Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6159 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in newticket.php in DeskPRO 2.0.0 and 2.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) message or (2) subject parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30520 - http://www.securityfocus.com/bid/21248 - http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt - http://secunia.com/advisories/22991 - http://www.vupen.com/english/advisories/2006/4676 - http:
nerability_DeskPro.txt - http://secunia.com/advisories/22991 - http://www.vupen.com/english/advisories/2006/4676 - http://www.osvdb.org/30671
CVE ID: CVE-2006-6160 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details.asp in Doug Luxem Liberum Help Desk 0.97.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30485 - http://www.vupen.com/english/advisories/2006/4704 - https://www.exploit-db.com/exploits/2846
CVE ID: CVE-2006-6161 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:35.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Doug Luxem Liberum Help Desk 0.97.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) uid parameter to (a) inout/status.asp, (b) inout/update.asp, and (c) forgotpass.asp. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/7493 - http://www.securityfocus.com/bid/32884 - http://www.vu
ntainer: References: - https://www.exploit-db.com/exploits/7493 - http://www.securityfocus.com/bid/32884 - http://www.vupen.com/english/advisories/2006/4704 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47420
CVE ID: CVE-2006-6162 State: PUBLISHED Published: 2006-11-29T01:00:00 Last Updated: 2024-08-07T20:19:34.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web script or HTML via the pageAlias parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21297 - http://www.vupen.com/english/advisories/2006/4709 - http://secunia.com/advisories/22850 - http://www.osvdb.org/30692
CVE ID: CVE-2006-6163 State: PUBLISHED Published: 2006-11-29T01:00:00 Last Updated: 2024-08-07T20:19:34.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScript via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/changelog.txt?r1=1.157.2.50&r2=1.157.2.51 - http://www.vupen.com/english/advisories/2006/4709
CVE ID: CVE-2006-6164 State: PUBLISHED Published: 2006-11-29T01:00:00 Last Updated: 2024-08-07T20:19:34.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, which allows local users to pass dangerous variables such as LD_PRELOAD to loading processes, which might be leveraged to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata39.html#ldso - http://www.matasano.com/log/592/finger-79tcp-mcdonald-dowd-and-schuh-challenge-part-2/ - http://www.securityfocus.com/archive/1/452428/100/0/threade
592/finger-79tcp-mcdonald-dowd-and-schuh-challenge-part-2/ - http://www.securityfocus.com/archive/1/452428/100/0/threaded - http://secunia.com/advisories/22993 - http://www.securityfocus.com/bid/21188 - http://www.openbsd.org/errata.html#ldso - http://www.securityfocus.com/archive/1/452371/100/0/threaded - http://securitytracker.com/id?1017253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30441
CVE ID: CVE-2006-6165 State: PUBLISHED Published: 2006-11-29T01:00:00 Last Updated: 2025-01-17T14:08:58.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, which allows local users to gain privileges by passing certain environment variables to loading processes. NOTE: this issue has been disputed by a third party, stating that it is the responsibility of the application to properly sanitize the environment Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/452428/100/0/threaded - http://
Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/archive/1/452428/100/0/threaded - http://www.securityfocus.com/archive/1/452371/100/0/threaded
CVE ID: CVE-2006-6166 State: PUBLISHED Published: 2006-11-29T02:00:00Z Last Updated: 2024-09-17T03:28:57.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.0.4 for Joomla! (com_jce), without the 20060821 jce_patch, allows remote attackers to inject arbitrary web script or HTML via the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.cellardoor.za.net/index.php?option=com_content&task=view&id=28 - http://forum.joomla.org/index.php?topic=113796.new#new - http://www.cellardoor.za.net/index.php?option=co
k=view&id=28 - http://forum.joomla.org/index.php?topic=113796.new#new - http://www.cellardoor.za.net/index.php?option=com_docman&task=doc_download&gid=51&Itemid=6
CVE ID: CVE-2006-6167 State: PUBLISHED Published: 2006-11-29T02:00:00 Last Updated: 2024-08-07T20:19:34.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variables Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
les Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30518 - http://www.securityfocus.com/bid/23670 - http://www.securityfocus.com/bid/21263 - http://www.osvdb.org/31956 - http://www.securityfocus.com/archive/1/452490/100/0/threaded - http://www.securityfocus.com/archive/1/452559/100/0/threaded
CVE ID: CVE-2006-6168 State: PUBLISHED Published: 2006-11-29T02:00:00 Last Updated: 2024-08-07T20:19:35.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separated list of addresses in the email field, related to lack of "a minimal check on email." Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/changelog.txt?r1=1.157.2.50&r2=1.157.2.51 - http://www.vupen.com/english/advisories/2006/4709 - http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/tiki-register.php?r1=1.68&r2=1.69
CVE ID: CVE-2006-6169 State: PUBLISHED Published: 2006-11-29T18:00:00 Last Updated: 2024-08-07T20:19:34.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might allow attackers to execute arbitrary code via messages with "C-escape" expansions, which cause the make_printable_string function to return a longer string than expected while constructing a prompt. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23110 - http://secunia.com/advisories/23269 - http://secunia.com/advisories/23303 - http://www.securi
nia.com/advisories/23110 - http://secunia.com/advisories/23269 - http://secunia.com/advisories/23303 - http://www.securityfocus.com/archive/1/452829/100/0/threaded - https://issues.rpath.com/browse/RPL-826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30550 - http://secunia.com/advisories/23513 - http://secunia.com/advisories/23284 - http://secunia.com/advisories/23146 - http://secunia.com/advisories/23171 - http://www.ubuntu.com/usn/usn-393-2 - http://www.redhat.com/support/errata/RHSA-2006-0754.html - http://www.trustix.org/errata/2006/0068/ - http://securityreason.com/securityalert/1927 - http://www.debian.org/security/2006/dsa-1231 - http://secunia.com/advisories/23299 - http://
on.com/securityalert/1927 - http://www.debian.org/security/2006/dsa-1231 - http://secunia.com/advisories/23299 - http://www.ubuntu.com/usn/usn-389-1 - https://bugs.g10code.com/gnupg/issue728 - http://securitytracker.com/id?1017291 - http://security.gentoo.org/glsa/glsa-200612-03.xml - http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000241.html - http://secunia.com/advisories/23094 - http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html - http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm - http://www.securityfocus.com/archive/1/453253/100/100/threaded - http://www.securityfocus.com/bid/21306 - http://www.vupen.com/english/advisories/2006/4736 - http://secun
100/threaded - http://www.securityfocus.com/bid/21306 - http://www.vupen.com/english/advisories/2006/4736 - http://secunia.com/advisories/23250 - ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc - http://secunia.com/advisories/23161 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:221 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11228 - http://secunia.com/advisories/24047
CVE ID: CVE-2006-6170 State: PUBLISHED Published: 2006-11-30T15:00:00 Last Updated: 2024-08-07T20:19:34.992Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the tls_x509_name_oneline function in the mod_tls module, as used in ProFTPD 1.3.0a and earlier, and possibly other products, allows remote attackers to execute arbitrary code via a large data length argument, a different vulnerability than CVE-2006-5815. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1222 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050935.html - http://www.securityfocus.com/archive/1/452993/100/100/threaded - h
pipermail/full-disclosure/2006-November/050935.html - http://www.securityfocus.com/archive/1/452993/100/100/threaded - http://secunia.com/advisories/23207 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491 - http://secunia.com/advisories/23141 - http://secunia.com/advisories/23174 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1 - http://www.securityfocus.com/bid/21326 - http://www.securityfocus.com/archive/1/452872/100/0/threaded - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 - http://secunia.com/advisories/23184 - http://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html - http://www.trus
.com/advisories/23184 - http://elegerov.blogspot.com/2006/10/do-you-remember-2-years-old-overflow.html - http://www.trustix.org/errata/2006/0066 - http://secunia.com/advisories/23179 - http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml - http://www.securityfocus.com/archive/1/452228/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30554 - http://www.vupen.com/english/advisories/2006/4745
CVE ID: CVE-2006-6171 State: PUBLISHED Published: 2006-11-30T15:00:00 Last Updated: 2024-08-07T20:19:34.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: ProFTPD 1.3.0a and earlier does not properly set the buffer size limit when CommandBufferSize is specified in the configuration file, which leads to an off-by-two buffer underflow. NOTE: in November 2006, the role of CommandBufferSize was originally associated with CVE-2006-5815, but this was an error stemming from a vague initial disclosure. NOTE: ProFTPD developers dispute this issue, saying that the relevant memory location is overwritten by assignment before further use within the affected function, so this is not a vulner
nt memory location is overwritten by assignment before further use within the affected function, so this is not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1222 - http://proftp.cvs.sourceforge.net/proftp/proftpd/src/main.c?r1=1.292&r2=1.293&sortby=date - http://www.debian.org/security/2006/dsa-1218 - http://secunia.com/advisories/23207 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.502491 - http://secunia.com/advisories/23174 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:217-1 - http://www.trustix.org/errata/2006/0070 - http://secunia.com/advisories/23329
curity/advisories?name=MDKSA-2006:217-1 - http://www.trustix.org/errata/2006/0070 - http://secunia.com/advisories/23329 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=214820 - http://secunia.com/advisories/23184 - http://secunia.com/advisories/23179 - http://www.gentoo.org/security/en/glsa/glsa-200611-26.xml - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.035.html
CVE ID: CVE-2006-6172 State: PUBLISHED Published: 2006-11-30T15:00:00 Last Updated: 2024-08-07T20:19:34.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the asmrp_eval function in the RealMedia RTSP stream handler (asmrp.c) for Real Media input plugin, as used in (1) xine/xine-lib, (2) MPlayer 1.0rc1 and earlier, and possibly others, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a rulebook with a large number of rulematches. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23512 - http://secunia.com/advisories/25555 - http://secunia.com/advisories/24336 - http://secu
//secunia.com/advisories/23512 - http://secunia.com/advisories/25555 - http://secunia.com/advisories/24336 - http://secunia.com/advisories/24339 - https://sourceforge.net/tracker/index.php?func=detail&aid=1603458&group_id=9655&atid=109655 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842 - http://secunia.com/advisories/23242 - http://security.gentoo.org/glsa/glsa-200612-02.xml - http://sourceforge.net/project/shownotes.php?release_id=468432 - http://secunia.com/advisories/23567 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://security.gentoo.org/glsa/glsa-200702-11.xml - http://www.ubuntu.com/usn/usn-392-1 - http://se
s/2006_28_sr.html - http://security.gentoo.org/glsa/glsa-200702-11.xml - http://www.ubuntu.com/usn/usn-392-1 - http://secunia.com/advisories/23249 - http://secunia.com/advisories/23335 - http://www.securityfocus.com/bid/21435 - http://www.mplayerhq.hu/MPlayer/patches/asmrules_fix_20061231.diff - http://www.mandriva.com/security/advisories?name=MDKSA-2006:224 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:112 - http://secunia.com/advisories/23218 - http://www.debian.org/security/2006/dsa-1244 - http://www.mplayerhq.hu/design7/news.html#vuln14 - http://www.vupen.com/english/advisories/2006/4824 - http://secunia.com/advisories/23301
CVE ID: CVE-2006-6173 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T20:19:34.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the shared_region_make_private_np function in vm/vm_unix.c in Mac OS X 10.4.6 and earlier allows local users to execute arbitrary code via (1) a small range count, which causes insufficient memory allocation, or (2) a large number of ranges in the shared_region_make_private_np_args parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23120 - http://projects.info-pull.com/mokb/MOKB-28-11-2006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30569
0 - http://projects.info-pull.com/mokb/MOKB-28-11-2006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30569 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.securityfocus.com/bid/21349 - http://securitytracker.com/id?1017306 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://www.vupen.com/english/advisories/2007/0930 - http://www.vupen.com/english/advisories/2006/4762 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-6174 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T20:19:34.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tDiary before 2.0.3 and 2.1.x before 2.1.4.20061126 allows remote attackers to inject arbitrary web script or HTML via the conf parameter in (1) tdiary.rb and (2) skel/conf.rhtml. Additional Analyst Notes: - CVE Program Container: References: - http://www.tdiary.org/download/tdiary.20061126.patch - http://www.tdiary.org/20061126.html - http://sourceforge.net/forum/forum.php?forum_id=638868 - http://www.osvdb.org/30701 - http://secunia.com/advisories/23092 - http://jvn.jp/jp/JVN%23472
orum.php?forum_id=638868 - http://www.osvdb.org/30701 - http://secunia.com/advisories/23092 - http://jvn.jp/jp/JVN%2347223461/index.html - http://www.vupen.com/english/advisories/2006/4722 - http://www.securityfocus.com/bid/21321 - http://www.osvdb.org/31993
CVE ID: CVE-2006-6175 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T20:19:34.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lib/FBView.php in Horde Kronolith H3 before 2.0.7 and 2.1.x before 2.1.4 allows remote attackers to include arbitrary files and execute PHP code via a .. (dot dot) sequence in the view parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21341 - http://securitytracker.com/id?1017316 - http://www.vupen.com/english/advisories/2006/4775 - http://marc.info/?l=horde-announce&m=116483107007152&w=2 - http://secunia.com/advisories/23145 - http
sories/2006/4775 - http://marc.info/?l=horde-announce&m=116483107007152&w=2 - http://secunia.com/advisories/23145 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=445 - http://marc.info/?l=horde-announce&m=116483121211579&w=2 - http://security.gentoo.org/glsa/glsa-200701-11.xml - http://secunia.com/advisories/23780
CVE ID: CVE-2006-6176 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T20:19:35.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Blogn before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23126 - http://www.blogn.org/index.php?e=66 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30565 - http://www.vupen.com/english/advisories/2006/4768 - http://www.securityfocus.com/bid/21347 - http://jvn.jp/jp/JVN%2321125043/index.html
CVE ID: CVE-2006-6177 State: PUBLISHED Published: 2006-11-30T16:00:00 Last Updated: 2024-08-07T20:19:34.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in system/core/users/users.profile.inc.php in Neocrome Seditio 1.10 and earlier allows remote authenticated users to execute arbitrary SQL commands via a double-url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by an encoded NULL and ' (apostrophe) (%2500%2527). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30466 - http://www.neocrome.net/page.php?id=2233 - http://
ences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30466 - http://www.neocrome.net/page.php?id=2233 - http://www.vupen.com/english/advisories/2006/4668 - http://secunia.com/advisories/23054 - http://securityreason.com/securityalert/1931 - http://www.nukedx.com/?viewdoc=52 - http://www.nukedx.com/?getxpl=52 - http://www.securityfocus.com/archive/1/452269/100/100/threaded
CVE ID: CVE-2006-6178 State: PUBLISHED Published: 2006-11-30T23:00:00 Last Updated: 2024-08-07T20:19:35.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\Wizard.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1087 allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4852 - http://solutionfile.trendmicro.com/SolutionFile/1031702/en/Hotfix_Readme_OSCE7_3_B1087.txt - http://www.securityfocus.com/bid/21442 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1031702
CVE ID: CVE-2006-6179 State: PUBLISHED Published: 2006-11-30T23:00:00 Last Updated: 2024-08-07T20:19:34.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in PCCSRV\Web_console\RemoteInstallCGI\CgiRemoteInstall.exe for Trend Micro OfficeScan 7.3 before build 7.3.0.1089 allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4852 - http://solutionfile.trendmicro.com/SolutionFile/1031753/en/Hotfix_Readme_OSCE7_3_B1089.txt - http://www.securityfocus.com/bid/21442 - http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1031753
CVE ID: CVE-2006-6180 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in articles.asp in Expinion.net iNews Publisher (iNP) 2.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the hl parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23123 - http://www.securityfocus.com/bid/21296 - http://www.vupen.com/english/advisories/2006/4707 - https://exchange.xforce.i
- http://www.securityfocus.com/bid/21296 - http://www.vupen.com/english/advisories/2006/4707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30510