deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-0284
Published: 2010-06-18
Description: Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/40198; http://www.novell.com/support/viewContent.do?externalId=7006255&sliceId=1; http://www.securityfocus.com/bid/40931
CVE: CVE-2010-0407
Published: 2010-06-18
Description: Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691; http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705; http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html
CVE: CVE-2010-1387
Published: 2010-06-18
Description: Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html
CVE: CVE-2010-1763
Published: 2010-06-18
Description: Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/40196
CVE: CVE-2010-1769
Published: 2010-06-18
Description: WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, a different vulnerability than CVE-2010-1387 and CVE-2010-1763.
CVSS Score: 10.0 (HIGH)
References: http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html; http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2010-2068
Published: 2010-06-18
Description: mod_proxy_http.c in mod_proxy_http in the Apache HTTP Server 2.2.9 through 2.2.15, 2.3.4-alpha, and 2.3.5-alpha on Windows, NetWare, and OS/2, in certain configurations involving proxy worker pools, does not properly detect timeouts, which allows remote attackers to obtain a potentially sensitive response intended for a different client in opportunistic circumstances via a normal HTTP request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://httpd.apache.org/security/vulnerabilities_22.html; http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html; http://mail-archives.apache.org/mod_mbox/httpd-announce/201006.mbox/%3C4C12933D.4060400%40apache.org%3E
CVE: CVE-2010-2192
Published: 2010-06-18
Description: The make_lockdir_name function in policy.c in pmount 0.9.18 allow local users to overwrite arbitrary files via a symlink attack on a file in /var/lock/.
CVSS Score: 1.9 (LOW)
CWE: CWE-59
References: http://security.debian.org/pool/updates/main/p/pmount/pmount_0.9.18-2+lenny1.diff.gz; http://www.debian.org/security/2010/dsa-2063; http://www.securityfocus.com/bid/40939
CVE: CVE-2010-2321
Published: 2010-06-18
Description: Buffer overflow in Adobe InDesign CS3 10.0 allows user-assisted remote attackers to execute arbitrary code via a crafted .indd file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40050; http://www.exploit-db.com/exploits/13817; http://www.osvdb.org/65140
CVE: CVE-2010-0831
Published: 2010-06-18
Description: Directory traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in a non-initial pathname component in a filename within a .jar archive, a related issue to CVE-2005-1080.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]8766&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]2034&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]7644&w=2
CVE: CVE-2010-2322
Published: 2010-06-18
Description: Absolute path traversal vulnerability in the extract_jar function in jartool.c in FastJar 0.98 allows remote attackers to create or overwrite arbitrary files via a full pathname for a file within a .jar archive, a related issue to CVE-2010-0831.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2006-3619.
CVSS Score: 2.6 (LOW)
CWE: CWE-22
References: http://marc.info/?l=oss-security&m=[PII_REDACTED]8766&w=2; http://packages.debian.org/changelogs/pool/main/f/fastjar/fastjar_0.98-3/changelog; http://secunia.com/advisories/42892
CVE: CVE-2010-2323
Published: 2010-06-18
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS might allow attackers to obtain sensitive information by reading the default_create.log file that is associated with profile creation by the BBOWWPFx job and the zPMT.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/40096; http://www-01.ibm.com/support/docview.wss?uid=swg1PM10454; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
CVE: CVE-2010-2324
Published: 2010-06-18
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows attackers to perform unspecified "link injection" actions via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/40096; http://www-01.ibm.com/support/docview.wss?uid=swg1PM09250; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829
CVE: CVE-2010-2325
Published: 2010-06-18
Description: Cross-site scripting (XSS) vulnerability in the administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 on z/OS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related in part to "URL injection."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40096; http://www-01.ibm.com/support/docview.wss?uid=swg1PM11778; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
CVE: CVE-2010-2326
Published: 2010-06-18
Description: IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11, when addNode -trace is used during node federation, allows attackers to obtain sensitive information about CIMMetadataCollectorImpl trace actions by reading the addNode.log file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/40096; http://www-01.ibm.com/support/docview.wss?uid=swg1PM10684; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
CVE: CVE-2010-2327
Published: 2010-06-18
Description: mod_ibm_ssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server (WAS) on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service (daemon fail) via an upload.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/40096; http://www-01.ibm.com/support/docview.wss?uid=swg1PM10270; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830
CVE: CVE-2010-2328
Published: 2010-06-18
Description: The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.
CVSS Score: 5.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1PM08894; http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829; http://www-01.ibm.com/support/docview.wss?uid=swg1PM08894
CVE: CVE-2010-2329
Published: 2010-06-18
Description: Buffer overflow in Rosoft Audio Converter 4.4.4 allows remote attackers to execute arbitrary code via a long playlist entry in a .m3u file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/65542; http://packetstormsecurity.org/1006-exploits/rosoft444-overflow.txt; http://secunia.com/advisories/40195
CVE: CVE-2010-2330
Published: 2010-06-18
Description: Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long Content-Length header.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/65570; http://secunia.com/advisories/40197; http://www.exploit-db.com/exploits/13876
CVE: CVE-2010-2331
Published: 2010-06-18
Description: Stack-based buffer overflow in iSharer File Sharing Wizard 1.5.0 allows remote attackers to execute arbitrary code via a long HEAD request.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40197; http://www.exploit-db.com/exploits/13903; http://www.securityfocus.com/bid/40928
CVE: CVE-2010-2332
Published: 2010-06-18
Description: Impact Financials, Inc. Impact PDF Reader 2.0, 1.2, and other versions for iPhone and iPod touch allows remote attackers to cause a denial of service (server crash) via a "..." body in a POST request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/13871; http://www.securityfocus.com/bid/40858; https://exchange.xforce.ibmcloud.com/vulnerabilities/59433
CVE: CVE-2010-2333
Published: 2010-06-18
Description: LiteSpeed Technologies LiteSpeed Web Server 4.0.x before 4.0.15 allows remote attackers to read the source code of scripts via an HTTP request with a null byte followed by a .txt file extension.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/65476; http://seclists.org/fulldisclosure/2010/Jun/288; http://secunia.com/advisories/40128
CVE: CVE-2010-2334
Published: 2010-06-18
Description: Directory traversal vulnerability in themes/default/download.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to read arbitrary files via a .. (dot dot) in the download parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/65479; http://secunia.com/advisories/40150; http://www.exploit-db.com/exploits/13856
CVE: CVE-2010-2335
Published: 2010-06-18
Description: SQL injection vulnerability in index.php in Yamamah Photo Gallery 1.00, as distributed before 20100618, allows remote attackers to execute arbitrary SQL commands via the news parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/13845; http://www.yamamah.org/home/?page=39; http://www.exploit-db.com/exploits/13845
CVE: CVE-2010-2336
Published: 2010-06-18
Description: index.php in Yamamah Photo Gallery 1.00 allows remote attackers to obtain the source code of executable files within the web document root via the download parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.exploit-db.com/exploits/13845; http://www.yamamah.org/home/?page=39; http://www.exploit-db.com/exploits/13845
CVE: CVE-2010-2338
Published: 2010-06-18
Description: Multiple SQL injection vulnerabilities in redir.asp in VU Web Visitor Analyst allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65483; http://packetstormsecurity.org/1006-exploits/vuwebvisitoranalyst-sql.txt; http://secunia.com/advisories/40176
CVE: CVE-2010-2339
Published: 2010-06-18
Description: SQL injection vulnerability in admin/pages.php in Subdreamer CMS 3.x.x allows remote attackers to execute arbitrary SQL commands via the categoryids[] parameter in an update_pages action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1006-advisories/major_rls73.txt; http://www.majorsecurity.net/subdreamer_cms_sql_injection.php; http://www.securityfocus.com/archive/1/511818
CVE: CVE-2010-2340
Published: 2010-06-18
Description: SQL injection vulnerability in members.php in Arab Portal 2.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the by parameter in the msearch action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/65370; http://packetstormsecurity.org/1006-exploits/arabportal22x-sql.txt; http://secunia.com/advisories/40142
CVE: CVE-2010-2341
Published: 2010-06-18
Description: PHP remote file inclusion vulnerability in system/application/views/public/commentform.php in EZPX Photoblog 1.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the tpl_base_dir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.org/1006-exploits/ezpxphotoblog-rfi.txt; http://www.exploit-db.com/exploits/13890; http://www.securityfocus.com/bid/40881
CVE: CVE-2010-2342
Published: 2010-06-21
Description: SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/13793; http://www.securityfocus.com/bid/40692; http://www.exploit-db.com/exploits/13793
CVE: CVE-2010-2343
Published: 2010-06-21
Description: Stack-based buffer overflow in D.R. Software Audio Converter 8.1, 2007, and 8.05 allows remote attackers to execute arbitrary code via a crafted pls playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/65256; http://secunia.com/advisories/40081; http://www.corelan.be:8800/index.php/forum/security-advisories/corelan-10-048-d-r-software-multiple-products/
CVE: CVE-2010-2344
Published: 2010-06-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in odCMS 1.06, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Page parameter to (1) _main/index.php, (2) _members/index.php, (3) _forum/index.php, (4) _docs/index.php, and (5) _announcements/index.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://holisticinfosec.org/content/view/146/45/; http://secunia.com/advisories/39942; http://www.osvdb.org/65258
CVE: CVE-2010-2345
Published: 2010-06-21
Description: Cross-site request forgery (CSRF) vulnerability in odCMS 1.06, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password, and other unspecified requests.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/146/45/; http://secunia.com/advisories/39942; http://www.osvdb.org/65263
CVE: CVE-2010-0542
Published: 2010-06-21
Description: The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://cups.org/articles.php?L596; http://cups.org/str.php?L3516; http://cups.org/strfiles/3516/str3516.patch
CVE: CVE-2010-1168
Published: 2010-06-21
Description: The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html; http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in; http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes
CVE: CVE-2010-1622
Published: 2010-06-21
Description: SpringSource Spring Framework 2.5.x before 2.5.6.SEC02, 2.5.7 before 2.5.7.SR01, and 3.0.x before 3.0.3 allows remote attackers to execute arbitrary code via an HTTP request containing class.classLoader.URLs[0]=jar: followed by a URL of a crafted .jar file.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-94
References: http://geronimo.apache.org/2010/07/21/apache-geronimo-v216-released.html; http://geronimo.apache.org/21x-security-report.html; http://geronimo.apache.org/22x-security-report.html
CVE: CVE-2010-1958
Published: 2010-06-21
Description: Cross-site scripting (XSS) vulnerability in the FileField module 5.x before 5.x-2.5 and 6.x before 6.x-3.4 for Drupal allows remote authenticated users, with create or edit permissions and 'Path to File' or 'URL to File' display enabled, to inject arbitrary web script or HTML via the file name (filepath parameter).
CVSS Score: 2.1 (LOW)
CWE: CWE-79
References: http://drupal.org/node/829808; http://osvdb.org/65611; http://secunia.com/advisories/40186
CVE: CVE-2010-2347
Published: 2010-06-21
Description: The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html; http://secunia.com/advisories/40223; http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2010-005
CVE: CVE-2010-2348
Published: 2010-06-21
Description: Stack-based buffer overflow in Batch Audio Converter Lite Edition 1.0.0.0 and earlier allows remote attackers to execute arbitrary code via a long line in a .WAV file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/40254; http://www.exploit-db.com/exploits/13909; http://www.securityfocus.com/bid/40940
CVE: CVE-2010-2349
Published: 2010-06-21
Description: H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which triggers a NULL pointer dereference.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/40299; http://www.exploit-db.com/exploits/13920; http://secunia.com/advisories/40299
CVE: CVE-2010-2350
Published: 2010-06-21
Description: Heap-based buffer overflow in the PNG decoder in Ziproxy 3.1.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNG file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/40156; http://www.vupen.com/english/advisories/2010/1501; http://ziproxy.cvs.sourceforge.net/viewvc/ziproxy/ziproxy-default/ChangeLog?revision=1.240&view=markup
CVE: CVE-2010-2351
Published: 2010-06-21
Description: Stack-based buffer overflow in the CIFS.NLM driver in Netware SMB 1.0 for Novell Netware 6.5 SP8 and earlier allows remote attackers to execute arbitrary code via a Sessions Setup AndX packet with a long AccountName.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://download.novell.com/Download?buildid=tMWCI1cdI7s~; http://secunia.com/advisories/40199; http://www.exploit-db.com/exploits/13906
CVE: CVE-2010-2352
Published: 2010-06-21
Description: The Node Reference module in Content Construction Kit (CCK) module 5.x before 5.x-1.11 and 6.x before 6.x-2.7 for Drupal does not perform access checks before displaying referenced nodes, which allows remote attackers to read controlled nodes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://drupal.org/node/829566; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043100.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043172.html
CVE: CVE-2010-2353
Published: 2010-06-21
Description: The Node Reference module in Content Construction Kit (CCK) module 6.x before 6.x-2.7 for Drupal does not perform access checks for the source field in the backend URL for the autocomplete widget, which allows remote attackers to discover titles and IDs of controlled nodes.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://drupal.org/node/829566; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043100.html; http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043172.html
CVE: CVE-2010-2354
Published: 2010-06-21
Description: SQL injection vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to execute arbitrary SQL commands via the course_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65423; http://packetstormsecurity.org/1006-exploits/elms-sql-xss.txt; http://secunia.com/advisories/40163
CVE: CVE-2010-2355
Published: 2010-06-21
Description: Cross-site scripting (XSS) vulnerability in error.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the message parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/40163; http://www.osvdb.org/65422; http://www.securityfocus.com/bid/40766
CVE: CVE-2010-2356
Published: 2010-06-21
Description: Cross-site scripting (XSS) vulnerability in subscribe.php in Pilot Group (PG) eLMS Pro allows remote attackers to inject arbitrary web script or HTML via the course_id parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1006-exploits/elms-sql-xss.txt; http://www.exploit-db.com/exploits/13785; http://www.securityfocus.com/bid/40677
CVE: CVE-2010-2357
Published: 2010-06-21
Description: SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the p_id parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/65412; http://secunia.com/advisories/40171; http://www.exploit-db.com/exploits/13802
CVE: CVE-2010-2358
Published: 2010-06-21
Description: PHP remote file inclusion vulnerability in modules/catalog/upload_photo.php in Nakid CMS 0.5.2, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the core[system_path] parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://packetstormsecurity.org/1006-exploits/nakid-rfi.txt; http://secunia.com/advisories/40174; http://www.exploit-db.com/exploits/13889
CVE: CVE-2010-2359
Published: 2010-06-21
Description: SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1006-exploits/ewebquizv8-sql.txt; http://www.securityfocus.com/bid/40876; http://www.vupen.com/english/advisories/2010/1492