deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1088
Published: 2009-03-25
Description: Hannon Hill Cascade Server 5.7 and other versions allows remote authenticated users to execute arbitrary programs or Java code via a crafted XSLT stylesheet with "extension elements and extension functions" that trigger code execution by Xalan-Java, as demonstrated using xalan://java.lang.Runtime.
CVSS Score: 9.0 (HIGH)
CWE: CWE-94
References: http://support.hannonhill.com/browse/CSCD-4753; http://www.securityfocus.com/archive/1/501981/100/0/threaded; http://www.securityfocus.com/bid/34186
CVE: CVE-2009-1089
Published: 2009-03-25
Description: Absolute path traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to read arbitrary files via a base64-encoded absolute path in the filename parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/34300; http://security.bkis.vn/?p=345; http://www.securityfocus.com/archive/1/501854/100/0/threaded
CVE: CVE-2009-1090
Published: 2009-03-25
Description: Directory traversal vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the uploaded parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/52753; http://secunia.com/advisories/34300; http://security.bkis.vn/?p=345
CVE: CVE-2009-1091
Published: 2009-03-25
Description: Cross-site scripting (XSS) vulnerability in upload.php in Rapidleech rev.36 and earlier allows remote attackers to inject arbitrary web script or HTML via the uploaded parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/52754; http://secunia.com/advisories/34300; http://security.bkis.vn/?p=345
CVE: CVE-2009-1092
Published: 2009-03-25
Description: Use-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0 for GeoVision DVR systems allows remote attackers to execute arbitrary code by calling the GetAudioPlayingTime method with certain arguments.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://retrogod.altervista.org/9sg_geovision_liveaudio_freedmem.html; http://www.securityfocus.com/archive/1/501773/100/0/threaded; http://www.securityfocus.com/bid/34115
CVE: CVE-2009-0784
Published: 2009-03-25
Description: Race condition in the SystemTap stap tool 0.0.20080705 and 0.0.20090314 allows local users in the stapusr group to insert arbitrary SystemTap kernel modules and gain privileges via unknown vectors.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-362
References: http://secunia.com/advisories/34441; http://secunia.com/advisories/34479; http://secunia.com/advisories/34548
CVE: CVE-2009-1093
Published: 2009-03-25
Description: LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier does not close the connection when initialization fails, which allows remote attackers to cause a denial of service (LDAP service hang).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-16
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1094
Published: 2009-03-25
Description: Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and earlier; and 1.4.2_19 and earlier allows remote LDAP servers to execute arbitrary code via unknown vectors related to serialized data.
CVSS Score: 10.0 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1095
Published: 2009-03-25
Description: Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-189
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=781; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html
CVE: CVE-2009-1096
Published: 2009-03-25
Description: Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1097
Published: 2009-03-25
Description: Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for display on the splash screen, aka CR 6804996; and (2) a crafted GIF image from which unspecified values are used in calculation of offsets, leading to object-pointer corruption, aka CR 6804997.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=779; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=780
CVE: CVE-2009-1098
Published: 2009-03-25
Description: Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1099
Published: 2009-03-25
Description: Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via crafted glyph descriptions in a Type1 font, which bypasses a signed comparison and triggers a buffer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-189
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=777; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html
CVE: CVE-2009-1100
Published: 2009-03-25
Description: Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote attackers to cause a denial of service (disk consumption) via vectors related to temporary font files and (1) "limits on Font creation," aka CR 6522586, and (2) another unspecified vector, aka CR 6632886.
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1101
Published: 2009-03-25
Description: Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to cause a denial of service (probably resource consumption) for a JAX-WS service endpoint via a connection without any data, which triggers a file descriptor "leak."
CVSS Score: 5.0 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1102
Published: 2009-03-25
Description: Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-94
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00003.html
CVE: CVE-2009-1103
Published: 2009-03-25
Description: Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "deserializing applets," aka CR 6646860.
CVSS Score: 6.4 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
CVE: CVE-2009-1104
Published: 2009-03-25
Description: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331.  NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-16
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
CVE: CVE-2009-1105
Published: 2009-03-25
Description: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.
CVSS Score: 7.5 (HIGH)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.apple.com/archives/security-announce/2010//May/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html
CVE: CVE-2009-1106
Published: 2009-03-25
Description: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unknown vectors, aka CR 6798948.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00001.html
CVE: CVE-2009-1107
Published: 2009-03-25
Description: The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
CVSS Score: 4.3 (MEDIUM)
References: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01745133; http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00001.html; http://lists.opensuse.org/opensuse-security-announce/2009-06/msg00003.html
CVE: CVE-2009-0364
Published: 2009-03-26
Description: Format string vulnerability in the mini_calendar component in Citadel.org WebCit 7.22, and other versions before 7.39, allows remote attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://osvdb.org/52915; http://secunia.com/advisories/34457; http://www.citadel.org/doku.php/news:webcit.security.advisory.-.2009-march-23
CVE: CVE-2009-1041
Published: 2009-03-26
Description: The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc; http://www.securityfocus.com/bid/34196; http://www.securitytracker.com/id?1021882
CVE: CVE-2009-1063
Published: 2009-03-26
Description: Buffer overflow in eXeScope 6.50 allows user-assisted remote attackers to execute arbitrary code via a crafted executable (.exe) file.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-119
References: http://osvdb.org/52868; http://secunia.com/advisories/34413; http://www.securityfocus.com/bid/34219
CVE: CVE-2009-1064
Published: 2009-03-26
Description: Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-94
References: http://www.securityfocus.com/bid/34200; http://www.waraxe.us/advisory-73.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/49353
CVE: CVE-2009-1065
Published: 2009-03-26
Description: SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/52834; http://secunia.com/advisories/34364; https://exchange.xforce.ibmcloud.com/vulnerabilities/49334
CVE: CVE-2009-1066
Published: 2009-03-26
Description: SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html; http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities; http://osvdb.org/52833
CVE: CVE-2009-1067
Published: 2009-03-26
Description: Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html; http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities; http://osvdb.org/52832
CVE: CVE-2009-1068
Published: 2009-03-26
Description: Stack-based buffer overflow in BS.Player (bsplayer) 2.32 Build 975 Free and 2.34 Build 980 PRO and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long hostname in a .bsl playlist file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/52841; http://retrogod.altervista.org/9sg_bsplayer_seh.html; http://secunia.com/advisories/34412
CVE: CVE-2009-1069
Published: 2009-03-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in the node edit form feature in Drupal Content Construction Kit (CCK) 6.x before 6.x-2.2, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) titles of candidate referenced nodes in the Node reference sub-module and the (2) names of candidate referenced users in the User reference sub-module.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://drupal.org/node/406520; http://osvdb.org/52783; http://osvdb.org/52784
CVE: CVE-2009-1070
Published: 2009-03-26
Description: Cross-site scripting (XSS) vulnerability in system/index.php in ExpressionEngine 1.6.4 through 1.6.6, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the avatar parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://expressionengine.com/docs/changelog.html#v167; http://secunia.com/advisories/34379; http://www.ngenuity.org/wordpress/2009/01/28/ngenuity-2009-003-expressionengine-persistent-cross-site-scripting/
CVE: CVE-2009-1071
Published: 2009-03-26
Description: Stack-based buffer overflow in Icarus 2.0 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a crafted Portable Game Notation (.pgn) file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/52780; http://secunia.com/advisories/34368; http://www.securityfocus.com/bid/34167
CVE: CVE-2008-0004
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2008-1378
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2360, CVE-2008-2361, CVE-2008-2362.  Reason: This candidate has been withdrawn by its CNA.  It was SPLIT into separate candidates before publication.  Notes: All CVE users should reference CVE-2008-2360, CVE-2008-2361, and CVE-2008-2362 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-1674
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2008-2373
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2863.  Reason: This candidate is a reservation duplicate of CVE-2008-2863.  Notes: All CVE users should reference CVE-2008-2863 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-2804
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-2800.  Reason: This candidate is a reservation duplicate of CVE-2008-2800.  Notes: All CVE users should reference CVE-2008-2800 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-3284
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3283.  Reason: This candidate is a reservation duplicate of CVE-2008-3283.  Notes: All CVE users should reference CVE-2008-3283 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-3517
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3522.  Reason: This candidate is a reservation duplicate of CVE-2008-3522.  Notes: All CVE users should reference CVE-2008-3522 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-3518
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-3283.  Reason: This candidate is a reservation duplicate of CVE-2008-3283.  Notes: All CVE users should reference CVE-2008-3283 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-4317
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-5019.  Reason: This candidate is a reservation duplicate of CVE-2008-5019.  Notes: All CVE users should reference CVE-2008-5019 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2008-5020
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2008-0017.  Reason: This candidate is a reservation duplicate of CVE-2008-0017.  Notes: All CVE users should reference CVE-2008-0017 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2009-0589
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2009-0782
Published: 2009-03-26
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2008-6528
Published: 2009-03-26
Description: NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://secunia.com/advisories/33123; http://www.securityfocus.com/archive/1/499235/100/0/threaded; http://www.securityfocus.com/archive/1/499236/100/0/threaded
CVE: CVE-2009-1148
Published: 2009-03-26
Description: Directory traversal vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file_path parameter ($filename variable).
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303; http://secunia.com/advisories/34468
CVE: CVE-2009-1149
Published: 2009-03-26
Description: CRLF injection vulnerability in bs_disp_as_mime_type.php in the BLOB streaming feature in phpMyAdmin before 3.1.3.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the (1) c_type and possibly (2) file_type parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/branches/MAINT_3_1_3/phpMyAdmin/bs_disp_as_mime_type.php?r1=12303&r2=12302&pathrev=12303; http://secunia.com/advisories/34468
CVE: CVE-2009-1150
Published: 2009-03-26
Description: Multiple cross-site scripting (XSS) vulnerabilities in the export page (display_export.lib.php) in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allow remote attackers to inject arbitrary web script or HTML via the pma_db_filename_template cookie.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html; http://phpmyadmin.svn.sourceforge.net/viewvc/phpmyadmin/trunk/phpMyAdmin/libraries/display_export.lib.php?r1=11986&r2=12302&pathrev=12302; http://secunia.com/advisories/34430