deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-4048
Published: 2009-11-23
Description: Dxmsoft XM Easy Personal FTP Server 5.8.0 allows remote authenticated users to cause a denial of service (daemon outage) via an APPE command to one socket in conjunction with a DELE command to a second socket.
CVSS Score: 4.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/507853/100/0/threaded; http://www.securityfocus.com/bid/37016; https://exchange.xforce.ibmcloud.com/vulnerabilities/54277
CVE: CVE-2009-4049
Published: 2009-11-23
Description: Heap-based buffer overflow in aswRdr.sys (aka the TDI RDR driver) in avast! Home and Professional 4.8.1356.0 allows local users to cause a denial of service (memory corruption) or possibly gain privileges via crafted arguments to IOCTL 0x80002024.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/37368; http://www.efblog.net/2009/11/avast-aswrdrsys-kernel-pool-corruption.html; http://www.securityfocus.com/archive/1/507891/100/0/threaded
CVE: CVE-2009-4050
Published: 2009-11-23
Description: Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/60073; http://secunia.com/advisories/37370; http://osvdb.org/60073
CVE: CVE-2009-4051
Published: 2009-11-23
Description: Home FTP Server 1.10.1.139 allows remote attackers to cause a denial of service (daemon outage) via multiple invalid SITE INDEX commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/37381; http://www.securityfocus.com/archive/1/507893/100/0/threaded; http://www.securityfocus.com/bid/37033
CVE: CVE-2009-4052
Published: 2009-11-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in the JSF Widget Library Runtime in IBM Rational Application Developer for WebSphere Software before 7.0.0.10 and Rational Software Architect before 7.0.0.10 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) the JSF Tree Control and (2) the JavaScript Resource Servlet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37442; http://www-01.ibm.com/support/docview.wss?uid=swg1PK90616; http://www-01.ibm.com/support/docview.wss?uid=swg1PK94324
CVE: CVE-2009-4053
Published: 2009-11-23
Description: Multiple directory traversal vulnerabilities in Home FTP Server 1.10.1.139 allow remote authenticated users to (1) create arbitrary directories via directory traversal sequences in an MKD command or (2) create files with any contents in arbitrary directories via directory traversal sequences in a file upload request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/37381; https://exchange.xforce.ibmcloud.com/vulnerabilities/54303; http://secunia.com/advisories/37381
CVE: CVE-2009-4054
Published: 2009-11-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2009-3672.  Reason: This candidate is a duplicate of CVE-2009-3672.  The duplicate was assigned by the CNA without proper coordination with MITRE.  Notes: All CVE users should reference CVE-2009-3672 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-3843
Published: 2009-11-24
Description: HP Operations Manager 8.10 on Windows contains a "hidden account" in the XML file that specifies Tomcat users, which allows remote attackers to conduct unrestricted file upload attacks, and thereby execute arbitrary code, by using the org.apache.catalina.manager.HTMLManagerServlet class to make requests to manager/html/upload.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4980&w=2; http://secunia.com/advisories/37444; http://securitytracker.com/id?1023222
CVE: CVE-2009-4017
Published: 2009-11-24
Description: PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files created when handling a multipart/form-data POST request, which allows remote attackers to cause a denial of service (resource exhaustion), and makes it easier for remote attackers to exploit local file inclusion vulnerabilities, via multiple requests, related to lack of support for the max_file_uploads directive.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-770
References: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5735&w=2; http://news.php.net/php.announce/79
CVE: CVE-2009-4056
Published: 2009-11-24
Description: Directory traversal vulnerability in admin/popup.php in Betsy CMS 3.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the popup parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/37422; http://www.packetstormsecurity.org/0911-exploits/betsycms-lfi.txt; http://www.vupen.com/english/advisories/2009/3314
CVE: CVE-2009-4057
Published: 2009-11-24
Description: SQL injection vulnerability in the inertialFATE iF Portfolio Nexus (com_if_nexus) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an item action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/60308; http://secunia.com/advisories/37408; http://www.packetstormsecurity.org/0911-exploits/joomlanexus-sql.txt
CVE: CVE-2009-4058
Published: 2009-11-24
Description: SQL injection vulnerability in allauctions.php in Telebid Auction Script allows remote attackers to execute arbitrary SQL commands via the aid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/60307; http://secunia.com/advisories/37417; http://www.exploit-db.com/exploit.php?id=10165
CVE: CVE-2009-4059
Published: 2009-11-24
Description: SQL injection vulnerability in the JoomClip (com_joomclip) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a thumbs action to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/60195; http://packetstormsecurity.org/0911-exploits/joomlajoomclip-sql.txt; http://secunia.com/advisories/37400
CVE: CVE-2009-4060
Published: 2009-11-24
Description: SQL injection vulnerability in includes/content/viewProd.inc.php in CubeCart before 4.3.7 remote attackers to execute arbitrary SQL commands via the productId parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://forums.cubecart.com/index.php?showtopic=39900; http://osvdb.org/60306; http://secunia.com/advisories/37402
CVE: CVE-2009-4061
Published: 2009-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Agreement module 6.x before 6.x-1.2 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/631538; http://drupal.org/node/636568; http://osvdb.org/60274
CVE: CVE-2009-4062
Published: 2009-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Printfriendly module 6.x before 6.x-1.6 for Drupal allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/636670; http://drupal.org/node/636678; http://osvdb.org/60281
CVE: CVE-2009-4063
Published: 2009-11-24
Description: Cross-site scripting (XSS) vulnerability in the Subgroups for Organic Groups (OG) module 5.x before 5.x-4.0 and 5.x before 5.x-3.4 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified node titles.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/630004; http://drupal.org/node/636562; http://osvdb.org/60287
CVE: CVE-2009-4064
Published: 2009-11-24
Description: Cross-site scripting (XSS) vulnerability in the Gallery Assist module 6.x before 6.x-1.7 for Drupal allows remote attackers to inject arbitrary web script or HTML via node titles.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/636488; http://drupal.org/node/636660; http://osvdb.org/60270
CVE: CVE-2009-4065
Published: 2009-11-24
Description: Cross-site scripting (XSS) vulnerability in the settings page in the Strongarm module 6.x before 6.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the value field when viewing overridden variables.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/636462; http://drupal.org/node/636474; http://osvdb.org/60284
CVE: CVE-2009-4066
Published: 2009-11-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the "My Account" feature in PHPList Integration module 5 before 5.x-1.2 and 6 before 6.x-1.1 for Drupal allow remote attackers to hijack the authentication of arbitrary users via vectors related to (1) subscribing or (2) unsubscribing to mailing lists.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/636398; http://drupal.org/node/636400; http://drupal.org/node/636412
CVE: CVE-2009-3303
Published: 2009-11-24
Description: Cross-site scripting (XSS) vulnerability in www/help/tracker.php in GForge 4.5.14, 4.7 rc2, and 4.8.1 allows remote attackers to inject arbitrary web script or HTML via the helpname parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/37450; http://security.debian.org/pool/updates/main/g/gforge/gforge_4.5.14-22etch12.diff.gz; http://www.debian.org/security/2009/dsa-1937
CVE: CVE-2009-3576
Published: 2009-11-24
Description: Autodesk Softimage 7.x and Softimage XSI 6.x allow remote attackers to execute arbitrary JavaScript code via a scene package containing a Scene Table of Contents (aka .scntoc) file with a Script_Content element, as demonstrated by code that loads the WScript.Shell ActiveX control.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securitytracker.com/id?1023229; http://www.coresecurity.com/content/softimage-arbitrary-command-execution; http://www.securityfocus.com/archive/1/508011/100/0/threaded
CVE: CVE-2009-3577
Published: 2009-11-24
Description: Autodesk 3D Studio Max (3DSMax) 6 through 9 and 2008 through 2010 allows remote attackers to execute arbitrary code via a .max file with a MAXScript statement that calls the DOSCommand method, related to "application callbacks."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securitytracker.com/id?1023230; http://www.coresecurity.com/content/3dsmax-arbitrary-command-execution; http://www.securityfocus.com/archive/1/508012/100/0/threaded
CVE: CVE-2009-3578
Published: 2009-11-24
Description: Autodesk Maya 8.0, 8.5, 2008, 2009, and 2010 and Alias Wavefront Maya 6.5 and 7.0 allow remote attackers to execute arbitrary code via a (1) .ma or (2) .mb file that uses the Maya Embedded Language (MEL) python command or unspecified other MEL commands, related to "Script Nodes."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://securitytracker.com/id?1023228; http://www.coresecurity.com/content/maya-arbitrary-command-execution; http://www.securityfocus.com/archive/1/508013/100/0/threaded
CVE: CVE-2009-3896
Published: 2009-11-24
Description: src/http/ngx_http_parse.c in nginx (aka Engine X) 0.1.0 through 0.4.14, 0.5.x before 0.5.38, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.14 allows remote attackers to cause a denial of service (NULL pointer dereference and worker process crash) via a long URI.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=552035; http://marc.info/?l=nginx&m=[PII_REDACTED]8141&w=2; http://secunia.com/advisories/48577
CVE: CVE-2009-3897
Published: 2009-11-24
Description: Dovecot 1.2.x before 1.2.8 sets 0777 permissions during creation of certain directories at installation time, which allows local users to access arbitrary user accounts by replacing the auth socket, related to the parent directories of the base_dir directory, and possibly the base_dir directory itself.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-732
References: http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]9145&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]2441&w=2
CVE: CVE-2009-3898
Published: 2009-11-24
Description: Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-09/0379.html; http://marc.info/?l=oss-security&m=[PII_REDACTED]1676&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]3039&w=2
CVE: CVE-2009-4069
Published: 2009-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5.14, 4.7.3, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/35458; http://www.debian.org/security/2009/dsa-1818; http://www.securityfocus.com/bid/35424
CVE: CVE-2009-4070
Published: 2009-11-24
Description: SQL injection vulnerability in GForge 4.5.14, 4.7.3, and possibly other versions allows remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/35458; http://www.debian.org/security/2009/dsa-1818; http://www.securityfocus.com/bid/35424
CVE: CVE-2009-4071
Published: 2009-11-24
Description: Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to obtain sensitive information or conduct cross-site scripting (XSS) attacks via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-16
References: http://osvdb.org/60527; http://secunia.com/advisories/37469; http://www.opera.com/docs/changelogs/mac/1010/
CVE: CVE-2009-4072
Published: 2009-11-24
Description: Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue."
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/60528; http://secunia.com/advisories/37469; http://www.opera.com/docs/changelogs/mac/1010/
CVE: CVE-2009-4073
Published: 2009-11-24
Description: The printing functionality in Microsoft Internet Explorer 8 allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/60504; http://secunia.com/advisories/37362; http://securethoughts.com/2009/11/millions-of-pdf-invisibly-embedded-with-your-internal-disk-paths/
CVE: CVE-2009-3033
Published: 2009-11-25
Description: Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/60496; http://www.securityfocus.com/bid/37092; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00
CVE: CVE-2009-4021
Published: 2009-11-25
Description: The fuse_direct_io function in fs/fuse/file.c in the fuse subsystem in the Linux kernel before 2.6.32-rc7 might allow attackers to cause a denial of service (invalid pointer dereference and OOPS) via vectors possibly related to a memory-consumption attack.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-399
References: http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=f60311d5f7670d9539b424e4ed8b5c0872fc9e83; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00005.html
CVE: CVE-2009-4022
Published: 2009-11-25
Description: Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta before 9.7.0b3, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains an Additional section with crafted data, which is not properly handled when the response is processed "at the same time as requesting DNSSEC records (DO)," aka Bug 20438.
CVSS Score: 2.6 (LOW)
References: ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt; http://aix.software.ibm.com/aix/efixes/security/bind9_advisory.asc; http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html
CVE: CVE-2009-4074
Published: 2009-11-25
Description: The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka "XSS Filter Script Handling Vulnerability."
CVSS Score: 4.3 (MEDIUM)
References: http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/; http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf; http://www.securityfocus.com/bid/37135
CVE: CVE-2009-4075
Published: 2009-11-25
Description: Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon outage) via unknown vectors that trigger a "dangling sshd authentication thread."
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/60498; http://sunsolve.sun.com/search/document.do?assetkey=1-21-143140-01-1; http://sunsolve.sun.com/search/document.do?assetkey=1-66-272629-1
CVE: CVE-2009-4076
Published: 2009-11-25
Description: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that modify user information via unspecified vectors, a different vulnerability than CVE-2009-4077.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN72974205/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000071.html; http://secunia.com/advisories/37235
CVE: CVE-2009-4077
Published: 2009-11-25
Description: Cross-site request forgery (CSRF) vulnerability in Roundcube Webmail 0.2.2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that send arbitrary emails via unspecified vectors, a different vulnerability than CVE-2009-4076.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN75694913/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000072.html; http://secunia.com/advisories/37235
CVE: CVE-2009-4078
Published: 2009-11-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in Redmine 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN01245481/index.html; http://jvn.jp/en/jp/JVN87341298/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000073.html
CVE: CVE-2009-4079
Published: 2009-11-25
Description: Cross-site request forgery (CSRF) vulnerability in Redmine 0.8.5 and earlier allows remote attackers to hijack the authentication of users for requests that delete a ticket via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://jvn.jp/en/jp/JVN87341298/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000074.html; http://rubyforge.org/frs/shownotes.php?release_id=41440
CVE: CVE-2009-4018
Published: 2009-11-29
Description: The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_mode_protected_env_vars directives, which allows context-dependent attackers to execute programs with an arbitrary environment via the env parameter, as demonstrated by a crafted value of the LD_LIBRARY_PATH environment variable.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://bugs.php.net/bug.php?id=49026; http://marc.info/?l=bugtraq&m=[PII_REDACTED]5735&w=2; http://marc.info/?l=oss-security&m=[PII_REDACTED]8678&w=2
CVE: CVE-2009-4031
Published: 2009-11-29
Description: The do_insn_fetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service (increased scheduling latency) on the host OS via unspecified manipulations related to SMP support.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://git.kernel.org/?p=linux/kernel/git/avi/kvm.git%3Ba=commit%3Bh=e42d9b8141d1f54ff72ad3850bb110c95a5f3b88; http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html; http://secunia.com/advisories/37720
CVE: CVE-2009-4032
Published: 2009-11-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html; http://bugs.gentoo.org/show_bug.cgi?id=294573; http://docs.cacti.net/#cross-site_scripting_fixes
CVE: CVE-2009-4082
Published: 2009-11-29
Description: PHP remote file inclusion vulnerability in forums/Forum_Include/index.php in Outreach Project Tool (OPT) 1.2.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/60464; http://packetstormsecurity.org/0911-exploits/opt-rfi.txt; http://secunia.com/advisories/37447
CVE: CVE-2009-4083
Published: 2009-11-29
Description: Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.16 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in (1) submitnews.php, (2) usersettings.php; and (3) newpost.php, (4) banlist.php, (5) banner.php, (6) cpage.php, (7) download.php, (8) users_extended.php, (9) frontpage.php, (10) links.php, and (11) mailout.php in e107_admin/.  NOTE: this may overlap CVE-2004-2040 and CVE-2006-4794, but there are insufficient details to be certain.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://blog.bkis.com/e107-multiple-vulnerabilities/; http://www.securityfocus.com/archive/1/508007/100/0/threaded; http://www.securityfocus.com/bid/37087
CVE: CVE-2009-4084
Published: 2009-11-29
Description: SQL injection vulnerability in the search feature in e107 0.7.16 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://blog.bkis.com/e107-multiple-vulnerabilities/; http://www.securityfocus.com/archive/1/508007/100/0/threaded; http://www.securityfocus.com/bid/37087