deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2010-1857
Published: 2010-05-07
Description: SQL injection vulnerability in index.php in RepairShop2 1.9.023 Trial, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the prod parameter in a products.details action.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://secunia.com/advisories/39043; http://www.securityfocus.com/bid/38907; http://www.us-cert.gov/cas/techalerts/TA10-159B.html
CVE: CVE-2010-1858
Published: 2010-05-07
Description: Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://packetstormsecurity.org/1003-exploits/joomlasmestorage-lfi.txt; http://secunia.com/advisories/39071; http://www.exploit-db.com/exploits/11853
CVE: CVE-2009-4854
Published: 2010-05-07
Description: addons/import.php in TalkBack 2.3.14 allows remote attackers to execute arbitrary commands via the result parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.exploit-db.com/exploits/9095; http://www.juniper.net/security/auto/vulnerabilities/vuln35619.html; http://www.packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt
CVE: CVE-2010-1859
Published: 2010-05-07
Description: SQL injection vulnerability in newpost.php in DeluxeBB 1.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the membercookie cookie when adding a new thread.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://php-security.org/2010/05/06/mops-2010-011-deluxebb-newthread-sql-injection-vulnerability/index.html; http://www.securityfocus.com/bid/39962; http://php-security.org/2010/05/06/mops-2010-011-deluxebb-newthread-sql-injection-vulnerability/index.html
CVE: CVE-2010-1860
Published: 2010-05-07
Description: The html_entity_decode function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal call, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-1861
Published: 2010-05-07
Description: The sysvshm extension for PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to write to arbitrary memory addresses by using an object's __sleep function to interrupt an internal call to the shm_put_var function, which triggers access of a freed resource.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-399
References: http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html; http://php-security.org/2010/05/05/mops-2010-009-php-shm_put_var-already-freed-resource-access-vulnerability/index.html
CVE: CVE-2010-1862
Published: 2010-05-07
Description: The chunk_split function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-1863
Published: 2010-05-07
Description: SQL injection vulnerability in the shoutbox module (modules/shoutbox.php) in ClanTiger 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the s_email parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://php-security.org/2010/05/04/mops-2010-007-clantiger-shoutbox-module-s_email-sql-injection-vulnerability/index.html; http://php-security.org/2010/05/04/mops-2010-007-clantiger-shoutbox-module-s_email-sql-injection-vulnerability/index.html
CVE: CVE-2010-1864
Published: 2010-05-07
Description: The addcslashes function in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information (memory contents) by causing a userspace interruption of an internal function, related to the call time pass by reference feature.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2507&w=2
CVE: CVE-2010-1865
Published: 2010-05-07
Description: Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the IP address to the cs_getip function in generate.php in the Captcha module, or (2) the s_email parameter to the cs_sql_select function in the MySQL database driver (mysql.php).
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/64320; http://osvdb.org/64321; http://php-security.org/2010/05/03/mops-2010-004-clansphere-captcha-generator-blind-sql-injection-vulnerability/index.html
CVE: CVE-2010-1866
Published: 2010-05-07
Description: The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html; http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html; http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
CVE: CVE-2010-1867
Published: 2010-05-07
Description: SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/64215; http://php-security.org/2010/05/01/mops-2010-002-campsite-tinymce-article-attachment-sql-injection-vulnerability/index.html; http://secunia.com/advisories/39580
CVE: CVE-2010-1868
Published: 2010-05-07
Description: The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to execute arbitrary code by calling these functions with an empty SQL query, which triggers access of uninitialized memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://php-security.org/2010/05/07/mops-2010-012-php-sqlite_single_query-uninitialized-memory-usage-vulnerability/index.html; http://php-security.org/2010/05/07/mops-2010-013-php-sqlite_array_query-uninitialized-memory-usage-vulnerability/index.html; http://php-security.org/2010/05/07/mops-submission-03-sqlite_single_query-sqlite_array_query-uninitialized-memory-usage/index.html
CVE: CVE-2009-4855
Published: 2010-05-11
Description: SQL injection vulnerability in index.php in TYPO3 4.0 allows remote attackers to execute arbitrary SQL commands via the showUid parameter. NOTE: the TYPO3 Security Team disputes this report, stating that "there is no such vulnerability... The showUid parameter is generally used in third-party TYPO3 extensions - not in TYPO3 Core.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secure.t3sec.info/blog/post/2009/08/06/typo3-cms-40-showuid-exploit-not-a-vulnerability/; http://www.exploit-db.com/exploits/9380; http://www.securityfocus.com/bid/35975
CVE: CVE-2009-4856
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in subitems.php in PHP Easy Shopping Cart 3.1R allows remote attackers to inject arbitrary web script or HTML via the name parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56835; http://packetstormsecurity.org/0908-exploits/pesc-xss.txt; http://secunia.com/advisories/36168
CVE: CVE-2009-4857
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in login.php in PHP Photo Vote 1.3F allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56828; http://packetstormsecurity.org/0908-exploits/ppv-xss.txt; http://secunia.com/advisories/36171
CVE: CVE-2009-4858
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in questiondetail.php in Yahoo Answers Clone allows remote attackers to inject arbitrary web script or HTML via the questionid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/yac-xss.txt; http://secunia.com/advisories/36239; http://packetstormsecurity.org/0908-exploits/yac-xss.txt
CVE: CVE-2009-4859
Published: 2010-05-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in Online Work Order Suite (OWOS) Lite Edition 3.10 allow remote attackers to inject arbitrary web script or HTML via the show parameter to (1) default.asp and (2) report.asp, and the (3) go parameter to login.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/owosasp-xss.txt; http://secunia.com/advisories/36244; http://packetstormsecurity.org/0908-exploits/owosasp-xss.txt
CVE: CVE-2009-4860
Published: 2010-05-11
Description: SQL injection vulnerability in demo.php in Typing Pal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idTableProduit parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9390; http://www.exploit-db.com/exploits/9390
CVE: CVE-2009-4861
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in shownews.php in SupportPRO SupportDesk 3.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/supportpro-xss.txt; http://secunia.com/advisories/36242; http://packetstormsecurity.org/0908-exploits/supportpro-xss.txt
CVE: CVE-2009-4862
Published: 2010-05-11
Description: Multiple SQL injection vulnerabilities in Alwasel 1.5 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) show.php and (2) xml.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9384; https://exchange.xforce.ibmcloud.com/vulnerabilities/52326; http://www.exploit-db.com/exploits/9384
CVE: CVE-2009-4863
Published: 2010-05-11
Description: Stack-based buffer overflow in UltraPlayer Media Player 2.112 allows remote attackers to execute arbitrary code via a long string in a .usk file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/9368; http://www.securityfocus.com/bid/35956; http://www.vupen.com/english/advisories/2009/2160
CVE: CVE-2009-4864
Published: 2010-05-11
Description: Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script allow remote attackers to inject arbitrary web script or HTML via the (1) search_name and (2) languages parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/des-xss.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/52303; http://packetstormsecurity.org/0908-exploits/des-xss.txt
CVE: CVE-2009-4865
Published: 2010-05-11
Description: Multiple SQL injection vulnerabilities in escorts_search.php in I-Escorts Directory Script and Agency Script, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) search_name and (2) languages parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-89
References: http://osvdb.org/56858; http://packetstormsecurity.org/0908-exploits/des-xss.txt; http://secunia.com/advisories/36161
CVE: CVE-2009-4866
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://osvdb.org/56798; http://packetstormsecurity.org/0908-exploits/simplesearch-xss.txt; http://secunia.com/advisories/36178
CVE: CVE-2009-4867
Published: 2010-05-11
Description: Buffer overflow in Tuniac 090517c allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long URL in a .m3u playlist file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119
References: http://www.exploit-db.com/exploits/9364; http://www.vupen.com/english/advisories/2009/2159; https://exchange.xforce.ibmcloud.com/vulnerabilities/52280
CVE: CVE-2009-4868
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in Hitron Soft Answer Me 1.0 allows remote attackers to inject arbitrary web script or HTML via the q_id parameter to the answers script (aka answers.php).  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/hitronsam-xss.txt; http://secunia.com/advisories/36247; http://packetstormsecurity.org/0908-exploits/hitronsam-xss.txt
CVE: CVE-2009-4869
Published: 2010-05-11
Description: Cross-site scripting (XSS) vulnerability in index.php in Nasim Guest Book 1.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/0908-exploits/nasimgb-xss.txt; http://secunia.com/advisories/36246; http://packetstormsecurity.org/0908-exploits/nasimgb-xss.txt
CVE: CVE-2009-4870
Published: 2010-05-11
Description: Multiple SQL injection vulnerabilities in login.php in PHPCityPortal allow remote attackers to execute arbitrary SQL commands via the (1) req_username (aka Username) and (2) req_password (aka Password) parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/36210; http://www.exploit-db.com/exploits/9395; http://secunia.com/advisories/36210
CVE: CVE-2009-4871
Published: 2010-05-11
Description: SQL injection vulnerability in globepersonnel_forum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9389; https://exchange.xforce.ibmcloud.com/vulnerabilities/52330; http://www.exploit-db.com/exploits/9389
CVE: CVE-2009-4872
Published: 2010-05-11
Description: Multiple SQL injection vulnerabilities in globepersonnel_login.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password fields.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://www.exploit-db.com/exploits/9399; http://www.exploit-db.com/exploits/9399
CVE: CVE-2010-1872
Published: 2010-05-12
Description: Cross-site scripting (XSS) vulnerability in cPlayer.php in FlashCard 2.6.5 and 3.0.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.org/1004-exploits/flashcard-xss.txt; http://secunia.com/advisories/39484; http://www.securityfocus.com/bid/39648
CVE: CVE-2010-1873
Published: 2010-05-12
Description: SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://indonesiancoder.org/joomla-component-jvehicles-aid-sql-injection-vulnerability; http://packetstormsecurity.org/1004-exploits/joomlajvehicles-sql.txt; http://secunia.com/advisories/39401
CVE: CVE-2010-1874
Published: 2010-05-12
Description: SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/39074; http://www.exploit-db.com/exploits/12136; http://www.securityfocus.com/bid/39374
CVE: CVE-2010-1875
Published: 2010-05-12
Description: Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://secunia.com/advisories/39074; http://www.exploit-db.com/exploits/11851; http://www.osvdb.org/63143
CVE: CVE-2010-1876
Published: 2010-05-12
Description: SQL injection vulnerability in index.php in AJ Shopping Cart 1.0 allows remote attackers to execute arbitrary SQL commands via the maincatid parameter in a showmaincatlanding action.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1004-exploits/ajshoppingcart-sql.txt; http://secunia.com/advisories/39551; http://www.exploit-db.com/exploits/12349
CVE: CVE-2010-1877
Published: 2010-05-12
Description: SQL injection vulnerability in the JTM Reseller (com_jtm) component 1.9 Beta for Joomla! allows remote attackers to execute arbitrary SQL commands via the author parameter in a search action to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://packetstormsecurity.org/1004-exploits/joomlajtmreseller-sql.txt; http://www.exploit-db.com/exploits/12306; http://www.securityfocus.com/bid/39584
CVE: CVE-2010-1878
Published: 2010-05-12
Description: Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.org/1004-exploits/joomlaorgchart-lfi.txt; http://www.exploit-db.com/exploits/12317; http://www.securityfocus.com/bid/39606
CVE: CVE-2010-0730
Published: 2010-05-12
Description: The MMIO instruction decoder in the Xen hypervisor in the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows guest OS users to cause a denial of service (32-bit guest OS crash) via vectors that trigger an unspecified instruction emulation.
CVSS Score: 2.6 (LOW)
CWE: CWE-20
References: http://secunia.com/advisories/39649; http://secunia.com/advisories/43315; http://support.avaya.com/css/P8/documents/100088287
CVE: CVE-2010-1455
Published: 2010-05-12
Description: The DOCSIS dissector in Wireshark 0.9.6 through 1.0.12 and 1.2.0 through 1.2.7 allows user-assisted remote attackers to cause a denial of service (application crash) via a malformed packet trace file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00003.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/39661
CVE: CVE-2010-1481
Published: 2010-05-12
Description: Cross-site scripting (XSS) vulnerability in the table feature in PmWiki 2.2.15 allows remote authenticated users to inject arbitrary web script or HTML via the width attribute.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: http://int21.de/cve/CVE-2010-1481-pmwiki-xss.html; http://secunia.com/advisories/39698; http://www.securityfocus.com/archive/1/511177/100/0/threaded
CVE: CVE-2010-1905
Published: 2010-05-12
Description: Multiple cross-site scripting (XSS) vulnerabilities in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allow remote attackers to inject arbitrary web script or HTML via crafted input to ASP pages, as demonstrated using the backurl parameter to sdccommon/verify/asp/n6plugindestructor.asp.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://secunia.com/advisories/39740; http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html; http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
CVE: CVE-2010-1906
Published: 2010-05-12
Description: tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
CVSS Score: 7.2 (HIGH)
CWE: CWE-310
References: http://secunia.com/advisories/39752; http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html; http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
CVE: CVE-2010-1907
Published: 2010-05-12
Description: The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to discover the username of the client user, and consequently determine a pathname to a certain user directory, via a call to the GetUserName method.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html; http://www.kb.cert.org/vuls/id/602801; http://www.securityfocus.com/archive/1/511176/100/0/threaded
CVE: CVE-2010-1908
Published: 2010-05-12
Description: The SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance does not properly restrict access to the HTTPDownloadFile, HTTPGetFile, Install, and RunCmd methods, which allows remote attackers to execute arbitrary programs via a URL in the url argument to (1) HTTPDownloadFile or (2) HTTPGetFile.
CVSS Score: 9.3 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/39751; http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html; http://www.kb.cert.org/vuls/id/602801
CVE: CVE-2010-1909
Published: 2010-05-12
Description: Buffer overflow in the RunCmd method in the SdcUser.TgConCtl ActiveX control in tgctlcm.dll in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to execute arbitrary code via vectors involving "CreateProcess params." NOTE: some of these details are obtained from third party information.
CVSS Score: 7.6 (HIGH)
CWE: CWE-119
References: http://secunia.com/advisories/39751; http://wintercore.com/en/component/content/article/7-media/18-wintercore-releases-an-advisory-for-consona-products.html; http://www.kb.cert.org/vuls/id/602801