Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6070 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452103/100/0/threaded - http://securitytracker.com/id?1017255 - https://www.exploit-db.com/exploits/2813 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30397 - http://www.securityfocus.com/bid/21195
CVE ID: CVE-2006-6071 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:12:31.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWiki 4.0.5 and earlier, when running under Apache 1.3 using ApacheLogin with sessions and "ErrorDocument 401" redirects to a valid wiki topic, does not properly handle failed login attempts, which allows remote attackers to read arbitrary content by cancelling out of a failed authentication with a valid username and invalid password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30667 - http://secunia.com/advisorie
.securityfocus.com/bid/21381 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30667 - http://secunia.com/advisories/23189 - http://www.vupen.com/english/advisories/2006/4790 - http://twiki.org/cgi-bin/view/Codev/SecurityAlert-CVE-2006-6071
CVE ID: CVE-2006-6072 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bpg/publications_list.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4514 - http://secunia.com/advisories/22888 - http://www.securityfocus.com/bid/21094
CVE ID: CVE-2006-6073 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter in productdetail.asp or the (2) categoryid parameter in products.asp. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=116353137028066&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30262 - http://aria-security.net/advisory/eShopping.txt
CVE ID: CVE-2006-6074 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp. NOTE: the productdetail.asp vector is already covered by another identifier. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1906 - http://www.securityfocus.com/archive/1/451840/100/0/threaded - http://secunia.com/advisories/22955
securityalert/1906 - http://www.securityfocus.com/archive/1/451840/100/0/threaded - http://secunia.com/advisories/22955 - http://www.vupen.com/english/advisories/2006/4578 - http://s-a-p.ca/index.php?page=OurAdvisories&id=21 - http://www.securityfocus.com/bid/21151
CVE ID: CVE-2006-6075 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22943 - http://www.vupen.com/english/advisories/2006/4579
CVE ID: CVE-2006-6076 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21221 - http://www.securityfocus.com/archive/1/452318/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30453 - http://secunia.com/advisories/24512 - http://lists.grok.org.uk/pipermail/full-d
rce.ibmcloud.com/vulnerabilities/30453 - http://secunia.com/advisories/24512 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34817 - http://www.securityfocus.com/archive/1/456711 - http://securitytracker.com/id?1017268 - http://secunia.com/advisories/23060 - http://www.vupen.com/english/advisories/2006/4654 - http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=101317 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html - http://www.securityfocus.com/archive/1/452222/100/0/threaded - http://www.kb.cert.org/vuls/id/437300 - http://supportconnectw.ca.com/public/storage
m/archive/1/452222/100/0/threaded - http://www.kb.cert.org/vuls/id/437300 - http://supportconnectw.ca.com/public/storage/infodocs/babtapeng-securitynotice.asp
CVE ID: CVE-2006-6077 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password. Additional Analyst Notes: - CVE Program Container: References: - http://
ted on the web site intended for this password. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0078.html - http://www.info-svc.com/news/11-21-2006/rcsr1/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10031 - http://secunia.com/advisories/24395 - http://www.securityfocus.com/archive/1/461336/100/0/threaded - http://secunia.com/advisories/24328 - http://www.redhat.com/support/errata/RHSA-2007-0108.html - http://security.gentoo.org/glsa/glsa-200703-04.xml - http://www.securityfocus.com/archive/1/452440/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://sec
curityfocus.com/archive/1/452440/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200703-08.xml - http://secunia.com/advisories/23046 - http://secunia.com/advisories/24384 - http://www.securityfocus.com/archive/1/452431/100/0/threaded - http://www.securityfocus.com/archive/1/455073/100/0/threaded - http://secunia.com/advisories/24457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30470 - http://secunia.com/advisories/24343 - http://www.debian.org/security/2007/dsa-1336 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://securitytracker.com/id?1017271 - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://www.vupen
ttp://securitytracker.com/id?1017271 - http://www.mozilla.org/security/announce/2007/mfsa2007-02.html - http://www.vupen.com/english/advisories/2007/0718 - http://www.securityfocus.com/archive/1/454982/100/0/threaded - http://secunia.com/advisories/24650 - http://www.ubuntu.com/usn/usn-428-1 - http://secunia.com/advisories/24320 - http://secunia.com/advisories/25588 - https://issues.rpath.com/browse/RPL-1103 - http://lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html - http://www.securityfocus.com/archive/1/452463/100/0/threaded - http://www.securityfocus.com/archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.
archive/1/461809/100/0/threaded - http://www.novell.com/linux/security/advisories/2007_22_mozilla.html - http://secunia.com/advisories/24293 - http://secunia.com/advisories/24238 - http://secunia.com/advisories/24393 - http://secunia.com/advisories/24342 - http://secunia.com/advisories/24287 - http://www.securityfocus.com/archive/1/452382/100/0/threaded - http://www.securityfocus.com/archive/1/455148/100/0/threaded - http://secunia.com/advisories/23108 - http://www.securityfocus.com/bid/21240 - https://bugzilla.mozilla.org/show_bug.cgi?id=360493 - http://www.securityfocus.com/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/
om/bid/22694 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://fedoranews.org/cms/node/2713 - http://www.redhat.com/support/errata/RHSA-2007-0097.html - http://fedoranews.org/cms/node/2728 - ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc - http://secunia.com/advisories/24205 - https://issues.rpath.com/browse/RPL-1081 - http://secunia.com/advisories/24333 - http://www.vupen.com/english/advisories/2006/4662 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:050 - http://secunia.com/advisories/24290 - http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01
- http://rhn.redhat.com/errata/RHSA-2007-0077.html - ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131 - http://www.redhat.com/support/errata/RHSA-2007-0079.html - http://www.info-svc.com/news/11-21-2006/ - http://secunia.com/advisories/24437
CVE ID: CVE-2006-6078 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the cm_basedir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452433/100/0/threaded - http://www.vupen.com/english/advisories/2006/4705 - http://securityreason.com/securityalert/1909 - http://advisories.echo.or.id/adv/adv61-matdhule-2006.txt - https://www.exploit-db.com/exploits/2831 - http://www.securityfocus.com/bi
ries.echo.or.id/adv/adv61-matdhule-2006.txt - https://www.exploit-db.com/exploits/2831 - http://www.securityfocus.com/bid/21255 - http://securitytracker.com/id?1017278
CVE ID: CVE-2006-6079 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP code via a URL in the mainframe parameter to (1) admin.loudmouth.php or (2) toolbar.loudmouth.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1905 - http://www.securityfocus.com/archive/1/452085/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30409
CVE ID: CVE-2006-6080 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (1) catID or (2) editorID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1908 - http://www.aria-security.com/forum/showthread.php?t=37 - http://www.securityfocus.com/archive/1/452116/100/0/threaded - http://www.securityfocus.com/bid/21194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30422
CVE ID: CVE-2006-6081 State: PUBLISHED Published: 2006-11-24T17:00:00 Last Updated: 2024-08-07T20:12:31.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1904 - http://www.securityfocus.com/archive/1/452139/100/0/threaded - http://www.securityfocus.com/archive/1/452086/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30432
CVE ID: CVE-2006-6082 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21230 - http://www.vupen.com/english/advisories/2006/4665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30473 - http://s-a-p.ca/index.php?page=OurAdvisories&id=54 - http://secunia.com/advisories/
ibmcloud.com/vulnerabilities/30473 - http://s-a-p.ca/index.php?page=OurAdvisories&id=54 - http://secunia.com/advisories/23067 - http://securityreason.com/securityalert/1907 - http://www.securityfocus.com/archive/1/452241/100/0/threaded
CVE ID: CVE-2006-6083 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30471 - http://www.securityfocus.com/bid/21230 - http://www.vupen.com/english/advisories/2006/4665 - http://s-a-p.ca/index.php?page=OurAdvisories&id=54 - http://secunia.com/advisories/23067 - http://www.securityfocus.com/archive/1/452241/100/0/threaded
CVE ID: CVE-2006-6084 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.648Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.unverse.net/abitwhizzy-forum/0611251408/ - http://www.securityfocus.com/archive/1/452235/100/0/threaded - http://www.vupen.com/english/advisories/2006/4657 - http://s-a-p.ca/index.php?page=OurAdvisories&id=52 - http://secunia.com/ad
/www.vupen.com/english/advisories/2006/4657 - http://s-a-p.ca/index.php?page=OurAdvisories&id=52 - http://secunia.com/advisories/23055 - http://www.securityfocus.com/bid/21222 - http://securitytracker.com/id?1017266 - http://www.securityfocus.com/archive/1/453478/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30458
CVE ID: CVE-2006-6085 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30414 - http://sourceforge.net/project/shownotes.php?release_id=464713 - http://www.securityfocus.com/bid/21200 - http://www.vupen.com/english/advisories/2006/4615 - http://security.gentoo.org/glsa/glsa-200611-21.xml - http://secunia.com/advisories/23099 - htt
sh/advisories/2006/4615 - http://security.gentoo.org/glsa/glsa-200611-21.xml - http://secunia.com/advisories/23099 - http://secunia.com/advisories/23035
CVE ID: CVE-2006-6086 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2818 - http://secunia.com/advisories/23059 - http://www.vupen.com/english/advisories/2006/4661 - http://arfis.wordpress.com/2007/09/13/rfi-02-eark/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/30457 - http://www.securityfocus.com/bid/21224
CVE ID: CVE-2006-6087 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22988 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30434 - http://www.securityfocus.com/bid/21238 - http://www.vupen.com/english/advisories/2006/4638 - http://securityreason.com/securityalert/1919 - http://www.securityfocus.com/archive/1/452183/100/0/threaded
CVE ID: CVE-2006-6088 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) n or (2) d parameter in igallery.asp, or (3) an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, in search.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451854/100/100/threaded - http://secur
es: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451854/100/100/threaded - http://securityreason.com/securityalert/1912 - http://aria-security.net/advisory/i-Gallery34.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/30341 - http://secunia.com/advisories/22952 - http://www.securityfocus.com/bid/21122 - http://www.vupen.com/english/advisories/2006/4584
CVE ID: CVE-2006-6089 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the (1) title (Subject), (2) groupname (Group Name), or (3) detail (Message) field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21111 - http://www.securityfocus.com/archive/1/451846/100/100/threaded - http://secunia.com/advisories/22943 - http://s-a-p.ca/index.php?page=OurAdvisories&id=35 - http://securityreason.com/securitya
/secunia.com/advisories/22943 - http://s-a-p.ca/index.php?page=OurAdvisories&id=35 - http://securityreason.com/securityalert/1913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30344 - http://www.vupen.com/english/advisories/2006/4579
CVE ID: CVE-2006-6090 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21111 - http://www.securityfocus.com/archive/1/451846/100/100/threaded - http://secunia.com/advisories/22943 - https://exchange.xforce.ibmcloud.com/vulnerabilities
e/1/451846/100/100/threaded - http://secunia.com/advisories/22943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30343 - http://s-a-p.ca/index.php?page=OurAdvisories&id=35 - http://securityreason.com/securityalert/1913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30342 - http://www.vupen.com/english/advisories/2006/4579
CVE ID: CVE-2006-6091 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006_11_21 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23065 - http://sourceforge.net/project/shownotes.php?release_id=465519&group_id=182536 - http://www.vupen.com/english/advisories/2006/4666 - http://www.securityfocus.com/bid/21243 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30469
CVE ID: CVE-2006-6092 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the (1) vehicleID, (2) categoryID_list, (3) sale_type, (4) stock_number, (5) manufacturer, (6) model, (7) vehicleID, (8) year, (9) vin, and (10) listing_price parameters. Additional Analyst Notes: - CVE Program Container: References: - http://s-a-p.ca/index.php?page=OurAdvisories&id=38 - http://secunia.com/advisories/22974 - http://www.securityfocus.com/archive/1/451947/100/100/thread
OurAdvisories&id=38 - http://secunia.com/advisories/22974 - http://www.securityfocus.com/archive/1/451947/100/100/threaded - http://www.vupen.com/english/advisories/2006/4601 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30400 - http://securityreason.com/securityalert/1916 - http://www.securityfocus.com/bid/21154
CVE ID: CVE-2006-6093 State: PUBLISHED Published: 2006-11-24T18:00:00 Last Updated: 2024-08-07T20:12:31.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitrary PHP code via a URL in the (1) admin_folder and (2) path parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23037 - http://www.securityfocus.com/bid/21163 - https://www.exploit-db.com/exploits/2817 - http://www.vupen.com/english/advisories/2006/4659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30447