deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-1225
Published: 2012-02-21
Description: Multiple SQL injection vulnerabilities in Dolibarr CMS 3.2.0 Alpha and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) memberslist parameter (aka Member List) in list.php or (2) rowid parameter to adherents/fiche.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2012-02/0056.html; http://osvdb.org/79011; http://secunia.com/advisories/47969
CVE: CVE-2012-1226
Published: 2012-02-21
Description: Multiple directory traversal vulnerabilities in Dolibarr CMS 3.2.0 Alpha allow remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the (1) file parameter to document.php or (2) backtopage parameter in a create action to comm/action/fiche.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2012-02/0168.html; http://www.exploit-db.com/exploits/18480; http://www.securityfocus.com/archive/1/521583
CVE: CVE-2012-1227
Published: 2012-02-21
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/79005; http://secunia.com/advisories/47934; http://www.exploit-db.com/exploits/18474
CVE: CVE-2011-1914
Published: 2012-02-21
Description: Buffer overflow in the Advantech ADAM OLE for Process Control (OPC) Server ActiveX control in ADAM OPC Server before 3.01.012, Modbus RTU OPC Server before 3.01.010, and Modbus TCP OPC Server before 3.01.010 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-11-279-01.pdf
CVE: CVE-2011-4521
Published: 2012-02-21
Description: SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via crafted string input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4522
Published: 2012-02-21
Description: Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4523
Published: 2012-02-21
Description: Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4524
Published: 2012-02-21
Description: Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unspecified parameters.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4525
Published: 2012-02-21
Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4526
Published: 2012-02-21
Description: Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2011-4890
Published: 2012-02-21
Description: The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/47654; http://www-01.ibm.com/support/docview.wss?uid=swg1IC79861; http://www-01.ibm.com/support/docview.wss?uid=swg1IC80675
CVE: CVE-2012-0200
Published: 2012-02-21
Description: The server in IBM solidDB 6.5 before Interim Fix 6 does not properly initialize data structures, which allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a redundant WHERE condition.
CVSS Score: 4.0 (MEDIUM)
References: http://www-01.ibm.com/support/docview.wss?uid=swg1IC81244; http://www.ibm.com/support/docview.wss?uid=swg27021052; https://exchange.xforce.ibmcloud.com/vulnerabilities/73126
CVE: CVE-2012-0233
Published: 2012-02-21
Description: Cross-site scripting (XSS) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via a malformed URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0234
Published: 2012-02-21
Description: SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via a malformed URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0235
Published: 2012-02-21
Description: Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0236
Published: 2012-02-21
Description: Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL.  NOTE: the vendor reportedly "does not consider it to be a security risk."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0237
Published: 2012-02-21
Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to (1) enable date and time syncing or (2) disable date and time syncing via a crafted URL.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0238
Published: 2012-02-21
Description: Stack-based buffer overflow in opcImg.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0239
Published: 2012-02-21
Description: uaddUpAdmin.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to modify an administrative password via a password-change request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0240
Published: 2012-02-21
Description: GbScriptAddUp.asp in Advantech/BroadWin WebAccess before 7.0 does not properly perform authentication, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0241
Published: 2012-02-21
Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to cause a denial of service (memory corruption) via a modified stream identifier to a function.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/73281
CVE: CVE-2012-0242
Published: 2012-02-21
Description: Format string vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via format string specifiers in a message string.
CVSS Score: 10.0 (HIGH)
CWE: CWE-134
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0243
Published: 2012-02-21
Description: Buffer overflow in an ActiveX control in bwocxrun.ocx in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code by leveraging the ability to write arbitrary content to any pathname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-0244
Published: 2012-02-21
Description: Multiple SQL injection vulnerabilities in Advantech/BroadWin WebAccess before 7.0 allow remote attackers to execute arbitrary SQL commands via crafted string input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/52051; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.securityfocus.com/bid/52051
CVE: CVE-2012-1234
Published: 2012-02-21
Description: SQL injection vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to execute arbitrary SQL commands via a malformed URL.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0234.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
CVE: CVE-2012-1235
Published: 2012-02-21
Description: Cross-site request forgery (CSRF) vulnerability in Advantech/BroadWin WebAccess 7.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-0235.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-352
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf
CVE: CVE-2012-0223
Published: 2012-02-22
Description: Untrusted search path vulnerability in 7-Technologies (7T) TERMIS 2.10 and earlier allows local users to gain privileges via a Trojan horse DLL in the current working directory, a different vulnerability than CVE-2012-0224.
CVSS Score: 9.3 (HIGH)
References: http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf; http://www.us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf
CVE: CVE-2012-0291
Published: 2012-02-22
Description: Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/48092; http://www.securityfocus.com/bid/51965; http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00
CVE: CVE-2012-0315
Published: 2012-02-22
Description: Untrusted search path vulnerability in ALFTP before 5.31 allows local users to gain privileges via a Trojan horse executable file in a directory that is accessed for reading an extensionless file, as demonstrated by executing the README.exe file when a user attempts to access the README file.
CVSS Score: 9.3 (HIGH)
References: http://jvn.jp/en/jp/JVN85695061/995223/index.html; http://jvn.jp/en/jp/JVN85695061/index.html; http://jvndb.jvn.jp/jvndb/JVNDB-2012-000011
CVE: CVE-2012-1256
Published: 2012-02-22
Description: The single sign-on (SSO) implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified url_account parameter, in conjunction with a valid login name in the SSPI_HEADER parameter, to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://secunia.com/advisories/48124; http://www.kb.cert.org/vuls/id/273502; http://secunia.com/advisories/48124
CVE: CVE-2012-0707
Published: 2012-02-23
Description: Cross-site scripting (XSS) vulnerability in IBM WebSphere Lombardi Edition 7.2 allows remote attackers to inject arbitrary web script or HTML via crafted text input to a coach that is configured with a document attachment control section.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/48055; http://www-01.ibm.com/support/docview.wss?uid=swg1IC79890; https://exchange.xforce.ibmcloud.com/vulnerabilities/73376
CVE: CVE-2012-0870
Published: 2012-02-23
Description: Heap-based buffer overflow in process.c in smbd in Samba 3.0, as used in the file-sharing service on the BlackBerry PlayBook tablet before 2.0.0.7971 and other products, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a Batched (aka AndX) request that triggers infinite recursion.
CVSS Score: 7.9 (HIGH)
CWE: CWE-119
References: http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB29565; http://lists.apple.com/archives/security-announce/2012/May/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00008.html
CVE: CVE-2012-1288
Published: 2012-02-23
Description: The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easier for remote attackers to obtain access via an HTTP session.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://www.kb.cert.org/vuls/id/707254; http://www.kb.cert.org/vuls/id/707254
CVE: CVE-2012-1289
Published: 2012-02-23
Description: Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the logfilename parameter to (1) b2b/admin/log.jsp or (2) b2b/admin/log_view.jsp in the Internet Sales (crm.b2b) component, or (3) ipc/admin/log.jsp or (4) ipc/admin/log_view.jsp in the Application Administration (com.sap.ipc.webapp.ipc) component.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://dsecrg.com/pages/vul/show.php?id=412; http://dsecrg.com/pages/vul/show.php?id=413; http://secunia.com/advisories/47861
CVE: CVE-2012-1290
Published: 2012-02-23
Description: Cross-site scripting (XSS) vulnerability in b2b/auction/container.jsp in the Internet Sales (crm.b2b) module in SAP NetWeaver 7.0 allows remote attackers to inject arbitrary web script or HTML via the _loadPage parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://dsecrg.com/pages/vul/show.php?id=414; http://secunia.com/advisories/47861; http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a
CVE: CVE-2012-1291
Published: 2012-02-23
Description: Unspecified vulnerability in the com.sap.aii.mdt.amt.web.AMTPageProcessor servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the Adapter Monitor via unspecified vectors, possibly related to the EnableInvokerServletGlobally property in the servlet_jsp service.
CVSS Score: 5.0 (MEDIUM)
References: http://dsecrg.com/pages/vul/show.php?id=415; http://secunia.com/advisories/47861; http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a
CVE: CVE-2012-1292
Published: 2012-02-23
Description: Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://dsecrg.com/pages/vul/show.php?id=416; http://secunia.com/advisories/47861; http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a
CVE: CVE-2012-0823
Published: 2012-02-23
Description: VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://blog.webmproject.org/2012/01/vp8-codec-sdk-duclair-released.html; http://code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx; http://www.mandriva.com/security/advisories?name=MDVSA-2012:023
CVE: CVE-2012-0873
Published: 2012-02-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Boonex Dolphin before 7.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) explain parameter to explanation.php or the (2) photos_only, (3) online_only, or (4) mode parameters to viewFriends.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2012-02/0107.html; http://www.boonex.com/n/dolphin-7-0-8-released; http://www.boonex.com/trac/dolphin/changeset/15282
CVE: CVE-2012-1294
Published: 2012-02-23
Description: SQL injection vulnerability in CONTIMEX Impulsio CMS allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/files/109849/Impulsio-CMS-SQL-Injection.html; http://www.securityfocus.com/bid/52063; https://exchange.xforce.ibmcloud.com/vulnerabilities/73303
CVE: CVE-2012-0996
Published: 2012-02-24
Description: Multiple directory traversal vulnerabilities in 11in1 1.2.1 stable 12-31-2011 allow remote attackers to read arbitrary files via a .. (dot dot) in the class parameter to (1) index.php or (2) admin/index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: https://www.htbridge.ch/advisory/HTB23071; https://www.htbridge.ch/advisory/HTB23071
CVE: CVE-2012-0997
Published: 2012-02-24
Description: Cross-site request forgery (CSRF) vulnerability in admin/index.php in 11in1 1.2.1 stable 12-31-2011 allows remote attackers to hijack the authentication of administrators for requests that add new topics via an addTopic action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: https://www.htbridge.ch/advisory/HTB23071; https://www.htbridge.ch/advisory/HTB23071
CVE: CVE-2012-0998
Published: 2012-02-24
Description: Directory traversal vulnerability in account/preferences.php in LEPTON before 1.1.4 allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the language parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt; http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php; https://www.htbridge.ch/advisory/HTB23072
CVE: CVE-2012-0999
Published: 2012-02-24
Description: SQL injection vulnerability in modules/news/rss.php in LEPTON before 1.1.4 allows remote attackers to execute arbitrary SQL commands via the group_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt; http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php; https://www.htbridge.ch/advisory/HTB23072
CVE: CVE-2012-1000
Published: 2012-02-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in LEPTON 1.1.3 and other versions before 1.1.4 allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to admins/login/forgot/index.php, or the (2) display_name or (3) email parameter to account/preferences.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.lepton-cms.org/media/changelog/changelog_1.1.4.txt; http://www.lepton-cms.org/posts/security-release-lepton-1.1.4-52.php; https://www.htbridge.ch/advisory/HTB23072
CVE: CVE-2012-1205
Published: 2012-02-24
Description: PHP remote file inclusion vulnerability in relocate-upload.php in Relocate Upload plugin before 0.20 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://osvdb.org/79250; http://plugins.trac.wordpress.org/changeset/504380/relocate-upload; http://secunia.com/advisories/47976
CVE: CVE-2012-1206
Published: 2012-02-24
Description: Multiple integer overflows in Hancom Office 2010 SE 8.5.5 allow remote attackers to execute arbitrary code via large dimension values in a (1) JPG image to the ImportGR in the JPG image filter module (HncJpeg10.flt) or (2) PNG image to the PNG image filter module (HncPng10.flt), which triggers a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://osvdb.org/78906; http://osvdb.org/78907; http://secunia.com/advisories/47386
CVE: CVE-2012-1207
Published: 2012-02-24
Description: Directory traversal vulnerability in frontend/core/engine/javascript.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter to frontend/js.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html; http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released; http://www.securityfocus.com/bid/51972
CVE: CVE-2012-1208
Published: 2012-02-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) report parameter to blog/settings or (2) error parameter to users/index.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/files/109709/Fork-CMS-3.2.4-Cross-Site-Scripting-Local-File-Inclusion.html; http://secunia.com/advisories/47937; http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released
CVE: CVE-2012-1209
Published: 2012-02-24
Description: Cross-site scripting (XSS) vulnerability in backend/core/engine/base.php in Fork CMS 3.2.4 and possibly other versions before 3.2.5 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.fork-cms.com/blog/detail/fork-cms-3-2-5-released; https://exchange.xforce.ibmcloud.com/vulnerabilities/73393; https://github.com/forkcms/forkcms/commit/c8ec9c58a6b3c46cdd924532c1de99bcda6072ed