Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ttp://www.securityfocus.com/bid/19846 - https://www.exploit-db.com/exploits/2290 - http://www.securityfocus.com/archive/1/445264/100/0/threaded
CVE ID: CVE-2006-4590 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28638 - http://www.vupen.com/english/advisories/2006/3415
g/28266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28638 - http://www.vupen.com/english/advisories/2006/3415 - http://secunia.com/advisories/21674 - http://www.securityfocus.com/bid/19761
CVE ID: CVE-2006-4591 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Seller Pro 3.25, allow remote attackers to execute arbitrary PHP code via a URL in the config[template_path] parameter to (1) payment/payment_result.php or (2) /payment/spuser_result.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19769 - http://www.securityfocus.com/archive/1/445156/100/0/threaded - http://securityreason.com/securityalert/1509
CVE ID: CVE-2006-4592 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to conduct SQL injection attacks via ">" characters in the id parameter, which are not filtered by the protection mechanism. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21755 - https://www.exploit-db.com/exploits/2296 - http://www.osvdb.org/28541 - http://www.vupen.com/english/advisories/2006/3451 - http://www.securityfocus.com/bid/19848 - http://securitytracker.
1 - http://www.vupen.com/english/advisories/2006/3451 - http://www.securityfocus.com/bid/19848 - http://securitytracker.com/id?1016793
CVE ID: CVE-2006-4593 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016797 - http://www.securityfocus.com/bid/19847 - http://securityreason.com/securityalert/1511 - http://www.osvdb.org/29886 - http://www.securityfocus.com/archive/1/445157/100/0/threaded
CVE ID: CVE-2006-4594 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the include_location parameter in (1) confirm.php or (2) login.php. NOTE: the include_location parameter to index.php is already covered by CVE-2005-1681. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19765 - https://www.exploit-db.com/exploits/2279 - https://exchange.xforce.ibmcloud.com/vulnerabilities
ityfocus.com/bid/19765 - https://www.exploit-db.com/exploits/2279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28670
CVE ID: CVE-2006-4595 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3445 - http://www.securityfocus.com/archive/1/445001/100/0/threaded - http://acid-root.new.fr/poc/08060901.txt - http://secunia.com/advisories/21742 - http://securityreason.com/securityalert/1514
CVE ID: CVE-2006-4596 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) hauptverzeichniss parameter in includes/login_check.php and the (2) template_back parameter in admin/login/content/user_daten.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445185/100/0/threaded - http://www.securityfocus.com/bid/19830 - http://secunia.com/advisories/21746 - http://www.vupen.com/english/advisories/2006/
://www.securityfocus.com/bid/19830 - http://secunia.com/advisories/21746 - http://www.vupen.com/english/advisories/2006/3447 - http://www.securityfocus.com/bid/19811 - http://www.bb-pcsecurity.de/Websecurity/384/org/MyBace_Light_%28hauptverzeichniss%29_Remote_File_Inclusion.htm
CVE ID: CVE-2006-4597 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the YID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2287 - http://secunia.com/advisories/21741 - http://securityreason.com/securityalert/1503 - http://www.securityfocus.com/archive/1/445002/100/0/threaded - http://www.vupen.com/english/advisories/2006/3441
CVE ID: CVE-2006-4598 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in links.php in ssLinks 1.22 allow remote attackers to execute arbitrary SQL commands via the (1) go parameter and (2) id parameter in a rate action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21736 - http://www.securityfocus.com/archive/1/447319/100/0/threaded - http://www.vupen.com/english/advisories/2006/3443 - http://securityreason.com/securityalert/1505 - http://www.securityfocus.com/archive/1/445009/100/0/threaded - http://www.secu
//securityreason.com/securityalert/1505 - http://www.securityfocus.com/archive/1/445009/100/0/threaded - http://www.securityfocus.com/bid/19815
CVE ID: CVE-2006-4599 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445008/100/0/threaded - http://securityreason.com/securityalert/1494 - http://www.vupen.com/english/advisories/2006/3442 - http://secunia.com/advisories/21737 - http://www.securityfocus.com/bid/19813
CVE ID: CVE-2006-4600 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges to modify arbitrary Distinguished Names (DN). Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-232.htm - http://secunia.com/advisories/22300 - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:171 - http://secunia.com/advisories/25098 - http://security.ge
tp://www.mandriva.com/security/advisories?name=MDKSA-2006:171 - http://secunia.com/advisories/25098 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://www.openldap.org/lists/openldap-announce/200608/msg00000.html - https://issues.rpath.com/browse/RPL-667 - http://www.vupen.com/english/advisories/2007/3229 - http://www.trustix.org/errata/2006/0055 - http://www.securityfocus.com/archive/1/447395/100/200/threaded - http://secunia.com/advisories/22273 - http://secunia.com/advisories/25628 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4587 - http://www.redhat.com/support/errata/RHSA-2007-0430.html - http://www.vupen.com/english/advisor
oftware%20Bugs?id=4587 - http://www.redhat.com/support/errata/RHSA-2007-0430.html - http://www.vupen.com/english/advisories/2007/2186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28772 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9618 - http://www.securityfocus.com/bid/19832 - http://www.redhat.com/support/errata/RHSA-2007-0310.html - http://secunia.com/advisories/26909 - http://secunia.com/advisories/27706 - http://securitytracker.com/id?1016783 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://www.openldap.org/software/release/changes.html - http://secunia.com/advisories/22219 - http://secunia.com/advis
- http://www.openldap.org/software/release/changes.html - http://secunia.com/advisories/22219 - http://secunia.com/advisories/25676 - http://secunia.com/advisories/21721
CVE ID: CVE-2006-4601 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19817 - http://secunia.com/advisories/21734 - http://securityreason.com/securityalert/1496 - http://acid-root.new.fr/poc/09060902.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28730 - http://www.securityfocus.com/archive/1/445010/100/0/threaded - http://www.vupen.com/english/adv
/vulnerabilities/28730 - http://www.securityfocus.com/archive/1/445010/100/0/threaded - http://www.vupen.com/english/advisories/2006/3440
CVE ID: CVE-2006-4602 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to execute arbitrary PHP code via a filepath parameter that contains a filename with a .php extension, which is uploaded to the img/wiki/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22100 - http://isc.sans.org/diary.php?storyid=1672 - http://www.vupen.com/english/advisories/2006/3450 - http://www.securityfocus.com/bid/19819 - http://tikiwiki.org/tiki-read_
p://www.vupen.com/english/advisories/2006/3450 - http://www.securityfocus.com/bid/19819 - http://tikiwiki.org/tiki-read_article.php?articleId=136 - http://www.osvdb.org/28456 - http://security.gentoo.org/glsa/glsa-200609-16.xml - https://www.exploit-db.com/exploits/2288 - http://secunia.com/advisories/21733
CVE ID: CVE-2006-4603 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCH Swift Sound Web Dictate 1.02 allows remote attackers to bypass authentication via a null password. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1510 - http://www.attrition.org/pipermail/vim/2006-October/001086.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28759 - http://www.securityfocus.com/archive/1/445085/100/0/threaded - http://securitytracker.com/id?1016789 - http://www.osvdb.org/28547 - http://www.securityfocus.com/bid/19836 - http://secunia.co
securitytracker.com/id?1016789 - http://www.osvdb.org/28547 - http://www.securityfocus.com/bid/19836 - http://secunia.com/advisories/21747
CVE ID: CVE-2006-4604 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 Beta and earlier allows remote attackers to execute arbitrary PHP code via the _incMgr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28673 - http://www.securityfocus.com/bid/19773 - https://www.exploit-db.com/exploits/2280
CVE ID: CVE-2006-4605 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to execute arbitrary PHP code via the adodb parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19818 - https://www.exploit-db.com/exploits/8425 - http://www.securityfocus.com/archive/1/502637/100/0/threaded - http://www.osvdb.org/28443 - http://securityreason.com/securityalert/1499 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.at
p://securityreason.com/securityalert/1499 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.attrition.org/pipermail/vim/2009-April/002167.html - http://secunia.com/advisories/21738
CVE ID: CVE-2006-4606 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary SQL commands via the (1) id_temas parameter in busqueda_tema.php, the (2) cadena parameter in busqueda.php, the (3) id_autor parameter in autor.php, the (4) email parameter in lista.php, and the (5) id_articulo parameter in articulo.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19818 - https://www.exploit-db.com/exploits/8425 - https://www.exploit-db.com
rences: - http://www.securityfocus.com/bid/19818 - https://www.exploit-db.com/exploits/8425 - https://www.exploit-db.com/exploits/3538 - http://www.osvdb.org/28452 - http://www.osvdb.org/28446 - http://www.osvdb.org/28447 - http://www.securityfocus.com/archive/1/502637/100/0/threaded - http://securityreason.com/securityalert/1499 - http://www.osvdb.org/28445 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.attrition.org/pipermail/vim/2009-April/002167.html - http://www.osvdb.org/28448 - http://secunia.com/advisories/21738 - http://www.osvdb.org/28451 - http://www.securityfocus.com/bid/23079
CVE ID: CVE-2006-4607 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by setting the ID_ADMIN and SUPER_ADMIN parameters to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28449 - http://www.securityfocus.com/bid/19818 - https://www.exploit-db.com/exploits/8425 - http://www.securityfocus.com/archive/1/502637/100/0/threaded - http://securityreason.com/securityalert/1499 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.att
://securityreason.com/securityalert/1499 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.attrition.org/pipermail/vim/2009-April/002167.html - http://secunia.com/advisories/21738
CVE ID: CVE-2006-4608 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cadena parameter in busqueda.php and the (2) email parameter in lista.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19818 - http://www.osvdb.org/28450 - https://www.exploit-db.com/exploits/8425 - http://www.securityfocus.com/archive/1/502637/100/0/threaded - http://securityreason.com/securityalert/1499 - http://
- http://www.securityfocus.com/archive/1/502637/100/0/threaded - http://securityreason.com/securityalert/1499 - http://www.securityfocus.com/archive/1/445007/100/0/threaded - http://www.attrition.org/pipermail/vim/2009-April/002167.html - http://secunia.com/advisories/21738
CVE ID: CVE-2006-4609 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the path_pre parameter in (1) cm_lib.inc.php, (2) doc/br.edithelp.php, (3) doc/de.edithelp.php, (4) doc/ct.edithelp.php, (5) userrating.php, and (6) listing.php, a different set of vectors than CVE-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is lim
E-2006-4204. NOTE: a third-party researcher has disputed the impact of the cm_lib.inc.php vector, stating that it is limited to local file inclusion. CVE analysis as of 20060905 concurs, although use of ftp URLs is also possible. The remaining five vectors have also been disputed by the same third party, stating that the path_pre variable is initialized before it is used Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3373 - http://www.securityfocus.com/archive/1/444220/100/100/threaded - http://www.osvdb.org/28217 - http://www.securityfocus.com/archive/1/444076/100/100/threaded - http://secunia.com/advisories/21590 - http://secur
17 - http://www.securityfocus.com/archive/1/444076/100/100/threaded - http://secunia.com/advisories/21590 - http://securityreason.com/securityalert/1495
CVE ID: CVE-2006-4610 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2304 - http://www.osvdb.org/28553 - http://www.vupen.com/english/advisories/2006/3469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28722 - http://securityreason.com/securityalert/1513 - http://secunia.com/advisories/21775 -
mcloud.com/vulnerabilities/28722 - http://securityreason.com/securityalert/1513 - http://secunia.com/advisories/21775 - http://securitytracker.com/id?1016812 - http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-25-grapagenda-remote.html - http://www.securityfocus.com/archive/1/445176/100/0/threaded - http://www.securityfocus.com/bid/19857
CVE ID: CVE-2006-4611 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long node name. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2303 - http://www.securityfocus.com/bid/19852 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28762 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049258.html - http://secunia.com/advisories/21771 - http://securit
.grok.org.uk/pipermail/full-disclosure/2006-September/049258.html - http://secunia.com/advisories/21771 - http://securityreason.com/securityalert/1493 - http://www.securityfocus.com/archive/1/445200/100/0/threaded - http://www.vupen.com/english/advisories/2006/3526 - http://www.monkey.org/~dugsong/dsocks/
CVE ID: CVE-2006-4612 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands via the RepId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19855 - http://securityreason.com/securityalert/1507 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28741 - http://www.securityfocus.com/archive/1/445204/100/0/threaded - http://www.vupen.com/english/advisories/2006/3476 - http://secunia.com/advisories/21766 - http://securitytracke
readed - http://www.vupen.com/english/advisories/2006/3476 - http://secunia.com/advisories/21766 - http://securitytracker.com/id?1016796
CVE ID: CVE-2006-4613 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via unspecified vectors involving (1) IPSec replay windows and (2) the use of vulnerable versions of ClamAV before 0.88.4. NOTE: it is possible that vector 2 is related to CVE-2006-4018. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19805 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28705 - http://secunia.com/advisories/21707 - http://www.cyberguard.in
ps://exchange.xforce.ibmcloud.com/vulnerabilities/28705 - http://secunia.com/advisories/21707 - http://www.cyberguard.info/snapgear/releases.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28702
CVE ID: CVE-2006-4614 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which allows local users to obtain sensitive information via keys under \HKEY_CURRENT_USER\Software\PDAapps\VeriChat. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445086/100/0/threaded - http://securityreason.com/securityalert/1504 - http://securitytracker.com/id?1016786 - http://airscanner.com/security/05081201_verichat.htm
CVE ID: CVE-2006-4615 State: PUBLISHED Published: 2006-09-07T00:00:00 Last Updated: 2024-08-07T19:14:47.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1518 - http://www.securityfocus.com/archive/1/445082/100/0/threaded - http://airscanner.com/security/05081701_implus.htm