Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ies?name=MDKSA-2006:024 - http://www.gentoo.org/security/en/glsa/glsa-200602-13.xml - http://secunia.com/advisories/23090 - http://securitytracker.com/id?1015623 - https://issues.rpath.com/browse/RPL-389 - http://secunia.com/advisories/18607 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-231321-1 - http://www.ubuntu.com/usn/usn-246-1 - http://www.gentoo.org/security/en/glsa/glsa-200602-06.xml - http://secunia.com/advisories/18871 - http://securityreason.com/securityalert/500 - http://secunia.com/advisories/28800 - http://www.securityfocus.com/bid/12717 - http://secunia.com/advisories/22998 - http://secunia.com/advisories/18261 - ftp://patches.sgi.com/support/free/security/advisor
secunia.com/advisories/22998 - http://secunia.com/advisories/18261 - ftp://patches.sgi.com/support/free/security/advisories/20060301-01.U.asc - http://www.debian.org/security/2006/dsa-1213 - http://secunia.com/advisories/19030 - http://rhn.redhat.com/errata/RHSA-2006-0178.html - http://secunia.com/advisories/19183
CVE ID: CVE-2006-0083 State: PUBLISHED Published: 2006-01-09T20:00:00 Last Updated: 2024-08-07T16:18:20.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the logging code of SMS Server Tools (smstools) 1.14.8 and earlier allows local users to execute arbitrary code via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24034 - http://secunia.com/advisories/18343 - http://secunia.com/advisories/18357 - http://www.securityfocus.com/bid/16188 - http://www.osvdb.org/22287 - http://www.debian.org/security/2005/dsa-930
CVE ID: CVE-2006-0084 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in index.php in raSMP 2.0.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the $_SERVER[HTTP_USER_AGENT] variable (User-Agent header). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0030 - http://www.securityfocus.com/bid/16138 - http://securitytracker.com/id?1015432 - http://www.osvdb.org/22198 - http://attrition.org/pipermail/vim/2006-January/000486.html - http://evuln.com/vulns/13/summary.html -
svdb.org/22198 - http://attrition.org/pipermail/vim/2006-January/000486.html - http://evuln.com/vulns/13/summary.html - http://secunia.com/advisories/18292
CVE ID: CVE-2006-0085 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Nkads 1.0 alfa 3 allows remote attackers to execute arbitrary SQL commands via the (1) usuario_nkads_admin or (2) password_nkads_admin parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0040 - http://www.soulblack.com.ar/repo/papers/advisory/nkads_advisory.txt - http://www.osvdb.org/22206 - http://secunia.com/advisories/18302
CVE ID: CVE-2006-0086 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in index.php in Next Generation Image Gallery 0.0.1 Lite Edition allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22202 - http://www.vupen.com/english/advisories/2006/0037 - http://osvdb.org/ref/22/22202-nextgen.txt - http://secunia.com/advisories/18309
CVE ID: CVE-2006-0087 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0029 - http://securitytracker.com/id?1015435 - http://www.securityfocus.com/bid/16140 - http://www.osvdb.org/22200 - http://www.securityfocus.com/archive/1/420772/100/0/threaded - http://securityreason.com/securityalert/314 - http://www.osvdb.org/22199 -
tyfocus.com/archive/1/420772/100/0/threaded - http://securityreason.com/securityalert/314 - http://www.osvdb.org/22199 - http://www.evuln.com/vulns/12/summary.html - http://secunia.com/advisories/18297
CVE ID: CVE-2006-0088 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/420672/100/0/threaded - http://www.securityfocus.com/bid/16110 - http://www.vupen.com/english/advisories/2006/0026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23954 - http://evuln.com/vulns/8/summary.html - http://www.osvdb.org/22382
CVE ID: CVE-2006-0089 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ESRI ArcPad 7.0.0.156 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .amp file with a COORDSYS tag with a long string attribute. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18294 - http://users.pandora.be/bratax/advisories/b007.html - http://www.osvdb.org/22208 - http://www.securityfocus.com/bid/16136 - http://www.vupen.com/english/advisories/2006/0032
CVE ID: CVE-2006-0090 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.727Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in IDV Directory Viewer before 2005.1 allows remote attackers to view arbitrary directory contents via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0031 - http://secunia.com/advisories/18298 - http://www.securityfocus.com/bid/16137 - http://sourceforge.net/project/shownotes.php?release_id=382593&group_id=152499
CVE ID: CVE-2006-0091 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webmail in Open-Xchange 0.8.1-6 and earlier, with "Inline HTML" enabled, allows remote attackers to inject arbitrary web script or HTML via e-mail attachments, which are rendered inline. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113629092325679&w=2 - http://securitytracker.com/id?1015431 - http://secunia.com/advisories/18285 - http://www.vupen.com/english/advisories/2006/0034
CVE ID: CVE-2006-0092 State: REJECTED Published: 2006-01-05T11:00:00 Last Updated: 2006-04-14T09:00:00 Description: No description available.
CVE ID: CVE-2006-0093 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.734Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in @Card ME PHP allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22203 - http://secunia.com/advisories/18306 - http://osvdb.org/ref/22/22203-ecardmax.txt - http://www.vupen.com/english/advisories/2006/0039
CVE ID: CVE-2006-0094 State: PUBLISHED Published: 2006-01-05T11:00:00 Last Updated: 2024-08-07T16:18:20.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the inc_stat parameter, a different vulnerability than CVE-2006-0076. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/17373 - http://www.vupen.com/english/advisories/2006/0028
CVE ID: CVE-2006-0095 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:18:20.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: dm-crypt in Linux kernel 2.6.15 and earlier does not clear a structure before it is freed, which leads to a memory disclosure that could allow local users to obtain sensitive information about a cryptographic key. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/388 - http://marc.info/?l=linux-kernel&m=113641114812886&w=2 - http://secunia.com/advisories/19160 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - http://www.trustix.org/errata/2006/0004 - http
19160 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - http://www.trustix.org/errata/2006/0004 - http://www.securityfocus.com/bid/16301 - http://www.redhat.com/support/errata/RHSA-2006-0132.html - http://securitytracker.com/id?1015740 - http://secunia.com/advisories/18774 - http://marc.info/?l=linux-kernel&m=113640535312572&w=2 - http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.osvdb.org/22418 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/20398 - https://exchange.xforce.
rg/22418 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/20398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24189 - https://usn.ubuntu.com/244-1/ - http://secunia.com/advisories/18527 - http://www.vupen.com/english/advisories/2006/0235 - http://secunia.com/advisories/19374 - http://secunia.com/advisories/18487 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11192
CVE ID: CVE-2006-0096 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: wan/sdla.c in Linux kernel 2.6.x before 2.6.11 and 2.4.x before 2.4.29 does not require the CAP_SYS_RAWIO privilege for an SDLA firmware upgrade, with unknown impact and local attack vectors. NOTE: further investigation suggests that this issue requires root privileges to exploit, since it is protected by CAP_NET_ADMIN; thus it might not be a vulnerability, although capabilities provide finer distinctions between privilege levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid
ween privilege levels. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16304 - http://secunia.com/advisories/18977 - http://linux.bkbits.net:8080/linux-2.4/cset%401.1448.91.23?nav=index.html%7Csrc/%7Csrc/drivers%7Csrc/drivers/net%7Csrc/drivers/net/wan%7Crelated/drivers/net/wan/sdla.c - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:044 - http://www.kernel.org/git/?p=linux/kernel/git/tglx/history.git%3Ba=commitdiff%3Bh=0f1d4813a4a65296e1131f320a60741732bc068f - http://www.debian.org/security/2006/dsa-1017 - https://usn.ubuntu.com/244-1/ - http://secunia.com/advisories/18527 - http://secunia.com/advisories/19374
CVE ID: CVE-2006-0097 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Windows allows attackers to execute arbitrary code via a long (1) arg_host or (2) arg_unix_socket argument, as demonstrated by a long named pipe variable in the host argument to the mysql_connect function. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041013.html - http://www.securityfocus.com/archive/1/420986/100/0/threaded - htt
/pipermail/full-disclosure/2006-January/041013.html - http://www.securityfocus.com/archive/1/420986/100/0/threaded - http://www.php.net/ChangeLog-4.php#4.4.3 - http://www.vupen.com/english/advisories/2006/0046 - http://www.securityfocus.com/bid/16145 - http://www.osvdb.org/22232 - http://secunia.com/advisories/18275 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0274.html
CVE ID: CVE-2006-0098 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22231 - http://www.securityfocus.com/bid/16144 - ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/008_fd.patch - http://securitytracker.com/id?1015437 - http://www.openbsd.org/errata37.html#fd - http://secunia.com/advisories/18296
CVE ID: CVE-2006-0099 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/templates/categories/ PHP scripts in Valdersoft Shopping Cart 3.0 allows remote attackers to execute arbitrary code via a URL in the catalogDocumentRoot parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16126 - http://downloads.securityfocus.com/vulnerabilities/exploits/cijfer-vscxpl.pl - https://www.exploit-db.com/exploits/1401
CVE ID: CVE-2006-0100 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NicoFTP 3.0.1.19 and earlier might allow local users to execute arbitrary code via a long string in the "Name of site" field of an FTP account. NOTE: because this program executes with the privileges of the invoking user, and because remote programs do not normally have the ability to create or modify FTP accounts in this program, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Contain
crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/317 - http://www.securityfocus.com/archive/1/420670/100/0/threaded
CVE ID: CVE-2006-0101 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sBLOG 0.7.1 Beta 20051202 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) p and (2) keyword parameters in (a) index.php and (b) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/22/22373-sblog.txt - http://www.vupen.com/english/advisories/2006/0041 - http://www.osvdb.org/22373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23979 - http://www.osvdb.org/22374
CVE ID: CVE-2006-0102 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in TinyPHPForum (TPF) 3.6 and earlier allows remote attackers to inject arbitrary web script via a javascript: scheme in an "[a]" bbcode tag, possibly the txt parameter to action.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015436 - http://www.osvdb.org/22256 - http://www.securityfocus.com/archive/1/420933/100/0/threaded - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com/advisories/18293 - http://securityreaso
hreaded - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com/advisories/18293 - http://securityreason.com/securityalert/320 - http://evuln.com/vulns/14/summary.html
CVE ID: CVE-2006-0103 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:33.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web root with insufficient access control, which allows remote attackers to list all registered users and possibly obtain other sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015436 - http://www.securityfocus.com/archive/1/420933/100/0/threaded - http://www.osvdb.org/22257 - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com/
33/100/0/threaded - http://www.osvdb.org/22257 - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com/advisories/18293 - http://securityreason.com/securityalert/320 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24016 - http://evuln.com/vulns/14/summary.html - http://www.securityfocus.com/archive/1/431133/100/0/threaded
CVE ID: CVE-2006-0104 State: PUBLISHED Published: 2006-01-06T11:00:00 Last Updated: 2024-08-07T16:25:32.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. (dot dot) in the uname parameter to profile.php. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/14/exploit.html - http://securitytracker.com/id?1015436 - http://www.securityfocus.com/archive/1/420933/100/0/threaded - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com
curityfocus.com/archive/1/420933/100/0/threaded - http://www.vupen.com/english/advisories/2006/0054 - http://secunia.com/advisories/18293 - http://securityreason.com/securityalert/320 - http://evuln.com/vulns/14/summary.html - http://www.securityfocus.com/bid/16163 - http://www.osvdb.org/22258
CVE ID: CVE-2006-0105 State: PUBLISHED Published: 2006-01-10T20:00:00 Last Updated: 2024-08-07T16:25:33.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: PostgreSQL 8.0.x before 8.0.6 and 8.1.x before 8.1.2, when running on Windows, allows remote attackers to cause a denial of service (postmaster exit and no new connections) via a large number of simultaneous connection requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0114 - http://securitytracker.com/id?1015482 - http://secunia.com/advisories/18419 - http://www.postgresql.org/about/news.456 - http://securityreason.com/securityalert/327 - https://exchange.xf
ies/18419 - http://www.postgresql.org/about/news.456 - http://securityreason.com/securityalert/327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24049 - http://www.securityfocus.com/archive/1/421592/100/0/threaded - http://archives.postgresql.org/pgsql-announce/2006-01/msg00001.php - http://www.securityfocus.com/bid/16201
CVE ID: CVE-2006-0106 State: PUBLISHED Published: 2006-01-06T18:00:00 Last Updated: 2024-08-07T16:25:32.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: gdi/driver.c and gdi/printdrv.c in Wine 20050930, and other versions, implement the SETABORTPROC GDI Escape function call for Windows Metafile (WMF) files, which allows attackers to execute arbitrary code, the same vulnerability as CVE-2005-4560 but in a different codebase. Additional Analyst Notes: - CVE Program Container: References: - http://lists.immunitysec.com/pipermail/dailydave/2006-January/002806.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346197 - http://www.vupen.com/english/advisories/2006/0098 - http:/
l - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=346197 - http://www.vupen.com/english/advisories/2006/0098 - http://secunia.com/advisories/18578 - http://secunia.com/advisories/18549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23846 - http://www.securityfocus.com/archive/1/422128/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:014 - http://www.novell.com/linux/security/advisories/2006_02_sr.html - http://www.debian.org/security/2006/dsa-954 - http://secunia.com/advisories/18451 - http://secunia.com/advisories/18323 - http://www.gentoo.org/security/en/glsa/glsa-200601-09.xml
CVE ID: CVE-2006-0107 State: PUBLISHED Published: 2006-01-07T00:00:00 Last Updated: 2024-08-07T16:25:32.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the viewID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Due to the unavailability of the original source, it cannot be determined if this is the same issue as identified by CVE-2006-0108. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24014 - http://www.securityfocus.com/bid
m Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24014 - http://www.securityfocus.com/bid/16159 - http://www.osvdb.org/22252 - http://secunia.com/advisories/18324
CVE ID: CVE-2006-0108 State: PUBLISHED Published: 2006-01-07T00:00:00 Last Updated: 2024-08-07T16:25:32.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mcl_login.asp in Timecan CMS allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Due to the unavailability of the original source, it cannot be determined if this is the same issue as identified by CVE-2006-0107. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22253 - http://www.vupen.com/english/advisories/2006/007
es: - CVE Program Container: References: - http://www.osvdb.org/22253 - http://www.vupen.com/english/advisories/2006/0078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24014 - http://www.osvdb.org/22252
CVE ID: CVE-2006-0109 State: PUBLISHED Published: 2006-01-07T00:00:00 Last Updated: 2024-08-07T16:25:33.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in category.php in Modular Merchant Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16160 - http://attrition.org/pipermail/vim/2006-February/000548.html - http://secunia.com/advisories/18320 - http://www.osvdb.org/22243 - http://osvdb.org/ref/22/22243-modular.txt - http://www.modularmerchant.com/forums/viewtopic.php?t=46 - http://www.vupen.com/e
//osvdb.org/ref/22/22243-modular.txt - http://www.modularmerchant.com/forums/viewtopic.php?t=46 - http://www.vupen.com/english/advisories/2006/0076