deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2011-4896
Published: 2011-12-23
Description: Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://blog.torproject.org/blog/tor-02224-alpha-out; https://blog.torproject.org/blog/tor-02224-alpha-out
CVE: CVE-2011-4897
Published: 2011-12-23
Description: Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://blog.torproject.org/blog/tor-02225-alpha-out; https://blog.torproject.org/blog/tor-02225-alpha-out
CVE: CVE-2011-1388
Published: 2011-12-23
Description: The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the TestCompatibilityRecordMode method, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/47286; http://secunia.com/advisories/47310; http://www-01.ibm.com/support/docview.wss?uid=swg21576352
CVE: CVE-2011-1391
Published: 2011-12-23
Description: The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the InsertMarker method, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/47286; http://secunia.com/advisories/47310; http://www-01.ibm.com/support/docview.wss?uid=swg21576352
CVE: CVE-2011-1392
Published: 2011-12-23
Description: The Blueberry FlashBack ActiveX control in BB FlashBack Recorder.dll in Blueberry BB FlashBack, as used in IBM Rational Rhapsody before 7.6.1 and other products, does not properly implement the (1) Start, (2) PauseAndSave, (3) InsertMarker, and (4) InsertSoundToFBRAtMarker methods, which allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/47286; http://secunia.com/advisories/47310; http://www-01.ibm.com/support/docview.wss?uid=swg21576352
CVE: CVE-2011-4596
Published: 2011-12-23
Description: Multiple directory traversal vulnerabilities in OpenStack Nova before 2011.3.1, when the EC2 API and the S3/RegisterImage image-registration method are enabled, allow remote authenticated users to overwrite arbitrary files via a crafted (1) tarball or (2) manifest.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-22
References: https://bugs.launchpad.net/nova/+bug/885167; https://bugs.launchpad.net/nova/+bug/894755; https://github.com/openstack/nova/commit/76363226bd8533256f7795bba358d7f4b8a6c9e6
CVE: CVE-2011-3372
Published: 2011-12-24
Description: imap/nntpd.c in the NNTP server (nntpd) for Cyrus IMAPd 2.4.x before 2.4.12 allows remote attackers to bypass authentication by sending an AUTHINFO USER command without sending an additional AUTHINFO PASS command.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://cyrusimap.org/mediawiki/index.php/Latest_Updates; http://git.cyrusimap.org/cyrus-imapd/commit/?id=77903669e04c[PII_REDACTED]dd0560b9c916519594; http://secunia.com/advisories/46093
CVE: CVE-2011-3378
Published: 2011-12-24
Description: RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are not properly handled when a package is queried or installed, related to (1) the regionSwab function, (2) the headerLoad function, and (3) multiple functions in rpmio/rpmpgp.c.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html; http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html
CVE: CVE-2011-3835
Published: 2011-12-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to (1) admin/login.php and (2) admin/404.php; the (3) q parameter to search.php; the (4) theme_name parameter to theme_settings.php, (5) extension_name parameter to extension_settings.php, (6) q parameter to search.php, (7) type parameter to comments.php, sort parameter to (8) pages.php and (9) posts.php, and the (10) type and (11) q parameter to media.php in admin/; the sidebar parameter to (12) add_widget.php and (13) widgets.php, id parameter to (14) category_delete.php, (15) comment.php, (16) page_delete.php, and (17) post_delete.php, (18) type parameter to media.php, and (19) id and (20) sidebar parameter to widget_delete.php in mobile/; and the (21) name, (22) email, (23) website, and (24) comment parameters to index.php; and the (25) username parameter to admin/login.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/77914; http://osvdb.org/77920; http://osvdb.org/77921
CVE: CVE-2011-3836
Published: 2011-12-24
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator, (2) perform cross-site scripting (XSS), (3) perform SQL injection, or have other unspecified impact via unknown vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/77911; http://secunia.com/advisories/46163; http://secunia.com/secunia_research/2011-85/
CVE: CVE-2011-3837
Published: 2011-12-24
Description: Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the preview parameter to index.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/77912; http://secunia.com/advisories/46163; http://secunia.com/secunia_research/2011-87/
CVE: CVE-2011-3838
Published: 2011-12-24
Description: Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to fp.php, (2) epage parameter to newpage.php, (3) epost parameter to newpost.php, and (4) username parameter to login.php in admin/; or the (5) username parameter to mobile/login.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/77915; http://osvdb.org/77916; http://osvdb.org/77917
CVE: CVE-2011-3839
Published: 2011-12-24
Description: The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hbWU cookie.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/77913; http://secunia.com/advisories/46163; http://secunia.com/secunia_research/2011-89/
CVE: CVE-2011-4362
Published: 2011-12-24
Description: Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 and 1.5 before SVN revision 2806 allows remote attackers to cause a denial of service (segmentation fault) via crafted base64 input that triggers an out-of-bounds read with a negative index.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0167.html; http://blog.pi3.com.pl/?p=277; http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2011_01.txt
CVE: CVE-2009-5109
Published: 2011-12-25
Description: Stack-based buffer overflow in Mini-Stream Ripper 3.0.1.1 allows remote attackers to execute arbitrary code via a long entry in a .pls file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/10745; http://www.exploit-db.com/exploits/10747; http://www.exploit-db.com/exploits/10782
CVE: CVE-2010-5081
Published: 2011-12-25
Description: Stack-based buffer overflow in Mini-Stream RM-MP3 Converter 3.1.2.1 allows remote attackers to execute arbitrary code via a long URL in a .pls file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/14373; http://www.exploit-db.com/exploits/18113; http://www.exploit-db.com/exploits/14373
CVE: CVE-2011-4601
Published: 2011-12-25
Description: family_feedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service (application crash) via a crafted (1) AIM or (2) ICQ message associated with buddy-list addition.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://developer.pidgin.im/viewmtn/revision/diff/bc79b1bf09dcfa1d8edac86a06761fce7416e69c/with/757272a78a8ca6027d518e614712c3399e34dda3/libpurple/protocols/oscar/family_feedbag.c; http://developer.pidgin.im/viewmtn/revision/info/757272a78a8ca6027d518e614712c3399e34dda3; http://pidgin.im/news/security/?id=57
CVE: CVE-2011-4862
Published: 2011-12-25
Description: Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3 through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl) 1.0.2 and earlier, Heimdal 1.5.1 and earlier, GNU inetutils, and possibly other products allows remote attackers to execute arbitrary code via a long encryption key, as exploited in the wild in December 2011.
CVSS Score: 10.0 (HIGH)
CWE: CWE-120
References: http://archives.neohapsis.com/archives/bugtraq/2011-12/0172.html; http://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=665f1e73cdd9b38e2d2e11b8db9958a315935592; http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071627.html
CVE: CVE-2011-5001
Published: 2011-12-25
Description: Stack-based buffer overflow in the CGenericScheduler::AddTask function in cmdHandlerRedAlertController.dll in CmdProcessor.exe in Trend Micro Control Manager 5.5 before Build 1613 allows remote attackers to execute arbitrary code via a crafted IPC packet to TCP port 20101.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/47114; http://www.securityfocus.com/archive/1/520780/100/0/threaded; http://www.securitytracker.com/id?1026390
CVE: CVE-2011-5002
Published: 2011-12-25
Description: Multiple stack-based buffer overflows in Final Draft 8 before 8.02 allow remote attackers to execute arbitrary code via a .fdx or .fdxt file with long (1) Word, (2) Transition, (3) Location, (4) Extension, (5) SceneIntro, (6) TimeOfDay, and (7) Character elements.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://osvdb.org/77454; http://secunia.com/advisories/47044; http://www.exploit-db.com/exploits/18184
CVE: CVE-2011-5003
Published: 2011-12-25
Description: Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/47047; http://www.exploit-db.com/exploits/18183; http://www.osvdb.org/77376
CVE: CVE-2011-5004
Published: 2011-12-25
Description: Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 6.0 (MEDIUM)
References: http://secunia.com/advisories/47036; http://www.ohloh.net/p/3417/commits/145749116; http://www.osvdb.org/77371
CVE: CVE-2011-5005
Published: 2011-12-25
Description: Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.
CVSS Score: 7.5 (HIGH)
References: http://www.exploit-db.com/exploits/18118; https://exchange.xforce.ibmcloud.com/vulnerabilities/71323; http://www.exploit-db.com/exploits/18118
CVE: CVE-2011-5006
Published: 2011-12-25
Description: Stack-based buffer overflow in QQPlayer 3.2.845 allows remote attackers to execute arbitrary code via a crafted PnSize value in a MOV file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/46924; http://www.exploit-db.com/exploits/18137; http://www.osvdb.org/77266
CVE: CVE-2011-5007
Published: 2011-12-25
Description: Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibly other products, allows remote attackers to execute arbitrary code via a long URI to TCP port 8080.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/codesys_1-adv.txt; http://ics-cert.us-cert.gov/advisories/ICSA-12-320-01; http://osvdb.org/77387
CVE: CVE-2011-5008
Published: 2011-12-25
Description: Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/codesys_1-adv.txt; http://seclists.org/bugtraq/2011/Nov/178; http://secunia.com/advisories/47018
CVE: CVE-2011-5009
Published: 2011-12-25
Description: The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.
CVSS Score: 5.0 (MEDIUM)
References: http://aluigi.altervista.org/adv/codesys_1-adv.txt; http://seclists.org/bugtraq/2011/Nov/178; http://secunia.com/advisories/47018
CVE: CVE-2011-5010
Published: 2011-12-25
Description: apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://dev.metasploit.com/redmine/issues/5610; http://osvdb.org/77497; http://secunia.com/advisories/47003
CVE: CVE-2011-5011
Published: 2011-12-25
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack the authentication of Admins for requests that (1) set a New user to Admin via the cID parameter to a statusconfirm action in admin/customers.php and (2) grant permissions to users via the cID parameter to a save action in admin/accounting.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://dishix.blogspot.com/2011/11/exploiting-xtcommerce-v304-sp21-cross.html; http://dishix.blogspot.com/p/xtcommerce-v304-sp21-cross-site-request_29.html; http://osvdb.org/77498
CVE: CVE-2011-5012
Published: 2011-12-25
Description: Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/46879; http://support.attachmate.com/techdocs/1708.html; http://support.attachmate.com/techdocs/2288.html
CVE: CVE-2011-4050
Published: 2011-12-27
Description: Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.osvdb.org/77976; http://www.us-cert.gov/control_systems/pdf/ICSA-11-335-01.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/71915
CVE: CVE-2011-4166
Published: 2011-12-27
Description: Directory traversal vulnerability in the MPAUploader.Uploader.1.UploadFiles method in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469; http://www.zerodayinitiative.com/advisories/ZDI-11-352/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE: CVE-2011-4167
Published: 2011-12-27
Description: Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469; http://www.zerodayinitiative.com/advisories/ZDI-11-353/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE: CVE-2011-4168
Published: 2011-12-27
Description: Directory traversal vulnerability in hpmpa/jobDelivery/Default.asp in HP Managed Printing Administration before 2.6.4 allows remote attackers to create arbitrary files via crafted form data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469; http://www.zerodayinitiative.com/advisories/ZDI-11-354/; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE: CVE-2011-4169
Published: 2011-12-27
Description: Unspecified vulnerability in HP Managed Printing Administration before 2.6.4 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469; http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03128469
CVE: CVE-2011-4536
Published: 2011-12-27
Description: Heap-based buffer overflow in nettransdll.dll in HistorySvr.exe (aka HistoryServer.exe) in WellinTech KingView 6.53 and 65.30.2010.18018 allows remote attackers to execute arbitrary code via a crafted op-code 3 packet.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://en.wellintech.com/news/detail.aspx?contentid=166; http://secunia.com/advisories/47339; http://www.kingview.com/news/detail.aspx?contentid=587
CVE: CVE-2011-4537
Published: 2011-12-27
Description: Multiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port (1) 12397 or (2) 12399.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://www.osvdb.org/77977; http://www.us-cert.gov/control_systems/pdf/ICSA-11-355-01-7.pdf; https://exchange.xforce.ibmcloud.com/vulnerabilities/71931
CVE: CVE-2011-4784
Published: 2011-12-27
Description: The NVIDIA Stereoscopic 3D driver before 7.17.12.7565 does not properly handle commands sent to a named pipe, which allows local users to gain privileges via a crafted application.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://secunia.com/advisories/47324; http://technet.microsoft.com/en-us/security/msvr/msvr11-016; http://www.osvdb.org/77974
CVE: CVE-2011-1393
Published: 2011-12-27
Description: Unspecified vulnerability in the authentication functionality in the server in IBM Lotus Domino 8.x before 8.5.2 FP4 allows remote attackers to cause a denial of service (daemon crash) via a crafted Notes RPC packet.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/47331; http://www.ibm.com/support/docview.wss?uid=swg21575247; http://www.osvdb.org/77990
CVE: CVE-2011-3841
Published: 2011-12-27
Description: Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows remote attackers to inject arbitrary web script or HTML via the uid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/47243; http://secunia.com/secunia_research/2011-82/; http://www.securityfocus.com/bid/51017
CVE: CVE-2011-4783
Published: 2011-12-27
Description: The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.
CVSS Score: 9.3 (HIGH)
CWE: CWE-20
References: http://code.google.com/p/idapython/downloads/detail?name=idapython-1.5.2.3_ida6.1_py2.6_win32.zip; http://code.google.com/p/idapython/source/detail?r=361; http://secunia.com/advisories/47295
CVE: CVE-2007-6750
Published: 2011-12-27
Description: The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris, related to the lack of the mod_reqtimeout module in versions before 2.2.15.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://archives.neohapsis.com/archives/bugtraq/2007-01/0229.html; http://ha.ckers.org/slowloris/; http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00026.html
CVE: CVE-2009-5110
Published: 2011-12-27
Description: dhttpd allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://ha.ckers.org/slowloris/; http://ha.ckers.org/slowloris/
CVE: CVE-2009-5111
Published: 2011-12-27
Description: GoAhead WebServer allows remote attackers to cause a denial of service (daemon outage) via partial HTTP requests, as demonstrated by Slowloris.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://ha.ckers.org/slowloris/; http://ha.ckers.org/slowloris/
CVE: CVE-2011-5021
Published: 2011-12-29
Description: PHPIDS before 0.7 does not properly implement Regular Expression Denial of Service (ReDoS) filters, which allows remote attackers to bypass rulesets and add PHP sequences to a file via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: https://sitewat.ch/Advisory/View/7; https://sitewat.ch/Advisory/View/7
CVE: CVE-2011-5026
Published: 2011-12-29
Description: Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://code.google.com/p/winn-guestbook/issues/detail?id=34; http://osvdb.org/78070; http://secunia.com/advisories/47391
CVE: CVE-2011-5022
Published: 2011-12-29
Description: SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote attackers to execute arbitrary SQL commands via the status parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/search.php?r1=2255&r2=2254&pathrev=2255; https://sitewat.ch/Advisory/View/5; http://pligg.svn.sourceforge.net/viewvc/pligg/trunk/search.php?r1=2255&r2=2254&pathrev=2255
CVE: CVE-2011-5023
Published: 2011-12-29
Description: Cross-site scripting (XSS) vulnerability in Pligg CMS 1.1.4 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the search program, a different vulnerability than CVE-2011-3986.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pligg.svn.sourceforge.net/viewvc/pligg?view=revision&revision=2257; http://www.securityfocus.com/bid/51274; https://sitewat.ch/Advisory/View/6