent view.
CVSS Score: 3.5 (LOW)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC67008; http://www-01.ibm.com/support/docview.wss?uid=swg21432298; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14472
CVE: CVE-2010-3197
Published: 2010-08-31
Description: IBM DB2 9.7 before FP2 does not perform the expected access control on the monitor administrative views in the SYSIBMADM schema, which allows remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC67819; http://www-01.ibm.com/support/docview.wss?uid=swg21432298; https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14430
CVE: CVE-2010-3203
Published: 2010-09-03
Description: Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dflink parameter in a prevsell dwnfree action to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/41187; http://www.exploit-db.com/exploits/14845; http://secunia.com/advisories/41187
CVE: CVE-2010-3204
Published: 2010-09-03
Description: Multiple PHP remote file inclusion vulnerabilities in Pecio CMS 2.0.5 allow remote attackers to execute arbitrary PHP code via a URL in the template parameter to (1) post.php, (2) article.php, (3) blog.php, or (4) home.php in pec_templates/nova-blue/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://eidelweiss-advisories.blogspot.com/2010/08/pecio-cms-v205-template-multiple-remote.html; http://packetstormsecurity.org/1008-exploits/peciocms-rfi.txt; http://www.exploit-db.com/exploits/14815
CVE: CVE-2010-3205
Published: 2010-09-03
Description: PHP remote file inclusion vulnerability in index.php in Textpattern CMS 4.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1008-exploits/textpattern-rfi.txt; http://www.exploit-db.com/exploits/14823; https://exchange.xforce.ibmcloud.com/vulnerabilities/61475
CVE: CVE-2010-3206
Published: 2010-09-03
Description: Multiple PHP remote file inclusion vulnerabilities in DiY-CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to modules/guestbook/blocks/control.block.php, (2) main_module parameter to index.php, and (3) getFile parameter to includes/general.functions.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1008-exploits/diycms-rfi.txt; http://www.exploit-db.com/exploits/14822; https://exchange.xforce.ibmcloud.com/vulnerabilities/61454
CVE: CVE-2010-3207
Published: 2010-09-03
Description: SQL injection vulnerability in index.php in GaleriaSHQIP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the album_id parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/67690; http://packetstormsecurity.org/1008-exploits/galeriashqip-sql.txt; http://secunia.com/advisories/41113
CVE: CVE-2010-3208
Published: 2010-09-03
Description: Cross-site scripting (XSS) vulnerability in ajax.php in Wiccle Web Builder (WWB) 1.00 and 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the post_text parameter in a site custom_search action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/67691; http://secunia.com/advisories/41191; http://www.packetstormsecurity.com/1008-exploits/wiccle-xss.txt
CVE: CVE-2010-3209
Published: 2010-09-03
Description: Multiple PHP remote file inclusion vulnerabilities in Seagull 0.6.7 allow remote attackers to execute arbitrary PHP code via a URL in the includeFile parameter to (1) Config/Container.php and (2) HTML/QuickForm.php in fog/lib/pear/, the (3) driverpath parameter to fog/lib/pear/DB/NestedSet.php, and the (4) path parameter to fog/lib/pear/DB/NestedSet/Output.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1008-exploits/seagull-rfi.txt; http://www.exploit-db.com/exploits/14841; https://exchange.xforce.ibmcloud.com/vulnerabilities/61470
CVE: CVE-2010-3210
Published: 2010-09-03
Description: Multiple PHP remote file inclusion vulnerabilities in Multi-lingual E-Commerce System 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) checkout2-CYM.php, (2) checkout2-EN.php, (3) checkout2-FR.php, (4) cat-FR.php, (5) cat-EN.php, (6) cat-CYM.php, (7) checkout1-CYM.php, (8) checkout1-EN.php, (9) checkout1-FR.php, (10) prod-CYM.php, (11) prod-EN.php, and (12) prod-FR.php in inc/.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1008-exploits/mlecomsys-rfi.txt; http://www.exploit-db.com/exploits/14835; https://exchange.xforce.ibmcloud.com/vulnerabilities/61464