deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-3018
Published: 2009-08-31
Description: Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block javascript: and data: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header that contains a javascript: URI, (2) entering a javascript: URI when specifying the content of a Refresh header, (3) injecting a Refresh header that contains JavaScript sequences in a data:text/html URI, or (4) entering a data:text/html URI with JavaScript sequences when specifying the content of a Refresh header; does not properly block data: URIs in Location headers in HTTP responses, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (5) injecting a Location header that contains JavaScript sequences in a data:text/html URI or (6) entering a data:text/html URI with JavaScript sequences when specifying the content of a Location header; and does not properly handle javascript: URIs in HTML links within (a) 301 and (b) 302 error documents sent from web servers, which allows user-assisted remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (7) injecting a Location HTTP response header or (8) specifying the content of a Location HTTP response header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://websecurity.com.ua/3386/; http://www.securityfocus.com/archive/1/506163/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/53001
CVE: CVE-2009-3019
Published: 2009-08-31
Description: Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://www.exploit-db.com/exploits/9455; http://www.exploit-db.com/exploits/9455
CVE: CVE-2009-3020
Published: 2009-08-31
Description: win32k.sys in Microsoft Windows Server 2003 SP2 allows remote attackers to cause a denial of service (system crash) by referencing a crafted .eot file in the src descriptor of an @font-face Cascading Style Sheets (CSS) rule in an HTML document, possibly related to the Embedded OpenType (EOT) Font Engine, a different vulnerability than CVE-2006-0010, CVE-2009-0231, and CVE-2009-0232.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.1 (HIGH)
References: http://milw0rm.com/sploits/2009-wwbsod.zip; http://secunia.com/advisories/36250; http://www.exploit-db.com/exploits/9417
CVE: CVE-2009-2944
Published: 2009-08-31
Description: Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.
CVSS Score: 5.0 (MEDIUM)
References: http://ikiwiki.info/security/#index35h2; http://osvdb.org/57575; http://secunia.com/advisories/36516
CVE: CVE-2009-3021
Published: 2009-08-31
Description: Cross-site scripting (XSS) vulnerability in Site Calendar 'mycaljp' plugin 2.0.0 through 2.0.6, as used in the Japanese extended package of Geeklog 1.5.0 through 1.5.2 and when distributed 20090629 or earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN20478978/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000055.html; http://secunia.com/advisories/36404
CVE: CVE-2009-3022
Published: 2009-08-31
Description: Cross-site request forgery (CSRF) vulnerability in bingo!CMS 1.2 and earlier allows remote attackers to hijack the authentication of other users for requests that modify configuration or change content via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: http://jvn.jp/en/jp/JVN68640473/index.html; http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-000058.html; http://osvdb.org/57425
CVE: CVE-2009-3023
Published: 2009-08-31
Description: Buffer overflow in the FTP Service in Microsoft Internet Information Services (IIS) 5.0 through 6.0 allows remote authenticated users to execute arbitrary code via a crafted NLST (NAME LIST) command that uses wildcards, leading to memory corruption, aka "IIS FTP Service RCE and DoS Vulnerability."
CVSS Score: 9.0 (HIGH)
CWE: CWE-120
References: http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ975191; http://www.exploit-db.com/exploits/9541; http://www.exploit-db.com/exploits/9559
CVE: CVE-2009-3024
Published: 2009-08-31
Description: The verify_hostname_of_cert function in the certificate checking feature in IO-Socket-SSL (IO::Socket::SSL) 1.14 through 1.25 only matches the prefix of a hostname when no wildcard is used, which allows remote attackers to bypass the hostname check for a certificate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://cpansearch.perl.org/src/SULLR/IO-Socket-SSL-1.30/Changes; http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html; http://secunia.com/advisories/42893
CVE: CVE-2009-3025
Published: 2009-08-31
Description: Unspecified vulnerability in Pidgin 2.6.0 allows remote attackers to cause a denial of service (crash) via a link in a Yahoo IM.
CVSS Score: 4.3 (MEDIUM)
References: http://developer.pidgin.im/wiki/ChangeLog; http://www.openwall.com/lists/oss-security/2009/08/19/2; https://exchange.xforce.ibmcloud.com/vulnerabilities/52994
CVE: CVE-2009-3026
Published: 2009-08-31
Description: protocols/jabber/auth.c in libpurple in Pidgin 2.6.0, and possibly other versions, does not follow the "require TLS/SSL" preference when connecting to older Jabber servers that do not follow the XMPP specification, which causes libpurple to connect to the server without the expected encryption and allows remote attackers to sniff sessions.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=542891; http://developer.pidgin.im/ticket/8131; http://developer.pidgin.im/viewmtn/revision/diff/312e056d702d29379ea61aea9d27765f127bc888/with/55897c4ce0787edc1e7721b7f4a9b5cbc8357279
CVE: CVE-2008-7132
Published: 2009-09-01
Description: Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrary web script or HTML via the nuked_nude parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28527.html; http://www.securityfocus.com/bid/28527; https://exchange.xforce.ibmcloud.com/vulnerabilities/41591
CVE: CVE-2008-7133
Published: 2009-09-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in onlinetools.org EasyImageCatalogue 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search and (2) d index.php parameters to index.php, (3) dir parameter to thumber.php, and the d parameter to (4) describe.php and (5) addcomment.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28164.html; http://www.securityfocus.com/bid/28164; https://exchange.xforce.ibmcloud.com/vulnerabilities/41187
CVE: CVE-2008-7134
Published: 2009-09-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in the default URI in Chris LaPointe RedGalaxy Download Center 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter, (2) message parameter in a login action, (3) category parameter in a browse action, (4) now parameter, or (5) search parameter in a search_results action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://download.redgalaxy.net/?nav=home; http://www.securityfocus.com/bid/28219; https://exchange.xforce.ibmcloud.com/vulnerabilities/41198
CVE: CVE-2008-7135
Published: 2009-09-01
Description: toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the IsChecked method, a different vector than CVE-2008-7136.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securiteam.com/exploits/5WP0115NPU.html; http://www.securityfocus.com/bid/28086; https://exchange.xforce.ibmcloud.com/vulnerabilities/41014
CVE: CVE-2008-7136
Published: 2009-09-01
Description: toolbaru.dll in ICQ Toolbar (ICQToolbar) 2.3 allows remote attackers to cause a denial of service (toolbar crash) via a long argument to the (1) RequestURL, (2) GetPropertyById, or (3) SetPropertyById method, different vectors than CVE-2008-7135.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://www.securiteam.com/exploits/5WP0115NPU.html; http://www.securityfocus.com/bid/28118; https://www.exploit-db.com/exploits/5217
CVE: CVE-2008-7137
Published: 2009-09-01
Description: WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/42720; http://secunia.com/advisories/29221; http://www.informit.com/articles/article.aspx?p=1177111&seqNum=3
CVE: CVE-2008-7138
Published: 2009-09-01
Description: The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://osvdb.org/42719; http://secunia.com/advisories/29221; http://www.informit.com/articles/article.aspx?p=1177111&seqNum=2
CVE: CVE-2008-7139
Published: 2009-09-01
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for file upload, or (3) urn:SetFolderConfig for file download location or modification of authentication credentials; and (4) urn:AddNetwork for adding an arbitrary Service Set Identifier (SSID) to hijack the image upload.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/42718; http://secunia.com/advisories/29221; http://www.informit.com/articles/article.aspx?p=1177111
CVE: CVE-2008-7140
Published: 2009-09-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in @lex Guestbook 4.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) language_setup parameter to setup.php or (2) test parameter to index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: a third party has been reported that the test parameter is not used in @lex Guestbook.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28519.html; http://www.juniper.net/security/auto/vulnerabilities/vuln28519.html; http://www.securityfocus.com/bid/28519
CVE: CVE-2008-7141
Published: 2009-09-01
Description: Cross-site scripting (XSS) vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the language_setup parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28520.html; http://www.securityfocus.com/bid/28520; https://exchange.xforce.ibmcloud.com/vulnerabilities/41564
CVE: CVE-2008-7142
Published: 2009-09-01
Description: Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/51582; http://www.securityfocus.com/archive/1/489747/100/0/threaded; http://www.securityfocus.com/bid/28300
CVE: CVE-2008-7143
Published: 2009-09-01
Description: phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/51121; http://www.securityfocus.com/archive/1/489815/100/0/threaded; http://osvdb.org/51121
CVE: CVE-2008-7144
Published: 2009-09-01
Description: Multiple unspecified vulnerabilities in RARLAB WinRAR before 3.71 have unknown impact and attack vectors related to crafted (1) ACE, (2) ARJ, (3) BZ2, (4) CAB, (5) GZ, (6) LHA, (7) RAR, (8) TAR, or (9) ZIP files, as demonstrated by the OUSPG PROTOS GENOME test suite for Archive Formats.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/43439; http://secunia.com/advisories/29407; http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
CVE: CVE-2008-7145
Published: 2009-09-01
Description: Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/51050; http://www.securityfocus.com/archive/1/490097/100/0/threaded; http://www.securityfocus.com/bid/28456
CVE: CVE-2008-7146
Published: 2009-09-01
Description: IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allows remote attackers to obtain sensitive information via a direct request to (1) Knowledge_Impact_Course.htm, (2) LRN-formatted_Course.htm, or (3) Create_Course.htm in help/1/Instructor/, which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/42991; http://osvdb.org/42992; http://osvdb.org/42993
CVE: CVE-2008-7147
Published: 2009-09-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the (1) outline and (2) course parameters to library/description_link.cfm, or the (3) records_to_display and (4) the_start parameters to library/courses_catalog.cfm.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/42988; http://osvdb.org/42989; http://osvdb.org/ref/42/intralearn-21-multiple.txt
CVE: CVE-2008-7148
Published: 2009-09-01
Description: Unspecified vulnerability in Synfig Animation Studio before 0.61.08 allows attackers to execute arbitrary code via a crafted .sif file.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/48854; http://synfig.org/Releases/0.61.08; http://osvdb.org/48854
CVE: CVE-2008-7149
Published: 2009-09-01
Description: Unspecified vulnerability in AgileWiki before 0.10.1 has unknown impact and attack vectors related to passwords.
CVSS Score: 10.0 (HIGH)
References: http://freshmeat.net/projects/agilewiki/releases/273210; http://osvdb.org/43171; http://freshmeat.net/projects/agilewiki/releases/273210
CVE: CVE-2008-7150
Published: 2009-09-01
Description: Cross-site scripting (XSS) vulnerability in Refine by Taxonomy 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via a taxonomy term, which is not properly handled by refine_by_taxo when displaying tags.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/230460; http://drupal.org/node/230470; https://exchange.xforce.ibmcloud.com/vulnerabilities/41035
CVE: CVE-2008-7151
Published: 2009-09-01
Description: Cross-site request forgery (CSRF) vulnerability in Live 5.x before 5.x-0.1, a module for Drupal, allows remote attackers to hijack the authentication of unspecified privileged users for requests that can be leveraged to execute arbitrary PHP code.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://drupal.org/node/236607; http://drupal.org/node/236609; https://exchange.xforce.ibmcloud.com/vulnerabilities/41754
CVE: CVE-2008-7152
Published: 2009-09-01
Description: Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database (SID), when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to (1) client.php or (2) taxonservice.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/28142; http://www.securityfocus.com/bid/28142/exploit; https://exchange.xforce.ibmcloud.com/vulnerabilities/41097
CVE: CVE-2009-3037
Published: 2009-09-01
Description: Buffer overflow in xlssr.dll in the Autonomy KeyView XLS viewer (aka File Viewer for Excel), as used in IBM Lotus Notes 5.x through 8.5.x, Symantec Mail Security, Symantec BrightMail Appliance, Symantec Data Loss Prevention (DLP), and other products, allows remote attackers to execute arbitrary code via a crafted .xls spreadsheet attachment.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/36472; http://secunia.com/advisories/36474; http://www-01.ibm.com/support/docview.wss?uid=swg21396492
CVE: CVE-2009-3038
Published: 2009-09-01
Description: A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the control's CLSID in the classid attribute of an OBJECT element.
CVSS Score: 4.3 (MEDIUM)
References: http://www.exploit-db.com/exploits/9517; http://www.exploit-db.com/exploits/9517
CVE: CVE-2009-3040
Published: 2009-09-01
Description: Multiple SQL injection vulnerabilities in Open Computer and Software (OCS) Inventory NG 1.02 for Unix allow remote attackers to execute arbitrary SQL commands via the (1) N, (2) DL, (3) O and (4) V parameters to download.php and the (5) SYSTEMID parameter to group_show.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_sql_injection.shtml; http://www.ocsinventory-ng.org/index.php?mact=News%2Ccntnt01%2Cdetail%2C0&cntnt01articleid=140&cntnt01returnid=72; http://www.securityfocus.com/archive/1/503936/100/0/threaded
CVE: CVE-2009-3041
Published: 2009-09-01
Description: SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://fil.rezo.net/secu-14346-14350+14354.patch; http://secunia.com/advisories/36365; http://www.securityfocus.com/bid/36008
CVE: CVE-2009-3042
Published: 2009-09-01
Description: SQL injection vulnerability in machine.php in Open Computer and Software (OCS) Inventory NG 1.02.1 allows remote attackers to execute arbitrary SQL commands via the systemid parameter, a different vector than CVE-2009-3040.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://seclists.org/fulldisclosure/2009/Aug/0143.html; http://secunia.com/advisories/35311; http://www.exploit-db.com/exploits/9416
CVE: CVE-2009-2957
Published: 2009-09-02
Description: Heap-based buffer overflow in the tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, might allow remote attackers to execute arbitrary code via a long filename in a TFTP packet, as demonstrated by a read (aka RRQ) request.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://secunia.com/advisories/36563; http://www.coresecurity.com/content/dnsmasq-vulnerabilities; http://www.redhat.com/support/errata/RHSA-2009-1238.html
CVE: CVE-2009-2958
Published: 2009-09-02
Description: The tftp_request function in tftp.c in dnsmasq before 2.50, when --enable-tftp is used, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a TFTP read (aka RRQ) request with a malformed blksize option.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/36563; http://www.coresecurity.com/content/dnsmasq-vulnerabilities; http://www.redhat.com/support/errata/RHSA-2009-1238.html
CVE: CVE-2008-7153
Published: 2009-09-02
Description: SQL injection vulnerability in the autoDetectRegion function in doceboCore/lib/lib.regset.php in Docebo 3.5.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Accept-Language HTTP header.  NOTE: this can be leveraged to execute arbitrary PHP code using the INTO DUMPFILE command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/40138; http://secunia.com/advisories/28378; http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html
CVE: CVE-2008-7154
Published: 2009-09-02
Description: Docebo 3.5.0.3 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) class/class.conf_fw.php, (2) class.module/class.event_manager.php, (3) lib/lib.domxml5.php, or (4) menu/menu_over.php in doceboCore/; or (5) class/class.conf_cms.php, (6) lib/lib.compose.php, (7) modules/chat/teleskill.php, or (8) class/class.admin_menu_cms.php in doceboCms/; which reveals the installation path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.docebo.org/doceboCms/bugtracker/18_124/bugdetails/appid_24-bugid_198/bugtracker.html; http://www.securityfocus.com/bid/27211; https://www.exploit-db.com/exploits/4879
CVE: CVE-2008-7155
Published: 2009-09-02
Description: NetRisk 1.9.7 does not properly restrict access to admin/change_submit.php, which allows remote attackers to change the password of arbitrary users via a direct request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://downloads.securityfocus.com/vulnerabilities/exploits/27150.pl; http://www.securityfocus.com/bid/27150; https://exchange.xforce.ibmcloud.com/vulnerabilities/39465
CVE: CVE-2008-7156
Published: 2009-09-02
Description: EkinBoard 1.1.0 and earlier, when register_globals is enabled, allows remote attackers to bypass authorization and gain administrator privileges by setting the _groups[] parameter to 2, as demonstrated via backup.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287
References: http://www.securityfocus.com/bid/27166; https://exchange.xforce.ibmcloud.com/vulnerabilities/39512; https://www.exploit-db.com/exploits/4859
CVE: CVE-2008-7157
Published: 2009-09-02
Description: Unrestricted file upload vulnerability in EkinBoard 1.1.0 and earlier allows remote attackers to execute arbitrary code by uploading an avatar file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in uploaded/avatars/.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/27166; https://exchange.xforce.ibmcloud.com/vulnerabilities/39507; https://www.exploit-db.com/exploits/4859
CVE: CVE-2008-7158
Published: 2009-09-02
Description: Numara FootPrints 7.5a through 7.5a1 and 8.0 through 8.0a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) transcriptFile parameter to MRcgi/MRchat.pl or (2) LOADFILE parameter to MRcgi/MRABLoad2.pl.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
CWE: CWE-78
References: http://osvdb.org/42813; http://osvdb.org/42816; http://secunia.com/advisories/28390
CVE: CVE-2009-0200
Published: 2009-09-02
Description: Integer underflow in OpenOffice.org (OOo) before 3.1.1 and StarOffice/StarSuite 7, 8, and 9 might allow remote attackers to execute arbitrary code via crafted records in the document table of a Word document, leading to a heap-based buffer overflow.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://development.openoffice.org/releases/3.1.1.html; http://lists.opensuse.org/opensuse-security-announce/2009-09/msg00001.html; http://secunia.com/advisories/35036