deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-2740
Published: 2006-06-01
Description: Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20356; http://securityreason.com/securityalert/1011; http://securitytracker.com/id?1016172
CVE: CVE-2006-2741
Published: 2006-06-01
Description: Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/1011; http://securitytracker.com/id?1016172; http://www.nukedx.com/?getxpl=33
CVE: CVE-2006-2742
Published: 2006-06-01
Description: SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc.
CVSS Score: 7.5 (HIGH)
References: http://drupal.org/node/65357; http://secunia.com/advisories/20140; http://secunia.com/advisories/21244
CVE: CVE-2006-2743
Published: 2006-06-01
Description: Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory.
CVSS Score: 5.1 (MEDIUM)
References: http://drupal.org/node/65409; http://secunia.com/advisories/20140; http://secunia.com/advisories/21244
CVE: CVE-2006-2744
Published: 2006-06-01
Description: PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20358; http://securityreason.com/securityalert/1010; http://www.nukedx.com/?getxpl=35
CVE: CVE-2006-2745
Published: 2006-06-01
Description: Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20358; http://securityreason.com/securityalert/1010; http://www.nukedx.com/?getxpl=35
CVE: CVE-2006-2746
Published: 2006-06-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao.  NOTE: vectors 2 and 3 might be resultant from file inclusion issues.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20358; http://securityreason.com/securityalert/1010; http://www.nukedx.com/?getxpl=35
CVE: CVE-2006-2747
Published: 2006-06-01
Description: Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrary files or execute PHP code via a .. (dot dot) sequence and trailing null (%00) byte in the subsite parameter in a showsubsite todo.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20373; http://securityreason.com/securityalert/1009; http://securitytracker.com/id?1016180
CVE: CVE-2006-2748
Published: 2006-06-01
Description: SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the (1) type parameter in adminfunctions.php and the (2) catalogue_id parameter in editcatalogue.php.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20341; http://securityreason.com/securityalert/1014; http://securitytracker.com/id?1016178
CVE: CVE-2006-2749
Published: 2006-06-01
Description: SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20341; http://securityreason.com/securityalert/1014; http://securitytracker.com/id?1016178
CVE: CVE-2006-2750
Published: 2006-06-01
Description: Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/20341; http://securityreason.com/securityalert/1014; http://securitytracker.com/id?1016178
CVE: CVE-2006-2751
Published: 2006-06-01
Description: Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1014; http://sourceforge.net/forum/forum.php?forum_id=576483; http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477
CVE: CVE-2006-2752
Published: 2006-06-01
Description: The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20396; http://www.securityfocus.com/archive/1/435491/100/0/threaded; http://secunia.com/advisories/20396
CVE: CVE-2006-2753
Published: 2006-06-01
Description: SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735; http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
CVE: CVE-2006-2754
Published: 2006-06-01
Description: Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/20126; http://secunia.com/advisories/20495; http://secunia.com/advisories/20685
CVE: CVE-2006-2308
Published: 2006-06-02
Description: Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other user's email messages, create/rename arbitrary directories on the system, and delete empty directories via directory traversal sequences in the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY or (6) APPEND commands.
CVSS Score: 5.5 (MEDIUM)
References: http://secunia.com/advisories/20059; http://secunia.com/secunia_research/2006-37/advisory/; http://securityreason.com/securityalert/1006
CVE: CVE-2006-2309
Published: 2006-06-02
Description: The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests containing dot, space, and slash characters, which reveals the source code of script files.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/20059; http://secunia.com/secunia_research/2006-37/advisory/; http://securityreason.com/securityalert/1006
CVE: CVE-2006-2654
Published: 2006-06-02
Description: Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences.  NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20390; http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc; http://securitytracker.com/id?1016194
CVE: CVE-2006-2655
Published: 2006-06-02
Description: The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20389; http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc; http://securitytracker.com/id?1016193
CVE: CVE-2006-2755
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/1007; http://www.nukedx.com/?viewdoc=40; http://www.securityfocus.com/archive/1/435288/100/0/threaded
CVE: CVE-2006-2756
Published: 2006-06-02
Description: Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request.  NOTE: CVE analysis suggests that this is a different product, and therefore a different vulnerability, than CVE-2002-1897.
CVSS Score: 5.0 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0722.html; http://seclists.org/lists/bugtraq/2006/May/0563.html; http://seclists.org/lists/bugtraq/2006/May/0601.html
CVE: CVE-2006-2757
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/50345; http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt; http://securityreason.com/securityalert/1008
CVE: CVE-2006-2758
Published: 2006-06-02
Description: Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.  NOTE: this might be the same issue as CVE-2005-3747.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://securitytracker.com/id?1016168; http://securitytracker.com/id?1016168
CVE: CVE-2006-2759
Published: 2006-06-02
Description: jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
CVSS Score: 5.0 (MEDIUM)
References: http://securitytracker.com/id?1016168; http://securitytracker.com/id?1016168
CVE: CVE-2006-2760
Published: 2006-06-02
Description: SQL injection vulnerability in modules.php in 4nNukeWare 4nForum 0.91 allows remote attackers to execute arbitrary SQL commands via the tid parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/31059; http://secunia.com/advisories/20374; http://www.securityfocus.com/archive/1/435363/30/0/threaded
CVE: CVE-2006-2761
Published: 2006-06-02
Description: SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20347; http://securitytracker.com/id?1016190; http://www.hitachi-support.com/security_e/vuls_e/HS06-011_e/index-e.html
CVE: CVE-2006-2762
Published: 2006-06-02
Description: PHP remote file inclusion vulnerability in includes/config.php in WebCalendar 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter, which is remotely accessed in an fopen call whose results are used to define a user_inc setting that is used in an include_once call.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20367; http://secunia.com/advisories/20542; http://securityreason.com/securityalert/1019
CVE: CVE-2006-2763
Published: 2006-06-02
Description: SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  It is possible that this is primary to CVE-2006-2678.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20284; http://www.osvdb.org/26073; http://www.osvdb.org/26074
CVE: CVE-2006-2764
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in GuestbookXL 1.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in an IMG tag in a comment field to (1) guestwrite.php or (2) guestbook.php.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0526.html; http://securityreason.com/securityalert/1017; https://exchange.xforce.ibmcloud.com/vulnerabilities/26689
CVE: CVE-2006-2765
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inject arbitrary web script or HTML via the flag parameter.
CVSS Score: 2.6 (LOW)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0395.html; http://securityreason.com/securityalert/1016; http://www.attrition.org/pipermail/vim/2006-June/000804.html
CVE: CVE-2006-2662
Published: 2006-06-02
Description: VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges.
CVSS Score: 4.6 (MEDIUM)
References: http://securitytracker.com/id?1016200; http://www.securityfocus.com/archive/1/435709/100/0/threaded; http://www.securityfocus.com/bid/18236
CVE: CVE-2006-2766
Published: 2006-06-02
Description: Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service (application crash) via a long mhtml URI in the URL value in a URL file.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/20384; http://securitytracker.com/id?1016654; http://www.kb.cert.org/vuls/id/891204
CVE: CVE-2006-2767
Published: 2006-06-02
Description: PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the default_path parameter in (1) error.php, (2) index.php, and (3) classes/main_class.php.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/20399; http://www.osvdb.org/25916; http://www.osvdb.org/25917
CVE: CVE-2006-2768
Published: 2006-06-02
Description: PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) system_path parameter in a large number of files in the (a) app/edocument/, (b) app/eproject/, (c) app/erek/, and (d) extension/ directories, and the (2) GLOBALS[system_path] parameter in (e) extension/sitemap/sitemap.datatype.php.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/20404; http://www.securityfocus.com/bid/18211; http://www.vupen.com/english/advisories/2006/2077
CVE: CVE-2006-2769
Published: 2006-06-02
Description: The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent" rules via a carriage return (\r) after the URL and before the HTTP declaration.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-264
References: http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html; http://marc.info/?l=snort-devel&m=[PII_REDACTED]1462&w=2; http://secunia.com/advisories/20413
CVE: CVE-2006-2770
Published: 2006-06-02
Description: Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an index of the "file" array parameter, as demonstrated by file[0].
CVSS Score: 5.4 (MEDIUM)
References: http://retrogod.altervista.org/pppblog_038_xpl.html; http://secunia.com/advisories/20375; http://securityreason.com/securityalert/1015
CVE: CVE-2006-2771
Published: 2006-06-02
Description: admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attackers to delete arbitrary posts via a modified delID parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://colander.altervista.org/advisory/HTGuestBook2.txt; http://secunia.com/advisories/20402; http://www.securityfocus.com/bid/18205
CVE: CVE-2006-2772
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in add.asp in Hogstorps hogstorp guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) headline parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/20402; http://www.securityfocus.com/bid/18203; http://www.vupen.com/english/advisories/2006/2082
CVE: CVE-2006-2773
Published: 2006-06-02
Description: admin/redigera/redigera2.asp in Hogstorps hogstorp Guestbook 2.0 does not verify user credentials, which allows remote attackers to edit arbitrary posts via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/20402; http://www.vupen.com/english/advisories/2006/2082; https://exchange.xforce.ibmcloud.com/vulnerabilities/26979
CVE: CVE-2006-2774
Published: 2006-06-02
Description: Cross-site scripting (XSS) vulnerability in search.php in QontentOne CMS allows remote attackers to inject arbitrary web script or HTML via the search_phrase parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-05/0685.html; http://secunia.com/advisories/20392; http://securitytracker.com/id?1016195
CVE: CVE-2006-2775
Published: 2006-06-02
Description: Mozilla Firefox and Thunderbird before 1.5.0.4 associates XUL attributes with the wrong URL under certain unspecified circumstances, which might allow remote attackers to bypass restrictions by causing a persisted string to be associated with the wrong URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://secunia.com/advisories/20376; http://secunia.com/advisories/20382; http://secunia.com/advisories/20561
CVE: CVE-2006-2776
Published: 2006-06-02
Description: Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object prototype, which allows remote attackers to execute code at a higher privilege than intended.
CVSS Score: 7.5 (HIGH)
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20382
CVE: CVE-2006-2777
Published: 2006-06-02
Description: Unspecified vulnerability in Mozilla Firefox before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to execute arbitrary code by using the nsISelectionPrivate interface of the Selection object to add a SelectionListener and create notifications that are executed in a privileged context.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/20376; http://secunia.com/advisories/20394; http://secunia.com/advisories/20561
CVE: CVE-2006-2778
Published: 2006-06-02
Description: The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbitrary code via certain optional Certificate Authority name arguments, which causes an invalid array index and triggers a buffer overflow.
CVSS Score: 5.0 (MEDIUM)
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20382
CVE: CVE-2006-2779
Published: 2006-06-02
Description: Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) nested <option> tags in a select tag, (2) a DOMNodeRemoved mutation event, (3) "Content-implemented tree views," (4) BoxObjects, (5) the XBL implementation, (6) an iframe that attempts to remove itself, which leads to memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20382
CVE: CVE-2006-2780
Published: 2006-06-02
Description: Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via "jsstr tagify," which leads to memory corruption.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20382
CVE: CVE-2006-2781
Published: 2006-06-02
Description: Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote attackers to cause a denial of service (hang) and possibly execute arbitrary code via a VCard that contains invalid base64 characters.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-119
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20382; http://secunia.com/advisories/20394
CVE: CVE-2006-2782
Published: 2006-06-02
Description: Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20561
CVE: CVE-2006-2783
Published: 2006-06-02
Description: Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the page is passed to the parser, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a BOM sequence in the middle of a dangerous tag such as SCRIPT.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2008//Jul/msg00001.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://rhn.redhat.com/errata/RHSA-2006-0609.html
CVE: CVE-2006-2784
Published: 2006-06-02
Description: The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privileged code by tricking a user into installing missing plugins and selecting the "Manual Install" button, then using nested javascript: URLs.  NOTE: the manual install button is used for downloading software from a remote web site, so this issue would not cross privilege boundaries if the user progresses to the point of installing malicious software from the attacker-controlled site.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-264
References: http://rhn.redhat.com/errata/RHSA-2006-0609.html; http://secunia.com/advisories/20376; http://secunia.com/advisories/20561