Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6662 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Linux User Management (novell-lum) on SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9, under unspecified conditions, allows local users to log in to the console without a password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23409 - http://www.novell.com/linux/security/advisories/2006_29_sr.html
CVE ID: CVE-2006-6663 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server component in Marathon Aleph One before 0.17.1 and 2006-12-17 allows remote attackers to cause a denial of service (application crash) via unspecified vectors related to "gathering net games." Additional Analyst Notes: - CVE Program Container: References: - http://marathon.sourceforge.net/release-notes/20061202.html - http://www.securityfocus.com/bid/21655 - http://www.vupen.com/english/advisories/2006/5064 - http://sourceforge.net/project/shownotes.php?release_id=471971 - http://sourceforge.net/project/shownotes.php
006/5064 - http://sourceforge.net/project/shownotes.php?release_id=471971 - http://sourceforge.net/project/shownotes.php?release_id=471964 - http://secunia.com/advisories/23380
CVE ID: CVE-2006-6664 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details were obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://marathon.sourceforge.net/release-notes/20061202.html - http://www.vupen.com/english/advisories/2006/5064 - http://source
marathon.sourceforge.net/release-notes/20061202.html - http://www.vupen.com/english/advisories/2006/5064 - http://sourceforge.net/project/shownotes.php?release_id=471971 - http://sourceforge.net/project/shownotes.php?release_id=471964 - http://secunia.com/advisories/23380
CVE ID: CVE-2006-6665 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Astonsoft DeepBurner Pro and Free 1.8.0 and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name tag in a dbr file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5066 - https://www.exploit-db.com/exploits/2950 - http://www.securityfocus.com/bid/21657 - http://secunia.com/advisories/23367
CVE ID: CVE-2006-6666 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in VerliAdmin 0.3 and earlier allows remote authenticated users to execute arbitrary PHP code via a URL in the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5059 - http://secunia.com/advisories/23418 - http://www.securityfocus.com/bid/21640 - https://www.exploit-db.com/exploits/2944
CVE ID: CVE-2006-6667 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) nick_mod or (2) nick parameter to (a) repass.php or (b) verify.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5059
CVE ID: CVE-2006-6668 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VerliAdmin 0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5059
CVE ID: CVE-2006-6669 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in export_handler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2054 - http://secunia.com/advisories/24974 - http://secunia.com/advisories/23341 - http://www.vupen.com/english/advisories/2006/5067 - http://www.debian.org/security/2007/dsa-1279 - http://www.securityfocus.com/archive/1/454810/100/0/threaded
CVE ID: CVE-2006-6670 State: PUBLISHED Published: 2006-12-20T23:00:00 Last Updated: 2024-08-07T20:33:59.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL. Additional Analyst Notes: - CVE Program Container: References: - http://www130.nortelnetworks.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=363252 - http://secunia.com/advisories/23403 - http://www.vupen.com/english/advisories/2006/5070 - http://www.securityfocus.com/bid/21660
CVE ID: CVE-2006-6671 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in down.asp in Burak Yylmaz Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21676 - http://secunia.com/advisories/23447 - http://www.securityfocus.com/archive/1/454857/100/0/threaded - http://securityreason.com/securityalert/2055 - http://www.vupen.com/english/advisories/2006/5085
CVE ID: CVE-2006-6672 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Burak Yylmaz Download Portal allow remote attackers to execute arbitrary SQL commands via the (1) kid or possibly (2) id parameter to (a) HABERLER.ASP and (b) ASPKAT.ASP. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5085
CVE ID: CVE-2006-6673 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: WinFtp Server 2.0.2 allows remote attackers to cause a denial of service (crash) via long (1) PASV, (2) LIST, (3) USER, (4) PORT, and possibly other commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5069 - http://secunia.com/advisories/23412 - https://www.exploit-db.com/exploits/2952
CVE ID: CVE-2006-6674 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ozeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLM\Software\Ozeki\SMSServer\CurrentVersion\Plugins\httpsmsgate registry key, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21679 - http://secunia.com/advisories/23339 - http://www.vupen.com/english/advisories/2006/5093 - http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=106
CVE ID: CVE-2006-6675 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:34:00.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell NetWare 6.5 Support Pack 5 and 6 and Novell Apache on NetWare 2.0.48 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in Welcome web-app. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5090 - http://www.securityfocus.com/bid/21678 - https://secure-support.novell.com/KanisaPlatform/Publishing/514/3319127_f.SAL_Public.html - http://secunia.com/advisories/23406
CVE ID: CVE-2006-6676 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455045/100/0/threaded - http://www.securityfocus.com/archive/1/454949/100/0/threaded - http://www.vupen.com/english/advisories/2006/5095 - http://securityreason.com/securityalert/2079 - http://eset.com/
ed - http://www.vupen.com/english/advisories/2006/5095 - http://securityreason.com/securityalert/2079 - http://eset.com/support/updates.php?pageno=63 - http://secunia.com/advisories/23459 - http://www.securityfocus.com/bid/21682
CVE ID: CVE-2006-6677 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:34:00.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: ESET NOD32 Antivirus before 1.1743 allows remote attackers to cause a denial of service (crash) via a crafted .CHM file that triggers a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454949/100/0/threaded - http://www.vupen.com/english/advisories/2006/5095 - http://securityreason.com/securityalert/2079 - http://eset.com/support/updates.php?pageno=63 - http://secunia.com/advisories/23459 - http://www.securityfocus.com/bid/21682
CVE ID: CVE-2006-6678 State: PUBLISHED Published: 2006-12-21T01:00:00 Last Updated: 2024-08-07T20:33:59.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: The edit_textarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1251 - http://www.securityfocus.com/bid/22158 - http://www.vupen.com/english/advisories/2006/5092 - http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3&r2=1.4 - http://sou
om/english/advisories/2006/5092 - http://netrik.cvs.sourceforge.net/netrik/netrik/form-file.c?r1=1.3&r2=1.4 - http://sourceforge.net/project/shownotes.php?release_id=472131&group_id=23183 - http://secunia.com/advisories/23822
CVE ID: CVE-2006-6679 State: PUBLISHED Published: 2006-12-21T19:00:00 Last Updated: 2024-08-07T20:33:59.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedro Lineu Orso chetcpasswd before 2.4 relies on the X-Forwarded-For HTTP header when verifying a client's status on an IP address ACL, which allows remote attackers to gain unauthorized access by spoofing this header. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649 - http://www.osvdb.org/30544 - http://secunia.com/advisories/22967 - http://www.securityfocus.com/bid/21102 - http://marc.info/?l=bugtraq&m=116371297325564&w=2 - http://
/advisories/22967 - http://www.securityfocus.com/bid/21102 - http://marc.info/?l=bugtraq&m=116371297325564&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30451
CVE ID: CVE-2006-6680 State: PUBLISHED Published: 2006-12-21T19:00:00Z Last Updated: 2024-09-16T23:10:55.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedro Lineu Orso chetcpasswd before 2.3.1 does not document the need for 0400 permissions on /etc/chetcpasswd.allow, which might allow local users to gain sensitive information by reading this file. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=68912&release_id=466649
CVE ID: CVE-2006-6681 State: PUBLISHED Published: 2006-12-21T19:00:00 Last Updated: 2024-08-07T20:33:59.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedro Lineu Orso chetcpasswd 2.3.3 does not have a rate limit for client requests, which might allow remote attackers to determine passwords via a dictionary attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30455 - http://secunia.com/advisories/22967 - http://www.securityfocus.com/bid/21102 - http://marc.info/?l=bugtraq&m=116371297325564&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
CVE ID: CVE-2006-6682 State: PUBLISHED Published: 2006-12-21T19:00:00 Last Updated: 2024-08-07T20:33:59.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedro Lineu Orso chetcpasswd 2.3.3 provides a different error message when a request with a valid username fails, compared to a request with an invalid username, which allows remote attackers to determine valid usernames on the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30545 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30454 - http://secunia.com/advisories/22967 - http://www.securityfocus.com/bid/21102 - http://marc.info/?l=bugtraq&m=116371297325564&w=2 - http://bug
visories/22967 - http://www.securityfocus.com/bid/21102 - http://marc.info/?l=bugtraq&m=116371297325564&w=2 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
CVE ID: CVE-2006-6683 State: PUBLISHED Published: 2006-12-21T19:00:00Z Last Updated: 2024-09-16T23:30:26.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pedro Lineu Orso chetcpasswd 2.4.1 and earlier verifies and updates user accounts via custom code that processes /etc/shadow and does not follow the PAM configuration, which might allow remote attackers to bypass intended restrictions implemented through PAM. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21102 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
CVE ID: CVE-2006-6684 State: PUBLISHED Published: 2006-12-21T19:00:00Z Last Updated: 2024-09-17T00:05:52.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd before 2.4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long X-Forwarded-For HTTP header. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30546 - http://secunia.com/advisories/22967 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=394454
CVE ID: CVE-2006-6685 State: PUBLISHED Published: 2006-12-21T19:00:00Z Last Updated: 2024-09-16T20:23:02.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Pedro Lineu Orso chetcpasswd 2.3.3 allows local users to cause a denial of service (application crash) and possibly execute arbitrary code via a long REMOTE_ADDR environment variable. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22967
CVE ID: CVE-2006-6686 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sender.php in Carsen Klock TextSend 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23458 - https://www.exploit-db.com/exploits/2965 - http://www.securityfocus.com/bid/21690 - http://www.vupen.com/english/advisories/2006/5097
CVE ID: CVE-2006-6687 State: PUBLISHED Published: 2006-12-21T21:00:00Z Last Updated: 2024-09-17T00:31:11.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET), allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21684
CVE ID: CVE-2006-6688 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web Automated Perl Portal (WebAPP) 0.9.9.4, and 0.9.9.3.4 Network Edition (NE) (aka WebAPP.NET) allows remote attackers to bypass filtering mechanisms via unknown vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.web-app.net/downloads/security/19092006_security_fix.txt - http://www.securityfocus.com/bid/21684
CVE ID: CVE-2006-6689 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:34:00.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Paristemi 0.8.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the SERVER_DIRECTORY parameter to unspecified scripts, a different vector than CVE-2006-6739. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5086
CVE ID: CVE-2006-6690 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: rtehtmlarea/pi1/class.tx_rtehtmlarea_pi1.php in Typo3 4.0.0 through 4.0.3, 3.7 and 3.8 with the rtehtmlarea extension, and 4.1 beta allows remote authenticated users to execute arbitrary commands via shell metacharacters in the userUid parameter to rtehtmlarea/htmlarea/plugins/SpellChecker/spell-check-logic.php, and possibly another vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454944/100/0/threaded - http://secunia.com/advisories/23466 - http://www.sec-consult.
://www.securityfocus.com/archive/1/454944/100/0/threaded - http://secunia.com/advisories/23466 - http://www.sec-consult.com/272.html - http://lists.netfielders.de/pipermail/typo3-announce/2006/000045.html - http://securitytracker.com/id?1017428 - http://securityreason.com/securityalert/2056 - http://lists.netfielders.de/pipermail/typo3-announce/2006/000046.html - http://secunia.com/advisories/23446 - http://typo3.org/news-single-view/?tx_newsimporter_pi1%5BshowItem%5D=0&cHash=e4a40a11a9 - http://www.vupen.com/english/advisories/2006/5094 - http://www.securityfocus.com/bid/21680
CVE ID: CVE-2006-6691 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Valdersoft Shopping Cart 3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the commonIncludePath parameter to (1) admin/include/common.php, (2) include/common.php, or (3) common_include/common.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2964 - http://www.vupen.com/english/advisories/2006/5101 - http://www.securityfocus.com/bid/21685 - http://secunia.com/advisories/23464 - https://e
/english/advisories/2006/5101 - http://www.securityfocus.com/bid/21685 - http://secunia.com/advisories/23464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30984
CVE ID: CVE-2006-6692 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:34:00.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in information that would be recorded in the system log using (1) zabbix_log or (2) zabbix_syslog. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3959 - http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1 - http://bugs.debian.org/cg
ttp://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388 - http://www.securityfocus.com/bid/20416 - http://secunia.com/advisories/22313
CVE ID: CVE-2006-6693 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in zabbix before 20061006 allow attackers to cause a denial of service (application crash) and possibly execute arbitrary code via long strings to the (1) zabbix_log and (2) zabbix_syslog functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3959 - http://bugs.debian.org/cgi-bin/bugreport.cgi/zabbix.security.patch?bug=391388%3Bmsg=5%3Batt=1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388 - http://www.securityfocus.com/bid/204
=391388%3Bmsg=5%3Batt=1 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391388 - http://www.securityfocus.com/bid/20416 - http://secunia.com/advisories/22313
CVE ID: CVE-2006-6694 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/config.php in E-Uploader Pro 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a .. (dot dot) in the language parameter, as demonstrated by uploading a .JPG file containing PHP code, then accessing the file via config.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29574 - http://www.rahim.webd.pl/exploity/Exploits/99.txt - http://www.securityfocus
xforce.ibmcloud.com/vulnerabilities/29574 - http://www.rahim.webd.pl/exploity/Exploits/99.txt - http://www.securityfocus.com/bid/20481 - https://www.exploit-db.com/exploits/2556
CVE ID: CVE-2006-6695 State: PUBLISHED Published: 2006-12-21T21:00:00 Last Updated: 2024-08-07T20:33:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Carsen Klock TextSend 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) error or (2) success parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5097