Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/22885 - https://www.exploit-db.com/exploits/2790 - http://www.securityfocus.com/archive/1/451930/100/0/threaded - http://www.0xcafebabe.it/sploits/etm_0612_remote_com.pl - http://www.securityfocus.com/bid/21135 - http://www.vupen.com/english/advisories/2006/4558 - http://www.etomite.org/forums/index.php?showtopic=6388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30329 - http://www.securityfocus.com/archive/1/451838/100/0/threaded
CVE ID: CVE-2006-6048 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Etomite CMS 0.6.1.2, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22885 - http://www.0xcafebabe.it/sploits/etm_0612_sqlinj.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/30328 - http://www.securityfocus.com/archive/1/451930/100/0/threaded - http://www.securityfocus.com/bid/21135 - http://www.vupen.com/english/a
urityfocus.com/archive/1/451930/100/0/threaded - http://www.securityfocus.com/bid/21135 - http://www.vupen.com/english/advisories/2006/4558 - http://www.etomite.org/forums/index.php?showtopic=6388 - http://www.securityfocus.com/archive/1/451838/100/0/threaded
CVE ID: CVE-2006-6049 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in shambo2.php in the Shambo2 (com_shambo2) component for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30370 - http://www.securityfocus.com/archive/1/451347/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30235 - http://www.securityfocus.com/bid/21030 - http://secunia.com/advisories/22870 - http://www.vupen.co
lnerabilities/30235 - http://www.securityfocus.com/bid/21030 - http://secunia.com/advisories/22870 - http://www.vupen.com/english/advisories/2006/4503
CVE ID: CVE-2006-6050 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.378Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClickTech Texas Rank'em allow remote attackers to execute arbitrary SQL commands via the (1) selPlayer parameter to player.asp or the (2) tournament_id parameter to tournaments.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30384 - http://www.aria-security.com/forum/showthread.php?t=34 - http://www.securityfocus.com/archive/1/452017/100/0/threaded
CVE ID: CVE-2006-6051 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in reporter.logic.php in the MosReporter (com_reporter) component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30410 - http://www.securityfocus.com/archive/1/451960/100/0/threaded - https://www.exploit-db.com/exploits/2807 - http://www.securityfocus.com/bid/21160
CVE ID: CVE-2006-6052 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=463793 - http://www.vupen.com/english/advisories/2006/4570 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30366
CVE ID: CVE-2006-6053 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.vupen.com/english/advisories/2006/4458 - http://projects.info-pull.com/mokb/MOKB-10-11-2006.html - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.mandriva.com/security/advisori
mokb/MOKB-10-11-2006.html - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:040 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - http://secunia.com/advisories/24100 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://secunia.com/advisories/24482 - http://www.debian.org/security/2008/dsa-1503 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10992 - http://secunia.com/advisories/29058 - http://www.debian.org/security/2007/
inition/oval%3Aorg.mitre.oval%3Adef%3A10992 - http://secunia.com/advisories/29058 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://secunia.com/advisories/25691 - http://secunia.com/advisories/22776 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060
CVE ID: CVE-2006-6054 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2007-0436.html - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.redhat.com/support/errata/RHSA-2007-0673.html -
ww.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.redhat.com/support/errata/RHSA-2007-0673.html - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.vupen.com/english/advisories/2006/4487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10006 - http://secunia.com/advisories/27528 - http://secunia.com/advisories/26379 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - http://www.debian.org/security/2008/dsa-1504 - http://secunia.com/advisories/24206 - http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://secunia.com/advisories/23474 - http://secunia.com/adv
http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://secunia.com/advisories/23474 - http://secunia.com/advisories/22837 - http://projects.info-pull.com/mokb/MOKB-12-11-2006.html - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://www.debian.org/security/2008/dsa-1503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30201 - http://secunia.com/advisories/29058 - http://secunia.com/advisories/25630 - http://secunia.com/advisories/25691 - http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
CVE ID: CVE-2006-6055 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802.11 beacon request with a long Rates information element (IE). Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/mokb/MOKB-13-11-2006.html - http://www.vupen.com/english/advisories/2006/4488 - http://www.securityfocus.com/bid/21032 - http://secunia.com/advisories/22860 - http://securitytracker.com/id?1017215
CVE ID: CVE-2006-6056 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007
w.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:078 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://secunia.com/advisories/24777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9949 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.ubuntu.com/usn/usn-416-1 - http://secunia.com/advisories/22887 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/23997 - http://www.securityfocus.com/archive/1/471457 - http://projects.info-pull.com/mokb/MOKB-14-11-2006.html - http://secunia.com/advisories/2
tyfocus.com/archive/1/471457 - http://projects.info-pull.com/mokb/MOKB-14-11-2006.html - http://secunia.com/advisories/24482 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30278 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://secunia.com/advisories/25691 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060
CVE ID: CVE-2006-6057 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems, allows local users to cause a denial of service (crash) via a malformed gfs2 file stream that triggers a NULL pointer dereference in the init_journal function. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/mokb/MOKB-15-11-2006.html - http://secunia.com/advisories/24098 - http://www.vupen.com/english/advisories/2006/4556 - http://www.ubuntu.com/usn/usn-416-1 -
ecunia.com/advisories/24098 - http://www.vupen.com/english/advisories/2006/4556 - http://www.ubuntu.com/usn/usn-416-1 - http://secunia.com/advisories/22886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30307
CVE ID: CVE-2006-6058 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function. NOTE: this issue might be due to an integer overflow or signedness error. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/mokb/MOKB-17-11-2006.html - https://issues.rpath.com/browse/RPL-1929 - http://www.debian.org/security/2007/dsa-1436 - http://secunia.c
1-2006.html - https://issues.rpath.com/browse/RPL-1929 - http://www.debian.org/security/2007/dsa-1436 - http://secunia.com/advisories/27703 - http://secunia.com/advisories/28141 - http://secunia.com/advisories/28706 - http://secunia.com/advisories/27528 - http://secunia.com/advisories/26379 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:226 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:112 - http://www.debian.org/security/2008/dsa-1504 - http://www.mandriva.com/security/advisories?name=MDVSA-2008:008 - http://www.novell.com/linux/security/advisories/2007_59_kernel.html - http://secunia.com/advisories/28654 - http://secunia.com/advisories/23034 - http://www.redh
sories/2007_59_kernel.html - http://secunia.com/advisories/28654 - http://secunia.com/advisories/23034 - http://www.redhat.com/support/errata/RHSA-2007-0672.html - http://www.vupen.com/english/advisories/2006/4613 - http://www.ubuntu.com/usn/usn-558-1 - http://www.ubuntu.com/usn/usn-574-1 - http://secunia.com/advisories/29058 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24 - http://secunia.com/advisories/28971 - http://secunia.com/advisories/28170 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:232 - http://secunia.com/advisories/27614 - http://www.ubuntu.com/usn/usn-578-1 - http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm
CVE ID: CVE-2006-6059 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MA521nd5.SYS driver 5.148.724.2003 for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element. NOTE: this issue was reported as a "memory corruption" error, but the associated exploit code suggests that it is a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21175 - http://securitytracker.com/id?1017254 - http://projects
ontainer: References: - http://www.securityfocus.com/bid/21175 - http://securitytracker.com/id?1017254 - http://projects.info-pull.com/mokb/MOKB-18-11-2006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30442 - http://www.kb.cert.org/vuls/id/395496 - http://www.vupen.com/english/advisories/2006/4604 - http://secunia.com/advisories/23036
CVE ID: CVE-2006-6060 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/mokb/MOKB-19-11-2006.html - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30418 - http://secunia.com/
curity/advisories/2006_79_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30418 - http://secunia.com/advisories/23474 - http://www.securityfocus.com/archive/1/471457 - http://www.debian.org/security/2007/dsa-1304 - http://secunia.com/advisories/25714 - http://secunia.com/advisories/25691
CVE ID: CVE-2006-6061 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers memory corruption. NOTE: the severity of this issue has been disputed by a third party, who states that the impact is limited to a denial of service (kernel panic) due to a vm_fault call with a non-aligned address. Additional Analyst Notes: - CVE Program Container: References: - http://alastairs-place.net/2006/11/dmg-vulnerability/ - http://www.us-ce
t Notes: - CVE Program Container: References: - http://alastairs-place.net/2006/11/dmg-vulnerability/ - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://secunia.com/advisories/23012 - http://www.matasano.com/log/633/alastair-houghton-debunks-lmh-mokb-finding/ - http://www.vupen.com/english/advisories/2006/4629 - http://www.osvdb.org/30509 - http://projects.info-pull.com/mokb/MOKB-20-11-2006.html - http://www.kb.cert.org/vuls/id/367424 - http://www.vupen.com/english/advisories/2007/0930 - http://securitytrac
6.html - http://www.kb.cert.org/vuls/id/367424 - http://www.vupen.com/english/advisories/2007/0930 - http://securitytracker.com/id?1017260 - http://www.securityfocus.com/bid/21201 - http://kernelfun.blogspot.com/2006/11/more-mokb-20-11-2006-related-news.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30440 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-6062 State: PUBLISHED Published: 2006-11-22T01:00:00 Last Updated: 2024-08-07T20:12:31.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21236 - http://www.osvdb.org/30510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30463 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/securit
m/vulnerabilities/30463 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://projects.info-pull.com/mokb/MOKB-21-11-2006.html - http://www.securitytracker.com/id?1017751 - http://secunia.com/advisories/23012 - http://www.vupen.com/english/advisories/2006/4629 - http://secunia.com/advisories/23062 - http://www.vupen.com/english/advisories/2007/0930 - http://securitytracker.com/id?1017260 - http://www.vupen.com/english/advisories/2006/4653 - http://www.securityfocus.com/bid/21201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30440 - http://secun
653 - http://www.securityfocus.com/bid/21201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30440 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-6063 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21206 - http://www.vupen.com/english/advisories/2006/4636 - https://www.exploit-db.com/exploits/2815 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30436 - http://secunia.com/advisories/22999
CVE ID: CVE-2006-6064 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07 allow remote attackers to execute arbitrary code via crafted messages. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=465373&group_id=1596 - http://secunia.com/advisories/22977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30448 - http://www.vupen.com/english/advisories/2006/4637 - http://www.securityfocus.com/bid/21217
CVE ID: CVE-2006-6065 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4612 - https://www.exploit-db.com/exploits/2799 - http://www.securityfocus.com/bid/21143 - http://www.securityfocus.com/archive/1/452142/100/0/threaded - http://secunia.com/advisories/22931 - https://exchange.xfo
ttp://www.securityfocus.com/archive/1/452142/100/0/threaded - http://secunia.com/advisories/22931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30369
CVE ID: CVE-2006-6066 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30444 - http://www.vupen.com/english/advisories/2006/4533 - http://www.securityfocus.com/archive/1/451632/100/100/threaded - http://s
//www.vupen.com/english/advisories/2006/4533 - http://www.securityfocus.com/archive/1/451632/100/100/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=32 - http://www.osvdb.org/30443 - http://secunia.com/advisories/22930 - http://www.osvdb.org/30445 - http://www.securityfocus.com/bid/21098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30296
CVE ID: CVE-2006-6067 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) f-email.asp, or the (2) peopleID and (2) sort_order parameters to (b) listings.asp, different vectors than CVE-2006-5955. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30402 - http://www.securityfocus.com/bid/21156 - http://www.securityfocus.com/archive/1/451962/100/0/threaded
rabilities/30402 - http://www.securityfocus.com/bid/21156 - http://www.securityfocus.com/archive/1/451962/100/0/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=40
CVE ID: CVE-2006-6068 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list filenames of arbitrary images via a .. (dot dot) in the gal parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452656/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30431 - http://www.securityfocus.com/archive/1/452169/100/0/threaded - http://www.vupen.com/english/advisories/2006/4641 - http:
http://www.securityfocus.com/archive/1/452169/100/0/threaded - http://www.vupen.com/english/advisories/2006/4641 - http://secunia.com/advisories/22990
CVE ID: CVE-2006-6069 State: PUBLISHED Published: 2006-11-22T02:00:00 Last Updated: 2024-08-07T20:12:31.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452169/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30430