deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2003-1479
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3304; http://www.frame4.com/content/advisories/FSA-2003-002.txt; http://www.securityfocus.com/archive/1/320345
CVE: CVE-2003-1480
Published: 2003-12-31
Description: MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-310
References: http://secunia.com/advisories/8753; http://www.securiteam.com/tools/5WP031FA0U.html; http://www.securityfocus.com/bid/7500
CVE: CVE-2003-1481
Published: 2003-12-31
Description: CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3290; http://www.securityfocus.com/archive/1/320438; http://www.securityfocus.com/bid/7501
CVE: CVE-2003-1482
Published: 2003-12-31
Description: The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-255
References: http://securitytracker.com/id?1006691; http://www.kurczaba.com/html/security/0305031.htm; http://www.securityfocus.com/bid/7496
CVE: CVE-2003-1483
Published: 2003-12-31
Description: FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-255, CWE-310
References: http://downloads.securityfocus.com/vulnerabilities/exploits/flashfxp_decrypt.c; http://securitytracker.com/id?1006730; http://www.securityfocus.com/bid/7499
CVE: CVE-2003-1484
Published: 2003-12-31
Description: Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick "A" object with a blank href attribute.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3292; http://www.securityfocus.com/archive/1/320544; http://www.securityfocus.com/bid/7502
CVE: CVE-2003-1485
Published: 2003-12-31
Description: Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains "multiple extensions combined with large blocks of white space."
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm; http://www.securityfocus.com/bid/7568; http://www.clearswift.com/download/bin/Patches/ReadMe_SMTP_438.htm
CVE: CVE-2003-1486
Published: 2003-12-31
Description: Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://securityreason.com/securityalert/3288; http://www.securityfocus.com/archive/1/321310; http://www.securityfocus.com/bid/7571
CVE: CVE-2003-1487
Published: 2003-12-31
Description: Multiple "command injection" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.
CVSS Score: 10.0 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/3288; http://www.securityfocus.com/archive/1/321310; http://www.securityfocus.com/bid/7574
CVE: CVE-2003-1488
Published: 2003-12-31
Description: The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=vulnwatch&m=[PII_REDACTED]9082&w=2; http://secunia.com/advisories/8683; http://www.securityfocus.com/bid/7427
CVE: CVE-2003-1489
Published: 2003-12-31
Description: upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://marc.info/?l=vulnwatch&m=[PII_REDACTED]9082&w=2; http://secunia.com/advisories/8683; http://marc.info/?l=vulnwatch&m=[PII_REDACTED]9082&w=2
CVE: CVE-2003-1490
Published: 2003-12-31
Description: SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: http://securityreason.com/securityalert/3291; http://www.securityfocus.com/archive/1/319712; http://www.securityfocus.com/bid/7435
CVE: CVE-2003-1491
Published: 2003-12-31
Description: Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.
CVSS Score: 7.5 (HIGH)
CWE: CWE-16, CWE-94
References: http://archives.neohapsis.com/archives/fulldisclosure/2003-q2/0352.html; http://www.securiteam.com/securitynews/5FP0N1P9PI.html; http://www.securityfocus.com/bid/7436
CVE: CVE-2003-1492
Published: 2003-12-31
Description: Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-59
References: http://www.securityfocus.com/archive/1/319919; http://www.securityfocus.com/bid/7456; https://exchange.xforce.ibmcloud.com/vulnerabilities/11924
CVE: CVE-2003-1493
Published: 2003-12-31
Description: Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/hp/2003-q4/0019.html; http://www.securityfocus.com/bid/8859; https://exchange.xforce.ibmcloud.com/vulnerabilities/13467
CVE: CVE-2003-1494
Published: 2003-12-31
Description: Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119, CWE-399
References: http://archives.neohapsis.com/archives/hp/2003-q4/0019.html; http://www.securityfocus.com/bid/8859; https://exchange.xforce.ibmcloud.com/vulnerabilities/13467
CVE: CVE-2003-1495
Published: 2003-12-31
Description: Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://www-1.ibm.com/services/continuity/recover1.nsf/MSS/MSS-OAR-E01-2003.1357.1; http://www.securityfocus.com/bid/8878; https://exchange.xforce.ibmcloud.com/vulnerabilities/13496
CVE: CVE-2003-1496
Published: 2003-12-31
Description: Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/9990; http://www.securityfocus.com/advisories/5973; http://www.securityfocus.com/bid/8813
CVE: CVE-2003-1497
Published: 2003-12-31
Description: Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3298; http://www.linksys.com/download/vertxt/befsx41_1453.txt; http://www.securityfocus.com/archive/1/341309
CVE: CVE-2003-1498
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0173.html; http://www.securityfocus.com/bid/8823; https://exchange.xforce.ibmcloud.com/vulnerabilities/13431
CVE: CVE-2003-1499
Published: 2003-12-31
Description: Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the infolder parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2003-10/0200.html; http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012430.html; http://www.securiteam.com/unixfocus/6L00L008KE.html
CVE: CVE-2003-1500
Published: 2003-12-31
Description: PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://cpcommerce.org/forums/index.php?board=2%3Baction=display%3Bthreadid=864; http://securityreason.com/securityalert/3301; http://www.securiteam.com/unixfocus/6H00E2K8KG.html
CVE: CVE-2003-1501
Published: 2003-12-31
Description: Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/341870; http://www.securityfocus.com/bid/8858; https://exchange.xforce.ibmcloud.com/vulnerabilities/13469
CVE: CVE-2003-1502
Published: 2003-12-31
Description: mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html; http://www.securityfocus.com/bid/8822; http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012043.html
CVE: CVE-2003-1503
Published: 2003-12-31
Description: Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://archives.neohapsis.com/archives/ntbugtraq/2003-q4/0059.html; http://www.digitalpranksters.com/advisories/aol/AIMProtocolBO.html; http://www.securityfocus.com/bid/8825
CVE: CVE-2003-1504
Published: 2003-12-31
Description: SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3302; http://www.securityfocus.com/archive/1/341760; http://www.securityfocus.com/bid/8847
CVE: CVE-2003-1505
Published: 2003-12-31
Description: Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/3295; http://www.securityfocus.com/archive/1/342010; http://www.securityfocus.com/bid/8874
CVE: CVE-2003-1506
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3299; http://www.securityfocus.com/archive/1/342160; http://www.securityfocus.com/archive/1/342551
CVE: CVE-2003-1507
Published: 2003-12-31
Description: Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote attackers to gain administrative access.
CVSS Score: 10.0 (HIGH)
References: http://securitytracker.com/id?1007924; http://www.securityfocus.com/archive/1/341329; http://www.securityfocus.com/bid/8837
CVE: CVE-2003-1508
Published: 2003-12-31
Description: Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://securityreason.com/securityalert/3303; http://www.irchelp.org/irchelp/mirc/exploit.html; http://www.securityfocus.com/archive/1/342179
CVE: CVE-2003-1509
Published: 2003-12-31
Description: Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.
CVSS Score: 10.0 (HIGH)
References: http://service.real.com/help/faq/security/securityupdate_october2003.html; http://www.securityfocus.com/bid/8839; https://exchange.xforce.ibmcloud.com/vulnerabilities/13445
CVE: CVE-2003-1510
Published: 2003-12-31
Description: TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin directory.
CVSS Score: 7.8 (HIGH)
References: http://www.securiteam.com/windowsntfocus/6S0052K8LQ.html; http://www.securityfocus.com/bid/8810; https://exchange.xforce.ibmcloud.com/vulnerabilities/13402
CVE: CVE-2003-1511
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/10023; http://securityreason.com/securityalert/3306; http://www.geocities.com/gzhangx/websrv/docs/security.html
CVE: CVE-2003-1512
Published: 2003-12-31
Description: Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-119
References: http://www.securityfocus.com/bid/8818; http://www.securityfocus.com/bid/8818
CVE: CVE-2003-1513
Published: 2003-12-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.grok.org.uk/pipermail/full-disclosure/2003-October/012361.html; http://secunia.com/advisories/10031; http://www.securityfocus.com/bid/8852
CVE: CVE-2003-1514
Published: 2003-12-31
Description: eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://securityreason.com/securityalert/3294; http://www.securityfocus.com/archive/1/341754; http://www.securityfocus.com/bid/8854
CVE: CVE-2003-1515
Published: 2003-12-31
Description: Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://securityreason.com/securityalert/3300; http://www.securityfocus.com/archive/1/341752; http://www.securityfocus.com/bid/8855
CVE: CVE-2003-1516
Published: 2003-12-31
Description: The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/341815; http://www.securityfocus.com/bid/8857; http://www.securityfocus.com/archive/1/341815
CVE: CVE-2003-1517
Published: 2003-12-31
Description: cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securiteam.com/securitynews/6T00T008KG.html; http://www.securityfocus.com/bid/8860; https://exchange.xforce.ibmcloud.com/vulnerabilities/13461
CVE: CVE-2003-1518
Published: 2003-12-31
Description: Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.adiscon.com/Common/en/advisory/2003-09-15.asp; http://www.securiteam.com/windowsntfocus/6L00F158KE.html; http://www.securityfocus.com/bid/8821
CVE: CVE-2003-1519
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securitytracker.com/id?1007955; http://www.securityfocus.com/bid/8862; https://exchange.xforce.ibmcloud.com/vulnerabilities/13452
CVE: CVE-2003-1520
Published: 2003-12-31
Description: SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://securityreason.com/securityalert/3293; http://www.fuzzymonkey.org/newfuzzy/software/data/03My_Classifieds_MySQL//README.html#changes; http://www.securityfocus.com/archive/1/341908
CVE: CVE-2003-1521
Published: 2003-12-31
Description: Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.
CVSS Score: 6.4 (MEDIUM)
References: http://www.securityfocus.com/archive/1/341943; http://www.securityfocus.com/bid/8867; http://www.securityfocus.com/archive/1/341943
CVE: CVE-2003-1522
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.pscs.co.uk/products/vpop3/whatsnew.html; http://www.securiteam.com/windowsntfocus/6S00S008KW.html; http://www.securityfocus.com/bid/8869
CVE: CVE-2003-1523
Published: 2003-12-31
Description: SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://mailman.fastxs.net/pipermail/dbmail/2003-July/003252.html; http://secunia.com/advisories/10001; http://www.securityfocus.com/bid/8829
CVE: CVE-2003-1524
Published: 2003-12-31
Description: PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-264
References: http://www.securiteam.com/windowsntfocus/6M00L0K8KI.html; http://www.securityfocus.com/bid/8870; https://exchange.xforce.ibmcloud.com/vulnerabilities/13490
CVE: CVE-2003-1525
Published: 2003-12-31
Description: Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.fuzzymonkey.org/newfuzzy/software/perl/photo/README.html; http://www.securityfocus.com/bid/8872; https://exchange.xforce.ibmcloud.com/vulnerabilities/13498
CVE: CVE-2003-1526
Published: 2003-12-31
Description: PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/archive/1/341743; http://www.securityfocus.com/bid/8848; http://www.securityfocus.com/archive/1/341743
CVE: CVE-2003-1527
Published: 2003-12-31
Description: BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
CVSS Score: 4.3 (MEDIUM)
References: http://online.securityfocus.com/archive/1/294411; http://www.iss.net/security_center/static/10314.php; http://www.securityfocus.com/bid/5917
CVE: CVE-2003-1528
Published: 2003-12-31
Description: nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file.
CVSS Score: 7.2 (HIGH)
CWE: CWE-59
References: http://securityreason.com/securityalert/3353; http://www.securityfocus.com/archive/1/350237/30/21640/threaded; http://www.securityfocus.com/bid/9446
CVE: CVE-2003-1529
Published: 2003-12-31
Description: Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://archives.neohapsis.com/archives/bugtraq/2003-03/0357.html; http://secunia.com/advisories/8411; http://www.irmplc.com/advisory/adv5.htm
CVE: CVE-2003-1530
Published: 2003-12-31
Description: SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2003-01/0125.html; http://secunia.com/advisories/7887/; http://www.osvdb.org/4277
CVE: CVE-2003-1531
Published: 2003-12-31
Description: Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3320&w=2; http://secunia.com/advisories/8456; http://www.security-corporation.com/index.php?id=advisories&a=013-FR
CVE: CVE-2003-1532
Published: 2003-12-31
Description: SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/7990; http://securityreason.com/securityalert/3348; http://www.securityfocus.com/archive/1/309921/30/26090/threaded
CVE: CVE-2003-1533
Published: 2003-12-31
Description: SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3349; http://www.securityfocus.com/archive/1/307224/30/26300/threaded; http://www.securityfocus.com/bid/6594