Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5484 State: PUBLISHED Published: 2006-10-24T22:00:00 Last Updated: 2024-08-07T19:55:52.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: SSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other products, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents Tectia from correctly verifying X.509 and other certificates that use PKCS #1, a similar issue to CVE-2006-4339. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017060 - http://secunia.co
ditional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017060 - http://secunia.com/advisories/22350 - http://www.vupen.com/english/advisories/2006/4032 - http://www.ssh.com/company/news/2006/english/security/article/786/ - http://www.kb.cert.org/vuls/id/845620 - http://securitytracker.com/id?1017061
CVE ID: CVE-2006-5485 State: PUBLISHED Published: 2006-10-24T22:00:00 Last Updated: 2024-08-07T19:55:52.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers to execute arbitrary PHP code via a URL in the SPEEDBERG_PATH parameter to (1) entrancePage.tpl.php, (2) generalToolBox.tlb.php, (3) myToolBox.tlb.php, (4) scriplet.inc.php, (5) simplePage.tpl.php, (6) speedberg.class.php, and (7) standardPage.tpl.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-October/001091.html - http://securityreason.com/securityalert/1762 - http:
- http://www.attrition.org/pipermail/vim/2006-October/001091.html - http://securityreason.com/securityalert/1762 - http://www.securityfocus.com/archive/1/449468/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29699 - http://www.securityfocus.com/bid/20670
CVE ID: CVE-2006-5486 State: PUBLISHED Published: 2006-10-24T22:00:00 Last Updated: 2024-08-07T19:55:52.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20708 - http://securitytracker.com/id?1017113 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102497-1 - http://secunia.com/advisories/22575 - http://www.vupen.com/english/advisories/2006/4183 - https://excha
=1-26-102497-1 - http://secunia.com/advisories/22575 - http://www.vupen.com/english/advisories/2006/4183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29806
CVE ID: CVE-2006-5487 State: PUBLISHED Published: 2006-11-10T22:00:00 Last Updated: 2024-08-07T19:55:52.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Marshal MailMarshal SMTP 5.x, 6.x, and 2006, and MailMarshal for Exchange 5.x, allows remote attackers to write arbitrary files via ".." sequences in filenames in an ARJ compressed archive. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30188 - http://secunia.com/advisories/22806 - http://www.securityfocus.com/bid/20999 - http://securitytracker.com/id?1017209 - http://www.se
ia.com/advisories/22806 - http://www.securityfocus.com/bid/20999 - http://securitytracker.com/id?1017209 - http://www.securityfocus.com/archive/1/451143/100/0/threaded - http://www.vupen.com/english/advisories/2006/4457 - http://www.marshal.com/kb/article.aspx?id=11450 - http://www.zerodayinitiative.com/advisories/ZDI-06-039.html
CVE ID: CVE-2006-5488 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the loginNick parameter during login. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29898 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29675 - http://secunia.com/advisories/22489 - http://www.securityfocus
ps://exchange.xforce.ibmcloud.com/vulnerabilities/29675 - http://secunia.com/advisories/22489 - http://www.securityfocus.com/bid/20643
CVE ID: CVE-2006-5489 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's calendar meeting time. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29678 - http://www.blackberry.com/knowledgecenterpublic/livelink.exe/4.1.2_HF1_Release_No
e.ibmcloud.com/vulnerabilities/29678 - http://www.blackberry.com/knowledgecenterpublic/livelink.exe/4.1.2_HF1_Release_Notes?func=doc.Fetch&nodeId=1276788 - http://securitytracker.com/id?1017101 - http://www.vupen.com/english/advisories/2006/4133 - http://secunia.com/advisories/22408
CVE ID: CVE-2006-5490 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=82171&release_id=456920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29691 - http://www.vupen.com/english/advisories/2006/4123 - http://secunia.com/advisories/22514 - http://www.osvdb.org/29903 - http://www.securityfocus.com/bid
visories/2006/4123 - http://secunia.com/advisories/22514 - http://www.osvdb.org/29903 - http://www.securityfocus.com/bid/20645
CVE ID: CVE-2006-5491 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449220/100/0/threaded - http://securitytracker.com/id?1017096 - http://www.securityfocus.com/bid/20642 - http://securityreason.com/securityalert/1768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29686
CVE ID: CVE-2006-5492 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated users to obtain sensitive information (document contents) via unspecified attack vectors related to "grants." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22468 - http://www.vupen.com/english/advisories/2006/4134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29685 - http://sourceforge.net/project/shownotes.php?release_id=456553 - http://www.osvdb.org/29900 - http://www.securit
29685 - http://sourceforge.net/project/shownotes.php?release_id=456553 - http://www.osvdb.org/29900 - http://www.securityfocus.com/bid/20647
CVE ID: CVE-2006-5493 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29554 - http://securityreason.com/securityalert/1770 - http://www.securityfocus.com/bid/20639 - https://www.exploit-db.com/exploits/2566 - http://www.securityfocus.com/archive/1/449214/100/0/threaded - http://securitytracker
www.exploit-db.com/exploits/2566 - http://www.securityfocus.com/archive/1/449214/100/0/threaded - http://securitytracker.com/id?1017095 - http://osvdb.org/31068
CVE ID: CVE-2006-5494 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap CVE-2006-6795. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29694 - http://www.osvdb.org/29892 - http://secunia.com/advisories/22505 - http
ange.xforce.ibmcloud.com/vulnerabilities/29694 - http://www.osvdb.org/29892 - http://secunia.com/advisories/22505 - https://www.exploit-db.com/exploits/2599 - http://www.vupen.com/english/advisories/2006/4121
CVE ID: CVE-2006-5495 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/download
cr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29963 - http://www.osvdb.org/29968 - http://www.osvdb.org/29964 - http://www.osvdb.org/29960 - http://www.securityfocus.com/bid/20678 - http://secunia.com/advisories/22525 - https://www.exploit-db.com/exploits/2611 - http://securitytracker.com/id?1017111 - http://www.osvdb.org/29961 - http://www.osvdb.org/29966 - http://cmsblog.msdazu.de/?p=209 - http://www.osvdb.org/29969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29715 -
p://cmsblog.msdazu.de/?p=209 - http://www.osvdb.org/29969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29715 - http://www.osvdb.org/29962 - http://www.vupen.com/english/advisories/2006/4152 - http://www.securityfocus.com/bid/20662 - http://www.osvdb.org/29965 - http://www.securityfocus.com/archive/1/449459/100/0/threaded - http://www.osvdb.org/29967
CVE ID: CVE-2006-5496 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) index.php, (2) addknowledge.php, and (3) addscreenshot.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29700 - http://www.securityfocus.com/archive/1/449231/100/0/threaded - http://secur
.xforce.ibmcloud.com/vulnerabilities/29700 - http://www.securityfocus.com/archive/1/449231/100/0/threaded - http://securitytracker.com/id?1017097 - http://securityreason.com/securityalert/1769 - http://www.securityfocus.com/bid/20641
CVE ID: CVE-2006-5497 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4122 - http://www.securityfocus.com/bid/20640 - https://www.exploit-db.com/exploits/2600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29692 - http://secunia.com/advisories/22
oit-db.com/exploits/2600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29692 - http://secunia.com/advisories/22491 - http://sourceforge.net/forum/forum.php?forum_id=625467 - http://www.osvdb.org/29904
CVE ID: CVE-2006-5498 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29692 - http://sourceforge.net/forum/forum.php?forum_id=625467
CVE ID: CVE-2006-5499 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:52.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449189/100/0/threaded - http://securityreason.com/securityalert/1771 - http://www.securityfocus.com/bid/20627 - http://www.osvdb.org/29893 - http://www.hardened-php.net/advisory_112006.136.html - https://excha
yfocus.com/bid/20627 - http://www.osvdb.org/29893 - http://www.hardened-php.net/advisory_112006.136.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29695 - http://secunia.com/advisories/22501 - http://securitytracker.com/id?1017100 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html - http://www.s9y.org/forums/viewtopic.php?t=7356 - http://www.vupen.com/english/advisories/2006/4135
CVE ID: CVE-2006-5500 State: PUBLISHED Published: 2006-10-25T10:00:00 Last Updated: 2024-08-07T19:55:53.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) userNick or (2) password parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4129
CVE ID: CVE-2006-5501 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the downloadFileDirectory property, a different vulnerability than CVE-2006-5502. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20745 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29797 - http://www.vupen.co
ce/vulnerabilities/display.php?id=430 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29797 - http://www.vupen.com/english/advisories/2006/4197 - http://securitytracker.com/id?1017121 - http://secunia.com/advisories/22567
CVE ID: CVE-2006-5502 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in America Online (AOL) 9.0 Security Edition allows remote attackers to execute arbitrary code via the AddPictureNoAlbum method, a different vulnerability than CVE-2006-5501. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20747 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=429 - http://www.vupen.com/english/advisories/2006/4197 - http://securitytracker.
ligence/vulnerabilities/display.php?id=429 - http://www.vupen.com/english/advisories/2006/4197 - http://securitytracker.com/id?1017121 - http://secunia.com/advisories/22567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29795
CVE ID: CVE-2006-5503 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449241/100/0/threaded - http://securityreason.com/securityalert/1772 - http://www.securityfocus.com/bid/20629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29690
CVE ID: CVE-2006-5504 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows remote attackers to inject arbitrary web script or HTML via a base64 encoded params value in the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449307/100/0/threaded - http://osvdb.org/31070 - http://www.securityfocus.com/archive/1/449395/100/0/threaded - http://www.securityfocus.com/archive/1/449478/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabi
threaded - http://www.securityfocus.com/archive/1/449478/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29689
CVE ID: CVE-2006-5505 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute arbitrary PHP code via the lang parameter to (1) admin/configuration.inc.php, (2) admin/creer_album.inc.php, (3) admin/changepwd.php.inc, and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4168 - https://exchange.xforce.ibmcloud.com/vulnerabilit
ner: References: - http://www.vupen.com/english/advisories/2006/4168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29759 - http://www.securityfocus.com/bid/20701 - http://www.securityfocus.com/bid/20859 - http://secunia.com/advisories/22530
CVE ID: CVE-2006-5506 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:53.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to execute arbitrary PHP code via the path parameter in (1) inc/prepend.inc.php, (2) inc/lib/boxes.lib.php, (3) inc/lib/tools.lib.php, (4) tools/trackback/index.php, and (5) tools/utf8conversion/index.php in admin/; and (6) prepend.inc.php, (7) lib/boxes.lib.php, and (8) lib/history.lib.php in inc/. Additional Analyst Notes: - CVE Program Container: References: - http://wiclear.free.fr/?Download - http://www.osvdb.org/29944 - http://www.v
tes: - CVE Program Container: References: - http://wiclear.free.fr/?Download - http://www.osvdb.org/29944 - http://www.vupen.com/english/advisories/2006/4166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29720 - http://www.osvdb.org/29948 - http://www.osvdb.org/29943 - http://www.osvdb.org/29947 - http://www.osvdb.org/29945 - http://secunia.com/advisories/22547 - http://www.osvdb.org/29946 - https://www.exploit-db.com/exploits/2624 - http://www.osvdb.org/29949 - http://wiclear.free.fr/ - http://www.osvdb.org/29942
CVE ID: CVE-2006-5507 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_dedi[dedi_path] parameter in (1) find.php, (2) insert_line.php, (3) fullscreen.php, (4) changecase.php, (5) insert_link.php, (6) insert_table.php, (7) table_cellprop.php, (8) table_prop.php, (9) table_rowprop.php, (10) insert_page.php, and possibly insert_marquee.php in backend/external/wysiswg/popups/. Additional Analyst Notes: - CVE Program Container: References: - http://w
rquee.php in backend/external/wysiswg/popups/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29760 - http://www.osvdb.org/29951 - http://www.vupen.com/english/advisories/2006/4164 - http://www.securityfocus.com/bid/20702 - http://www.osvdb.org/29952 - http://www.osvdb.org/29954 - http://www.osvdb.org/29955 - http://www.osvdb.org/29950 - http://www.osvdb.org/29958 - http://www.osvdb.org/29953 - http://www.osvdb.org/29956 - http://www.osvdb.org/29959 - http://packetstormsecurity.org/0610-exploits/Derdirigent.txt - http://secunia.com/advisories/22546
CVE ID: CVE-2006-5508 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.783Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote attackers to execute arbitrary SQL commands via (1) the n parameter and (2) the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1774 - http://www.vupen.com/english/advisories/2006/4062 - http://www.securityfocus.com/archive/1/448796/100/100/threaded - http://www.security.nnov.ru/Odocument711.html - http://secunia.com/advisories/22442
CVE ID: CVE-2006-5509 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote attackers to execute arbitrary PHP code via crafted POST requests that store PHP code in a database that is later processed by eval, as demonstrated using SQL injection via the n parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20563 - http://securityreason.com/securityalert/1774 - http://www.vupen.com/english/advisories/2006/4062 - http://www.securityfocus.com/archive/1/448796/10
ecurityalert/1774 - http://www.vupen.com/english/advisories/2006/4062 - http://www.securityfocus.com/archive/1/448796/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29599 - http://www.security.nnov.ru/Odocument711.html - http://secunia.com/advisories/22442