deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2002-2255
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0053.html; http://www.securityfocus.com/bid/6311; https://exchange.xforce.ibmcloud.com/vulnerabilities/10773
CVE: CVE-2002-2256
Published: 2002-12-31
Description: Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0347.html; http://www.securityfocus.com/bid/6271; https://exchange.xforce.ibmcloud.com/vulnerabilities/10724
CVE: CVE-2002-2257
Published: 2002-12-31
Description: Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0346.html; http://www.securityfocus.com/bid/6270; https://exchange.xforce.ibmcloud.com/vulnerabilities/10722
CVE: CVE-2002-2258
Published: 2002-12-31
Description: Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0364.html; http://www.securityfocus.com/bid/6277; https://exchange.xforce.ibmcloud.com/vulnerabilities/10725
CVE: CVE-2002-2259
Published: 2002-12-31
Description: Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/6329; http://www.suse.com/de/security/2002_047_openldap2.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10801
CVE: CVE-2002-2260
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://bugzilla.mozilla.org/show_bug.cgi?id=179329; http://marc.info/?l=bugtraq&m=[PII_REDACTED]6560&w=2; http://www.debian.org/security/2002/dsa-218
CVE: CVE-2002-2261
Published: 2002-12-31
Description: Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check_relay' function by spoofing a blank DNS hostname.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: ftp://patches.sgi.com/support/free/security/advisories/20030101-01-P; http://secunia.com/advisories/7826; http://securitytracker.com/id?1005748
CVE: CVE-2002-2262
Published: 2002-12-31
Description: Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/advisories/4764; http://www.securityfocus.com/bid/6356; https://exchange.xforce.ibmcloud.com/vulnerabilities/10836
CVE: CVE-2002-2263
Published: 2002-12-31
Description: The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-16
References: http://www.securityfocus.com/advisories/4766; http://www.securityfocus.com/bid/6357; https://exchange.xforce.ibmcloud.com/vulnerabilities/10838
CVE: CVE-2002-2264
Published: 2002-12-31
Description: Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors.  NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html; http://archives.neohapsis.com/archives/compaq/2002-q4/0013.html
CVE: CVE-2002-2265
Published: 2002-12-31
Description: Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/compaq/2002-q4/0014.html; http://www.securityfocus.com/bid/6174; https://exchange.xforce.ibmcloud.com/vulnerabilities/10703
CVE: CVE-2002-2266
Published: 2002-12-31
Description: NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]1729&w=2; http://www.securityfocus.com/bid/6250; https://exchange.xforce.ibmcloud.com/vulnerabilities/10700
CVE: CVE-2002-2267
Published: 2002-12-31
Description: bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file.
CVSS Score: 7.2 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0367.html; http://www.securityfocus.com/bid/6278; https://exchange.xforce.ibmcloud.com/vulnerabilities/10726
CVE: CVE-2002-2268
Published: 2002-12-31
Description: Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.
CVSS Score: 9.4 (HIGH)
CWE: CWE-119
References: http://seclists.org/lists/bugtraq/2002/Dec/0013.html; http://www.securiteam.com/windowsntfocus/6R0030A6AY.html; http://www.securityfocus.com/bid/6289
CVE: CVE-2002-2269
Published: 2002-12-31
Description: Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS Score: 9.4 (HIGH)
CWE: CWE-22
References: http://securityreason.com/securityalert/3262; http://www.securityfocus.com/archive/1/301893; http://www.securityfocus.com/bid/6291
CVE: CVE-2002-2270
Published: 2002-12-31
Description: Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknown attack vectors.
CVSS Score: 3.6 (LOW)
CWE: CWE-264
References: http://www.securityfocus.com/advisories/4742; http://www.securityfocus.com/bid/6317; https://exchange.xforce.ibmcloud.com/vulnerabilities/10777
CVE: CVE-2002-2271
Published: 2002-12-31
Description: Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.securiteam.com/exploits/6G003156AE.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10757; http://www.securiteam.com/exploits/6G003156AE.html
CVE: CVE-2002-2272
Published: 2002-12-31
Description: Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html; http://www.securityfocus.com/bid/6320; https://exchange.xforce.ibmcloud.com/vulnerabilities/10771
CVE: CVE-2002-2273
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3262; http://www.securityfocus.com/archive/1/301893; http://www.securityfocus.com/bid/6292
CVE: CVE-2002-2274
Published: 2002-12-31
Description: akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0049.html; http://synflood.at/akfingerd; http://www.securityfocus.com/bid/6325
CVE: CVE-2002-2275
Published: 2002-12-31
Description: Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe.
CVSS Score: 2.1 (LOW)
References: http://archives.neohapsis.com/archives/ntbugtraq/2002-q4/0093.html; http://securitytracker.com/id?1005766; http://www.securityfocus.com/bid/6332
CVE: CVE-2002-2276
Published: 2002-12-31
Description: Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0071.html; http://www.securityfocus.com/bid/6333; https://exchange.xforce.ibmcloud.com/vulnerabilities/10788
CVE: CVE-2002-2277
Published: 2002-12-31
Description: SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html; http://www.securityfocus.com/bid/6273; https://exchange.xforce.ibmcloud.com/vulnerabilities/10735
CVE: CVE-2002-2278
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10738; http://archives.neohapsis.com/archives/bugtraq/2002-11/0359.html
CVE: CVE-2002-2279
Published: 2002-12-31
Description: Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://alcastle.com/index.php?id=6&subject=%2Faldap%2F&view=CHANGE.LOG.txt; http://www.securityfocus.com/bid/6310; https://exchange.xforce.ibmcloud.com/vulnerabilities/10733
CVE: CVE-2002-2280
Published: 2002-12-31
Description: syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.
CVSS Score: 2.1 (LOW)
CWE: CWE-16
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0272.html; http://www.securityfocus.com/bid/6219; https://exchange.xforce.ibmcloud.com/vulnerabilities/10702
CVE: CVE-2002-2281
Published: 2002-12-31
Description: Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3151&w=2; http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf; http://www.securityfocus.com/bid/6222
CVE: CVE-2002-2282
Published: 2002-12-31
Description: McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.
CVSS Score: 6.9 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0007.html; http://www.securityfocus.com/bid/6288; https://exchange.xforce.ibmcloud.com/vulnerabilities/10741
CVE: CVE-2002-2283
Published: 2002-12-31
Description: Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is removed from the administrator group, which allows that user to view processes of other users.
CVSS Score: 1.9 (LOW)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0361.html; http://www.securityfocus.com/bid/6280; https://exchange.xforce.ibmcloud.com/vulnerabilities/10736
CVE: CVE-2002-2284
Published: 2002-12-31
Description: Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.
CVSS Score: 6.4 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3151&w=2; http://www.lsd-pl.net/documents/javasecurity-1.0.0.pdf; http://www.securityfocus.com/bid/6223
CVE: CVE-2002-2285
Published: 2002-12-31
Description: eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-16
References: http://securitytracker.com/id?1005740; http://www.derkeiler.com/Mailing-Lists/NT-Bugtraq/2002-12/0003.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10770
CVE: CVE-2002-2286
Published: 2002-12-31
Description: The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0081.html; http://www.securityfocus.com/bid/6339; https://exchange.xforce.ibmcloud.com/vulnerabilities/10816
CVE: CVE-2002-2287
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0188.html; http://www.securityfocus.com/bid/6173; https://exchange.xforce.ibmcloud.com/vulnerabilities/10617
CVE: CVE-2002-2288
Published: 2002-12-31
Description: Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html; http://www.securityfocus.com/bid/6387; https://exchange.xforce.ibmcloud.com/vulnerabilities/10856
CVE: CVE-2002-2289
Published: 2002-12-31
Description: soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://online.securityfocus.com/archive/1/300992; http://securityreason.com/securityalert/3243; http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0329.html
CVE: CVE-2002-2290
Published: 2002-12-31
Description: Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.
CVSS Score: 10.0 (HIGH)
CWE: CWE-255
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10857; http://archives.neohapsis.com/archives/bugtraq/2002-12/0111.html
CVE: CVE-2002-2291
Published: 2002-12-31
Description: Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0090.html; http://online.securityfocus.com/archive/1/300986; http://securityreason.com/securityalert/3241
CVE: CVE-2002-2292
Published: 2002-12-31
Description: Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0126.html; http://www.securityfocus.com/bid/6394; https://exchange.xforce.ibmcloud.com/vulnerabilities/10860
CVE: CVE-2002-2293
Published: 2002-12-31
Description: Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager.
CVSS Score: 4.6 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0117.html; http://www.securityfocus.com/bid/6385; https://exchange.xforce.ibmcloud.com/vulnerabilities/10863
CVE: CVE-2002-2294
Published: 2002-12-31
Description: Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/6389; http://www.symantec.com/avcenter/security/Content/2002.12.12.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10862
CVE: CVE-2002-2295
Published: 2002-12-31
Description: Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2002-11/0457.html; http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2002-12/0005.html; http://www.securiteam.com/securitynews/6Q0020A6AS.html
CVE: CVE-2002-2296
Published: 2002-12-31
Description: Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0003.html; http://www.securityfocus.com/bid/6272; https://exchange.xforce.ibmcloud.com/vulnerabilities/10737
CVE: CVE-2002-2297
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html; http://securitytracker.com/id?1005733; https://exchange.xforce.ibmcloud.com/vulnerabilities/10758
CVE: CVE-2002-2298
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html; http://securitytracker.com/id?1005733; https://exchange.xforce.ibmcloud.com/vulnerabilities/10758
CVE: CVE-2002-2299
Published: 2002-12-31
Description: PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0000.html; http://securitytracker.com/id?1005733; https://exchange.xforce.ibmcloud.com/vulnerabilities/10758
CVE: CVE-2002-2300
Published: 2002-12-31
Description: Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6011&w=2; http://seclists.org/lists/bugtraq/2003/Apr/0344.html; http://securitytracker.com/id?1005732
CVE: CVE-2002-2301
Published: 2002-12-31
Description: Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.
CVSS Score: 3.3 (LOW)
CWE: CWE-255
References: http://seclists.org/lists/bugtraq/2002/Dec/0012.html; http://www.securityfocus.com/bid/6293; https://exchange.xforce.ibmcloud.com/vulnerabilities/10742
CVE: CVE-2002-2302
Published: 2002-12-31
Description: 3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-264
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0018.html; http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html; http://www.securityfocus.com/bid/6296
CVE: CVE-2002-2303
Published: 2002-12-31
Description: 3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.
CVSS Score: 7.8 (HIGH)
CWE: CWE-310
References: http://cert.uni-stuttgart.de/archive/bugtraq/2003/03/msg00081.html; http://securityreason.com/securityalert/3263; http://www.securityfocus.com/archive/1/301863
CVE: CVE-2002-2304
Published: 2002-12-31
Description: SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-12/0134.html; http://www.securityfocus.com/bid/6395; https://exchange.xforce.ibmcloud.com/vulnerabilities/10864
CVE: CVE-2002-2305
Published: 2002-12-31
Description: SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/10705; http://archives.neohapsis.com/archives/bugtraq/2002-11/0307.html
CVE: CVE-2002-2306
Published: 2002-12-31
Description: Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://online.securityfocus.com/archive/1/284315; http://www.securityfocus.com/bid/5317; https://exchange.xforce.ibmcloud.com/vulnerabilities/9672
CVE: CVE-2002-2307
Published: 2002-12-31
Description: The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20.
CVSS Score: 5.0 (MEDIUM)
References: http://www.aerasec.de/security/advisories/txt/ae-200207-028-BenHur-activeFTPruleset.txt; http://www.iss.net/security_center/static/9644.php; http://www.securityfocus.com/bid/5279