deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5676
Published: 2006-11-03
Description: SQL injection vulnerability in consult/classement.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL commands via the champ parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/21789; http://www.vupen.com/english/advisories/2006/4225; https://exchange.xforce.ibmcloud.com/vulnerabilities/29867
CVE: CVE-2006-5677
Published: 2006-11-03
Description: resmom/start_exec.c in pbs_mom in TORQUE Resource Manager 2.0.0p8 and earlier allows local users to create arbitrary files via a symlink attack on (1) a job output file in /usr/spool/PBS/spool and possibly (2) a job file in /usr/spool/PBS/mom_priv/jobs.
CVSS Score: 7.2 (HIGH)
References: http://csirt.fe.up.pt/docs/TORQUE-audit.pdf; http://security.gentoo.org/glsa/glsa-200611-14.xml; http://securityreason.com/securityalert/1820
CVE: CVE-2006-5678
Published: 2006-11-03
Description: PHP remote file inclusion vulnerability in common/visiteurs/include/library.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_modules_dir parameter.  NOTE: CVE disputes this vulnerability, because the inclusion occurs in a function that is not called during a direct request to library.inc.php
CVSS Score: 9.8 (CRITICAL)
References: http://securityreason.com/securityalert/1810; http://www.attrition.org/pipermail/vim/2006-November/001105.html; http://www.securityfocus.com/archive/1/450140/100/0/threaded
CVE: CVE-2006-5679
Published: 2006-11-03
Description: Integer overflow in the ffs_mountfs function in FreeBSD 6.1 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted UFS filesystem that causes invalid or large size parameters to be provided to the kmem_alloc function. NOTE: a third party states that this issue does not cross privilege boundaries in FreeBSD because only root may mount a filesystem.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-189
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://lists.freebsd.org/pipermail/freebsd-security/2007-January/004218.html
CVE: CVE-2006-5701
Published: 2006-11-03
Description: Double free vulnerability in squashfs module in the Linux kernel 2.6.x, as used in Fedora Core 5 and possibly other distributions, allows local users to cause a denial of service by mounting a crafted squashfs filesystem.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-02-11-2006.html; http://secunia.com/advisories/22655; http://secunia.com/advisories/23361
CVE: CVE-2006-4521
Published: 2006-11-04
Description: The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request.
CVSS Score: 5.0 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437; http://secunia.com/advisories/22660; http://securitytracker.com/id?1017140
CVE: CVE-2006-5465
Published: 2006-11-04
Description: Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
CVSS Score: 7.5 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P; http://docs.info.apple.com/article.html?artnum=304829; http://issues.rpath.com/browse/RPL-761
CVE: CVE-2006-5702
Published: 2006-11-04
Description: Tikiwiki 1.9.5 allows remote attackers to obtain sensitive information (MySQL username and password) via an empty sort_mode parameter in (1) tiki-listpages.php, (2) tiki-lastchanges.php, (3) messu-archive.php, (4) messu-mailbox.php, (5) messu-sent.php, (6) tiki-directory_add_site.php, (7) tiki-directory_ranking.php, (8) tiki-directory_search.php, (9) tiki-forums.php, (10) tiki-view_forum.php, (11) tiki-friends.php, (12) tiki-list_blogs.php, (13) tiki-list_faqs.php, (14) tiki-list_trackers.php, (15) tiki-list_users.php, (16) tiki-my_tiki.php, (17) tiki-notepad_list.php, (18) tiki-orphan_pages.php, (19) tiki-shoutbox.php, (20) tiki-usermenu.php, and (21) tiki-webmail_contacts.php, which reveal the information in certain database error messages.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/22678; http://secunia.com/advisories/23039; http://security.gentoo.org/glsa/glsa-200611-11.xml
CVE: CVE-2006-5703
Published: 2006-11-04
Description: Cross-site scripting (XSS) vulnerability in tiki-featured_link.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/22678; http://secunia.com/advisories/23039; http://security.gentoo.org/glsa/glsa-200611-11.xml
CVE: CVE-2006-5704
Published: 2006-11-04
Description: HP NonStop Server G06.29, when running Standard Security T6533G06 before T6533G06^ABK, does not properly evaluate access permissions to OSS directories when no optional ACL entry exists, which allows local users to read arbitrary files.
CVSS Score: 6.2 (MEDIUM)
References: http://securitytracker.com/id?1017135; http://www.ciac.org/ciac/bulletins/r-027.shtml; http://www.securityfocus.com/bid/20824
CVE: CVE-2006-5705
Published: 2006-11-04
Description: Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the (1) backup and (2) fragment parameters in a GET request.
CVSS Score: 6.0 (MEDIUM)
References: http://bugs.gentoo.org/show_bug.cgi?id=153303; http://markjaquith.wordpress.com/2006/10/17/changes-in-wordpress-205/; http://secunia.com/advisories/22683
CVE: CVE-2006-5706
Published: 2006-11-04
Description: Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions.  NOTE: the tempnam vector might overlap CVE-2006-1494.
CVSS Score: 7.2 (HIGH)
References: http://www.php.net/releases/5_2_0.php; http://www.ubuntu.com/usn/usn-375-1; http://www.php.net/releases/5_2_0.php
CVE: CVE-2006-5707
Published: 2006-11-04
Description: SQL injection vulnerability in index.php in PHPEasyData Pro 1.4.1 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22616; http://securityreason.com/securityalert/1814; http://securitytracker.com/id?1017137
CVE: CVE-2006-5708
Published: 2006-11-04
Description: Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service (memory consumption) via unspecified vectors resulting in memory leaks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://files.altn.com/MDaemon/Release/RelNotes_en.txt; http://files.altn.com/MDaemon/Release/RelNotes_en.txt
CVE: CVE-2006-5709
Published: 2006-11-04
Description: Unspecified vulnerability in WorldClient in Alt-N Technologies MDaemon before 9.50 has unknown impact and attack vectors related to a "JavaScript exploit."
CVSS Score: 10.0 (HIGH)
References: http://files.altn.com/MDaemon/Release/RelNotes_en.txt; http://secunia.com/advisories/22507; http://www.vupen.com/english/advisories/2006/4251
CVE: CVE-2006-5710
Published: 2006-11-04
Description: The Airport driver for certain Orinoco based Airport cards in Darwin kernel 8.8.0 in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via an 802.11 probe response frame without any valid information element (IE) fields after the header, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=304829; http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html; http://projects.info-pull.com/mokb/MOKB-01-11-2006.html
CVE: CVE-2006-5711
Published: 2006-11-04
Description: ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router allows remote attackers to read arbitrary files via a certain HTTP request, as demonstrated by a request for a router configuration file, related to the /html/defs/ URI.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050459.html; http://secunia.com/advisories/22667; http://securityreason.com/securityalert/1817
CVE: CVE-2006-5712
Published: 2006-11-04
Description: Cross-site scripting (XSS) vulnerability in Mirapoint WebMail allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated using the width style for an IMG element.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]5086&w=2; http://osvdb.org/33820; http://securitytracker.com/id?1017146
CVE: CVE-2006-5713
Published: 2006-11-04
Description: Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) author, (2) content, or (3) title parameters when posting a forum thread.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22602; http://www.securityfocus.com/bid/20823; https://exchange.xforce.ibmcloud.com/vulnerabilities/29923
CVE: CVE-2006-5714
Published: 2006-11-04
Description: Easy File Sharing (EFS) Web Server 4.0, when running on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of a HTTP GET request, which accesses the alternate data stream.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22602; http://www.securityfocus.com/bid/20823; https://exchange.xforce.ibmcloud.com/vulnerabilities/29925
CVE: CVE-2006-5715
Published: 2006-11-04
Description: Easy File Sharing (EFS) Easy Address Book 1.2, when run on an NTFS file system, allows remote attackers to read arbitrary files under the web root by appending "::$DATA" to the end of an HTTP GET request, which accesses the alternate data stream.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22681; http://www.securityfocus.com/bid/20861; http://www.vupen.com/english/advisories/2006/4312
CVE: CVE-2006-5716
Published: 2006-11-04
Description: Directory traversal vulnerability in aff_news.php in FreeNews 2.1 allows remote attackers to include local files via a .. (dot dot) sequence in the chemin parameter, when the aff_news parameter is not set to "1."
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1822; http://www.securityfocus.com/archive/1/450012/100/0/threaded; http://www.securityfocus.com/archive/1/450081/100/0/threaded
CVE: CVE-2006-5717
Published: 2006-11-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in Zend Google Data Client Library (ZendGData) Preview 0.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters in (1) basedemo.php and (2) calenderdemo.php in samples/, and other unspecified files.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1815; http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0008; http://www.securityfocus.com/archive/1/450245/100/0/threaded
CVE: CVE-2006-5718
Published: 2006-11-04
Description: Cross-site scripting (XSS) vulnerability in error.php in phpMyAdmin 2.6.4 through 2.9.0.2 allows remote attackers to inject arbitrary web script or HTML via UTF-7 or US-ASCII encoded characters, which are injected into an error message, as demonstrated by a request with a utf7 charset parameter accompanied by UTF-7 data.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html; http://secunia.com/advisories/22599; http://secunia.com/advisories/23086
CVE: CVE-2006-5719
Published: 2006-11-04
Description: SQL injection vulnerability in libs/sessions.lib.php in BytesFall Explorer (bfExplorer) 0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified parameters, a different issue than CVE-2006-5606.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1813; http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0007; http://www.securityfocus.com/archive/1/450152/100/0/threaded
CVE: CVE-2006-5720
Published: 2006-11-04
Description: SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22617; http://securityreason.com/securityalert/1812; http://www.neosecurityteam.net/index.php?action=advisories&id=29
CVE: CVE-2006-5721
Published: 2006-11-04
Description: The \Device\SandBox driver in Outpost Firewall PRO 4.0 (964.582.059) allows local users to cause a denial of service (system crash) via an invalid argument to the DeviceIoControl function that triggers an invalid memory operation.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/22673; http://securityreason.com/securityalert/1821; http://securitytracker.com/id?1017150
CVE: CVE-2006-5722
Published: 2006-11-04
Description: Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to (1) themesettings.php or (2) index.php, a different vector than CVE-2006-5497.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22582; http://www.vupen.com/english/advisories/2006/4215; http://secunia.com/advisories/22582
CVE: CVE-2006-5723
Published: 2006-11-04
Description: SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL.
CVSS Score: 7.5 (HIGH)
References: http://www.dataparksearch.org/ChangeLog; http://www.securityfocus.com/bid/20872; http://www.vupen.com/english/advisories/2006/4311
CVE: CVE-2006-5724
Published: 2006-11-04
Description: Heap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local users to cause a denial of service (application crash) via a long string in the "AwayMsg Presets" value in the ICQ\ICQPro\DefaultPrefs\Presets registry key.
CVSS Score: 2.1 (LOW)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050461.html; http://securityreason.com/securityalert/1818; https://exchange.xforce.ibmcloud.com/vulnerabilities/29933
CVE: CVE-2006-5725
Published: 2006-11-04
Description: The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://secunia.com/advisories/22550; http://www.vupen.com/english/advisories/2006/4224; https://exchange.xforce.ibmcloud.com/vulnerabilities/29802
CVE: CVE-2006-5466
Published: 2006-11-06
Description: Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
CVSS Score: 5.4 (MEDIUM)
References: http://secunia.com/advisories/22740; http://secunia.com/advisories/22745; http://secunia.com/advisories/22768
CVE: CVE-2006-5726
Published: 2006-11-06
Description: alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by mounting crafted UFS filesystems with malformed data structures.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-04-11-2006.html; http://secunia.com/advisories/22714; http://www.securityfocus.com/bid/20919
CVE: CVE-2006-5727
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arbitrary PHP code via the (1) _saz[settings][shippingfolder] and (2) _saz[settings][taxfolder] parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22708; http://www.attrition.org/pipermail/vim/2007-January/001232.html; http://www.osvdb.org/30194
CVE: CVE-2006-5728
Published: 2006-11-06
Description: XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/22717; http://www.vupen.com/english/advisories/2006/4365; https://exchange.xforce.ibmcloud.com/vulnerabilities/30041
CVE: CVE-2006-5729
Published: 2006-11-06
Description: Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to (1) reply to a message in an arbitrary forum, if authorized to create a message in any forum; and (2) perform certain unauthorized forum actions, related to an "error in how the permissions were assembled" that assigns extra permissions to users.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/22690; http://sourceforge.net/project/shownotes.php?group_id=39239&release_id=460547; http://www.securityfocus.com/bid/20889
CVE: CVE-2006-5730
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.  NOTE: it is possible that this is a vulnerability in FCKeditor.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22675; http://www.osvdb.org/30186; http://www.securityfocus.com/bid/20898
CVE: CVE-2006-5731
Published: 2006-11-06
Description: Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the siteconf[curl] parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under db/comments/news/ and included by classes/index.php.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22593; http://www.securityfocus.com/bid/20871; http://www.vupen.com/english/advisories/2006/4361
CVE: CVE-2006-5732
Published: 2006-11-06
Description: SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the myauthorid cookie.
CVSS Score: 5.0 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?release_id=464660&group_id=173946; http://www.securityfocus.com/bid/20850; http://www.vupen.com/english/advisories/2006/4667
CVE: CVE-2006-5733
Published: 2006-11-06
Description: Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php.
CVSS Score: 7.5 (HIGH)
References: http://community.postnuke.com/Article2787.htm; http://secunia.com/advisories/22983; http://www.securityfocus.com/bid/20897
CVE: CVE-2006-5734
Published: 2006-11-06
Description: Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lang parameter in documentation/common/search.php and (c) documentation/common/vitals.inc.php, the (3) row[dir_name] parameter in (d) include/classes/module/module.class.php, and the (4) lang_path parameter in (e) include/classes/phpmailer/class.phpmailer.php.  NOTE: the print.php vector is already covered by CVE-2005-3404.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1823; http://www.securityfocus.com/archive/1/449233/100/200/threaded; http://www.securityfocus.com/bid/20634
CVE: CVE-2006-5735
Published: 2006-11-06
Description: Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the language parameter, related to register.php storing a language value in the users table.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22622; http://securityreason.com/securityalert/1824; http://securitytracker.com/id?1017131
CVE: CVE-2006-5736
Published: 2006-11-06
Description: SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1824; http://securitytracker.com/id?1017131; http://www.osvdb.org/30133
CVE: CVE-2006-5737
Published: 2006-11-06
Description: PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.
CVSS Score: 7.2 (HIGH)
References: http://securitytracker.com/id?1017131; http://www.osvdb.org/30134; http://www.securityfocus.com/archive/1/450055/100/0/threaded
CVE: CVE-2006-5738
Published: 2006-11-06
Description: Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: http://forums.punbb.org/viewtopic.php?id=13496; http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt; http://forums.punbb.org/viewtopic.php?id=13496
CVE: CVE-2006-5739
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-31-18 allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1017047; https://exchange.xforce.ibmcloud.com/vulnerabilities/29487; http://securitytracker.com/id?1017047
CVE: CVE-2006-5741
Published: 2006-11-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon, when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22475; http://www.osvdb.org/29918; http://www.osvdb.org/29919