deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1162
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the Spam Quarantine login page in Cisco IronPort AsyncOS before 6.5.2 on Series C, M, and X appliances allows remote attackers to inject arbitrary web script or HTML via the referrer parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54884; http://secunia.com/advisories/34895; http://tools.cisco.com/security/center/viewAlert.x?alertId=18365
CVE: CVE-2009-1717
Published: 2009-06-05
Description: Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: http://dvlabs.tippingpoint.com/advisory/TPTI-09-04; http://securitytracker.com/id?1022322; http://support.apple.com/kb/HT3549
CVE: CVE-2009-1933
Published: 2009-06-05
Description: Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-255
References: http://secunia.com/advisories/35341; http://secunia.com/advisories/35414; http://sunsolve.sun.com/search/document.do?assetkey=1-21-140841-01-1
CVE: CVE-2009-1934
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/54872; http://secunia.com/advisories/35338; http://sunsolve.sun.com/search/document.do?assetkey=1-21-116648-23-1
CVE: CVE-2009-1936
Published: 2009-06-05
Description: _functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-22
References: http://secunia.com/advisories/35245; http://www.securityfocus.com/bid/35103; https://www.exploit-db.com/exploits/8790
CVE: CVE-2009-1937
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 "no database" (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author), (2) commentemail (aka Email), and (3) commentmessage (aka Comment) parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forum.intern0t.net/intern0t-advisories/1081-intern0t-lightneasy-2-2-2-html-injection-vulnerability.html; http://secunia.com/advisories/35354; http://www.securityfocus.com/archive/1/504092/100/0/threaded
CVE: CVE-2009-1938
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]2-core-frontend-xss.html; http://secunia.com/advisories/35278; http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html
CVE: CVE-2009-1939
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]2-core-japurity-xss.html; http://osvdb.org/54870; http://secunia.com/advisories/35278
CVE: CVE-2009-1940
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://developer.joomla.org/security/news/[PII_REDACTED]1-core-comusers-xss.html; http://osvdb.org/54869; http://secunia.com/advisories/35278
CVE: CVE-2009-1941
Published: 2009-06-05
Description: PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/50911; https://www.exploit-db.com/exploits/8850; https://exchange.xforce.ibmcloud.com/vulnerabilities/50911
CVE: CVE-2009-1942
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://drupal.org/node/481270; http://drupal.org/node/481274; http://drupal.org/node/481308
CVE: CVE-2008-6825
Published: 2009-06-05
Description: Directory traversal vulnerability in user/index.php in Fonality trixbox CE 2.6.1 and earlier allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the langChoice parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2008-07/0101.html; http://osvdb.org/50421; http://www.securityfocus.com/bid/30135
CVE: CVE-2009-1943
Published: 2009-06-05
Description: Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54831; http://secunia.com/advisories/35280; http://www.securityfocus.com/archive/1/503981/100/0/threaded
CVE: CVE-2009-1944
Published: 2009-06-05
Description: Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/54812; http://secunia.com/advisories/35295; http://zeroscience.org/codes/aimp2_poc.txt
CVE: CVE-2009-1945
Published: 2009-06-05
Description: SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the event_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35286; https://exchange.xforce.ibmcloud.com/vulnerabilities/50905; https://www.exploit-db.com/exploits/8857
CVE: CVE-2009-1946
Published: 2009-06-05
Description: PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the forumspath parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/54832; http://secunia.com/advisories/35315; https://exchange.xforce.ibmcloud.com/vulnerabilities/50893
CVE: CVE-2009-1947
Published: 2009-06-05
Description: SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35299; http://www.securityfocus.com/bid/35183; https://exchange.xforce.ibmcloud.com/vulnerabilities/50876
CVE: CVE-2009-1948
Published: 2009-06-05
Description: Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/35299; http://www.securityfocus.com/bid/35183; https://exchange.xforce.ibmcloud.com/vulnerabilities/50877
CVE: CVE-2009-1949
Published: 2009-06-05
Description: import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.
CVSS Score: 7.8 (HIGH)
CWE: CWE-200
References: http://www.securityfocus.com/bid/35183; https://exchange.xforce.ibmcloud.com/vulnerabilities/50879; https://www.exploit-db.com/exploits/8841
CVE: CVE-2009-1950
Published: 2009-06-05
Description: SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL commands via the mesajid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35290; https://www.exploit-db.com/exploits/8859; http://secunia.com/advisories/35290
CVE: CVE-2009-1951
Published: 2009-06-05
Description: Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35289; https://www.exploit-db.com/exploits/8858; http://secunia.com/advisories/35289
CVE: CVE-2009-1952
Published: 2009-06-05
Description: Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/35289; https://www.exploit-db.com/exploits/8858; http://secunia.com/advisories/35289
CVE: CVE-2009-0023
Published: 2009-06-08
Description: The apr_strmatch_precompile function in strmatch/apr_strmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service (daemon crash) via crafted input involving (1) a .htaccess file used with the Apache HTTP Server, (2) the SVNMasterURI directive in the mod_dav_svn module in the Apache HTTP Server, (3) the mod_apreq2 module for the Apache HTTP Server, or (4) an application that uses the libapreq2 library, which triggers a heap-based buffer underflow.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2998&w=2; http://secunia.com/advisories/34724
CVE: CVE-2009-1419
Published: 2009-06-08
Description: Unspecified vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.0.0 through 2.52, 7.50, and 7.51 on Windows allows remote attackers to access DDMI agents via unknown vectors.
CVSS Score: 4.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6704&w=2; http://secunia.com/advisories/35270; http://www.securityfocus.com/bid/35250
CVE: CVE-2009-1953
Published: 2009-06-08
Description: IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/35347; http://www-01.ibm.com/support/docview.wss?uid=swg21389281; http://www.securityfocus.com/bid/35228
CVE: CVE-2009-1954
Published: 2009-06-08
Description: Unspecified vulnerability in portmapper (aka portmap) in IBM AIX 5.3 allows attackers to cause a denial of service (daemon hang) via unknown vectors, related to libtli.
CVSS Score: 7.8 (HIGH)
References: ftp://ftp.software.ibm.com/aix/efixes/iz50802/IZ50802.53TL8SP6.epkg.Z; http://www.ibm.com/support/docview.wss?uid=isg1IZ50802; http://www.securityfocus.com/bid/35211
CVE: CVE-2009-1955
Published: 2009-06-08
Description: The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html; http://marc.info/?l=apr-dev&m=[PII_REDACTED]6125&w=2
CVE: CVE-2009-1956
Published: 2009-06-08
Description: Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2998&w=2; http://secunia.com/advisories/34724
CVE: CVE-2009-1957
Published: 2009-06-08
Description: charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers "an incomplete state," followed by a CREATE_CHILD_SA request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://download.strongswan.org/CHANGES4.txt; http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.patch; http://download.strongswan.org/patches/03_invalid_ike_state_patch/strongswan-4.x.x_invalid_ike_state.readme
CVE: CVE-2009-1958
Published: 2009-06-08
Description: charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://download.strongswan.org/CHANGES4.txt; http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.patch; http://download.strongswan.org/patches/04_swapped_ts_check_patch/strongswan-4.x.x._swapped_ts_check.readme
CVE: CVE-2009-1959
Published: 2009-06-08
Description: Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://bugs.irssi.org/index.php?do=details&task_id=662; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html; http://secunia.com/advisories/35685
CVE: CVE-2009-1960
Published: 2009-06-08
Description: inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php.  NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://bugs.splitbrain.org/index.php?do=details&task_id=1700; http://dev.splitbrain.org/darcsweb/darcsweb.cgi?r=dokuwiki%3Ba=commitdiff%3Bh=[PII_REDACTED]5030-7ad00-c0483e021f47898c8597f3bfbdd26c637f891d86.gz; http://secunia.com/advisories/35218
CVE: CVE-2009-1961
Published: 2009-06-08
Description: The inode double locking code in fs/ocfs2/file.c in the Linux kernel 2.6.30 before 2.6.30-rc3, 2.6.27 before 2.6.27.24, 2.6.29 before 2.6.29.4, and possibly other versions down to 2.6.19 allows local users to cause a denial of service (prevention of file creation and removal) via a series of splice system calls that trigger a deadlock between the generic_file_splice_write, splice_from_pipe, and ocfs2_file_splice_write functions.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-667
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=7bfac9ecf0585962fe13584f5cf526d8c8e76f17; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00001.html
CVE: CVE-2009-1962
Published: 2009-06-08
Description: Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://secunia.com/advisories/35320; http://www.mandriva.com/security/advisories?name=MDVSA-2009:244; http://www.openwall.com/lists/oss-security/2009/04/01/6
CVE: CVE-2008-6826
Published: 2009-06-08
Description: dhtml.pl in MHF Media Pro allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter, as demonstrated using the (1) advert_top.htm or (2) advert_login.htm pages.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://osvdb.org/49406; http://secunia.com/advisories/32402; http://www.securityfocus.com/bid/31923
CVE: CVE-2008-6827
Published: 2009-06-08
Description: The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-306
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6205&w=2; http://osvdb.org/49426; http://secunia.com/advisories/31773
CVE: CVE-2008-6828
Published: 2009-06-08
Description: Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
CVSS Score: 7.8 (HIGH)
CWE: CWE-312
References: http://secunia.com/advisories/31773; http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html; http://www.securityfocus.com/bid/31767
CVE: CVE-2008-6829
Published: 2009-06-08
Description: VicFTPS 5.0 allows remote attackers to cause a denial of service (crash) via a LIST command that starts with a "/\/" (forward slash, backward slash, forward slash).  NOTE: this might be the same issue as CVE-2008-2031.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.vupen.com/english/advisories/2008/2927; https://www.exploit-db.com/exploits/6834; http://www.vupen.com/english/advisories/2008/2927
CVE: CVE-2008-6830
Published: 2009-06-08
Description: The disconnection feature in Citrix Web Interface 5.0 and 5.0.1 for Java Application Servers does not properly terminate a user's web interface session, which allows attackers with access to the same browser instance to gain access to the user's Web Interface session. NOTE: the attacker must also have valid credentials to the Web Interface.
CVSS Score: 4.0 (MEDIUM)
References: http://osvdb.org/49387; http://secunia.com/advisories/32444; http://support.citrix.com/article/CTX118768
CVE: CVE-2008-6831
Published: 2009-06-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname (Full Name) parameter in the ViewProfile page or (2) returnUrl parameter in a form, as demonstrated using secure/AddComment!default.jspa (aka "Add Comment").
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2008-10-29; http://osvdb.org/49415; http://osvdb.org/49416
CVE: CVE-2008-6832
Published: 2009-06-08
Description: Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/49417; http://secunia.com/advisories/32113; http://www.securityfocus.com/bid/31967
CVE: CVE-2009-2003
Published: 2009-06-08
Description: Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to "admin."
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/34930; https://www.exploit-db.com/exploits/8668; http://www.securityfocus.com/bid/34930
CVE: CVE-2009-2004
Published: 2009-06-08
Description: Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://holisticinfosec.org/content/view/112/45/; http://secunia.com/advisories/34879; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
CVE: CVE-2009-2005
Published: 2009-06-08
Description: Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://holisticinfosec.org/content/view/112/45/; http://secunia.com/advisories/34879; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
CVE: CVE-2009-2006
Published: 2009-06-08
Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php.  NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://holisticinfosec.org/content/view/112/45/; http://secunia.com/advisories/34879; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
CVE: CVE-2009-2007
Published: 2009-06-08
Description: Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html; http://secunia.com/advisories/34879; http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8