Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0920 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, which allows local users with superadministrator privileges, or attackers who have obtained access to the web page, to view the password. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/483 - http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt - http://www.securityfocus.com/archive/1/425924/100/0/threaded - http://www.securityfocus.com/bid/16794
CVE ID: CVE-2006-0921 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in connector.php in FCKeditor 2.0 FC, as used in products such as RunCMS, allow remote attackers to list and create arbitrary directories via a .. (dot dot) in the CurrentFolder parameter to (1) GetFoldersAndFiles and (2) CreateFolder. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/484 - http://www.nsag.ru/vuln/952.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24878 - http://www.securityfocus.com/archive/1/43455
uln/952.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24878 - http://www.securityfocus.com/archive/1/434559/30/4890/threaded - http://www.securityfocus.com/archive/1/425937/100/0/threaded
CVE ID: CVE-2006-0922 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.inc.php include, which results in an absolute path traversal vulnerability in FileUpload in connector.php (aka upload.php) that allows remote attackers to upload arbitrary files via a modified CurrentFolder parameter in a direct request to admin/filemanager/upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.cubecart.com/site/forums/index.php?showtopic=14972 - http://www.cub
s: - CVE Program Container: References: - http://www.cubecart.com/site/forums/index.php?showtopic=14972 - http://www.cubecart.com/site/forums/index.php?showtopic=14960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24883 - http://securityreason.com/securityalert/482 - http://www.securityfocus.com/archive/1/425931/100/0/threaded - http://www.cubecart.com/site/forums/index.php?showtopic=14817 - http://www.securityfocus.com/bid/16796 - http://www.cubecart.com/site/forums/index.php?showtopic=14825 - http://www.cubecart.com/site/forums/index.php?showtopic=14704 - http://www.nsag.ru/vuln/892.html
CVE ID: CVE-2006-0923 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/491 - http://www.nukedx.com/?viewdoc=12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24887 - http://secunia.com/advisories/19052 - http://www.securityfocus.com/bid/16815 - ht
e.ibmcloud.com/vulnerabilities/24887 - http://secunia.com/advisories/19052 - http://www.securityfocus.com/bid/16815 - http://www.myphpnuke.com/article.php?sid=1035&mode=thread&order=0 - http://www.securityfocus.com/archive/1/425983/100/0/threaded - http://www.vupen.com/english/advisories/2006/0750
CVE ID: CVE-2006-0924 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Brown Bear iCal 3.10 allows remote attackers to inject arbitrary web script or HTML via the Calendar Text field when a new event is added. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0727 - http://www.securityfocus.com/bid/16845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24919 - http://www.osvd
- http://www.securityfocus.com/bid/16845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24919 - http://www.osvdb.org/23472 - http://secunia.com/advisories/19001
CVE ID: CVE-2006-0925 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers to cause a denial of service (CPU consumption) by creating and then listing folders whose names contain format string specifiers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24916 - http://secunia.com/advisories/18921 - http://www.nsag.ru/vuln/888.html - http://www.vupen.com/english/advisories/2006/0729 - http://www.securityfocus.com/bid/
http://www.nsag.ru/vuln/888.html - http://www.vupen.com/english/advisories/2006/0729 - http://www.securityfocus.com/bid/16854
CVE ID: CVE-2006-0926 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Allume StuffIt Standard and Deluxe 9.0, ZipMagic Deluxe 9.0, and StuffIt Expander 9.0.0.21 Engine 9.0.0.21 allow remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0732 - http://www.osvdb.org/23463 - http://www.securityfocus.com/bid/16806 - http://www.securityfocus.com/archive/1/425972/100/0/threaded - h
db.org/23463 - http://www.securityfocus.com/bid/16806 - http://www.securityfocus.com/archive/1/425972/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24886 - http://www.hamid.ir/security/stuffit.txt - http://secunia.com/advisories/19010
CVE ID: CVE-2006-0927 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burning Board (wBB) 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) userid parameter in (a) jgs_galerie_slideshow.php and (b) jgs_galerie_scroll.php, and the (2) katid parameter in (c) jgs_galerie_slideshow.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16810 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.htm
ences: - http://www.securityfocus.com/bid/16810 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0615.html - http://www.nukedx.com/?viewdoc=11 - http://www.securityfocus.com/archive/1/425981/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24888 - http://www.securityfocus.com/bid/16843
CVE ID: CVE-2006-0928 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The POP3 Server in ArGoSoft Mail Server Pro 1.8 allows remote attackers to obtain sensitive information via the _DUMP command, which reveals the operating system, registered user, and registration code. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16808 - http://secunia.com/advisories/18990 - http://www.securityfocus.com/archive/1/425968/100/0/threaded - http://www.vupen.com/english/advisories/2006/0733 - http://www.nsag.ru/vuln/879.html
CVE ID: CVE-2006-0929 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP server in ArGoSoft Mail Server Pro 1.8.8.1 allows remote authenticated users to create arbitrary folders via a .. (dot dot) in the RENAME command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18990 - http://www.securityfocus.com/bid/16809 - http://www.nsag.ru/vuln/878.html - http://www.securityfocus.com/archive/1/425969/100/0/threaded - http://www.vupen.com/english/advisories/2006/0733
CVE ID: CVE-2006-0930 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Webmail in ArGoSoft Mail Server Pro 1.8 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the UIDL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nsag.ru/vuln/877.html - http://secunia.com/advisories/18990 - http://www.vupen.com/english/advisories/2006/0733 - http://securityreason.com/securityalert/487
CVE ID: CVE-2006-0931 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PEAR::Archive_Tar 1.2, and other versions before 1.3.2, allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a TAR archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.hamid.ir/security/phptar.txt - http://pear.php.net/bugs/bug.php?id=6933 - http://www.osvdb.org/23481 - http://www.vupen.com/english/advisories/2006/0728 - http://www.securityfocus.com/archive/1/425967/100/0/threaded - http://secunia.com/advisories/190
/advisories/2006/0728 - http://www.securityfocus.com/archive/1/425967/100/0/threaded - http://secunia.com/advisories/19011 - http://www.securityfocus.com/bid/16805 - http://pear.php.net/package/Archive_Tar/download/
CVE ID: CVE-2006-0932 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in zip.lib.php 0.1.1 in PEAR::Archive_Zip allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426153/100/0/threaded - http://www.securityfocus.com/archive/1/425967/100/0/threaded - http://www.hamid.ir/security/phpzip.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24972 - http://securityreason.com/securityalert/486
CVE ID: CVE-2006-0933 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in a url XCode tag in a posted message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0722 - http://www.securityfocus.com/bid/16799 - http://secunia.com/advisories/18688 - https://exchange.xforce.ibmcloud.com/vulne
ttp://www.securityfocus.com/bid/16799 - http://secunia.com/advisories/18688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24874
CVE ID: CVE-2006-0934 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webinsta Limbo 1.0.4.2 allows remote attackers to inject arbitrary web script or HTML via the message field in the Contact Form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18723 - http://www.vupen.com/english/advisories/2006/0721 - http://www.osvdb.org/23469 - http://osvdb.org/ref/23/23469-limbo.txt - http://www.securityfocus.com/bid/16811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24877
CVE ID: CVE-2006-0935 State: PUBLISHED Published: 2006-02-28T11:00:00Z Last Updated: 2024-09-16T19:31:03.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/dailydave/2006-q1/0179.html - http://www.securityfocus.com/bid/16782
CVE ID: CVE-2006-0936 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00. Additional Analyst Notes: - CVE Program Container: References: - http://nsag.ru/vuln/894.html - http://secunia.com/advisories/19014 - http://www.securityfocus.com/bid/16823 - http://www.securityfocus.com/archive/1/426077/100/0/threaded
CVE ID: CVE-2006-0937 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.891Z Vendors: n/a Products: n/a Problem Types: n/a Description: U.N.U. Mailgust 1.9 allows remote attackers to obtain sensitive information via a direct request to index.php with method=showfullcsv, which reveals the POP3 server configuration, including account name and password. Additional Analyst Notes: - CVE Program Container: References: - http://nsag.ru/vuln/890.html - http://secunia.com/advisories/18998 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24890
CVE ID: CVE-2006-0938 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:15.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the RefererURL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=16 - http://www.securityfocus.com/bid/16817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24956 - http://www.securityfocus.com/archive/1/426076/100/0/threaded - http://securitytracker.com/id?1015683
CVE ID: CVE-2006-0939 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:13.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24963 - http://www.securityfocus.com/archive/1/426082 - http://www.securityfocus.com/bid/16828 - http://securityreason.com/securityalert/495 - http://securitytracker.com/id?1015685
CVE ID: CVE-2006-0940 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:13.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23482 - http://www.securityfocus.com/archive/1/426985/100/0/threaded - http://www.securityfocus.com/bid/16857 - http://secunia.com/advisories/19047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24897 - http://securityreason.com/securityalert/5
dvisories/19047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24897 - http://securityreason.com/securityalert/557 - http://www.vupen.com/english/advisories/2006/0755 - http://evuln.com/vulns/87/summary.html
CVE ID: CVE-2006-0941 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:15.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426985/100/0/threaded - http://www.securityfocus.com/bid/16857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24901 - http://secunia.com/advisories/19047 - http://www.osvdb.org/23483 - http://securityreason.com/securityalert/5
ies/24901 - http://secunia.com/advisories/19047 - http://www.osvdb.org/23483 - http://securityreason.com/securityalert/557 - http://www.vupen.com/english/advisories/2006/0755 - http://evuln.com/vulns/87/summary.html
CVE ID: CVE-2006-0942 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:15.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/PwsPHP_SQL_Inj.php - http://www.osvdb.org/28444 - http://www.securityfocus.com/bid/16567
CVE ID: CVE-2006-0943 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:14.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015684 - http://www.securityfocus.com/archive/1/426084/100/0/threaded - http://securityreason.com/securityalert/496 - http://www.securityfocus.com/archive/1/426183/100/0/threaded - http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278 - http://www.vupen
com/archive/1/426183/100/0/threaded - http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278 - http://www.vupen.com/english/advisories/2006/0748
CVE ID: CVE-2006-0944 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:14.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24984 - http://www.securityfocus.com/bid/16848 - http://www.osvdb.org/23620 - http://www.securityfocus.com/archive/1/426184/100/0/threaded - https://www.exploit-db.com/exploits/3859
CVE ID: CVE-2006-0945 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:13.990Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015689 - http://www.osvdb.org/23621 - http://www.securityfocus.com/bid/16848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25142 - http://www.securityfocus.com/archive/1/426184/100/0/threaded
CVE ID: CVE-2006-0946 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:14.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015688 - http://www.securityfocus.com/bid/16839 - http://www.vupen.com/english/advisories/2006/0765 - http://www.securityfocus.com/archive/1/426186 - http://www.osvdb.org/23527 - http://secunia.com/advisories/19069 - https://ex
//www.securityfocus.com/archive/1/426186 - http://www.osvdb.org/23527 - http://secunia.com/advisories/19069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24977
CVE ID: CVE-2006-0947 State: PUBLISHED Published: 2006-03-01T02:00:00 Last Updated: 2024-08-07T16:56:14.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015688 - http://www.securityfocus.com/bid/16839 - http://www.vupen.com/english/ad
nces: - http://securitytracker.com/id?1015688 - http://www.securityfocus.com/bid/16839 - http://www.vupen.com/english/advisories/2006/0765 - http://www.securityfocus.com/archive/1/426186 - http://secunia.com/advisories/19069
CVE ID: CVE-2006-0948 State: PUBLISHED Published: 2006-08-21T18:00:00 Last Updated: 2024-08-07T16:56:14.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-08 - http://www.vupen.com/english/advisories/2006/3317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28445 - http://secunia.com/advisories/18734 - http://www.securityfocus.com/arch
ange.xforce.ibmcloud.com/vulnerabilities/28445 - http://secunia.com/advisories/18734 - http://www.securityfocus.com/archive/1/443622/100/0/threaded - http://securityreason.com/securityalert/1416 - http://www.osvdb.org/27995 - http://www.securityfocus.com/bid/19583 - http://securitytracker.com/id?1016717
CVE ID: CVE-2006-0949 State: PUBLISHED Published: 2006-03-06T21:00:00 Last Updated: 2024-08-07T16:56:14.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25037 - http://www.securityfocus.com/bid/16934 - http://www.vupen.com/english/advisories/2006/0807 - http://secunia.com/advisories/19032 - http://www.osvdb.org/23616 - http://secunia.com/secunia_research/2006-15/advisory/
CVE ID: CVE-2006-0950 State: PUBLISHED Published: 2006-03-13T19:00:00 Last Updated: 2024-08-07T16:56:14.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0938 - http://marc.info/?l=full-disclosure&m=114226632422033&w=2 - http://www.securityfocus.com/bid/17105 - http://www.osvdb.org/23835 - http://secunia.com/advisories/19063 - http://securityreason.com/securityalert/575 - http://securitytracker.com/id?1015780 - https://exchange.xforce.ib