deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2008-0117
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers to execute arbitrary code via crafted conditional formatting values, aka "Excel Conditional Formatting Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://www.securityfocus.com/bid/28170; http://www.securitytracker.com/id?1019587
CVE: CVE-2008-0118
Published: 2008-03-11
Description: Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption from an "allocation error," aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7305&w=2; http://secunia.com/advisories/29321; http://www.securityfocus.com/bid/28146
CVE: CVE-2008-0300
Published: 2008-03-11
Description: mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, which are not properly handled when accessing a filename that contains those sequences.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/29329; http://www.redteam-pentesting.de/advisories/rt-sa-2008-001.php; http://www.securityfocus.com/bid/28195
CVE: CVE-2008-0301
Published: 2008-03-11
Description: Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to mod_gazetteer_edit.php and other unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1595&w=2; http://secunia.com/advisories/29329; http://securityreason.com/securityalert/3728
CVE: CVE-2008-0306
Published: 2008-03-11
Description: sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.
CVSS Score: 6.9 (MEDIUM)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=670; http://secunia.com/advisories/29312; http://www.securityfocus.com/bid/28185
CVE: CVE-2008-0307
Published: 2008-03-11
Description: Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors that trigger heap corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=669; http://secunia.com/advisories/29312; http://www.securityfocus.com/bid/28183
CVE: CVE-2007-6253
Published: 2008-03-12
Description: Multiple buffer overflows in Adobe Form Designer 5.0 and Form Client 5.0 allow remote attackers to execute arbitrary code via unknown vectors in the (1) Adobe File Dialog Button (FileDlg.dll) and the (2) Adobe Copy to Server Object (SvrCopy.dll) ActiveX controls.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/29330; http://www.adobe.com/support/security/bulletins/apsb08-09.html; http://www.kb.cert.org/vuls/id/362849
CVE: CVE-2008-0643
Published: 2008-03-12
Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29332; http://www.adobe.com/support/security/bulletins/apsb08-06.html; http://www.securityfocus.com/bid/28205
CVE: CVE-2008-0644
Published: 2008-03-12
Description: Adobe ColdFusion MX 7 and ColdFusion 8 allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism for applications via unspecified vectors related to the setEncoding function.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/29332; http://www.adobe.com/support/security/bulletins/apsb08-07.html; http://www.securityfocus.com/bid/28205
CVE: CVE-2008-0890
Published: 2008-03-12
Description: Red Hat Directory Server 7.1 before SP4 uses insecure permissions for certain directories, which allows local users to modify JAR files and execute arbitrary code via unknown vectors.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/29350; http://www.redhat.com/support/errata/RHSA-2008-0173.html; http://www.securityfocus.com/bid/28204
CVE: CVE-2008-1202
Published: 2008-03-12
Description: Cross-site scripting (XSS) vulnerability in the web management interface in Adobe LiveCycle Workflow 6.2 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29331; http://securityreason.com/securityalert/3729; http://www.adobe.com/support/security/bulletins/apsb08-10.html
CVE: CVE-2008-1203
Published: 2008-03-12
Description: The administrator interface for Adobe ColdFusion 8 and ColdFusion MX7 does not log failed authentication attempts, which makes it easier for remote attackers to conduct brute force attacks without detection.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/29332; http://www.adobe.com/support/security/bulletins/apsb08-08.html; http://www.securityfocus.com/bid/28207
CVE: CVE-2008-1295
Published: 2008-03-12
Description: SQL injection vulnerability in archives.php in Gregory Kokanosky (aka Greg's Place) phpMyNewsletter 0.8 beta 5 and earlier allows remote attackers to execute arbitrary SQL commands via the msg_id parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://www.securityfocus.com/bid/28189; https://exchange.xforce.ibmcloud.com/vulnerabilities/41197; https://www.exploit-db.com/exploits/5231
CVE: CVE-2008-1296
Published: 2008-03-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in EncapsGallery 1.11.2 allow remote attackers to inject arbitrary web script or HTML via the file parameter to (1) watermark.php and (2) catalog_watermark.php in core/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/28178; http://www.securityfocus.com/data/vulnerabilities/exploits/28178.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/41164
CVE: CVE-2008-1297
Published: 2008-03-12
Description: SQL injection vulnerability in index.php in the eWriting (com_ewriting) 1.2.1 module for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in a selectcat action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/29292; http://www.securityfocus.com/bid/28179; https://exchange.xforce.ibmcloud.com/vulnerabilities/41072
CVE: CVE-2008-1298
Published: 2008-03-12
Description: SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/29322; http://securityreason.com/securityalert/3730; http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3078
CVE: CVE-2008-1299
Published: 2008-03-12
Description: Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script or HTML via the searchText parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://secunia.com/advisories/29310; http://www.securityfocus.com/bid/28191; http://secunia.com/advisories/29310
CVE: CVE-2008-1300
Published: 2008-03-12
Description: Cross-site scripting (XSS) vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a different vector than CVE-2008-1045.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29278; http://securityreason.com/securityalert/3731; http://www.securityfocus.com/archive/1/489291/100/0/threaded
CVE: CVE-2008-1301
Published: 2008-03-12
Description: Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/29278; http://securityreason.com/securityalert/3731; http://www.securityfocus.com/archive/1/489291/100/0/threaded
CVE: CVE-2008-1302
Published: 2008-03-12
Description: The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value, which is used in an array initialization calculation, and leads to invalid memory access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-189
References: http://aluigi.altervista.org/adv/perforces-adv.txt; http://aluigi.org/poc/perforces.zip; http://secunia.com/advisories/29231
CVE: CVE-2008-1303
Published: 2008-03-12
Description: The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a missing parameter to the (1) dm-FaultFile, (2) dm-LazyCheck, (3) dm-ResolvedFile, (4) dm-OpenFile, (5) crypto, and possibly unspecified other commands, which triggers a NULL pointer dereference.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/perforces-adv.txt; http://aluigi.org/poc/perforces.zip; http://secunia.com/advisories/29231
CVE: CVE-2008-1304
Published: 2008-03-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.3.2 allow remote attackers to inject arbitrary web script or HTML via the (1) inviteemail parameter in an invite action to wp-admin/users.php and the (2) to parameter in a sent action to wp-admin/invites.php.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://securityreason.com/securityalert/3732; http://securitytracker.com/id?1019564; http://www.hackerscenter.com/index.php?/Latest-posts/114-WordPress-Multiple-Cross-Site-Scripting-Vulnerabilities.html?id=114
CVE: CVE-2008-1305
Published: 2008-03-12
Description: SQL injection vulnerability in filebase.php in the Filebase mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/28194; https://exchange.xforce.ibmcloud.com/vulnerabilities/41137; https://www.exploit-db.com/exploits/5236
CVE: CVE-2008-1306
Published: 2008-03-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in Savvy Content Manager (CM) allow remote attackers to inject arbitrary web script or HTML via the searchterms parameter to (1) searchresults.cfm, (2) search_results.cfm, and (3) search_results/index.cfm.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/29298; http://www.besavvy.com/blog/index.cfm/2008/3/11/Security-Patch; http://www.securityfocus.com/bid/28200
CVE: CVE-2008-1307
Published: 2008-03-12
Description: Heap-based buffer overflow in the KUpdateObj2 Class ActiveX control in UpdateOcx2.dll in Beijing KingSoft Antivirus Online Update Module 2007.12.29.29 allows remote attackers to execute arbitrary code via a long argument to the SetUninstallName method.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/29204; http://www.securityfocus.com/bid/28172; http://www.vupen.com/english/advisories/2008/0857/references
CVE: CVE-2008-1308
Published: 2008-03-12
Description: SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3733; http://www.securityfocus.com/archive/1/489387/100/0/threaded; http://www.securityfocus.com/bid/28197
CVE: CVE-2008-1309
Published: 2008-03-12
Description: The RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll in RealNetworks RealPlayer Enterprise, RealPlayer 10, RealPlayer 10.5 before build 6.0.12.1675, and RealPlayer 11 before 11.0.3 build 6.0.14.806 does not properly manage memory for the (1) Console or (2) Controls property, which allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via a series of assignments of long string values, which triggers an overwrite of freed heap memory.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.grok.org.uk/pipermail/full-disclosure/2008-March/060659.html; http://secunia.com/advisories/29315; http://service.real.com/realplayer/security/07252008_player/en/
CVE: CVE-2008-1310
Published: 2008-03-12
Description: Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname.
CVSS Score: 10.0 (HIGH)
CWE: CWE-22
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0315&w=2; http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt; http://secunia.com/advisories/29207
CVE: CVE-2008-1311
Published: 2008-03-12
Description: The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name.  NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://aluigi.altervista.org/adv/packettrash-adv.txt; http://aluigi.org/testz/tftpx.zip; http://secunia.com/advisories/29308
CVE: CVE-2008-1312
Published: 2008-03-12
Description: Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to cause a denial of service (daemon crash) via a long TFTP packet, a different vulnerability than CVE-2008-1311.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6868&w=2; http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-09.txt; http://secunia.com/advisories/29207
CVE: CVE-2008-1313
Published: 2008-03-12
Description: Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/29338; http://www.securityfocus.com/bid/28203; https://exchange.xforce.ibmcloud.com/vulnerabilities/41141
CVE: CVE-2008-1314
Published: 2008-03-12
Description: SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://cod3rz.helloweb.eu/exploits/gaestebuch.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3054&w=2; http://www.securityfocus.com/bid/28063
CVE: CVE-2008-1315
Published: 2008-03-13
Description: SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://securityreason.com/securityalert/3736; http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109; http://www.securityfocus.com/archive/1/489416/100/0/threaded
CVE: CVE-2008-1316
Published: 2008-03-13
Description: SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/29288; http://www.securityfocus.com/bid/28215; https://exchange.xforce.ibmcloud.com/vulnerabilities/41148
CVE: CVE-2008-1317
Published: 2008-03-13
Description: Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked I/O message queues.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/29352; http://sunsolve.sun.com/search/document.do?assetkey=1-26-231403-1; http://www.securityfocus.com/bid/28214
CVE: CVE-2008-1318
Published: 2008-03-13
Description: Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.wikimedia.org/pipermail/mediawiki-announce/2008-March/000070.html; http://secunia.com/advisories/29216; http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_11_2/phase3/RELEASE-NOTES
CVE: CVE-2008-1319
Published: 2008-03-13
Description: Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.
CVSS Score: 9.3 (HIGH)
References: http://aluigi.altervista.org/adv/versantcmd-adv.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2145&w=2; http://secunia.com/advisories/29230
CVE: CVE-2008-1320
Published: 2008-03-13
Description: Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://aluigi.altervista.org/adv/asgulo-adv.txt; http://secunia.com/advisories/29289; http://securityreason.com/securityalert/3737
CVE: CVE-2008-1321
Published: 2008-03-13
Description: The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-287
References: http://aluigi.altervista.org/adv/asgulo-adv.txt; http://secunia.com/advisories/29289; http://securityreason.com/securityalert/3737
CVE: CVE-2008-1322
Published: 2008-03-13
Description: The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability.
CVSS Score: 7.8 (HIGH)
References: http://aluigi.altervista.org/adv/asgulo-adv.txt; http://secunia.com/advisories/29289; http://securityreason.com/securityalert/3737
CVE: CVE-2008-1323
Published: 2008-03-13
Description: Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-352
References: http://securityreason.com/securityalert/3739; http://www.securityfocus.com/archive/1/489294/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/41098
CVE: CVE-2008-1324
Published: 2008-03-13
Description: Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters.  NOTE: this might be the same issue as CVE-2008-1325.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://securityreason.com/securityalert/3740; http://www.securityfocus.com/archive/1/489457/100/0/threaded; http://www.securityfocus.com/bid/28218
CVE: CVE-2008-1325
Published: 2008-03-13
Description: Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters.  NOTE: this might be the same issue as CVE-2008-1324.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.securityfocus.com/archive/1/489451/100/0/threaded; http://www.securityfocus.com/bid/28217; https://exchange.xforce.ibmcloud.com/vulnerabilities/41151
CVE: CVE-2008-1326
Published: 2008-03-13
Description: Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html; http://secunia.com/advisories/29399; http://www.securityfocus.com/bid/28163
CVE: CVE-2008-1327
Published: 2008-03-13
Description: Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://downloads.securityfocus.com/vulnerabilities/exploits/28163.html; http://secunia.com/advisories/29399; http://www.securityfocus.com/bid/28163
CVE: CVE-2007-6707
Published: 2008-03-13
Description: Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/43539; http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/; http://www.gnucitizen.org/projects/router-hacking-challenge/
CVE: CVE-2007-6708
Published: 2008-03-13
Description: Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by (1) a Restore Factory Defaults action using the mtenRestore parameter to setup.cgi and (2) creation of a user account using the sysname parameter to setup.cgi.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://osvdb.org/43537; http://osvdb.org/43538; http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/
CVE: CVE-2007-6709
Published: 2008-03-13
Description: The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/43536; http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/; http://www.gnucitizen.org/projects/router-hacking-challenge/