Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
http://secunia.com/advisories/21186 - http://secunia.com/advisories/20887 - https://usn.ubuntu.com/298-1/ - http://secunia.com/advisories/21050 - http://www.novell.com/linux/security/advisories/2006_31_php.html - http://www.securityfocus.com/archive/1/436132 - http://www.trustix.org/errata/2006/0038 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:113 - http://securityreason.com/securityalert/1067 - http://www.vupen.com/english/advisories/2006/2174 - http://secunia.com/advisories/20676 - https://issues.rpath.com/browse/RPL-939 - http://www.debian.org/security/2006/dsa-1117 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/20853 -
2006/dsa-1117 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/20853 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:112 - http://www.securityfocus.com/bid/18294 - http://secunia.com/advisories/20866 - http://secunia.com/advisories/20500 - http://secunia.com/advisories/20571
CVE ID: CVE-2006-2908 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:06:27.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows remote attackers to execute arbitrary PHP code via the username field, which is used in a preg_replace function call with a /e (executable) modifier. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1086 - http://securitytracker.com/id?1016270 - http://www.securityfocus.com/archive/1/436767/100/0/threaded - http://www.securityfocus.com/bid/18396 - http://se
6270 - http://www.securityfocus.com/archive/1/436767/100/0/threaded - http://www.securityfocus.com/bid/18396 - http://secunia.com/advisories/20371 - http://www.vupen.com/english/advisories/2006/2288 - http://www.osvdb.org/26216 - http://www.securityfocus.com/archive/1/437509/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27046 - http://secunia.com/secunia_research/2006-40/advisory/ - http://www.514.es/download/mybibi.pl
CVE ID: CVE-2006-2909 State: PUBLISHED Published: 2006-06-16T10:00:00 Last Updated: 2024-08-07T18:06:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to execute arbitrary code via a long filename in an (1) ACE, (2) RAR, or (3) ZIP archive, which is triggered when the user moves the mouse over the archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26447 - http://securityreason.com/securityalert/1104 - http://www.securityfocus.com/bid/18425 - http://secunia.com/advisories/20481 - http://www.securityfocus.com/archive/1/43
http://www.securityfocus.com/bid/18425 - http://secunia.com/advisories/20481 - http://www.securityfocus.com/archive/1/437450/100/100/threaded - http://secunia.com/secunia_research/2006-42/advisory/ - http://www.vupen.com/english/advisories/2006/2330 - http://www.picozip.com/changelog.html - http://www.securityfocus.com/archive/1/437103/100/0/threaded - http://securitytracker.com/id?1016308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27096
CVE ID: CVE-2006-2910 State: PUBLISHED Published: 2006-07-05T18:00:00 Last Updated: 2024-08-07T18:06:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including (1) Title, (2) Author, and (3) Album, which triggers the overflow in the tooltip display string if the sound card driver is disabled or incorrectly installed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 - http://secunia.com/advisories/19456 - http://ww
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27593 - http://secunia.com/advisories/19456 - http://www.vupen.com/english/advisories/2006/2667 - http://secunia.com/secunia_research/2006-45/advisory/ - http://www.securityfocus.com/bid/18825
CVE ID: CVE-2006-2911 State: PUBLISHED Published: 2006-06-21T19:00:00 Last Updated: 2024-08-07T18:06:27.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18451 - http://secunia.com/secunia_research/2006-43/advisory/ - http://www.vupen.com/english/advisories/2006/2348 - http://www.securityfocus.com/archive/1/437183/100/200/threaded - http://www.osvdb.org/26464 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
.com/archive/1/437183/100/200/threaded - http://www.osvdb.org/26464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27093 - http://secunia.com/advisories/20362 - http://securitytracker.com/id?1016311
CVE ID: CVE-2006-2912 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SelectaPix 1.31 allow remote attackers to execute arbitrary SQL commands via the (1) albumID parameter to (a) view_album.php or (b) index.php, (2) imageID parameter to (c) popup.php, or (3) username and (4) password parameters to (d) admin/member.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2232 - http://secunia.com/advisories/20134 - http://www.securityfocus.com/bid/18349 - http://www.osvdb.org/26243 - http://securi
ttp://secunia.com/advisories/20134 - http://www.securityfocus.com/bid/18349 - http://www.osvdb.org/26243 - http://securitytracker.com/id?1016256 - http://secunia.com/secunia_research/2006-39/advisory/ - http://www.securityfocus.com/archive/1/436637/100/0/threaded - http://www.osvdb.org/26244 - http://www.osvdb.org/26246 - http://www.osvdb.org/26245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27013
CVE ID: CVE-2006-2913 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2232 - http://secunia.com/advisories/20134 - http://www.securityfocus.com/bid/18349 - http://www.osvdb.org/26248 - http://www.osvdb.org/26247 - http://secunia.com/secunia_research/2006-39/advisory/ - https://exchange.xforce.ibmcloud
- http://www.osvdb.org/26247 - http://secunia.com/secunia_research/2006-39/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/27012
CVE ID: CVE-2006-2914 State: PUBLISHED Published: 2006-06-23T19:00:00 Last Updated: 2024-08-07T18:06:27.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in the templatefolder parameter to (1) postreply.php, (2) posting.php, (3) and pm/newpm.php in the deluxe/ directory, and (4) postreply.php, (5) posting.php, and (6) pm/newpm.php in the default/ directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438597/100/0/threaded - http://www.osvdb.org/26460 - https://exchange.xforce.ibmcloud.com/vulnerabilities
.com/archive/1/438597/100/0/threaded - http://www.osvdb.org/26460 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27090 - http://www.securityfocus.com/bid/18455 - http://secunia.com/advisories/20152 - http://securitytracker.com/id?1016309 - http://secunia.com/secunia_research/2006-44/advisory - http://www.vupen.com/english/advisories/2006/2347 - http://www.osvdb.org/26463 - http://www.osvdb.org/26462 - http://www.securityfocus.com/archive/1/437228/100/100/threaded - http://securityreason.com/securityalert/1134 - http://www.osvdb.org/26459 - http://www.osvdb.org/26461 - http://www.osvdb.org/26458
CVE ID: CVE-2006-2915 State: PUBLISHED Published: 2006-06-23T20:00:00 Last Updated: 2024-08-07T18:06:27.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DeluxeBB 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) hideemail, (2) languagex, (3) xthetimeoffset, and (4) xthetimeformat parameters during account registration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438597/100/0/threaded - http://www.osvdb.org/26457 - http://secunia.com/advisories/20152 - http://securitytracker.com/id?1016309 - http://secunia.com/secunia_research/2006-44/advisory - http://w
visories/20152 - http://securitytracker.com/id?1016309 - http://secunia.com/secunia_research/2006-44/advisory - http://www.vupen.com/english/advisories/2006/2347 - http://www.securityfocus.com/bid/18453 - http://www.securityfocus.com/archive/1/437228/100/100/threaded - http://securityreason.com/securityalert/1134 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27091
CVE ID: CVE-2006-2916 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:06:27.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root privileges by causing setuid to fail, which prevents artsd from dropping privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2357 - http://secunia.com/advisories/20899 - http://www.osvdb.org/26506 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:107 - http://securitytra
0899 - http://www.osvdb.org/26506 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:107 - http://securitytracker.com/id?1016298 - http://www.gentoo.org/security/en/glsa/glsa-200606-22.xml - http://secunia.com/advisories/20868 - http://www.securityfocus.com/archive/1/437362/100/0/threaded - http://secunia.com/advisories/20786 - http://security.gentoo.org/glsa/glsa-200704-22.xml - http://www.vupen.com/english/advisories/2007/0409 - http://secunia.com/advisories/20677 - http://www.securityfocus.com/bid/23697 - http://secunia.com/advisories/25059 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27221 - http://secunia.com/advisories/20827 - http://www.novell.com/linux/security/a
xforce.ibmcloud.com/vulnerabilities/27221 - http://secunia.com/advisories/20827 - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://secunia.com/advisories/25032 - http://www.kde.org/info/security/advisory-20060614-2.txt - http://mail.gnome.org/archives/beast/2006-December/msg00025.html - http://dot.kde.org/1150310128/ - http://www.securityfocus.com/bid/18429 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.468256
CVE ID: CVE-2006-2917 State: PUBLISHED Published: 2006-07-10T19:00:00 Last Updated: 2024-08-07T18:06:27.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 1099, allows remote authenticated users to read email of other users, or perform unauthorized operations on directories, via the (1) CREATE, (2) SELECT, (3) DELETE, (4) RENAME, (5) COPY, (6) APPEND, and (7) LIST commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-48/advisory/ - http://www.wingate.com/download.php - http://www.se
eferences: - http://secunia.com/secunia_research/2006-48/advisory/ - http://www.wingate.com/download.php - http://www.securityfocus.com/bid/18908 - http://secunia.com/advisories/20707 - http://www.vupen.com/english/advisories/2006/2730
CVE ID: CVE-2006-2918 State: PUBLISHED Published: 2006-06-23T21:00:00 Last Updated: 2024-08-07T18:06:27.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number." Additional Analyst Notes: - CVE Program Container: References: - http://www.symantec.com/enterprise/research/SYMSA-2006-005.txt - http://www.vupen.com/english/advisories/2006/2518 - http://securityreason.com/securityalert/1139 - http://www.securityfocus.com/bid/18315 - http://securi
sories/2006/2518 - http://securityreason.com/securityalert/1139 - http://www.securityfocus.com/bid/18315 - http://securitytracker.com/id?1016371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27409 - http://www.securityfocus.com/archive/1/438159/100/0/threaded - http://secunia.com/advisories/20830
CVE ID: CVE-2006-2919 State: PUBLISHED Published: 2006-06-09T01:00:00 Last Updated: 2024-08-07T18:06:27.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft NetMeeting 3.01 allows remote attackers to cause a denial of service (crash or CPU consumption) and possibly execute arbitrary code via crafted inputs that trigger memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26971 - http://www.hexview.com/docs/20060606-1.txt - http://www.securityfocus.com/bid/18311 - http://securitytracker.com/id?1016238 - http://www.securityfocus.com/archive/1/436285/100/0/thread
focus.com/bid/18311 - http://securitytracker.com/id?1016238 - http://www.securityfocus.com/archive/1/436285/100/0/threaded - http://secunia.com/advisories/20477 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046636.html
CVE ID: CVE-2006-2920 State: PUBLISHED Published: 2006-06-09T01:00:00 Last Updated: 2024-08-07T18:06:27.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sylpheed-Claws before 2.2.2 and Sylpheed before 2.2.6 allow remote attackers to bypass the URI check functionality and makes it easier to conduct phishing attacks via a URI that begins with a space character. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2283 - http://secunia.com/advisories/20577 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27089 - http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528 - http://www.vupen.com/englis
ties/27089 - http://sourceforge.net/project/shownotes.php?release_id=422662&group_id=25528 - http://www.vupen.com/english/advisories/2006/2173 - http://secunia.com/advisories/20476 - http://sylpheed.good-day.net/en/news.html%5C
CVE ID: CVE-2006-2921 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters. Additional Analyst Notes: - CVE Program Container: References: - http://sx02.coresec.de/advisories/149.txt - http://secunia.com/advisories/20480 - http://www.vupen.com/english/advisories/2006/2166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27058
CVE ID: CVE-2006-2922 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PHP code via a URL in the (1) g_pcltar_lib_dir parameter in (a) pcltar.lib.php when register_globals is enabled, and (2) listconfigfile[] parameter in (b) galsecurity.lib.php and (c) galimage.lib.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18313 - http://securitytracker.com/id?1016249 - http://www.securityfocus.com/archive/1/436333/100/0/threaded - http:
bid/18313 - http://securitytracker.com/id?1016249 - http://www.securityfocus.com/archive/1/436333/100/0/threaded - http://www.osvdb.org/26195 - http://www.osvdb.org/26194 - http://www.osvdb.org/26196 - http://www.vupen.com/english/advisories/2006/2187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27010 - http://secunia.com/advisories/20475
CVE ID: CVE-2006-2923 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The iax_net_read function in the iaxclient open source library, as used in multiple products including (a) LoudHush 1.3.6, (b) IDE FISK 1.35 and earlier, (c) Kiax 0.8.5 and earlier, (d) DIAX, (e) Ziaxphone, (f) IAX Phone, (g) X-lite, (h) MediaX, (i) Extreme Networks ePhone, and (j) iaxComm before 1.2.0, allows remote attackers to execute arbitrary code via crafted IAX 2 (IAX2) packets with truncated (1) full frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related
frames or (2) mini-frames, which are detected in a length check but still processed, leading to buffer overflows related to negative length values. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2286 - http://www.vupen.com/english/advisories/2006/2285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27047 - http://www.loudhush.ro/changelog.txt - http://secunia.com/advisories/20567 - http://iaxclient.sourceforge.net/iaxcomm/ - http://secunia.com/advisories/20900 - http://www.coresecurity.com/common/showdoc.php?idx=548&idxseccion=10 - http://www.vupen.com/english/advisories/2006/2180 - http://secunia.com/advisories/20623 - ht
php?idx=548&idxseccion=10 - http://www.vupen.com/english/advisories/2006/2180 - http://secunia.com/advisories/20623 - http://secunia.com/advisories/20466 - http://www.securityfocus.com/bid/18307 - http://www.vupen.com/english/advisories/2006/2284 - http://www.securityfocus.com/archive/1/436638/100/0/threaded - http://www.gentoo.org/security/en/glsa/glsa-200606-30.xml - http://sourceforge.net/project/shownotes.php?release_id=423099&group_id=131960 - http://secunia.com/advisories/20560
CVE ID: CVE-2006-2924 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26977 - http://securitytracker.com/id?1016245 - http://securitytracker.com/id?1016244 - http://www.ingate.com/relnote-441.php - http://www.securityfocus.com/bid/18318 - http://www
ritytracker.com/id?1016244 - http://www.ingate.com/relnote-441.php - http://www.securityfocus.com/bid/18318 - http://www.vupen.com/english/advisories/2006/2183 - http://secunia.com/advisories/20479
CVE ID: CVE-2006-2925 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cookies, via unspecified vectors related to "XSS exploits" in administrator functionality. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016245 - http://securitytracker.com/id?1016244 - http://www.ingate.com/relnote-441.php - http://www.vupen.com/english/advisories/2006/2183 - http://se
r.com/id?1016244 - http://www.ingate.com/relnote-441.php - http://www.vupen.com/english/advisories/2006/2183 - http://secunia.com/advisories/20479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26978
CVE ID: CVE-2006-2926 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26970 - http://securitytracker.com/id?1016239 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046646.html - http://secunia.com/advisories/20483 - http://lists.gr
ists.grok.org.uk/pipermail/full-disclosure/2006-June/046646.html - http://secunia.com/advisories/20483 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046649.html - http://www.vupen.com/english/advisories/2006/2182
CVE ID: CVE-2006-2927 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and (2) msg_body parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26888 - http://secunia.com/advisor
ww.securityfocus.com/bid/18239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26888 - http://secunia.com/advisories/20411 - http://www.vupen.com/english/advisories/2006/2117
CVE ID: CVE-2006-2928 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter in (1) dialogs/img.php and (2) dialogs/td.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2211 - http://www.securityfocus.com/archive/1/436430/100/0/threaded - http://www.osvdb.org/26241 - http://www.osvdb.org/26242 - https://exchange.xforce.ibmcloud.com/vul
6430/100/0/threaded - http://www.osvdb.org/26241 - http://www.osvdb.org/26242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27001 - http://securityreason.com/securityalert/1068 - http://secunia.com/advisories/20507
CVE ID: CVE-2006-2929 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T18:06:27.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fileroot] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20505 - https://www.exploit-db.com/exploits/1886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26984 - http://www.vupen.com/english/advisories/2006/2196