deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4918
Published: 2006-09-21
Description: Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21990; http://www.osvdb.org/29041; http://www.securityfocus.com/bid/20103
CVE: CVE-2006-4919
Published: 2006-09-21
Description: Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.
CVSS Score: 2.6 (LOW)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3367&w=2; http://secunia.com/advisories/21975; http://securitytracker.com/id?1016887
CVE: CVE-2006-4920
Published: 2006-09-21
Description: Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3367&w=2; http://secunia.com/advisories/21975; http://securitytracker.com/id?1016887
CVE: CVE-2006-4921
Published: 2006-09-21
Description: PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3367&w=2; http://secunia.com/advisories/21975; http://securitytracker.com/id?1016887
CVE: CVE-2006-4922
Published: 2006-09-21
Description: Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3367&w=2; http://securitytracker.com/id?1016887; http://www.securityfocus.com/bid/20053
CVE: CVE-2006-4923
Published: 2006-09-21
Description: Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/21979; http://securityreason.com/securityalert/1618; http://www.securityfocus.com/archive/1/446377/100/0/threaded
CVE: CVE-2006-3507
Published: 2006-09-21
Description: Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html; http://secunia.com/advisories/22068; http://securitytracker.com/id?1016903
CVE: CVE-2006-3508
Published: 2006-09-21
Description: Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html; http://secunia.com/advisories/22068; http://securitytracker.com/id?1016903
CVE: CVE-2006-3509
Published: 2006-09-21
Description: Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames.
CVSS Score: 7.2 (HIGH)
References: http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html; http://secunia.com/advisories/22068; http://securitytracker.com/id?1016903
CVE: CVE-2006-4899
Published: 2006-09-22
Description: The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22023; http://securitytracker.com/id?1016910; http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
CVE: CVE-2006-4900
Published: 2006-09-22
Description: Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml function.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/22023; http://securitytracker.com/id?1016910; http://users.tpg.com.au/adsl2dvp/advisories/200608-computerassociates.txt
CVE: CVE-2006-4901
Published: 2006-09-22
Description: Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22023; http://secunia.com/advisories/22073; http://securitytracker.com/id?1016909
CVE: CVE-2006-4935
Published: 2006-09-23
Description: The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4936
Published: 2006-09-23
Description: Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4937
Published: 2006-09-23
Description: lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages.
CVSS Score: 4.0 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4938
Published: 2006-09-23
Description: help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.
CVSS Score: 4.0 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4939
Published: 2006-09-23
Description: backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4940
Published: 2006-09-23
Description: login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4941
Published: 2006-09-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.
CVSS Score: 4.3 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4942
Published: 2006-09-23
Description: Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via (a) filter/algebra/pix.php or (b) filter/tex/pix.php.
CVSS Score: 4.6 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4943
Published: 2006-09-23
Description: course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://docs.moodle.org/en/Release_notes#Moodle_1.6.2; http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE: CVE-2006-4944
Published: 2006-09-23
Description: PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/20141; https://exchange.xforce.ibmcloud.com/vulnerabilities/29078; https://www.exploit-db.com/exploits/2411
CVE: CVE-2006-4945
Published: 2006-09-23
Description: Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22026; http://www.securityfocus.com/bid/20107; http://www.vupen.com/english/advisories/2006/3705
CVE: CVE-2006-4946
Published: 2006-09-23
Description: PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22024; http://www.securityfocus.com/bid/20116; http://www.vupen.com/english/advisories/2006/3706
CVE: CVE-2006-4947
Published: 2006-09-23
Description: Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."
CVSS Score: 6.8 (MEDIUM)
References: http://drupal.org/node/85050; http://secunia.com/advisories/22021; http://www.securityfocus.com/bid/20126
CVE: CVE-2006-4948
Published: 2006-09-23
Description: Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21854; http://www.osvdb.org/29032; http://www.securityfocus.com/bid/20131
CVE: CVE-2006-4949
Published: 2006-09-23
Description: Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output," possibly in the name and title parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://drupal.org/node/85048; http://secunia.com/advisories/22035; http://www.osvdb.org/29029
CVE: CVE-2006-4950
Published: 2006-09-23
Description: Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/21974; http://securitytracker.com/id?1016899; http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml
CVE: CVE-2006-4951
Published: 2006-09-23
Description: Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4952
Published: 2006-09-23
Description: The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4953
Published: 2006-09-23
Description: Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4954
Published: 2006-09-23
Description: The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4) creating and (5) deleting users.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4955
Published: 2006-09-23
Description: Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4956
Published: 2006-09-23
Description: Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22029; http://vuln.sg/neonmail506-en.html; http://www.securityfocus.com/bid/20109
CVE: CVE-2006-4957
Published: 2006-09-23
Description: SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/21991; http://www.securityfocus.com/bid/20105; http://www.vupen.com/english/advisories/2006/3716
CVE: CVE-2006-4958
Published: 2006-09-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22037; http://securityreason.com/securityalert/1623; http://securitytracker.com/id?1016900
CVE: CVE-2006-4959
Published: 2006-09-23
Description: Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22037; http://securityreason.com/securityalert/1623; http://securitytracker.com/id?1016900
CVE: CVE-2006-4960
Published: 2006-09-23
Description: Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22031; http://www.securityfocus.com/bid/20123; http://www.vupen.com/english/advisories/2006/3736
CVE: CVE-2006-4961
Published: 2006-09-23
Description: SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22031; http://www.securityfocus.com/bid/20123; http://www.vupen.com/english/advisories/2006/3736
CVE: CVE-2006-4962
Published: 2006-09-23
Description: Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22031; http://www.securityfocus.com/bid/20123; http://www.securityfocus.com/bid/25264
CVE: CVE-2006-4963
Published: 2006-09-23
Description: Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22003; http://www.osvdb.org/29024; http://www.securityfocus.com/bid/20111
CVE: CVE-2006-4964
Published: 2006-09-23
Description: Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/22050; http://www.maxdev.com/Article605.phtml
CVE: CVE-2006-4965
Published: 2006-09-25
Description: Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=305149; http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html; http://secunia.com/advisories/22048
CVE: CVE-2006-4966
Published: 2006-09-25
Description: PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22042; http://securityreason.com/securityalert/1630; http://www.nyubicrew.org/adv/solpot-adv-08.txt
CVE: CVE-2006-4967
Published: 2006-09-25
Description: Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22030; http://securityreason.com/securityalert/1625; http://securitytracker.com/id?1016888
CVE: CVE-2006-4968
Published: 2006-09-25
Description: PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gz; http://securitytracker.com/id?1016912; http://www.securityfocus.com/archive/1/446267/100/0/threaded
CVE: CVE-2006-4969
Published: 2006-09-25
Description: Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22131; http://www.osvdb.org/29198; http://www.osvdb.org/29199
CVE: CVE-2006-4970
Published: 2006-09-25
Description: PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1624; http://www.securityfocus.com/archive/1/446419/100/0/threaded; http://www.securityfocus.com/bid/20112
CVE: CVE-2006-4971
Published: 2006-09-25
Description: MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1628; http://www.securityfocus.com/archive/1/446093/100/0/threaded; http://www.vupen.com/english/advisories/2006/3666
CVE: CVE-2006-4972
Published: 2006-09-25
Description: Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/21972; http://securityreason.com/securityalert/1628; http://www.securityfocus.com/archive/1/446093/100/0/threaded
CVE: CVE-2006-4973
Published: 2006-09-25
Description: Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22051; http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx; http://www.secureshapes.com/advisories/vuln20-09-2006.htm