Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
archive/1/446882/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29133 - http://www.securityfocus.com/archive/1/450936/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-September/001054.html - http://securityreason.com/securityalert/1647
CVE ID: CVE-2006-5068 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29141 - https://www.exploit-db.com/exploits/2432 - http://secunia.com/advisories/22115 - http://www.vupen.com/english/advisories/2006/3773 - http://www.osvdb.org/29176 - https://exchange.xforce.ib
ries/22115 - http://www.vupen.com/english/advisories/2006/3773 - http://www.osvdb.org/29176 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29142 - https://www.exploit-db.com/exploits/2433 - http://www.securityfocus.com/bid/20192
CVE ID: CVE-2006-5069 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3782 - http://secunia.com/advisories/22071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29128 - http://www.securityfocus.com/bid/20173 - http://securityreason.com/securityalert/16
ibmcloud.com/vulnerabilities/29128 - http://www.securityfocus.com/bid/20173 - http://securityreason.com/securityalert/1646 - http://www.securityfocus.com/archive/1/446885/100/0/threaded - http://marc.info/?l=full-disclosure&m=115918334930694&w=2 - http://typo3.org/teams/security/security-bulletins/typo3-20060911-1/
CVE ID: CVE-2006-5070 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fsinit][objpath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29178 - https://www.exploit-db.com/exploits/2434 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29147 - http://www.securityfocus.com/bid/20188 - http://secunia.com/advisories/22107 - http://www.vupen.com/english/adv
/29147 - http://www.securityfocus.com/bid/20188 - http://secunia.com/advisories/22107 - http://www.vupen.com/english/advisories/2006/3771
CVE ID: CVE-2006-5071 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22117 - http://www.securityfocus.com/bid/20213 - http://eyeos.blogspot.com/2006/09/eyeos-091-released.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29190 - http://sourceforge.net/project/shownotes.php?group_id=14502
https://exchange.xforce.ibmcloud.com/vulnerabilities/29190 - http://sourceforge.net/project/shownotes.php?group_id=145027&release_id=450490 - http://www.vupen.com/english/advisories/2006/3780
CVE ID: CVE-2006-5072 State: PUBLISHED Published: 2006-10-05T23:00:00 Last Updated: 2024-08-07T19:32:23.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_73_mono.html - http://www.ubuntu.com/usn/usn-357-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29353 - http://secunia.com/advisories/22277 - http://secunia.com/advisories/23213 - http://secunia.com/ad
ulnerabilities/29353 - http://secunia.com/advisories/22277 - http://secunia.com/advisories/23213 - http://secunia.com/advisories/22237 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:188 - http://www.securityfocus.com/bid/20340 - http://secunia.com/advisories/23154 - http://secunia.com/advisories/23776 - http://secunia.com/advisories/22614 - http://security.gentoo.org/glsa/glsa-200611-23.xml - http://www.vupen.com/english/advisories/2006/3911 - http://fedoranews.org/cms/node/2401
CVE ID: CVE-2006-5073 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20252 - http://secunia.com/advisories/22132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29246 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2099 - http://sunsolve.sun.com/search/document.do?asse
ty.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2099 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102144-1 - http://securitytracker.com/id?1016968 - http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm - http://www.vupen.com/english/advisories/2006/3847 - http://secunia.com/advisories/22581
CVE ID: CVE-2006-5074 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:04.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3795 - http://www.securityfocus.com/bid/20221 - http://www.securityfocus.com/archive/1/447015/100/0/threaded - http://secunia.com/advisories/22123 - http://securityreason.com/securityalert/1652
CVE ID: CVE-2006-5075 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors related to an SSL client. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20224 - http://securitytracker.com/id?1016936 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102563-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm - http://secunia.com/advisories/22136 - https://exc
563-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm - http://secunia.com/advisories/22136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29185 - http://www.vupen.com/english/advisories/2006/3792
CVE ID: CVE-2006-5076 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:04.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20207 - http://www.securityfocus.com/archive/1/448776/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29172 - http://w
change.xforce.ibmcloud.com/vulnerabilities/29605 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29172 - http://www.securityfocus.com/archive/1/450031/100/200/threaded - http://www.securityfocus.com/archive/1/447005/100/0/threaded - http://securityreason.com/securityalert/1650
CVE ID: CVE-2006-5077 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29148 - https://www.exploit-db.com/exploits/2429 - http://www.vupen.com/english/advisories/2006/3880 - http://www.securityfocus.com/bid/20185
CVE ID: CVE-2006-5078 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[dirMain] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29138 - http://sourceforge.net/forum/forum.php?forum_id=620481 - http://www.securityfocus.com/bid/20183 - https://www.exploit-db.com/exploits/2427
CVE ID: CVE-2006-5079 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_to_bt_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20222 - http://www.vupen.com/english/advisories/2006/3784 - https://www.exploit-db.com/exploits/2437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29179
CVE ID: CVE-2006-5080 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2368295640/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29183 - http://www.osvdb.org/29177 - http://secunia.com/advisories/22109 - http://www.vupen.com/english/advisories/2006/3779 - http://w
www.osvdb.org/29177 - http://secunia.com/advisories/22109 - http://www.vupen.com/english/advisories/2006/3779 - http://www.securityfocus.com/bid/20228 - http://www.sixapart.com/movabletype/news/2006/09/mt_333-mte_103_updates.html
CVE ID: CVE-2006-5081 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:04.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447003/100/0/threaded - http://securitytracker.com/id?1016934 - http://securityreason.com/securityalert/1651 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29173
CVE ID: CVE-2006-5082 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20217 - http://www.sugarcrm.com/forums/showthread.php?t=16348 - http://www.vupen.com/english/advisories/2006/3783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29182 - http://secunia.com/advisories/22110
CVE ID: CVE-2006-5083 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:05.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22113 - http://www.securityfocus.com/bid/84255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29146 - https://www.exploit-db.com/exploits/2430 - http://www.vupen.com/english/advisories/2006/3774
CVE ID: CVE-2006-5084 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/202604 - http://secunia.com/advisories/22185/ - http://www.vupen.com/english/advisories/2006/3895 - http://securitytracker.com/id?1016966 - htt
.com/advisories/22185/ - http://www.vupen.com/english/advisories/2006/3895 - http://securitytracker.com/id?1016966 - http://www.securityfocus.com/bid/20218 - http://security-protocols.com/vids/skype_osx_0day.htm - http://www.skype.com/security/skype-sb-2006-002.html - http://www.security-protocols.com/modules.php?name=News&file=article&sid=3259
CVE ID: CVE-2006-5085 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22163 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29217 - http://www.securityfocus.com/bid/20235 - http://www.securityfocus.com/archive/1/447167/100/0/threaded - http://acid-root.new.fr/poc/12060927.txt - http://securityr
tp://www.securityfocus.com/archive/1/447167/100/0/threaded - http://acid-root.new.fr/poc/12060927.txt - http://securityreason.com/securityalert/1653
CVE ID: CVE-2006-5086 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:41:03.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22163 - http://www.securityfocus.com/archive/1/447167/100/0/threaded - http://acid-root.new.fr/poc/12060927.txt - http://securityreason.com/securityalert
com/archive/1/447167/100/0/threaded - http://acid-root.new.fr/poc/12060927.txt - http://securityreason.com/securityalert/1653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29222
CVE ID: CVE-2006-5087 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:04.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) track.php or (2) connect.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20189 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29145 - https://www.exploit-db.com/exploits/2431
CVE ID: CVE-2006-5088 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:04.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nyubicrew.org/adv/solpot-adv-09.txt - http://www.securityfocus.com/bid/20219 - http://www.securityfocus.com/archive/1/447012/100/0/threaded - http://securityreason.com/securityalert/1654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29180
CVE ID: CVE-2006-5089 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:04.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20208 - http://sourceforge.net
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20208 - http://sourceforge.net/project/downloading.php?group_id=164457&filename=mybic_0_6_5.zip
CVE ID: CVE-2006-5090 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:03.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script or HTML via the (1) mod or (2) action parameters in index.php, or the (3) pageid parameter in modules/pageedit/index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33676 - http://osvdb.org/33677 - http://www.securityfocus.com/bid/20212
CVE ID: CVE-2006-5091 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:03.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1664 - http://www.vupen.com/english/advisories/2006/3775 - http://www.securityfocus.com/archive/1/446941/100/0/threaded - http://secunia.com/advisories/22079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5634 - htt
com/advisories/22079 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5634 - http://www.securityfocus.com/bid/20179 - http://www.securityfocus.com/archive/1/446941/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29169
CVE ID: CVE-2006-5092 State: PUBLISHED Published: 2006-09-29T20:00:00 Last Updated: 2024-08-07T19:41:04.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigation_start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22061 - https://www.exploit-db.com/exploits/2436 - http://www.vupen.com/english/advisories/2006/3796 - http://www.securityfocus.com/bid/20230 - http://www.osvdb.org/29217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29164
CVE ID: CVE-2006-5093 State: PUBLISHED Published: 2006-09-29T21:00:00 Last Updated: 2024-08-07T19:41:04.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2450 - http://www.vupen.com/english/advisories/2006/3850 - http://www.securityfocus.com/bid/20260 - http://secunia.com/advisories/22189 - http://kernel-32.blogspot.com/2006/09/tagmin-cc-21b-remote-file-include.html - http://www.osvdb
a.com/advisories/22189 - http://kernel-32.blogspot.com/2006/09/tagmin-cc-21b-remote-file-include.html - http://www.osvdb.org/29293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29257
CVE ID: CVE-2006-5094 State: PUBLISHED Published: 2006-09-29T21:00:00 Last Updated: 2024-08-07T19:41:03.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3843 - http://www.securityfocus.com/bid/20251 - http://securityreason.com/securityalert/1660 - http://secunia.com/advisories/22177 - http://www.nyubicrew.org/adv/sol
- http://securityreason.com/securityalert/1660 - http://secunia.com/advisories/22177 - http://www.nyubicrew.org/adv/solpot-adv-10.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29250 - http://www.securityfocus.com/archive/1/447292/100/0/threaded
CVE ID: CVE-2006-5095 State: PUBLISHED Published: 2006-09-29T21:00:00 Last Updated: 2024-08-07T19:41:03.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter. NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed according to the provided instructions Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1656 - http://attrition.org/pipermail/vim/2006-September/001057.html - http://www.securityfocus.
eason.com/securityalert/1656 - http://attrition.org/pipermail/vim/2006-September/001057.html - http://www.securityfocus.com/bid/20160 - http://www.securityfocus.com/archive/1/446876/100/0/threaded
CVE ID: CVE-2006-5096 State: PUBLISHED Published: 2006-09-29T21:00:00 Last Updated: 2024-08-07T19:41:04.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22162 - http://securityreason.com/securityalert/1657 - http://www.securityfocus.com/archive/1/447168/100/0/threaded - https://excha