Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6812 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PHP code via a URL in the cal_dir parameter to (1) admin.php, (2) contacts.php, or (3) convert-date.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21785 - https://www.exploit-db.com/exploits/3019
CVE ID: CVE-2006-6813 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23509 - https://www.exploit-db.com/exploits/2997 - http://www.vupen.com/english/advisories/2006/5176 - http://www.securityfocus.com/bid/21754
CVE ID: CVE-2006-6814 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authenticated users to read and modify arbitrary files, and list arbitrary directories via ..\ (dot dot backslash) sequences in the BrowsePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0023 - http://securitytracker.com/id?1017447 - http://www.securityfocus.com/bid/21786 - http://secunia.com/advisories/23585 - http://www.kapda.ir/advisory-458.
17447 - http://www.securityfocus.com/bid/21786 - http://secunia.com/advisories/23585 - http://www.kapda.ir/advisory-458.html
CVE ID: CVE-2006-6815 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated administrators to inject arbitrary web script or HTML via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31157 - http://www.securityfocus.com/archive/1/45535
m/id?1017448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31157 - http://www.securityfocus.com/archive/1/455353/100/0/threaded
CVE ID: CVE-2006-6816 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) set_preferences.asp, (2) send_password_preferences.asp, and (3) SecureLoginManager/list.asp in the Local-Admin Panel; (4) the sent parameter to (a) login.asp, (b) content.asp, and (c) members.asp in the Remote-WebSite; and (5) the sent parameter to applications/SecureLoginManager/inc_secureloginmanager.asp in the Live Demo. Additional Analyst Notes: - CVE Program
to applications/SecureLoginManager/inc_secureloginmanager.asp in the Live Demo. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/33335 - http://www.osvdb.org/33333 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31158 - http://www.osvdb.org/33334 - http://www.osvdb.org/33338 - http://www.osvdb.org/33336 - http://www.osvdb.org/33337 - http://www.securityfocus.com/archive/1/455353/100/0/threaded - http://www.securityfocus.com/bid/21788
CVE ID: CVE-2006-6817 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, which reveals the path in an error message, a different vulnerability than CVE-2006-2617. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455352/100/0/threaded
CVE ID: CVE-2006-6818 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a direct request to admin/config. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21787 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31123 - http://www.securityfocus.com/archive/1/455352/100/0/threaded
CVE ID: CVE-2006-6819 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a backup database via a direct request for admin/backup/db. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455352/100/0/threaded - http://secunia.com/advisories/23500
CVE ID: CVE-2006-6820 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5155 - https://www.exploit-db.com/exploits/2995 - http://secunia.com/advisories/23517 - http://www.securityfocus.com/bid/21739
CVE ID: CVE-2006-6821 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5156 - https://www.exploit-db.com/exploits/2996 - http://www.securityfocus.com/bid/21739 - http://secunia.com/advisories/23518
CVE ID: CVE-2006-6822 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:06.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, which allows remote authenticated users to modify certain profile fields of another account by specifying that account's username in a modified MM_recordId parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2994 - http://www.vupen.com/english/advisories/2006/5154 - http://www.securityfocus.com/bid/21739
CVE ID: CVE-2006-6823 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3025 - http://www.vupen.com/english/advisories/2006/5196 - http://www.securityfocus.com/bid/21794 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31120
CVE ID: CVE-2006-6824 State: PUBLISHED Published: 2006-12-29T11:00:00 Last Updated: 2024-08-07T20:42:07.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) getdate parameter in (a) day.php, (b) month.php, (c) year.php, (d) week.php, (e) search.php, (f) rss/index.php, (g) print.php, and (h) preferences.php; the (2) cpath parameter in (i) day.php, (j) month.php, (k) year.php, (l) week.php, and (m) search.php; the (3) query parameter in search.php; and possibly the cpath, (4) unset, and (5) set para
week.php, and (m) search.php; the (3) query parameter in search.php; and possibly the cpath, (4) unset, and (5) set parameters in a setcookie action in preferences.php; different vectors than CVE-2006-3319. NOTE: it was later reported that vectors b, c, and d also affect 2.24. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/32498 - http://www.osvdb.org/32493 - http://lostmon.blogspot.com/2006/12/php-icalendar-multiple-variable-cross.html - http://www.osvdb.org/32496 - http://www.securityfocus.com/archive/1/485397/100/200/threaded - http://www.osvdb.org/32500 - http://securitytracker.com/id?1017449 - http://www.osvdb.org/32495 - http://www.securityfocus.c
://www.osvdb.org/32500 - http://securitytracker.com/id?1017449 - http://www.osvdb.org/32495 - http://www.securityfocus.com/bid/21792 - http://www.osvdb.org/32497 - http://www.osvdb.org/32499 - http://secunia.com/advisories/23499 - http://www.osvdb.org/32494 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31146
CVE ID: CVE-2006-6825 State: PUBLISHED Published: 2006-12-29T21:00:00 Last Updated: 2024-08-07T20:42:07.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for calendar.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5151
CVE ID: CVE-2006-6826 State: PUBLISHED Published: 2006-12-29T21:00:00 Last Updated: 2024-08-07T20:42:07.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors related to a "Security leak." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=460503 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30181 - http://www.vupen.com/english/advisories/2006/4452
CVE ID: CVE-2006-6827 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the Flash8b.AllowScriptAccess method. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31156 - https://www.exploit-db.com/exploits/3041
CVE ID: CVE-2006-6828 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the grup parameter in admin.asp, or the id parameter in (2) default.asp or (3) admin.asp. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. The default.asp/grup vector is already covered by CVE-2006-6794. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5150
CVE ID: CVE-2006-6829 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5150
CVE ID: CVE-2006-6830 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the index parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31139 - http://www.securityfocus.com/bid/21749
CVE ID: CVE-2006-6831 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31130
CVE ID: CVE-2006-6832 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to poll.php or the module title. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23563 - http://jvn.jp/jp/JVN%2345006961/index.html - http://forge.joomla.org/sf/go/artf5985?nav=1 - http://www.joomla.org/content/view/2495/78/ - http://www.vupen.com/english/advisories/2006/5202 - http://www.securityfocus.com/bid/21
omla.org/content/view/2495/78/ - http://www.vupen.com/english/advisories/2006/5202 - http://www.securityfocus.com/bid/21810 - http://forge.joomla.org/sf/go/artf6844?nav=1
CVE ID: CVE-2006-6833 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: com_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23563 - http://www.joomla.org/content/view/2495/78/ - http://jvn.jp/jp/JVN%2345006961/index.html - http://www.vupen.com/english/advisories/2006/5202 - http://www.securityfocus.com/bid/21810
CVE ID: CVE-2006-6834 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functions" and (2) "Several low level security fixes." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23563 - http://www.joomla.org/content/view/2495/78/ - http://jvn.jp/jp/JVN%2345006961/index.html - http://www.joomla.org/content/view/2446/1/ - http://www.vupen.com/english/advisories/2006/5202 - http://www.securityfocus.com/bid/21810
CVE ID: CVE-2006-6835 State: PUBLISHED Published: 2007-01-01T23:00:00 Last Updated: 2024-08-07T20:42:07.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the w parameter to journal.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2085 - http://www.securityfocus.com/archive/1/455495/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31189
CVE ID: CVE-2006-6836 State: PUBLISHED Published: 2007-01-01T23:00:00Z Last Updated: 2024-09-16T17:39:01.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22978 - http://www-1.ibm.com/support/search.wss?rs=0&q=MA29469&apar=only - http://www-1.ibm.com/support/docview.wss?uid=nas38b2ee8e7abe99d0b86256eb600477b8c - http://www.securityfocus.com/bid/21189
CVE ID: CVE-2006-6837 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (iso_wincmd) plugin 1.7.3.3 and earlier for Total Commander allow user-assisted remote attackers to execute arbitrary code via a long pathname in an ISO image. Additional Analyst Notes: - CVE Program Container: References: - http://vuln.sg/isowincmd173-jp.html - http://www.securityfocus.com/archive/1/455547/100/0/threaded - http://secunia.com/advisories/23599 - http://securitytracker.com/id?1017458 - http://www.
hive/1/455547/100/0/threaded - http://secunia.com/advisories/23599 - http://securitytracker.com/id?1017458 - http://www.securityfocus.com/bid/21820 - http://vuln.sg/isowincmd173-en.html - http://securityreason.com/securityalert/2088 - http://www.vupen.com/english/advisories/2007/0008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31180
CVE ID: CVE-2006-6838 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames and pathnames), via a URL in the url vbscript parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.infogreg.com/security/misc/rediff-bol-downloader-allows-downloading-and-spawning-arbitary-files.html - http://www.securityfocus.com/archive/1/455611/100/0/threaded - http://securityreason.com/securityalert/2089 - http://www.securityfocus.com/bid/21831
CVE ID: CVE-2006-6839 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection targets." Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://secunia.com/advisories/28871 - http://www.securityfocus.com/bid/21806 - http://www.debian.org/security/2008/dsa-1488
CVE ID: CVE-2006-6840 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter." Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://secunia.com/advisories/28871 - http://www.securityfocus.com/bid/21806 - http://www.debian.org/security/2008/dsa-1488
CVE ID: CVE-2006-6841 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=405980 - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://secunia.com/advisories/28871 - http://www.securityfocus.com/bid/21806 - http://www.debian.org/security/2008/dsa-1488
CVE ID: CVE-2006-6842 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/admin_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3033 - http://www.securityfocus.com/bid/21805 - http://www.vupen.com/english/advisories/2007/0009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31129
CVE ID: CVE-2006-6843 State: PUBLISHED Published: 2007-01-03T02:00:00Z Last Updated: 2024-09-17T02:51:52.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21776
CVE ID: CVE-2006-6844 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21756 - http://securitytracker.com/id?1017445 - http://securityreason.com/securityalert/2087 - http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txt - http://www.securityfocus.com/archive/1/455306/100/0/threaded
CVE ID: CVE-2006-6845 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455417/100/0/threaded - http://www.vupen.com/english/advisories/2007/0027 - http://www.securityfocus.com/bid/21527 - http://secunia.com/advisories/23582 - http://osvdb.org/32571
CVE ID: CVE-2006-6846 State: PUBLISHED Published: 2007-01-03T02:00:00 Last Updated: 2024-08-07T20:42:07.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the num parameter in (a) phonemessage.asp, (2) the catcode parameter in (b) faqDsp.asp, and the (3) Username and (4) Password fields in (c) login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23571 - http://www.securityfocus.com/bid/21803 - https://www.exploit-db.com/exploits/3032 - https://exchange.xforce.ibmcloud.com/vulnerab
w.securityfocus.com/bid/21803 - https://www.exploit-db.com/exploits/3032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31128