Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0465 State: PUBLISHED Published: 2006-01-27T23:00:00Z Last Updated: 2024-09-16T23:16:23.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22715 - http://osvdb.org/ref/22/22715-active121.txt
CVE ID: CVE-2006-0466 State: PUBLISHED Published: 2006-01-27T23:00:00 Last Updated: 2024-08-07T16:34:14.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to inject arbitrary web script or HTML via the text parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22711 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25198 - http://osvdb.org/ref/22/22711-goldstag.txt
CVE ID: CVE-2006-0467 State: PUBLISHED Published: 2006-01-31T02:00:00 Last Updated: 2024-08-07T16:34:14.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Pioneers (formerly gnocatan) before 0.9.49 allows remote attackers to cause a denial of service (application crash) via long chat messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18692 - http://www.vupen.com/english/advisories/2006/0376 - http://secunia.com/advisories/18647 - http://www.debian.org/security/2006/dsa-964 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350237 - http://www.securityfocus.com/bid/16429 - https://exchange.xforce.i
://bugs.debian.org/cgi-bin/bugreport.cgi?bug=350237 - http://www.securityfocus.com/bid/16429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24383
CVE ID: CVE-2006-0468 State: PUBLISHED Published: 2006-01-30T18:00:00 Last Updated: 2024-08-07T16:34:14.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: CommuniGate Pro Core Server before 5.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via LDAP messages with negative BER lengths, and possibly other vectors, as demonstrated by the ProtoVer LDAP test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24409 - http://www.securityfocus.com/archive/1/423364/100/0/threaded - http://www.vupen.com/english/advisories/2006/0364 - http://secunia.com/advisories/1
om/archive/1/423364/100/0/threaded - http://www.vupen.com/english/advisories/2006/0364 - http://secunia.com/advisories/18640 - http://www.securityfocus.com/bid/16407 - http://www.gleg.net/advisory_cg.shtml - http://www.stalker.com/CommuniGatePro/History.html
CVE ID: CVE-2006-0469 State: PUBLISHED Published: 2006-01-30T18:00:00 Last Updated: 2024-08-07T16:34:14.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UebiMiau 2.7.9, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SRC attribute of an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16413 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24375 - http://securityreason.com/securityalert/387 - http://secunia.com/advisories/18655 - http://www.vupen.com/english/advisories/2006/0388 - http://www.securi
yalert/387 - http://secunia.com/advisories/18655 - http://www.vupen.com/english/advisories/2006/0388 - http://www.securityfocus.com/archive/1/423437/100/0/threaded - http://www.uebimiau.org/news.php
CVE ID: CVE-2006-0470 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.750Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in MyBulletinBoard (MyBB) 1.02 allows remote attackers to inject arbitrary web script or HTML via the (1) sortby and (2) sortordr parameters, which are not properly handled in a redirection. Additional Analyst Notes: - CVE Program Container: References: - http://community.mybboard.net/attachment.php?aid=2181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24466 - http://seclists.org/lists/bugtraq/2006/Jan/0414.html - http://www.securityfocus.com/bid/16387 - http://c
ilities/24466 - http://seclists.org/lists/bugtraq/2006/Jan/0414.html - http://www.securityfocus.com/bid/16387 - http://community.mybboard.net/showthread.php?tid=6418 - http://www.vupen.com/english/advisories/2006/0350 - http://secunia.com/advisories/18617 - http://securityreason.com/securityalert/374 - http://www.osvdb.org/22750
CVE ID: CVE-2006-0471 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the bbcode function in functions.php in my little homepage my little forum, as last modified in June 2005, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-January/000520.html - http://secunia.com/advisories/18628 - http://www.osvdb.org/22856 - http://evuln.com/vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://w
http://www.osvdb.org/22856 - http://evuln.com/vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://www.securityfocus.com/archive/1/423167/100/0/threaded - http://www.vupen.com/english/advisories/2006/0349 - http://evuln.com/vulns/51/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
CVE ID: CVE-2006-0472 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php in my little homepage my little guestbook, as last modified in March 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-January/000520.html - http://secunia.com/advisories/18628 - http://evuln.com/vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://www.securityfocus.com/archive/1/423167/100/0/thr
vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://www.securityfocus.com/archive/1/423167/100/0/threaded - http://www.vupen.com/english/advisories/2006/0349 - http://evuln.com/vulns/51/ - http://www.osvdb.org/22855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24310
CVE ID: CVE-2006-0473 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the bbcode function in weblog.php in my little homepage my little weblog, as last modified in April 2004, allows remote attackers to inject arbitrary Javascript via a javascript URI in BBcode link tags. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-January/000520.html - http://secunia.com/advisories/18628 - http://evuln.com/vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://www.osvdb.org/22753 - http://ww
http://evuln.com/vulns/51/summary.html - http://www.securityfocus.com/bid/16395 - http://www.osvdb.org/22753 - http://www.securityfocus.com/archive/1/423167/100/0/threaded - http://www.vupen.com/english/advisories/2006/0349 - http://evuln.com/vulns/51/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24310 - http://securityreason.com/securityalert/378
CVE ID: CVE-2006-0474 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in Shareaza 2.2.1.0 allow remote attackers to execute arbitrary code via (1) a large packet length field, which causes an overflow in the ReadBuffer function in (a) BTPacket.cpp and (b) EDPacket.cpp, or (2) a large packet, which causes a heap-based overflow in the Write function in (c) Packet.h. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/BTPacket.cpp?r1=1.5&r2=1.5.4.1 - http://www.securityfocus.com/bid/16399 - https://excha
net/viewcvs.py/shareaza/shareaza/BTPacket.cpp?r1=1.5&r2=1.5.4.1 - http://www.securityfocus.com/bid/16399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24344 - http://securityreason.com/securityalert/382 - http://cvs.sourceforge.net/viewcvs.py/shareaza/shareaza/EDPacket.cpp?r1=1.15&r2=1.15.2.1 - http://www.hustlelabs.com/shareaza_advisory.pdf - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0887.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24342 - http://www.securityfocus.com/archive/1/423293/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24343
CVE ID: CVE-2006-0475 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Ping 1.3 does not properly validate ping counts, which allows remote attackers to cause a denial of service (ping flood) via a negative count parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kapda.ir/advisory-231.html - http://secunia.com/advisories/18645 - http://www.vupen.com/english/advisories/2006/0368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24382
CVE ID: CVE-2006-0476 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Nullsoft Winamp 5.12 allows remote attackers to execute arbitrary code via a playlist (pls) file with a long file name (File1 field). Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24361 - http://securityreason.com/securityalert/386 - http://securitytracker.com/id?1015552 - https://www.exploit-db.com/exploits/3422 - http://secunia.com/advisories/18649 - http://www.heise.de/newsticker/meldung/6
ttps://www.exploit-db.com/exploits/3422 - http://secunia.com/advisories/18649 - http://www.heise.de/newsticker/meldung/68981 - http://www.vupen.com/english/advisories/2006/0361 - http://www.securityfocus.com/archive/1/423548/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1402 - http://www.winamp.com/player/version_history.php - http://www.securityfocus.com/archive/1/423436/100/0/threaded - http://www.securityfocus.com/bid/16410 - http://www.osvdb.org/22789 - http://www.us-cert.gov/cas/techalerts/TA06-032A.html - http://www.kb.cert.org/vuls/id/604745
CVE ID: CVE-2006-0477 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in git-checkout-index in GIT before 1.1.5 allows remote attackers to execute arbitrary code via an index file with a long symbolic link. Additional Analyst Notes: - CVE Program Container: References: - http://lwn.net/Articles/169623/ - http://secunia.com/advisories/18643 - http://www.securityfocus.com/bid/16417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24360 - http://www.vupen.com/english/advisories/2006/0367
CVE ID: CVE-2006-0478 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRE Loaded 6.15 allows remote attackers to perform privileged actions, including uploading and creating arbitrary files, via a direct request to files.php. NOTE: the vendor states "The initial announcement of this risk was made on our website... and it included a patch which will close the vulnerability on all known 6.0x and 6.1x releases. We strongly encourage users of CRE Loaded 6.x, osCMax, and other users of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installati
of osCommerce who have installed HTMLArea based WYSIWYG editors and Admin Access with Levels to modify thier installations at the earliest possible moment." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24377 - http://www.attrition.org/pipermail/vim/2006-February/000527.html - http://www.osvdb.org/22793 - http://www.vupen.com/english/advisories/2006/0373 - http://www.securityfocus.com/bid/16415 - http://secunia.com/advisories/18648
CVE ID: CVE-2006-0479 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: pmwiki.php in PmWiki 2.1 beta 20, with register_globals enabled, allows remote attackers to bypass protection mechanisms that deregister global variables by setting both a GPC variable and a GLOBALS[] variable with the same name, which causes PmWiki to unset the GLOBALS[] variable but not the GPC variable, which creates resultant vulnerabilities such as remote file inclusion and cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/200
ditional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0931.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24368 - http://secunia.com/advisories/18634 - http://www.ush.it/2006/01/24/pmwiki-multiple-vulnerabilities/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24367 - http://securitytracker.com/id?1015550 - http://www.securityfocus.com/bid/16421 - http://www.vupen.com/english/advisories/2006/0375 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24366
CVE ID: CVE-2006-0480 State: PUBLISHED Published: 2006-01-31T11:00:00 Last Updated: 2024-08-07T16:34:14.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML via the query parameter in the search file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18672 - http://www.securityfocus.com/bid/16412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24389 - http://www.vupen.com/english/advisories/2006/0386 - http://www.securityfocus.com/archive/1/423451/100/0/threaded - http://securityreason.com/s
nglish/advisories/2006/0386 - http://www.securityfocus.com/archive/1/423451/100/0/threaded - http://securityreason.com/securityalert/384
CVE ID: CVE-2006-0481 State: PUBLISHED Published: 2006-01-31T18:00:00 Last Updated: 2024-08-07T16:34:14.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the alpha strip capability in libpng 1.2.7 allows context-dependent attackers to cause a denial of service (crash) when the png_do_strip_filler function is used to strip alpha channels out of the image. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0205.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24396 - http://securitytracker.com/id?1015617 - https://oval
9455 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24396 - http://securitytracker.com/id?1015617 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10780 - http://www.vupen.com/english/advisories/2006/0393 - http://secunia.com/advisories/18654 - http://security.gentoo.org/glsa/glsa-200812-15.xml - http://securitytracker.com/id?1015615 - http://secunia.com/advisories/33137 - ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng-1.2.8-README.txt - http://secunia.com/advisories/18863 - http://www.securityfocus.com/bid/16626
CVE ID: CVE-2006-0482 State: PUBLISHED Published: 2006-01-31T19:00:00 Last Updated: 2024-08-07T16:34:14.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service (hang) via a "date -s" command, which causes invalid sign extended arguments to be provided to the get_compat_timespec function call. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=linux-sparc&m=113861010514065&w=2 - http://marc.info/?l=linux-sparc&m=113861287813463&w=2 - http://lists.debian.org/debian-sparc/2006/01/msg00129.html - https://exchange.xforce.ibmcloud.com/vul
861287813463&w=2 - http://lists.debian.org/debian-sparc/2006/01/msg00129.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24475 - http://www.securityfocus.com/bid/17216 - http://www.vupen.com/english/advisories/2006/0418 - http://www.debian.org/security/2006/dsa-1017 - http://secunia.com/advisories/19374
CVE ID: CVE-2006-0483 State: PUBLISHED Published: 2006-01-31T20:00:00 Last Updated: 2024-08-07T16:34:14.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18629 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24330 - http://www.securityfocus.com/bid/16394 - http://www.cisco.com/warp/public/707/cisco-sa-20060126-vpn.shtml - http://securitytracker.com/id?1015546 - http://www.osvdb.org/22754 - ht
om/warp/public/707/cisco-sa-20060126-vpn.shtml - http://securitytracker.com/id?1015546 - http://www.osvdb.org/22754 - http://www.vupen.com/english/advisories/2006/0346 - http://securityreason.com/securityalert/375
CVE ID: CVE-2006-0484 State: PUBLISHED Published: 2006-01-31T20:00:00 Last Updated: 2024-08-07T16:34:14.850Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Vis.pl, as part of the FACE CONTROL product, allows remote attackers to read arbitrary files via a .. (dot dot) in any parameter that opens a file, such as (1) s or (2) p. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423155/100/0/threaded - http://www.hackerscenter.com/archive/view.asp?id=22236 - http://www.securityfocus.com/bid/16401 - http://securityreason.com/securityalert/376 - http://securitytracker.com/id?1015547 - https://exc
yfocus.com/bid/16401 - http://securityreason.com/securityalert/376 - http://securitytracker.com/id?1015547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24374
CVE ID: CVE-2006-0485 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015543 - https://oval.cisecurity.org/repository/search/definition/oval%3
r: References: - http://securitytracker.com/id?1015543 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5836 - http://www.osvdb.org/34892 - http://secunia.com/advisories/18613 - http://www.vupen.com/english/advisories/2006/0337 - http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml - http://www.securityfocus.com/bid/16383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
CVE ID: CVE-2006-0486 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may cause subsequent local users to execute unintended commands or bypass AAA command authorization checks, aka Bug ID CSCef77770. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015543 - http
SCef77770. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015543 - http://secunia.com/advisories/18613 - http://www.cisco.com/warp/public/707/cisco-response-20060125-aaatcl.shtml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4905 - http://www.osvdb.org/22723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24308
CVE ID: CVE-2006-0487 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.844Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Tumbleweed MailGate Email Firewall (EMF) 6.x allow remote attackers to (1) trigger temporarily incorrect processing of an e-mail message under "extremely heavy loads" and (2) cause an "increased number of missed spam" during "spam outbreaks." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422591/100/0/threaded
CVE ID: CVE-2006-0488 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.830Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VDM (Virtual DOS Machine) emulation environment for MS-DOS applications in Windows 2000, Windows XP SP2, and Windows Server 2003 allows local users to read the first megabyte of memory and possibly obtain sensitive information, as demonstrated by dumper.asm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423169/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24471
CVE ID: CVE-2006-0489 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the font command of mIRC, probably 6.16, allows local users to execute arbitrary code via a long string. NOTE: the original researcher claims that issue has been disputed by the vendor, and that the vendor stated "as far as I can tell, this is neither an exploit nor a vulnerability. The above report describes a local bug in mIRC." It could be that this is only exploitable by the user of the application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a
application, and thus would not cross privilege boundaries unless under an otherwise restrictive environment such as a kiosk Additional Analyst Notes: - CVE Program Container: References: - http://trout.snt.utwente.nl/ubbthreads/showflat.php?Cat=0&Board=bugreports&Number=118751 - http://www.securiteam.com/windowsntfocus/5IP080AHPQ.html - http://www.securityfocus.com/archive/1/423758/100/0/threaded - http://www.securityfocus.com/archive/1/423192/100/0/threaded - http://securityreason.com/securityalert/383 - http://www.osvdb.org/22942
CVE ID: CVE-2006-0490 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.asp in ASPThai.Net ASPThai Forums 8.0 and earlier allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24359 - http://marc.info/?l=bugtraq&m=113837847503661&w=2 - http://secunia.com/advisories/18636 - http://securitytracker.com/id?1015548 - http://www.vupen.com/english/advis