Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
us.com/bid/20501 - http://www.vupen.com/english/advisories/2006/4028 - http://marc.info/?l=bugtraq&m=116076619122083&w=2 - http://secunia.com/advisories/22356
CVE ID: CVE-2006-5302 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:29.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Redaction System 1.0000 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang_prefix parameter to (a) conn.php, (b) sesscheck.php, (c) wap/conn.php, or (d) wap/sesscheck.php, or the (2) lang parameter to (e) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29704 - https://www.exploit-db.com/exploits/2534 - http://secunia.com/advisories/22347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29504
db.com/exploits/2534 - http://secunia.com/advisories/22347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29504 - http://www.osvdb.org/29700 - http://www.osvdb.org/29702 - http://www.vupen.com/english/advisories/2006/4024 - http://www.osvdb.org/29703 - http://www.securityfocus.com/bid/20499 - http://redactionsystem.sourceforge.net/index.php?m=news&id=5 - http://www.osvdb.org/29701 - http://redactionsystem.sourceforge.net/index.php?m=news&id=2
CVE ID: CVE-2006-5303 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:29.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Computing SafeWord RemoteAccess 2.1 allows local users to obtain the UserCenter webportal password, database encryption keys, and signing keys by reading (1) base-64 encoded data in SERVERS\Web\Tomcat\usercenter\WEB-INF\login.conf and (2) plaintext data in SERVERS\Shared\signers.cfg. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22081 - http://www.securityfocus.com/
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22081 - http://www.securityfocus.com/bid/20509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29515
CVE ID: CVE-2006-5304 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:30.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20531 - http://www.rahim.webd.pl/exploity/Exploits/100.txt - http://www.vupen.com/english/advisories/2006/4046 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29567 - https://www.exploit-db.com/exploits/2557 - http://secunia.com/advisories/2242
force.ibmcloud.com/vulnerabilities/29567 - https://www.exploit-db.com/exploits/2557 - http://secunia.com/advisories/22420
CVE ID: CVE-2006-5305 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:29.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lat2cyr.php in the lat2cyr 1.0.1 and earlier phpbb module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29572 - http://secunia.com/advisories/22432 - http://securityreason.com/securityalert/1729 - http://www.securityfocus.com/bid/20513 - http://www.vupen.com/english/advisorie
/securityreason.com/securityalert/1729 - http://www.securityfocus.com/bid/20513 - http://www.vupen.com/english/advisories/2006/4050 - http://www.securityfocus.com/archive/1/448660/100/0/threaded
CVE ID: CVE-2006-5306 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:29.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Journals System module 1.0.2 (RC2) and earlier for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/journals_delete.php, (2) includes/journals_post.php, or (3) includes/journals_edit.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29491 - http://securityreason.com/securityalert/1731 - h
its/2522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29491 - http://securityreason.com/securityalert/1731 - http://securitytracker.com/id?1017058 - http://www.securityfocus.com/bid/20484 - http://secunia.com/advisories/22387 - http://www.securityfocus.com/archive/1/448443/100/0/threaded - http://www.vupen.com/english/advisories/2006/4029
CVE ID: CVE-2006-5307 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:29.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20503 - http://www.osvdb.org/29726 - https://www.exploit-db.com/exploits/2529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29511 - http://www.osvdb.org/29728 - http://secunia.com/advisories/22363 - http://
e.xforce.ibmcloud.com/vulnerabilities/29511 - http://www.osvdb.org/29728 - http://secunia.com/advisories/22363 - http://www.osvdb.org/29727 - http://www.osvdb.org/29725 - http://www.vupen.com/english/advisories/2006/4047
CVE ID: CVE-2006-5308 State: PUBLISHED Published: 2006-10-17T15:00:00 Last Updated: 2024-08-07T19:48:30.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems (OCS) before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in (1) include/theme.inc.php or (2) include/footer.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://pkp.sfu.ca:8043/bugzilla/show_bug.cgi?id=2436 - http://pkp.sfu.ca/ocs_download - http://pkp.sfu.ca:8043/bugzilla/attachment.cgi?id=90 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29517 - http://securitytr
u.ca:8043/bugzilla/attachment.cgi?id=90 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29517 - http://securitytracker.com/id?1017071 - https://www.exploit-db.com/exploits/2536 - http://secunia.com/advisories/22412 - http://www.vupen.com/english/advisories/2006/4041 - http://www.securityfocus.com/archive/1/448548/100/0/threaded - http://isc.sans.org/diary.php?storyid=1791 - http://www.securityfocus.com/bid/20567
CVE ID: CVE-2006-5309 State: PUBLISHED Published: 2006-10-17T16:00:00 Last Updated: 2024-08-07T19:48:30.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/lang_french/lang_prillian_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20520 - http://secunia.com/advisories/22430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29565 - http://www.vupen.com/english/advisories/2006/4040 - http://www.securityfocus.com/arch
mcloud.com/vulnerabilities/29565 - http://www.vupen.com/english/advisories/2006/4040 - http://www.securityfocus.com/archive/1/448663/100/0/threaded - https://www.exploit-db.com/exploits/2550 - http://securityreason.com/securityalert/1732
CVE ID: CVE-2006-5310 State: PUBLISHED Published: 2006-10-17T16:00:00 Last Updated: 2024-08-07T19:48:29.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common/visiteurs/include/menus.inc.php in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22411 - https://www.exploit-db.com/exploits/2535 - http://www.securityfocus.com/bid/20505 - http://www.vupen.com/english/advisories/200
/www.exploit-db.com/exploits/2535 - http://www.securityfocus.com/bid/20505 - http://www.vupen.com/english/advisories/2006/4045 - http://securityreason.com/securityalert/1733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29514 - http://www.securityfocus.com/archive/1/448547/100/0/threaded
CVE ID: CVE-2006-5311 State: PUBLISHED Published: 2006-10-17T16:00:00 Last Updated: 2024-08-07T19:48:29.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Buzlas 2006-1 Full allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20511 - http://www.securityfocus.com/archive/1/448577/100/0/threaded - http://securityreason.com/securityalert/1730
CVE ID: CVE-2006-5312 State: PUBLISHED Published: 2006-10-17T16:00:00 Last Updated: 2024-08-07T19:48:29.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in shoutbox.php in the Ajax Shoutbox 0.0.5 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29510
CVE ID: CVE-2006-5313 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hastymail 1.5 and earlier before 20061008 allows remote authenticated users to send arbitrary SMTP commands by placing them after a CRLF.CRLF sequence in the smtp_message parameter. NOTE: this crosses privilege boundaries if the SMTP server configuration prevents a user from establishing a direct SMTP session. NOTE: this is a different type of issue than CVE-2006-5262. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29407 - http://www.securityfocus.com/archi
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29407 - http://www.securityfocus.com/archive/1/453417/100/0/threaded - http://www.vupen.com/english/advisories/2006/3956 - http://hastymail.sourceforge.net/security.php - http://secunia.com/advisories/22308 - http://www.securityfocus.com/bid/20424
CVE ID: CVE-2006-5314 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ftag.php in TribunaLibre 3.12 Beta allows remote attackers to execute arbitrary PHP code via a URL in the mostrar parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1734 - https://www.exploit-db.com/exploits/2501 - http://www.securityfocus.com/bid/20443 - http://acid-root.new.fr/poc/13061007.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29415 - http://www.securityfocus.com/archive/1/448096/100/0/threaded
CVE ID: CVE-2006-5315 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in main.php in registroTL allows remote attackers to execute arbitrary PHP code via an ftp:// URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1734 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/bid/20433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29428 - http://www.securityfocus.com/archive/1/448096/100/0/threaded - https://www.exploit-db.com/exploits/2502
CVE ID: CVE-2006-5316 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1734 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/archive/1/448096/100/0/threaded - https://www.exploit-db.com/exploits/2502
CVE ID: CVE-2006-5317 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in eboli allows remote attackers to execute arbitrary PHP code via a URL in the contentSpecial parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1734 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/bid/20429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29442 - http://www.securityfocus.com/archive/1/448096/100/0/threaded - https://www.exploit-db.com/exploits/2504
CVE ID: CVE-2006-5318 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Nayco JASmine (aka Jasmine-Web) allows remote attackers to execute arbitrary PHP code via an FTP URL in the section parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20430 - http://www.vupen.com/english/advisories/2006/4007 - https://www.exploit-db.com/exploits/2505 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/archive/1/448096/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulne
13061007.txt - http://www.securityfocus.com/archive/1/448096/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29423 - http://secunia.com/advisories/22374
CVE ID: CVE-2006-5319 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in redir.php in Foafgen 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the foaf parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29443 - http://securityreason.com/securityalert/1734 - http://secunia.com/advisories/22376 - https://www.exploit-db.com/exploits/2506 - http://www.vupen.com/english/advisories/2006/4009 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/bi
/www.vupen.com/english/advisories/2006/4009 - http://acid-root.new.fr/poc/13061007.txt - http://www.securityfocus.com/bid/20454 - http://www.securityfocus.com/archive/1/448096/100/0/threaded
CVE ID: CVE-2006-5320 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29673 - http://secunia.com/advisories/22375 - http://www.vupen.com/english/advisories/2006/4008 - https://www.exploit-db.com/exploits/2507 - http://acid-root.new.fr/poc/13061007.txt - http://www.attrition.org/pipermail/vim/2006-December/001193.html - https://exchange.xforce.ibmcloud.com/vulnerabili
xt - http://www.attrition.org/pipermail/vim/2006-December/001193.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29473 - http://www.securityfocus.com/archive/1/448096/100/0/threaded - http://www.securityfocus.com/bid/20441
CVE ID: CVE-2006-5321 State: PUBLISHED Published: 2006-10-17T17:00:00Z Last Updated: 2024-09-16T17:34:06.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phplist before 2.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20483 - http://www.phplist.com/news - http://tincan.co.uk/?lid=1821
CVE ID: CVE-2006-5322 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:30.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phplist before 2.10.3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.phplist.com/news - https://exchange.xforce.ibmcloud.com/vulnerabilities/29637 - http://tincan.co.uk/?lid=1821
CVE ID: CVE-2006-5323 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:30.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server before 6.1.0.2 has unspecified impact and attack vectors, related to a "possible security exposure," aka PK29360. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK29360&apar=only - http://secunia.com/advisories/22372 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://www.vupen.com/english/advisories/2006/4000 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142
CVE ID: CVE-2006-5324 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:30.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web Services Notification (WSN) security component of IBM WebSphere Application Server before 6.1.0.2 allows attackers to obtain unspecified access without supplying a username and password, aka PK28374. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22372 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK28374&apar=only - http://www.vupen.com/english/advisories/2006/4000 - http://www-1.ibm.com/support/docview
.wss?rs=0&q=PK28374&apar=only - http://www.vupen.com/english/advisories/2006/4000 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013142
CVE ID: CVE-2006-5325 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:29.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dimitri Seitz Security Suite IP Logger in dwingmods for phpBB allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) mkb.php, (2) iplogger.php, (3) admin_board2.php, or (4) admin_logger.php in includes/, different vectors than CVE-2006-5224. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1736 - http://www.securityfocus.com/archive/1/448447/100/0/threaded
CVE ID: CVE-2006-5326 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:48:30.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/lang/lang_contact_faq.php in the Prillian French 0.8.0 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22430 - http://www.vupen.com/english/advisories/2006/4040
CVE ID: CVE-2006-5327 State: PUBLISHED Published: 2006-10-17T21:00:00 Last Updated: 2024-08-07T19:48:29.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22390 - http://www.vupen.com/english/advisories/2006/4058 - http://s
tainer: References: - http://secunia.com/advisories/22390 - http://www.vupen.com/english/advisories/2006/4058 - http://secunia.com/advisories/27441 - http://www.vupen.com/english/advisories/2007/3665 - http://www.vupen.com/english/advisories/2006/4059 - http://www.securitytracker.com/id?1018872 - http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html - http://www.digitalmunition.com/Xcode_OpenBase_pwn.pl - http://www.securityfocus.com/bid/20562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29624 - http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt - http://secunia.com/advisories/22474
CVE ID: CVE-2006-5328 State: PUBLISHED Published: 2006-10-17T21:00:00 Last Updated: 2024-08-07T19:48:29.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to create arbitrary files via a symlink attack on the simulation.sql file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22390 - http://secunia.com/advisories/27441 - http://www.vupen.com/english/advisories/2007/3665 - http://www.securitytracker.com/id?1018872 - http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html - http://www.securityfocu
cker.com/id?1018872 - http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html - http://www.securityfocus.com/bid/20562 - http://www.digitalmunition.com/DMA%5B2006-1016a%5D.txt - http://www.digitalmunition.com/Xcode_OpenBase_createfile.pl
CVE ID: CVE-2006-5329 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2021-01-06T16:15:40 Description: No description available.
CVE ID: CVE-2006-5330 State: PUBLISHED Published: 2006-10-17T21:00:00 Last Updated: 2024-08-07T19:48:30.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used. Additional Analyst Notes: - CVE P
the flexibility of the attack varies depending on the type of web browser being used. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/security/advisories/apsa06-01.html - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1 - http://secunia.com/advisories/22467 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://www.redhat.com/support/errata/RHSA-2007-0009.html - http://docs.info.apple.com/article.html?artnum=305214 - http://secunia.com/advisories/23324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29634 - http://lists.suse.com/archive/su