deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1709
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitrary web script or HTML via the (1) pn and (2) sbeg parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/interaktivshop-v5-xss-vuln.html; http://secunia.com/advisories/19622; http://www.osvdb.org/24557
CVE: CVE-2006-1710
Published: 2006-04-11
Description: SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/19601; http://www.securityfocus.com/bid/17435; http://www.vupen.com/english/advisories/2006/1299
CVE: CVE-2006-1711
Published: 2006-04-11
Description: Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.
CVSS Score: 5.0 (MEDIUM)
References: http://dev.plone.org/plone/ticket/5432; http://secunia.com/advisories/19633; http://secunia.com/advisories/19640
CVE: CVE-2006-1712
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in the private archive script (private.py) in GNU Mailman 2.1.7 allows remote attackers to inject arbitrary web script or HTML via the action argument.
CVSS Score: 2.6 (LOW)
References: http://bugs.gentoo.org/show_bug.cgi?id=129136; http://mail.python.org/pipermail/mailman-announce/2006-April/000084.html; http://secunia.com/advisories/19558
CVE: CVE-2006-0015
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/19623; http://securityreason.com/securityalert/704; http://securitytracker.com/id?1015895
CVE: CVE-2006-1185
Published: 2006-04-11
Description: Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via certain invalid HTML that causes memory corruption.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18957; http://securitytracker.com/id?1015900; http://www.kb.cert.org/vuls/id/503124
CVE: CVE-2006-1186
Published: 2006-04-11
Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (1) Mdt2gddr.dll, (2) Mdt2dd.dll, and (3) Mdt2gddo.dll COM objects as ActiveX controls, which leads to memory corruption.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18957; http://securitytracker.com/id?1015900; http://www.kb.cert.org/vuls/id/959049
CVE: CVE-2006-1188
Published: 2006-04-11
Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a certain crafted tag, which leads to memory corruption.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18957; http://securitytracker.com/id?1015900; http://www.kb.cert.org/vuls/id/824324
CVE: CVE-2006-1189
Published: 2006-04-11
Description: Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via a crafted URL with an International Domain Name (IDN) using double-byte character sets (DBCS), aka the "Double Byte Character Parsing Memory Corruption Vulnerability."
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/bugtraq/2006-04/0227.html; http://secunia.com/advisories/18957; http://securitytracker.com/id?1015900
CVE: CVE-2006-1190
Published: 2006-04-11
Description: Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamically creating an embedded object, which could cause Internet Explorer to run the object in the wrong security context or zone, and allow remote attackers to execute arbitrary code.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/18957; http://securitytracker.com/id?1015900; http://www.kb.cert.org/vuls/id/959649
CVE: CVE-2006-1191
Published: 2006-04-11
Description: Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/18957; http://securitytracker.com/id?1015892; http://www.securityfocus.com/bid/17457
CVE: CVE-2006-1192
Published: 2006-04-11
Description: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability."  NOTE: this is a different vulnerability than CVE-2006-1626.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/18957; http://securityreason.com/securityalert/670; http://securitytracker.com/id?1015899
CVE: CVE-2006-1713
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/430480/100/0/threaded; http://www.securityfocus.com/archive/1/432455/100/0/threaded; http://www.securityfocus.com/bid/17420
CVE: CVE-2006-1714
Published: 2006-04-11
Description: CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/430480/100/0/threaded; http://www.securityfocus.com/archive/1/432455/100/0/threaded; http://www.securityfocus.com/bid/17420
CVE: CVE-2006-1715
Published: 2006-04-11
Description: Multiple directory traversal vulnerabilities in Christian Kindahl TUGZip 3.4.0.0, 3.3.0.0, and 3.1.0.2 allow user-assisted attackers to create files in arbitrary directories via a .. (dot dot) in an archive pack with a crafted (1) .gz, (2) .jar, (3) .rar, or (4) .zip file.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/686; http://www.hamid.ir/security/tugzip.txt; http://www.securityfocus.com/archive/1/430433/100/0/threaded
CVE: CVE-2006-1716
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag.  NOTE: the email vector is already covered by CVE-2006-1625, although it might stem from the same core issue.
CVSS Score: 5.1 (MEDIUM)
References: http://kapda.ir/advisory-305.html; http://myimei.com/security/2006-03-12/mybb-110functions_postphpxss-attack.html; http://secunia.com/advisories/19516
CVE: CVE-2006-1717
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in newthread.php in MyBB (aka MyBulletinBoard) 1.10, when configured to permit new threads by unregistered users, allows remote attackers to inject arbitrary web script or HTML via the username.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19516; http://www.securityfocus.com/archive/1/430464/100/0/threaded; http://www.securityfocus.com/bid/17427
CVE: CVE-2006-1718
Published: 2006-04-11
Description: Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc.
CVSS Score: 5.0 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv28-K-159-2006.txt; http://secunia.com/advisories/19579; http://www.securityfocus.com/archive/1/430369/100/0/threaded
CVE: CVE-2006-1719
Published: 2006-04-11
Description: Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) via any scrollbar Cascading Style Sheets (CSS) property.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/430408/100/0/threaded; http://www.securityfocus.com/archive/1/430431/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/25852
CVE: CVE-2006-1720
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in search.php in SaphpLesson 3.0 allows remote attackers to inject arbitrary web script or HTML via the Word parameter.  NOTE: it is possible that this issue is resultant from SQL injection.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/683; http://securitytracker.com/id?1015883; http://www.securityfocus.com/archive/1/430293/100/0/threaded
CVE: CVE-2006-1721
Published: 2006-04-11
Description: digestmd5.c in the CMU Cyrus Simple Authentication and Security Layer (SASL) library 2.1.18, and possibly other versions before 2.1.21, allows remote unauthenticated attackers to cause a denial of service (segmentation fault) via malformed inputs in DIGEST-MD5 negotiation.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: ftp://patches.sgi.com/support/free/security/advisories/20070901-01-P.asc; http://asg.web.cmu.edu/archive/message.php?mailbox=archive.cyrus-sasl&msg=7775; http://labs.musecurity.com/advisories/MU-200604-01.txt
CVE: CVE-2006-1722
Published: 2006-04-11
Description: Cross-site scripting (XSS) vulnerability in suche.htm in ShopXS 4.0 allows remote attackers to inject arbitrary web script or HTML via the Suchstring1 (aka search) parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/shopxs-v40-xss-vuln_10.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/25715; http://pridels0.blogspot.com/2006/04/shopxs-v40-xss-vuln_10.html
CVE: CVE-2006-0003
Published: 2006-04-12
Description: Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in Microsoft Data Access Components (MDAC) 2.7 and 2.8, allows remote attackers to execute arbitrary code via unknown attack vectors.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19583; http://secunia.com/advisories/20719; http://securitytracker.com/id?1015894
CVE: CVE-2006-0012
Published: 2006-04-12
Description: Unspecified vulnerability in Windows Explorer in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via attack vectors involving COM objects and "crafted files and directories," aka the "Windows Shell Vulnerability."
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19606; http://securitytracker.com/id?1015897; http://www.kb.cert.org/vuls/id/641460
CVE: CVE-2006-0014
Published: 2006-04-12
Description: Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html; http://secunia.com/advisories/19617; http://securityreason.com/securityalert/691
CVE: CVE-2006-1743
Published: 2006-04-12
Description: Multiple SQL injection vulnerabilities in form.php in JBook 1.4 allow remote attackers to execute arbitrary SQL commands via the (1) nom or (2) mail parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19613; http://www.securityfocus.com/bid/17458; http://www.vupen.com/english/advisories/2006/1315
CVE: CVE-2006-1744
Published: 2006-04-12
Description: Buffer overflow in pl_main.c in sail in BSDgames before 2.17-7 allows local users to execute arbitrary code via a long player name that is used in a scanf function call.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360989; http://secunia.com/advisories/19687; http://securityreason.com/securityalert/736
CVE: CVE-2006-1745
Published: 2006-04-12
Description: Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the error parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19673; http://www.securityfocus.com/bid/17406; http://www.vupen.com/english/advisories/2006/1370
CVE: CVE-2006-1746
Published: 2006-04-12
Description: Directory traversal vulnerability in PHPList 2.10.2 and earlier allows remote attackers to include arbitrary local files via the (1) GLOBALS[database_module] or (2) GLOBALS[language_module] parameters, which overwrite the underlying $GLOBALS variable.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://downloads.securityfocus.com/vulnerabilities/exploits/PHPList-lfi.php; http://securitytracker.com/id?1015889; http://tincan.co.uk/?lid=851
CVE: CVE-2006-1747
Published: 2006-04-12
Description: PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter to (1) admin/admin.php, (2) war.php, (3) stats.php, (4) news.php, (5) joinus.php, (6) challenge.php, (7) calendar.php, (8) member.php, (9) popup.php, and other unspecified scripts in the admin folder.  NOTE: these are different attack vectors than CVE-2006-1636 and CVE-2006-1503.
CVSS Score: 7.5 (HIGH)
References: http://liz0zim.no-ip.org/vwar.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0609&w=2; http://www.blogcu.com/Liz0ziM/431925/
CVE: CVE-2006-1748
Published: 2006-04-12
Description: Cross-site scripting (XSS) vulnerability in XMB Forum 1.9.5 allows remote attackers to inject arbitrary web script or HTML by uploading a Flash (.SWF) video that contains a getURL function call, which causes the video to be rendered without disabling ActionScript.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/archive/1/430432/100/0/threaded; http://www.securityfocus.com/bid/17445; https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE: CVE-2006-1749
Published: 2006-04-12
Description: PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter.  NOTE: this issue was later reported to affect 2.01 as well.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/19625; http://www.osvdb.org/24540; http://www.securityfocus.com/archive/1/430614
CVE: CVE-2006-1750
Published: 2006-04-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Autogallery 0.41 allow remote attackers to inject arbitrary web script or HTML via the (1) pic or (2) show parameters.
CVSS Score: 2.6 (LOW)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0220.html; http://secunia.com/advisories/19629; http://www.elitemexico.org/12.txt
CVE: CVE-2006-1751
Published: 2006-04-12
Description: Multiple SQL injection vulnerabilities in MvBlog before 1.6 allow remote attackers to execute arbitrary SQL commands via unknown vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/54; http://secunia.com/advisories/19634; http://www.securityfocus.com/bid/17481
CVE: CVE-2006-1752
Published: 2006-04-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in the backend in MvBlog before 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) body fields in a comment.
CVSS Score: 2.6 (LOW)
References: http://dev.mvblog.org/cgi-bin/trac.cgi/ticket/55; http://secunia.com/advisories/19634; http://www.securityfocus.com/bid/17481
CVE: CVE-2006-1523
Published: 2006-04-12
Description: The __group_complete_signal function in the RCU signal handling (signal.c) in Linux kernel 2.6.16, and possibly other versions, has unknown impact and attack vectors related to improper use of BUG_ON.
CVSS Score: 10.0 (HIGH)
References: http://marc.info/?l=linux-kernel&m=[PII_REDACTED]6600&w=2; http://secunia.com/advisories/20398; http://secunia.com/advisories/20914
CVE: CVE-2006-1754
Published: 2006-04-13
Description: SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute arbitrary SQL commands via the SID parameter.
CVSS Score: 7.5 (HIGH)
References: http://download1.swsoft.com/Confixx/security_hotfix/release_notes.txt; http://secunia.com/advisories/19611; http://www.securityfocus.com/archive/1/430671/100/0/threaded
CVE: CVE-2006-1755
Published: 2006-04-13
Description: SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/120/summary.html; http://secunia.com/advisories/19530; http://www.osvdb.org/24454
CVE: CVE-2006-1756
Published: 2006-04-13
Description: MD News 1 allows remote attackers to bypass authentication via a direct request to a script in the Administration Area.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/120/summary.html; http://secunia.com/advisories/19530; http://www.osvdb.org/24455
CVE: CVE-2006-1757
Published: 2006-04-13
Description: Cross-site scripting (XSS) vulnerability in index.php in Vegadns 0.99 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
CVSS Score: 2.6 (LOW)
References: http://www.securityfocus.com/archive/1/430474/100/0/threaded; http://www.securityfocus.com/bid/17433; http://www.securityfocus.com/archive/1/430474/100/0/threaded
CVE: CVE-2006-1758
Published: 2006-04-13
Description: SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19614; http://www.securityfocus.com/archive/1/430474/100/0/threaded; http://www.securityfocus.com/bid/17433
CVE: CVE-2006-1759
Published: 2006-04-13
Description: Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the jahr parameter.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/19611; http://securitytracker.com/id?1015890; http://www.securityfocus.com/archive/1/430596/100/0/threaded
CVE: CVE-2006-1760
Published: 2006-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) Classic.view/thumbnail.php, (2) Classic.view/gallery.php, (3) Classic.view/detail.php, or (4) Orange.view/detail.php; or (5) the name parameter in Orange.view/slideshow.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]9033&w=2; http://secunia.com/advisories/19603; http://www.osvdb.org/24491
CVE: CVE-2006-1761
Published: 2006-04-13
Description: Cross-site scripting vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter, which is not sanitized in the error message. NOTE: the vector in the shard parameter is not XSS and has been assigned a separate name.
CVSS Score: 2.6 (LOW)
References: http://www.attrition.org/pipermail/vim/2006-April/000691.html; http://www.securityfocus.com/archive/1/430607/100/0/threaded; http://www.securityfocus.com/archive/1/430885/100/0/threaded
CVE: CVE-2006-1762
Published: 2006-04-13
Description: Directory traversal vulnerability in index.php in blur6ex 0.3.452 allows remote attackers to include arbitrary files via the shard parameter.  NOTE: this issue can be exploited to produce resultant XSS when the parameter has XSS manipulations, and path disclosure with other invalid values.
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2006-April/000691.html; http://www.securityfocus.com/archive/1/430607/100/0/threaded; http://www.securityfocus.com/archive/1/430885/100/0/threaded
CVE: CVE-2006-1763
Published: 2006-04-13
Description: Multiple SQL injection vulnerabilities in index.php in blur6ex 0.3.452 allows remote attackers to execute arbitrary SQL commands via the ID parameter in a (1) g_reply or (2) g_permaPost action to the blog shard (engine/shards/blog.php), or a (3) g_viewContent action to the content shard (engine/shards/content.php).
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/689; http://www.securityfocus.com/archive/1/430607/100/0/threaded; http://www.securityfocus.com/bid/17465
CVE: CVE-2006-1764
Published: 2006-04-13
Description: Hosting Controller 6.1 stores forum/db/forum.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as user name and password credentials.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/19569; http://www.osvdb.org/24447; http://www.vupen.com/english/advisories/2006/1268
CVE: CVE-2006-1765
Published: 2006-04-13
Description: Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/19613; http://www.securityfocus.com/archive/1/430479/100/0/threaded; http://www.securityfocus.com/bid/17419
CVE: CVE-2006-1766
Published: 2006-04-13
Description: Multiple SQL injection vulnerabilities in Papoo 2.1.5, and 3 beta1 and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) getlang and (2) reporeid parameter in (a) index.php, (3) menuid parameter in (b) plugin.php and (c) forumthread.php, and (4) msgid parameter in forumthread.php.
CVSS Score: 6.4 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/25728; http://pridels0.blogspot.com/2006/04/papoo-multiple-sql-vuln.html
CVE: CVE-2006-1767
Published: 2006-04-13
Description: Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the theme_path parameter in (1) index.php, (2) become_editor.php, (3) add.php, (4) bad_link.php, (5) browse.php, (6) detail.php, (7) fav.php, (8) get_rated.php, (9) login.php, (10) mailing_list.php, (11) new.php, (12) modify.php, (13) pick.php, (14) power_search.php, (15) rating.php, (16) register.php, (17) review.php, (18) rss.php, (19) search.php, (20) send_pwd.php, (21) sendmail.php, (22) tell_friend.php, (23) top_rated.php, (24) user_detail.php, and (25) user_search.php; and the (26) base_path parameter in invoice.php.
CVSS Score: 7.5 (HIGH)
References: http://ftp.kep.online.fr/Indexu_5.0.1_File_Inclusion_Exploit-by_King-Hacker_and-Khamaileon.txt; http://securitytracker.com/id?1015891; http://securitytracker.com/id?1016331
CVE: CVE-2006-1768
Published: 2006-04-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) newuser_name, (2) newuser_email, and (3) newuser_hp parameters in the faction=register mode in index.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19635; http://www.osvdb.org/24556; http://www.securityfocus.com/archive/1/430669/100/0/threaded