Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1655 State: PUBLISHED Published: 2006-04-06T10:00:00 Last Updated: 2024-08-07T17:19:49.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3. NOTE: this issue might be related to CVE-2004-0991, but it is not clear. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1074 - http://secunia.com/advisories/20281 - http://secunia.com/advisories/20240 - http://www.securityfocus.com/bid/17365 - http://www.mandriva.com/security/advisori
http://secunia.com/advisories/20240 - http://www.securityfocus.com/bid/17365 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:092 - http://secunia.com/advisories/20275 - http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl
CVE ID: CVE-2006-1656 State: PUBLISHED Published: 2006-04-06T10:00:00Z Last Updated: 2024-09-17T01:01:15.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966 - http://www.securityfocus.com/bid/17361 - https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438
CVE ID: CVE-2006-1657 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered when the administrator views the "Login Log" page. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/121/summary.html - http://www.vupen.com/english/advisories/2006/1243 - http://www.osvdb.org/24397 - http://www.securityfocus.com/archive/1/431344/100/0/threaded - http://securityreason.com/security
/www.osvdb.org/24397 - http://www.securityfocus.com/archive/1/431344/100/0/threaded - http://securityreason.com/securityalert/741 - http://secunia.com/advisories/19526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25638 - http://www.securityfocus.com/bid/17387
CVE ID: CVE-2006-1658 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/121/summary.html - http://www.vupen.com/english/advisories/2006/1243 - http://www.osvdb.org/24398 - http://www.securityfocus.com/archive/1/431344/100/0/threaded - http://secunia.com/advisories/19526 - https://exchange.xforce.ibmcloud.com
tyfocus.com/archive/1/431344/100/0/threaded - http://secunia.com/advisories/19526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25639 - http://www.securityfocus.com/bid/17387
CVE ID: CVE-2006-1659 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24371 - http://www.osvdb.org/24368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25616 - http://www.securityfocu
4371 - http://www.osvdb.org/24368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25616 - http://www.securityfocus.com/bid/17339 - http://www.securityfocus.com/archive/1/429763/100/0/threaded - http://secunia.com/advisories/19523 - http://www.osvdb.org/24370 - http://www.vupen.com/english/advisories/2006/1217 - http://www.osvdb.org/24372 - http://www.osvdb.org/24369
CVE ID: CVE-2006-1660 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19523 - http://www.vupen.com/english/advisories/2006/1217
CVE ID: CVE-2006-1661 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17389 - http://www.osvdb.org/24432 - http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html - http://secunia.com/advisories/19484 - http://www.osvdb.
2 - http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html - http://secunia.com/advisories/19484 - http://www.osvdb.org/24430 - http://www.osvdb.org/24431 - http://www.vupen.com/english/advisories/2006/1260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25641
CVE ID: CVE-2006-1662 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/519 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html - http://www.securityfocus.com/bid/16902 - http://www.securityfocus.com/archive/1/429946/100/0/threaded - http://www.securityfocus.com/archive/1/426428 - https://exchange.xforce.ibmcloud.com/vulnera
e/1/429946/100/0/threaded - http://www.securityfocus.com/archive/1/426428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24992
CVE ID: CVE-2006-1663 State: REJECTED Published: 2006-04-07T10:00:00Z Last Updated: 2024-09-17T02:07:10.542Z Description: No description available.
CVE ID: CVE-2006-1664 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.082Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19856 - http://secunia.com/advisories/28666 - http://www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/25670 - https://www.redhat.com/archives/fedora-package-announce/20
https://exchange.xforce.ibmcloud.com/vulnerabilities/25670 - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00976.html - https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00956.html - http://secunia.com/advisories/19853 - http://www.securityfocus.com/bid/17370 - http://bugs.gentoo.org/show_bug.cgi?id=128838 - http://securitytracker.com/id?1015868 - http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608 - https://www.exploit-db.com/exploits/1641 - http://www.gentoo.org/security/en/glsa/glsa-200604-16.xml
CVE ID: CVE-2006-1665 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php, and the (3) form parameter in (b) members.php, (c) pm.php, and (d) mail.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25657 - http://www.securityfocus.com/archive/1/429940/100/0/threaded
CVE ID: CVE-2006-1666 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17375 - http://securityreason.com/securityalert/644 - http://www.securityfocus.com/archive/1/429940/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25656
CVE ID: CVE-2006-1667 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquery_s parameter when the $projectid variable is less than 1, which prevents the $limitquery_s from being set within slides.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1239 - http://www.securityfocus.com/bid/17379 - http://www.osvdb.org
ces: - http://www.vupen.com/english/advisories/2006/1239 - http://www.securityfocus.com/bid/17379 - http://www.osvdb.org/24386 - http://bash-x.net/undef/exploits/crappy_syntax.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25654 - http://bash-x.net/undef/adv/craftygallery.html - https://www.exploit-db.com/exploits/1645 - http://secunia.com/advisories/19478
CVE ID: CVE-2006-1668 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to upload and execute arbitrary PHP code via a multipart/form-data POST with a .jpg filename in the fullimage parameter and the ext parameter set to .php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1239 - http://www.securityfocus.com/bid/17379 - http://www.osvdb.org/24387 - https://exchange.xforce.ibmcloud.com/vulne
/1239 - http://www.securityfocus.com/bid/17379 - http://www.osvdb.org/24387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25655 - http://bash-x.net/undef/exploits/crappy_syntax.txt - http://bash-x.net/undef/adv/craftygallery.html - https://www.exploit-db.com/exploits/1645 - http://secunia.com/advisories/19478
CVE ID: CVE-2006-1669 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter. NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17382 - https://exchange.xforce.ibmcloud.
Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25687 - https://www.exploit-db.com/exploits/1646 - http://securitytracker.com/id?1015873 - http://www.securityfocus.com/archive/1/430358/100/0/threaded
CVE ID: CVE-2006-1670 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24434 - http://securitytracker.com/id?1015872 - http://www.vupen.com/english/advisories/2006/1256 - http://secunia.com/advisories/19553 - http://www.securityfocus.com/bid/17
//www.vupen.com/english/advisories/2006/1256 - http://secunia.com/advisories/19553 - http://www.securityfocus.com/bid/17384 - http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25643
CVE ID: CVE-2006-1671 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (card reset) via (1) a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; (2) a "crafted" IP packet to a device with IP on the LAN interface, aka bug ID CSCsd04168; and (3) a "malformed" OSPF packet, aka bug ID CSCsc54558. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24435 - http://securitytrack
4558. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24435 - http://securitytracker.com/id?1015872 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25644 - http://www.vupen.com/english/advisories/2006/1256 - http://www.osvdb.org/24436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25645 - http://secunia.com/advisories/19553 - http://www.securityfocus.com/bid/17384 - http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml - http://www.osvdb.org/24437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25646
CVE ID: CVE-2006-1672 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds a Java policy file entry with a wildcard that grants the java.security.AllPermission permission to any http URL containing "fs/LAUNCHER.jar", which allows remote attackers to execute arbitrary code on a CTC workstation, aka bug ID CSCea25049. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1256 - http://www.osvdb.org/24438 - http://secunia.com/advis
References: - http://www.vupen.com/english/advisories/2006/1256 - http://www.osvdb.org/24438 - http://secunia.com/advisories/19553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25647 - http://www.securityfocus.com/bid/17384 - http://securitytracker.com/id?1015871 - http://www.cisco.com/warp/public/707/cisco-sa-20060405-ons.shtml
CVE ID: CVE-2006-1673 State: PUBLISHED Published: 2006-04-07T10:00:00 Last Updated: 2024-08-07T17:19:49.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19562 - http://www.osvdb.org/24448 - http://pridels0.blogspot.com/2006/04/vbug-tracker-for-vbulletin-35x-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25649 - http://www.vupen.com/english/advisories/2006/1267 - http://www.secur
xchange.xforce.ibmcloud.com/vulnerabilities/25649 - http://www.vupen.com/english/advisories/2006/1267 - http://www.securityfocus.com/bid/17407
CVE ID: CVE-2006-1674 State: PUBLISHED Published: 2006-04-10T19:00:00Z Last Updated: 2024-09-17T03:14:08.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vulnerability than CVE-2006-1675. Additional Analyst Notes: - CVE Program Container: References: - http://www.Silitix.com/phpwebgallery
CVE ID: CVE-2006-1675 State: PUBLISHED Published: 2006-04-10T19:00:00 Last Updated: 2024-08-07T17:19:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) num, and (3) search parameters to (a) category.php, and the (4) slideshow, (5) show_metadata, and (6) start parameters to (b) picture.php, a different vulnerability than CVE-2006-1674. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19610 - http://www.vupen.com/english/advisories/2006/1301 - http://www.securityfocus.com/archi
://secunia.com/advisories/19610 - http://www.vupen.com/english/advisories/2006/1301 - http://www.securityfocus.com/archive/1/430481/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25733 - http://www.securityfocus.com/bid/17421
CVE ID: CVE-2006-1676 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to execute arbitrary SQL commands via the topicid parameter in a display action, which is not properly handled in PNuserapi.PHP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17399 - http://www.maxdev.com/Article592.phtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25710 - http://www.
7399 - http://www.maxdev.com/Article592.phtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25710 - http://www.securityfocus.com/archive/1/437831/100/100/threaded - http://secunia.com/advisories/19578 - http://www.securityfocus.com/archive/1/430370/100/0/threaded - http://www.vupen.com/english/advisories/2006/1282
CVE ID: CVE-2006-1677 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full path of the server via a direct request to includes/legacy.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.maxdev.com/Article592.phtml - http://www.securityfocus.com/archive/1/437831/100/100/threaded - http://secunia.com/advisories/19578 - http://www.securityfocus.com/archive/1/430370/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25714 - http://www.vupen.c
us.com/archive/1/430370/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25714 - http://www.vupen.com/english/advisories/2006/1282
CVE ID: CVE-2006-1678 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbitrary web script or HTML via unknown vectors in unspecified scripts in the themes directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1207 - http://secunia.com/advisories/22781 - http://www.osvdb.org/24450 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25689 - http://www.securityfocus.com/bid/17390 - http://secunia.com/advisories/19556 - ht
e.ibmcloud.com/vulnerabilities/25689 - http://www.securityfocus.com/bid/17390 - http://secunia.com/advisories/19556 - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-1 - http://www.vupen.com/english/advisories/2006/1263 - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-1679 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject arbitrary web script or HTML via the layout parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430391/100/0/threaded - http://www.securityfocus.com/bid/17405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25700 - http://www.vupen.com/english/advisories/2006/1302 - http://secunia.com/advisories/19582
CVE ID: CVE-2006-1680 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct request to modules/online.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430391/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25703 - http://www.vupen.com/english/advisories/2006/1302 - http://secunia.com/advisories/19582
CVE ID: CVE-2006-1681 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430385/100/0/threaded - http://www.securityfocus.com/bid/17408 - http://secunia.com/advisories/19587 - http://www.vupen.com/english/advisories/2006/1292 - https://ex
cus.com/bid/17408 - http://secunia.com/advisories/19587 - http://www.vupen.com/english/advisories/2006/1292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25698 - http://www.osvdb.org/24469 - https://security.gentoo.org/glsa/202012-09
CVE ID: CVE-2006-1682 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, possibly involving the webpshop/ department.wml script. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19594 - http://www.securityfocus.com/bid/17418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25721 - http://www.vupen.com/english/advisories/2006/1289 - http://pridels0.blogspot.com/2006
mcloud.com/vulnerabilities/25721 - http://www.vupen.com/english/advisories/2006/1289 - http://pridels0.blogspot.com/2006/04/web-shop-50-xss.html