deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3657
Published: 2005-12-21
Description: The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Security Center does not use the IObjectSafetySiteLock API to restrict access to required domains, which allows remote attackers to create or append to arbitrary files via the StartLog and AddLog methods in the MCINSTALL.McLog object.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18169; http://securityreason.com/securityalert/279; http://securitytracker.com/id?1015390
CVE: CVE-2005-4267
Published: 2005-12-21
Description: Stack-based buffer overflow in Qualcomm WorldMail 3.0 allows remote attackers to execute arbitrary code via a long IMAP command that ends with a "}" character, as demonstrated using long (1) LIST, (2) LSUB, (3) SEARCH TEXT, (4) STATUS INBOX, (5) AUTHENTICATE, (6) FETCH, (7) SELECT, and (8) COPY commands.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://seclists.org/lists/fulldisclosure/2005/Dec/1037.html; http://secunia.com/advisories/17640; http://securityreason.com/securityalert/277
CVE: CVE-2005-4448
Published: 2005-12-21
Description: FlatNuke 2.5.6 verifies authentication credentials based on an MD5 checksum of the admin name and the hashed password rather than the plaintext password, which allows attackers to gain privileges by obtaining the password hash (possibly via CVE-2005-2813), then calculating the credentials and including them in the secid cookie.
CVSS Score: 10.0 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup; http://securitytracker.com/id?1015339; http://www.securityfocus.com/archive/1/419107
CVE: CVE-2005-4449
Published: 2005-12-21
Description: verify.php in FlatNuke 2.5.6 allows remote authenticated administrators to modify arbitrary PHP files by setting the file parameter to an arbitrary file and injecting the code into the body parameter.  NOTE: if a FlatNuke administrator is normally assumed to be able to modify arbitrary content, then this issue does not cross privilege boundaries and would not be a vulnerability.
CVSS Score: 4.0 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/flatnuke/flatnuke/Changelog?rev=1.78&view=markup; http://securityreason.com/securityalert/248; http://securitytracker.com/id?1015339
CVE: CVE-2005-4450
Published: 2005-12-21
Description: Cross-site request forgery (CSRF) vulnerability in phpMyAdmin 2.7.0 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag to server_privileges.php, as demonstrated using the dbname and checkprivs parameters.  NOTE: the provenance of this issue is unknown, although third parties imply that it is related to the disclosure of CVE-2005-4349, which was labeled as SQL injection but disputed.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18113; http://secunia.com/advisories/18113
CVE: CVE-2005-4451
Published: 2005-12-21
Description: Unspecified vulnerability in Software Distributor in HP-UX B.11.11 allows remote attackers to gain access via unspecified attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18180; http://secunia.com/advisories/18418; http://securitytracker.com/id?1015381
CVE: CVE-2005-4452
Published: 2005-12-21
Description: Information Call Center stores the CallCenterData.mdb database under the web root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18159; https://exchange.xforce.ibmcloud.com/vulnerabilities/23862; http://secunia.com/advisories/18159
CVE: CVE-2005-4453
Published: 2005-12-21
Description: UserProfile.cs in Ultraapps Issue Manager before 2.1 allows remote authenticated users to gain administrator privileges by modifying the original (1) p_User_user_id and (2) User_user_id parameters to UserProfile.aspx, then modifying the password field.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/18174; http://www.irmplc.com/advisory013.htm; http://www.securityfocus.com/archive/1/419910/100/0/threaded
CVE: CVE-2005-4454
Published: 2005-12-21
Description: Validate-before-filter vulnerability in cleanhtml.pl 1.129 in LiveJournal CVS before Dec 7 2005, when the cleancss option is enabled, allows remote attackers to conduct cross-site scripting (XSS) attacks via a "\" (backslash) within a "javascript" scheme in a style property (such as "javas\cript"), which bypasses the "javascript" check before the "\" is stripped and then rendered in web browsers that allow scripting in style sheets.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1000.html; http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1972&w=2
CVE: CVE-2005-4455
Published: 2005-12-21
Description: cleanhtml.pl 1.129 in LiveJournal CVS before Dec 13 2005 allows remote attackers to inject scripting languages via the XSL namespace in XML, via vectors such as customview.cgi.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl; http://secunia.com/advisories/18157; http://cvs.livejournal.org/browse.cgi/livejournal/cgi-bin/cleanhtml.pl
CVE: CVE-2005-4456
Published: 2005-12-21
Description: Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands.  NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html; http://secunia.com/advisories/18134; http://www.securityfocus.com/bid/15985
CVE: CVE-2005-4457
Published: 2005-12-21
Description: MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.
CVSS Score: 7.5 (HIGH)
References: http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html; http://secunia.com/advisories/18134; http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html
CVE: CVE-2005-4458
Published: 2005-12-21
Description: Group.pm in Metadot Portal Server 6.4.4 and earlier does not properly reset the $IS_OWNER, $IS_ADMIN, and $IS_MANAGER global variables when performing checks for special privileges, which allows users to gain administrator privileges by adding themselves to the SITE_MGR group.
CVSS Score: 9.0 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html; http://secunia.com/advisories/18137; http://securityreason.com/securityalert/287
CVE: CVE-2005-4459
Published: 2005-12-21
Description: Heap-based buffer overflow in the NAT networking components vmnat.exe and vmnet-natd in VMWare Workstation 5.5, GSX Server 3.2, ACE 1.0.1, and Player 1.0 allows remote authenticated attackers, including guests, to execute arbitrary code via crafted (1) EPRT and (2) PORT FTP commands.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040442.html; http://secunia.com/advisories/18162; http://secunia.com/advisories/18344
CVE: CVE-2005-4460
Published: 2005-12-21
Description: Cross-site scripting (XSS) vulnerability in Beehive Forum 0.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) Description, and (3) Comment fields to (a) links.php and (b) links_add.php.
CVSS Score: 5.1 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log; http://secunia.com/advisories/18154; http://www.securityfocus.com/archive/1/419988/100/0/threaded
CVE: CVE-2005-4461
Published: 2005-12-21
Description: SQL injection vulnerability in index.php in Beehive Forum 0.6.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user_sess parameter.
CVSS Score: 7.5 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/beehiveforum/beehiveforum/forum/index.php?rev=1.121&view=log; http://kapda.ir/advisory-158.html; http://securityreason.com/securityalert/284
CVE: CVE-2005-4462
Published: 2005-12-21
Description: PHP remote file include vulnerability in usermods.php in Tolva PHP website system 0.1.0 allows remote attackers to execute arbitrary code via a URL in the ROOT parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/288; http://www.securityfocus.com/archive/1/419992/100/0/threaded; http://www.securityfocus.com/bid/16000
CVE: CVE-2005-4463
Published: 2005-12-21
Description: WordPress before 1.5.2 allows remote attackers to obtain sensitive information via a direct request to (1) wp-includes/vars.php, (2) wp-content/plugins/hello.php, (3) wp-admin/upgrade-functions.php, (4) wp-admin/edit-form.php, (5) wp-settings.php, and (6) wp-admin/edit-form-comment.php, which leaks the path in an error message related to undefined functions or failed includes.  NOTE: the wp-admin/menu-header.php vector is already covered by CVE-2005-2110. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors were also reported to affect WordPress 2.0.1.
CVSS Score: 5.0 (MEDIUM)
References: http://NeoSecurityTeam.net/advisories/Advisory-17.txt; http://echo.or.id/adv/adv24-theday-2005.txt; http://securityreason.com/securityalert/286
CVE: CVE-2005-4464
Published: 2005-12-22
Description: Ingate Firewall before 4.3.4 and SIParator before 4.3.4 allows remote attackers to cause a denial of service (kernel deadlock) by sending a SYN packet for a TCP stream, which requires an RST packet in response.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/18138; http://www.ingate.com/relnote-434.php; http://www.securityfocus.com/bid/16023
CVE: CVE-2005-4465
Published: 2005-12-22
Description: The Internet Key Exchange version 1 (IKEv1) implementation in NEC UNIVERGE IX1000, IX2000, and IX3000 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in the advisory, it is unclear which of CVE-2005-3666, CVE-2005-3667, and/or CVE-2005-3668 this issue applies to.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18166; http://www.securityfocus.com/bid/16027; http://www.sw.nec.co.jp/ixseries/ix1k2k/Support/CERT/NISCC273756.html
CVE: CVE-2005-4466
Published: 2005-12-22
Description: Heap-based buffer overflow in the SIPParser function in i3sipmsg.dll in Interaction SIP Proxy before 3.0.011 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a REGISTER request with a SPI version number that contains a large number of space or tab characters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18197; http://securityreason.com/securityalert/281; http://securitytracker.com/id?1015392
CVE: CVE-2005-4467
Published: 2005-12-22
Description: Directory traversal vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the PGV_BASE_DIRECTORY parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64; http://rgod.altervista.org/phpgedview_337_xpl.html; http://secunia.com/advisories/18177
CVE: CVE-2005-4468
Published: 2005-12-22
Description: PHP remote file include vulnerability in help_text_vars.php in PHPGedView 3.3.7 and earlier allows remote attackers to execute arbitrary code via a URL in the PGV_BASE_DIRECTORY parameter.
CVSS Score: 7.5 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/help_text_vars.php?r1=1.63&r2=1.64; http://rgod.altervista.org/phpgedview_337_xpl.html; http://secunia.com/advisories/18177
CVE: CVE-2005-4469
Published: 2005-12-22
Description: Multiple direct static code injection vulnerabilities in PHPGedView 3.3.7 and earlier allow remote attackers to execute arbitrary PHP code via (1) the username field in login.php, or the (2) user_language, (3) user_email, and (4) user_gedcomid parameters in login_register.php, which is directly inserted into authenticate.php.
CVSS Score: 7.5 (HIGH)
References: http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.35&r2=1.71.2.36; http://cvs.sourceforge.net/viewcvs.py/phpgedview/phpGedView/login_register.php?r1=1.71.2.36&r2=1.71.2.37; http://rgod.altervista.org/phpgedview_337_xpl.html
CVE: CVE-2005-4470
Published: 2005-12-22
Description: Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18176; http://secunia.com/advisories/18178; http://secunia.com/advisories/18452
CVE: CVE-2005-4471
Published: 2005-12-22
Description: POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP 4 and earlier allows remote attackers to cause a denial of service (infinite loop) via crafted packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18204; http://support.avaya.com/elmodocs2/security/ASA-2005-235.pdf; http://www.securityfocus.com/bid/16024
CVE: CVE-2005-4472
Published: 2005-12-22
Description: Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/18077; http://securityreason.com/securityalert/283; http://securitytracker.com/id?1015370
CVE: CVE-2005-4473
Published: 2005-12-22
Description: Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/18077; http://securitytracker.com/id?1015370; http://www.macromedia.com/devnet/security/security_zone/mpsb05-13.html
CVE: CVE-2005-4474
Published: 2005-12-22
Description: Buffer overflow in the "Add to archive" command in WinRAR 3.51 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by tricking the user into adding a file whose filename contains a non-default code page and non-ANSI characters, as demonstrated using a Chinese filename, possibly due to buffer expansion when using the WideCharToMultiByte API.  NOTE: it is not clear whether this problem can be exploited for code execution. If not, then perhaps the user-assisted nature of the attack should exclude the issue from inclusion in CVE.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/290; http://www.securityfocus.com/archive/1/420006/100/0/threaded; http://www.securityfocus.com/bid/15999
CVE: CVE-2005-3631
Published: 2005-12-22
Description: udev does not properly set permissions on certain files in /dev/input, which allows local users to obtain sensitive data that is entered at the console, such as user passwords.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-264
References: http://secunia.com/advisories/18193; http://securitytracker.com/id?1015386; http://www.redhat.com/support/errata/RHSA-2005-864.html
CVE: CVE-2005-4475
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in OpenCms 6.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/opencms-xss-vuln.html; http://www.osvdb.org/21877; http://www.securityfocus.com/bid/16003
CVE: CVE-2005-4476
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in store/search/results.html in OpenEdit 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) oe-action and (2) page parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/openedit-xss-vuln.html; http://secunia.com/advisories/18168; http://www.osvdb.org/21866
CVE: CVE-2005-4477
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in papaya CMS 4.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the bab[searchfor] parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/papaya-cms-xss-vuln.html; http://www.osvdb.org/21872; http://www.securityfocus.com/bid/16005
CVE: CVE-2005-4478
Published: 2005-12-22
Description: Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) menuid parameter to (a) index.php and (b) guestbook.php, and the (2) forumid and (3) reporeid_print parameters to (c) print.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://pridels0.blogspot.com/2005/12/papoo-multiple-sql-vuln.html; http://secunia.com/advisories/18152; http://www.osvdb.org/21869
CVE: CVE-2005-4479
Published: 2005-12-22
Description: SQL injection vulnerability in article.php in phpSlash 0.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the story_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/phpslash-sql-vuln.html; http://secunia.com/advisories/18150; http://www.osvdb.org/21873
CVE: CVE-2005-4480
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in Plexcor CMS 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/plexcors-cms-xss-vuln.html; http://www.osvdb.org/21876; http://www.securityfocus.com/bid/16006
CVE: CVE-2005-4481
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in Polopoly 9 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. NOTE: the vendor has disputed this vulnerability, stating that the "XSS flaw was only part of the custom implementation of the [polopoly] site".  As of 20061003, CVE has no further information on this issue, except that the original researcher has a history of testing live sites and assuming that discoveries indicate vulnerabilities in the associated package
CVSS Score: 6.8 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-September/001056.html; http://pridels0.blogspot.com/2005/12/polopoly-xss-vuln.html; http://www.osvdb.org/21878
CVE: CVE-2005-4482
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in login.asp in PortalApp 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/portalapp-xss-vuln.html; http://secunia.com/advisories/18201; http://www.osvdb.org/21880
CVE: CVE-2005-4483
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in login.asp in SiteEnable 3.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the ret_page parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/siteenable-xss-vuln.html; http://secunia.com/advisories/18201; http://www.osvdb.org/21879
CVE: CVE-2005-4484
Published: 2005-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in IntranetApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ret_page parameter to login.asp or the (2) do_search and (3) search parameters to content.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/intranetapp-xss-vuln.html; http://secunia.com/advisories/18200; http://www.securityfocus.com/bid/16010
CVE: CVE-2005-4485
Published: 2005-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in ProjectApp 3.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp, (2) search_employees.asp, (3) cat.asp, and (4) links.asp; (5) projectid parameter to pmprojects.asp, (6) ret_page parameter to login.asp, and (7) skin_number parameter to default.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://pridels0.blogspot.com/2005/12/projectapp-mutliple-xss-vuln.html; http://secunia.com/advisories/18199; http://www.osvdb.org/21962
CVE: CVE-2005-4486
Published: 2005-12-22
Description: SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_news_id parameter to (1) news_and_events_new.asp and (2) news.asp.  NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the p_news_id, news_and_events_new.asp, and news.asp are not specifically part of their product, although they could be dynamically generated through use of the product.  Some investigation by CVE suggests evidence that the news_and_events_new.asp page has at least a forced invalid SQL syntax error, but this could not be repeated for news.asp
CVSS Score: 7.5 (HIGH)
References: http://pridels0.blogspot.com/2005/12/qp7enterprise-sql-vuln.html; http://www.osvdb.org/22069; http://www.osvdb.org/22070
CVE: CVE-2005-4487
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in RAMSite R|1 CMS 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchfield parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/ramsite-r1-cms-xss-vuln.html; http://secunia.com/advisories/18196; http://www.securityfocus.com/bid/16012
CVE: CVE-2005-4488
Published: 2005-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.tpl in Redakto WCMS 3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) iid, (2) iid2, (3) r, (4) cart, (5) str, (6) nf, and (7) a parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/redakto-wcms-multiple-xss-vuln.html; http://secunia.com/advisories/18195; http://www.securityfocus.com/bid/16013
CVE: CVE-2005-4489
Published: 2005-12-22
Description: Cross-site scripting (XSS) vulnerability in Scoop 1.1 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) type and (2) count parameters, and (3) the query string in a story.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/scoop-xss-vuln.html; http://secunia.com/advisories/18182; http://www.osvdb.org/21944
CVE: CVE-2005-4490
Published: 2005-12-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in SCOOP! 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) keyword and (2) invalid parameter to articleSearch.asp; (3) username and (4) invalid parameter to lostPassword.asp; (5) Username, (6) Password, and (7) invalid parameter to account_login.asp; (8) area, (9) articleZoneID, (10) r, and (11) invalid parameters to category.asp; and invalid parameters to (12) articleZone.asp, (13) prePurchaserRegistration.asp, and (14) requestDemo.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2005/12/scoop-multiple-xss-vuln.html; http://www.securityfocus.com/bid/16015; http://www.vupen.com/english/advisories/2005/3049