Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1058 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T16:56:15.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25098 - http://www.securityfocus.com/bid/17330 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9483 - http://secunia.com/advisories/19477 - http://bugs.busybox.net/view.php?id=604 - http://secunia.com/advisori
def%3A9483 - http://secunia.com/advisories/19477 - http://bugs.busybox.net/view.php?id=604 - http://secunia.com/advisories/25848 - http://support.avaya.com/elmodocs2/security/ASA-2007-250.htm - http://www.redhat.com/support/errata/RHSA-2007-0244.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25569
CVE ID: CVE-2006-1059 State: PUBLISHED Published: 2006-03-30T17:00:00 Last Updated: 2024-08-07T16:56:15.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: The winbindd daemon in Samba 3.0.21 to 3.0.21c writes the machine trust account password in cleartext in log files, which allows local users to obtain the password and spoof the server in the domain. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19468 - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00114.html - http://www.osvdb.org/24263 - http://www.securityfocus.com/bid/17314 - http://www.trustix.org/errata/2006/0018 - http://secunia.com/advisories/19455 -
ttp://www.securityfocus.com/bid/17314 - http://www.trustix.org/errata/2006/0018 - http://secunia.com/advisories/19455 - http://secunia.com/advisories/19539 - http://www.vupen.com/english/advisories/2006/1179 - http://securitytracker.com/id?1015850 - http://us1.samba.org/samba/security/CAN-2006-1059.html - http://www.securityfocus.com/archive/1/429370/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25575
CVE ID: CVE-2006-1060 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T16:56:15.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in zgv before 5.8 and xzgv before 0.8 might allow user-assisted attackers to execute arbitrary code via a JPEG image with more than 3 output components, such as a CMYK or YCCK color space, which causes less memory to be allocated than required. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17409 - http://secunia.com/advisories/19572 - http://secunia.com/advisories/19779 - http://secunia.com/advisories/19790 - http://www.vupen.com/english/advisories/
2 - http://secunia.com/advisories/19779 - http://secunia.com/advisories/19790 - http://www.vupen.com/english/advisories/2006/1288 - http://secunia.com/advisories/19757 - http://www.novell.com/linux/security/advisories/2006_08_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25718 - http://www.debian.org/security/2006/dsa-1037 - http://secunia.com/advisories/19731 - http://securityreason.com/securityalert/756 - http://secunia.com/advisories/19571 - http://www.debian.org/security/2006/dsa-1038
CVE ID: CVE-2006-1061 State: PUBLISHED Published: 2006-03-21T01:00:00 Last Updated: 2024-08-07T16:56:15.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in cURL and libcURL 7.15.0 through 7.15.2 allows remote attackers to execute arbitrary commands via a TFTP URL (tftp://) with a valid hostname and a long path. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-announce-list/2006-March/msg00048.html - http://secunia.com/advisories/19371 - http://www.gentoo.org/security/en/glsa/glsa-200603-19.xml - http://www.vupen.com/english/advisories/2006/1008 - http://curl.haxx.se/docs/adv_20060320.html - http:/
-200603-19.xml - http://www.vupen.com/english/advisories/2006/1008 - http://curl.haxx.se/docs/adv_20060320.html - http://secunia.com/advisories/19335 - http://www.securityfocus.com/bid/17154 - http://www.osvdb.org/23982 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1326.html - http://www.trustix.org/errata/2006/0016 - http://secunia.com/advisories/19271 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25318 - http://secunia.com/advisories/19344
CVE ID: CVE-2006-1062 State: PUBLISHED Published: 2006-03-07T21:00:00 Last Updated: 2024-08-07T16:56:15.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in lurker.cgi for Lurker 2.0 and earlier allows attackers to read arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168 - http://www.osvdb.org/23694 - http://secunia.com/advisories/19145 - http://www.debian.org/security/2006/dsa-999 - http://www.securityfocus.com/bid/17003 - http://www.vupen.com/english/advisories/2006/0850 - http://terpstra.ca/lurker/message/20060302.130003.4c5
om/bid/17003 - http://www.vupen.com/english/advisories/2006/0850 - http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25149 - http://secunia.com/advisories/19136
CVE ID: CVE-2006-1063 State: PUBLISHED Published: 2006-03-07T21:00:00 Last Updated: 2024-08-07T16:56:15.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Lurker 2.0 and earlier allows remote attackers to create or overwrite files in any writable directory that is named "mbox". Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25153 - http://secunia.com/advisories/19145 - http://www.debian.org/security/2006/dsa-999 - http://www.osvdb.org/23695 - http://www.securityfocus.com/bid/17003 - http://www.vupen.com
n.org/security/2006/dsa-999 - http://www.osvdb.org/23695 - http://www.securityfocus.com/bid/17003 - http://www.vupen.com/english/advisories/2006/0850 - http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html - http://secunia.com/advisories/19136
CVE ID: CVE-2006-1064 State: PUBLISHED Published: 2006-03-07T21:00:00 Last Updated: 2024-08-07T16:56:15.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Lurker 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25154 - http://sourceforge.net/project/shownotes.php?release_id=399034&group_id=8168 - http://secunia.com/advisories/19145 - http://www.debian.org/security/2006/dsa-999 - http://www.securityfocus.com/bid/17003 - http://www.vupen.com/english/advis
ttp://www.debian.org/security/2006/dsa-999 - http://www.securityfocus.com/bid/17003 - http://www.vupen.com/english/advisories/2006/0850 - http://terpstra.ca/lurker/message/20060302.130003.4c5c2680.en.html - http://secunia.com/advisories/19136 - http://www.osvdb.org/23696
CVE ID: CVE-2006-1065 State: PUBLISHED Published: 2006-03-07T22:00:00 Last Updated: 2024-08-07T16:56:15.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in MyBulletinBoard (MyBB) 1.04 allows remote attackers to execute arbitrary SQL commands via the forums[] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25018 - http://secunia.com/advisories/19061 - http://www.securityfocus.com/archive/1/426631/100/0/threaded
CVE ID: CVE-2006-1066 State: PUBLISHED Published: 2006-03-27T00:00:00 Last Updated: 2024-08-07T16:56:15.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.16-rc2 and earlier, when running on x86_64 systems with preemption enabled, allows local users to cause a denial of service (oops) via multiple ptrace tasks that perform single steps, which can cause corruption of the DEBUG_STACK stack during the do_debug function call. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/281-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:151 - http://secunia.com/advisories/21614 - http://secunia.com/advisories/19955 - http:
urity/advisories?name=MDKSA-2006:151 - http://secunia.com/advisories/21614 - http://secunia.com/advisories/19955 - http://www.securityfocus.com/bid/17216 - http://www.osvdb.org/24098 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374 - http://marc.info/?l=linux-kernel&m=113932292516359&w=2
CVE ID: CVE-2006-1067 State: PUBLISHED Published: 2006-03-07T22:00:00 Last Updated: 2024-08-07T16:56:15.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 - htt
l Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 - http://www.securityfocus.com/archive/1/426863/100/0/threaded - http://www.hm2k.org/news/1141413208.html - http://www.securityfocus.com/archive/1/426756/100/0/threaded - http://www.securityfocus.com/archive/1/426761/100/0/threaded - http://www.securityfocus.com/bid/16954 - http://www.securityfocus.com/archive/1/426934/100/0/threaded
CVE ID: CVE-2006-1068 State: PUBLISHED Published: 2006-03-07T22:00:00 Last Updated: 2024-08-07T16:56:15.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear 614 and 624 routers, possibly running VXWorks, allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IRC channel, which causes an IRC connection reset, possibly related to the masquerading code for NAT environments, and as demonstrated via (1) a DCC SEND with a single long argument, or (2) a DCC SEND with IP, port, and filesize arguments with a 0 value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 -
ional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25230 - http://www.securityfocus.com/archive/1/426863/100/0/threaded - http://www.hm2k.org/news/1141413208.html - http://www.securityfocus.com/archive/1/426756/100/0/threaded - http://www.securityfocus.com/archive/1/426761/100/0/threaded - http://www.securityfocus.com/bid/16954 - http://www.securityfocus.com/archive/1/426934/100/0/threaded
CVE ID: CVE-2006-1069 State: PUBLISHED Published: 2006-03-07T23:00:00 Last Updated: 2024-08-07T16:56:15.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the session handling for Geeklog 1.4.x before 1.4.0sr2, 1.3.11 before 1.3.11sr5, 1.3.9 before 1.3.9sr5, and possibly earlier versions allows attackers to gain privileges as arbitrary users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.geeklog.net/article.php/geeklog-1.4.0sr2 - http://www.securityfocus.com/bid/17010 - http://www.vupen.com/english/advisories/2006/0851
CVE ID: CVE-2006-1070 State: PUBLISHED Published: 2006-03-08T00:00:00 Last Updated: 2024-08-07T16:56:15.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the f parameter. Additional Analyst Notes: - CVE Program Container: References: - http://biyosecurity.be/bugs/dvguestbook.txt - http://secunia.com/advisories/19098 - http://www.securityfocus.com/bid/16968 - http://www.vupen.com/english/advisories/2006/0842 - http://www.securityfocus.com/archive/1/427214/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25049
CVE ID: CVE-2006-1071 State: PUBLISHED Published: 2006-03-08T00:00:00 Last Updated: 2024-08-07T16:56:15.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://biyosecurity.be/bugs/dvguestbook.txt - http://www.vupen.com/english/advisories/2006/0843 - http://www.securityfocus.com/bid/16968 - http://secunia.com/advisories/19099 - http://www.securityfocus.com/archive/1/427214/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25049
CVE ID: CVE-2006-1072 State: PUBLISHED Published: 2006-03-08T00:00:00 Last Updated: 2024-08-07T16:56:15.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Daverave Simplog 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a blog post. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25066 - http://www.securityfocus.com/archive/1/426769/100/0/threaded - http://notlegal.ws/simplogsploit.txt - http://www.securityfocus.com/bid/16965
CVE ID: CVE-2006-1073 State: PUBLISHED Published: 2006-03-08T00:00:00 Last Updated: 2024-08-07T16:56:15.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include or read arbitrary .txt files via the (1) act and (2) blogid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25067 - http://www.vupen.com/english/advisories/2006/0839 - http://securityreason.com/securityalert/542 - http://www.securityfocus.com/archive/1/426769/100/0/threaded - http://secunia.com/advisories/19115 - http://notlegal
2 - http://www.securityfocus.com/archive/1/426769/100/0/threaded - http://secunia.com/advisories/19115 - http://notlegal.ws/simplogsploit.txt - http://www.securityfocus.com/bid/16965
CVE ID: CVE-2006-1074 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash or hang) via a long argument to the connect command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0849 - http://www.securityfocus.com/archive/1/426864/100/0/threaded - http://secunia.com/advisories/19079 - http://www.securityfocus.com/bid/16992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25185 - http://aluigi.altervista.org/adv/lieroxxx
s.com/bid/16992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25185 - http://aluigi.altervista.org/adv/lieroxxx-adv.txt
CVE ID: CVE-2006-1075 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16990 - http://www.vupen.com/english/advisories/2006/0849 - http://securityreason.com/securityalert/549 - http://www.securityfocus.com/archive/1/426864/10
sh/advisories/2006/0849 - http://securityreason.com/securityalert/549 - http://www.securityfocus.com/archive/1/426864/100/0/threaded - http://secunia.com/advisories/19079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25187 - http://aluigi.altervista.org/adv/lieroxxx-adv.txt
CVE ID: CVE-2006-1076 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25254 - http://www.securityfocus.com/archive/1/426875/100/0/threaded - http://www.securityfocus.com/bid/16971 - http://www.securityfocus.com/archive/1/430357/100/0/threaded
CVE ID: CVE-2006-1077 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16983 - http://www.securityfocus.com/archive/1/426826/100/0/threaded - http://www.securityfocus.com/archive/1/431869/100/0/threaded - http://securityreason.com/securityalert/544 - http://www.osvdb.org/23826
CVE ID: CVE-2006-1078 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2025-01-16T20:02:13.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpas
some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html - http://www.securityfocus.com/archive/1/426823/100/0/threaded - http://marc.info/?l=thttpd&m=114154083000296&w=2 - http://seclists.org/bugtraq/2004/Oct/0359.html - http://www.securityfocus.com/bid/16972 - http://issues.apache.org/bugzilla/show_bug.cgi?id=41279 - http://marc.info/?l=thttpd&m=114153031201867&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilit
_bug.cgi?id=41279 - http://marc.info/?l=thttpd&m=114153031201867&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25216 - http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html - http://issues.apache.org/bugzilla/show_bug.cgi?id=31975 - http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31236 - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2006-1079 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access ht
are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426823/100/0/threaded - http://marc.info/?l=thttpd&m=114154083000296&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25217 - http://www.securityfocus.com/bid/16972 - http://www.osvdb.org/23828 - http://marc.info/?l=thttpd&m=114153031201867&w=2 - http://seclists.org/fulldisclosure/2023/Nov/13 - http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html
CVE ID: CVE-2006-1080 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426825/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25144 - http://www.vupen.com/english/advisories/2006/0864 - http://notlegal.ws/gamepanel.txt - http://www.securityfocus.com/bid/16979 -
www.vupen.com/english/advisories/2006/0864 - http://notlegal.ws/gamepanel.txt - http://www.securityfocus.com/bid/16979 - http://secunia.com/advisories/19143
CVE ID: CVE-2006-1081 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25017 - http://www.vupen.com/english/advisories/2006/0809 - http://securityreason.com/securityalert/536 - http://secunia.com/advisories/19089 - http://hamid.ir/security/nexus.txt - http://www.securityfocus.com/archive/1/426575/100/0/thr
unia.com/advisories/19089 - http://hamid.ir/security/nexus.txt - http://www.securityfocus.com/archive/1/426575/100/0/threaded - http://www.securityfocus.com/bid/16915 - http://securitytracker.com/id?1015715
CVE ID: CVE-2006-1082 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts. Additional Analyst Notes: - CVE Program
displaygame.php, and (7) possibly other parameters in unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/533 - http://www.securityfocus.com/archive/1/426755/100/0/threaded - http://secunia.com/advisories/19124 - http://www.vupen.com/english/advisories/2006/0821 - http://www.securityfocus.com/bid/16957