deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-4381
Published: 2006-09-12
Description: Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4382
Published: 2006-09-12
Description: Multiple buffer overflows in Apple QuickTime before 7.1.3 allow user-assisted remote attackers to execute arbitrary code via a crafted QuickTime movie.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4384
Published: 2006-09-12
Description: Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via the COLOR_64 chunk in a FLIC (FLC) movie.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4385
Published: 2006-09-12
Description: Buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted SGI image.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4386
Published: 2006-09-12
Description: Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted H.264 movie, a different issue than CVE-2006-4381.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://piotrbania.com/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt
CVE: CVE-2006-4388
Published: 2006-09-12
Description: Integer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix file.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4389
Published: 2006-09-12
Description: Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted FlashPix (FPX) file, which triggers an exception that leads to an operation on an uninitialized object.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=304357; http://lists.apple.com/archives/Security-announce/2006/Sep/msg00000.html; http://secunia.com/advisories/21893
CVE: CVE-2006-4640
Published: 2006-09-12
Description: Unspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html; http://secunia.com/advisories/21865; http://secunia.com/advisories/22054
CVE: CVE-2006-4731
Published: 2006-09-13
Description: Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash).
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21824; http://secunia.com/advisories/21886; http://securityreason.com/securityalert/1553
CVE: CVE-2006-3739
Published: 2006-09-13
Description: Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics (AFM) files with a modified number of character metrics (StartCharMetrics), which leads to a heap-based buffer overflow.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/21864; http://secunia.com/advisories/21889; http://secunia.com/advisories/21890
CVE: CVE-2006-3740
Published: 2006-09-13
Description: Integer overflow in the scan_cidfont function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted (1) CMap and (2) CIDFont font data with modified item counts in the (a) begincodespacerange, (b) cidrange, and (c) notdefrange sections.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/21864; http://secunia.com/advisories/21889; http://secunia.com/advisories/21890
CVE: CVE-2006-4732
Published: 2006-09-13
Description: Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object.
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/1547; http://silversmith.persiangig.com/PoC.rar; http://www.securityfocus.com/archive/1/445784/100/0/threaded
CVE: CVE-2006-4733
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter.  NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1549; http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/box.inc.php?revision=1.9&view=markup; http://www.attrition.org/pipermail/vim/2007-February/001268.html
CVE: CVE-2006-4734
Published: 2006-09-13
Description: Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/1544; http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/tiki-g-admin_processes.php?view=log; http://www.hackers.ir/advisories/tikiwiki.html
CVE: CVE-2006-4735
Published: 2006-09-13
Description: Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1564; http://www.securityfocus.com/archive/1/445729/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28858
CVE: CVE-2006-4736
Published: 2006-09-13
Description: Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/21860; http://securityreason.com/securityalert/1563; http://www.securityfocus.com/archive/1/445789/100/0/threaded
CVE: CVE-2006-4737
Published: 2006-09-13
Description: SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter.  NOTE: The view vector is already covered by CVE-2006-3586.2.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1562; http://www.securityfocus.com/archive/1/445652/100/0/threaded; http://www.securityfocus.com/bid/19303
CVE: CVE-2006-4738
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter.  NOTE: The relative_script_path vector is already covered by CVE-2006-2270.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1562; http://www.securityfocus.com/archive/1/445652/100/0/threaded; http://www.securityfocus.com/bid/19303
CVE: CVE-2006-4739
Published: 2006-09-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php.
CVSS Score: 2.6 (LOW)
References: http://securityreason.com/securityalert/1562; http://www.securityfocus.com/archive/1/445652/100/0/threaded; http://www.securityfocus.com/bid/19303
CVE: CVE-2006-4740
Published: 2006-09-13
Description: Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1562; http://www.securityfocus.com/archive/1/445652/100/0/threaded; http://www.securityfocus.com/bid/19303
CVE: CVE-2006-4741
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1561; http://www.securityfocus.com/archive/1/445780/100/0/threaded; http://www.securityfocus.com/bid/19931
CVE: CVE-2006-4742
Published: 2006-09-13
Description: Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1561; http://www.securityfocus.com/archive/1/445780/100/0/threaded; http://www.securityfocus.com/bid/19931
CVE: CVE-2006-4743
Published: 2006-09-13
Description: WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, or (27) wp-db-backup.php, which reveal the path in various error messages.  NOTE: another researcher has disputed the details of this report, stating that version 2.0.5 does not exist. NOTE: the admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/445374/100/0/threaded; http://www.securityfocus.com/archive/1/445471/100/0/threaded; http://www.securityfocus.com/archive/1/445604/100/0/threaded
CVE: CVE-2006-4744
Published: 2006-09-13
Description: Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1560; http://www.airscanner.com/security/06070101_abidia_oanywhere.htm; http://www.securityfocus.com/archive/1/445608/100/0/threaded
CVE: CVE-2006-4745
Published: 2006-09-13
Description: ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header.
CVSS Score: 3.6 (LOW)
References: http://airscanner.com/security/06062602_pocketexpensepro.htm; http://securityreason.com/securityalert/1559; http://www.securityfocus.com/archive/1/445607/100/0/threaded
CVE: CVE-2006-4746
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1568; http://www.securityfocus.com/archive/1/445725/100/0/threaded; https://www.exploit-db.com/exploits/2318
CVE: CVE-2006-4747
Published: 2006-09-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1567; http://www.securityfocus.com/archive/1/445745/100/0/threaded; http://www.securityfocus.com/bid/19932
CVE: CVE-2006-4748
Published: 2006-09-13
Description: Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2) xpath, (3) xreferer, and (4) xdns parameters in (a) admin/plugins/NP_Log.php, and the (5) pitem parameter in (b) admin/plugins/NP_Poll.php; and allow remote authenticated users to execute arbitrary SQL commands via the (6) pageRef parameter in (c) admin/plugins/NP_Referrer.php.
CVSS Score: 7.5 (HIGH)
References: http://blogcms.com/wiki/changelog; http://secunia.com/advisories/21808; http://securityreason.com/securityalert/1566
CVE: CVE-2006-4749
Published: 2006-09-13
Description: Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attackers to execute arbitrary PHP code via the include_location parameter in (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.php, (6) register.php, (7) showrecent.php, (8) showtophits.php, (9) usrmanag.php, (10) viewer_bottom.php, (11) viewer_content.php, and (12) viewer_top.php.  NOTE: The login.php and confirm.php vectors are already covered by CVE-2006-4594.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/445742/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/28874; http://www.securityfocus.com/archive/1/445742/100/0/threaded
CVE: CVE-2006-4750
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103; http://secunia.com/advisories/21874; http://www.securityfocus.com/bid/19952
CVE: CVE-2006-4751
Published: 2006-09-13
Description: Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/21877; http://securityreason.com/securityalert/1565; http://securitytracker.com/id?1016823
CVE: CVE-2006-4752
Published: 2006-09-13
Description: Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21877; http://securityreason.com/securityalert/1565; http://securitytracker.com/id?1016823
CVE: CVE-2006-4753
Published: 2006-09-13
Description: Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0433&w=2; http://secunia.com/advisories/21849; http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html
CVE: CVE-2006-4754
Published: 2006-09-13
Description: Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
CVSS Score: 6.8 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0433&w=2; http://secunia.com/advisories/21849; http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html
CVE: CVE-2006-4755
Published: 2006-09-13
Description: Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/21875; http://www.vupen.com/english/advisories/2006/3562; http://secunia.com/advisories/21875
CVE: CVE-2006-4756
Published: 2006-09-13
Description: SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/21875; http://www.vupen.com/english/advisories/2006/3562; http://secunia.com/advisories/21875
CVE: CVE-2006-4757
Published: 2006-09-13
Description: Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php.  NOTE: an e107 developer has disputed the significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their access."
CVSS Score: 4.6 (MEDIUM)
References: http://e107.org/e107_plugins/bugtrack/bugtrack.php?id=3195&action=show; http://securityreason.com/securityalert/1569; http://www.securityfocus.com/archive/1/445005/100/100/threaded
CVE: CVE-2006-4758
Published: 2006-09-13
Description: phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=388120; http://secunia.com/advisories/22188; http://secunia.com/advisories/28871
CVE: CVE-2006-4759
Published: 2006-09-13
Description: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE: this issue was originally disputed by the vendor, but the dispute was withdrawn on 20060926.
CVSS Score: 3.6 (LOW)
References: http://forums.punbb.org/viewtopic.php?id=13255; http://www.attrition.org/pipermail/vim/2006-September/001041.html; http://www.attrition.org/pipermail/vim/2006-September/001052.html
CVE: CVE-2006-4760
Published: 2006-09-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
CVSS Score: 4.3 (MEDIUM)
References: http://downloads.sourceforge.net/project/rssowl/rssowl%20classic%201.0%20%28do%20not%20use%29/1.2.3/rssowl_1_2_3_src.zip; http://secunia.com/advisories/21958; http://www.cgisecurity.com/papers/RSS-Security.ppt
CVE: CVE-2006-4761
Published: 2006-09-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/21963; http://www.cgisecurity.com/papers/RSS-Security.ppt; http://www.securityfocus.com/bid/20128
CVE: CVE-2006-4762
Published: 2006-09-13
Description: Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/21994; http://www.cgisecurity.com/papers/RSS-Security.ppt; http://www.securityfocus.com/bid/20129
CVE: CVE-2006-4763
Published: 2006-09-13
Description: IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie.
CVSS Score: 7.5 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html; http://securityreason.com/securityalert/1571; http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21245589
CVE: CVE-2006-4764
Published: 2006-09-13
Description: PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1570; http://www.securityfocus.com/archive/1/445815/100/0/threaded; http://www.securityfocus.com/bid/19962
CVE: CVE-2006-4765
Published: 2006-09-13
Description: NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device hang) via a long string in the username field in the login window.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1575; http://www.securityfocus.com/archive/1/445819/100/0/threaded; http://www.securityfocus.com/bid/19973
CVE: CVE-2006-4766
Published: 2006-09-13
Description: Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/21826; http://securityreason.com/securityalert/1574; http://www.osvdb.org/28811
CVE: CVE-2006-4767
Published: 2006-09-13
Description: Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read arbitrary local files via a .. (dot dot) sequence in the ide parameter in modify.php and (2) write to arbitrary local files via a .. sequence in the var parameter in add_go.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/21826; http://www.osvdb.org/28812; http://www.securityfocus.com/bid/84154