Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the securepath function, a related issue to CVE-2005-4556. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016514 - http://www.securityfocus.com/bid/19002 - http://securitytracker.com/id?1016513 - http://secunia.com/advisories/18966 - http://secunia.com/advisories/18953 - http://www.securityfocus.com/archive/1/440302/100/0/threaded - http://www.osvdb.org/27328 - http://secunia.com/secunia_research/2006-12/advisory/ - http://secunia.com/secunia_research/2006-14/advisory/ - http://www.securityfocus.com/archive/1/440297/100/0/threaded - http://www.vupen.com/english/advisories/2006/2826 - http://www.vupen.com/english/advisories/2006/2825 - http://
readed - http://www.vupen.com/english/advisories/2006/2826 - http://www.vupen.com/english/advisories/2006/2825 - http://www.securityfocus.com/bid/19007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27773
CVE ID: CVE-2006-0818 State: PUBLISHED Published: 2006-07-18T22:00:00 Last Updated: 2024-08-07T16:48:56.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558. Additional Analyst Notes: - CVE Program Container: Reference
ction, possibly due to an incomplete fix for CVE-2005-4558. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016514 - http://www.securityfocus.com/bid/19002 - http://securitytracker.com/id?1016513 - http://secunia.com/advisories/18966 - http://secunia.com/advisories/18953 - http://www.securityfocus.com/archive/1/440302/100/0/threaded - http://secunia.com/secunia_research/2006-12/advisory/ - http://secunia.com/secunia_research/2006-14/advisory/ - http://www.securityfocus.com/archive/1/440297/100/0/threaded - http://www.vupen.com/english/advisories/2006/2825 - http://www.securityfocus.com/bid/19007 - https://exchange.xforce.ibmcloud.com/vulnerabil
/english/advisories/2006/2825 - http://www.securityfocus.com/bid/19007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27780
CVE ID: CVE-2006-0819 State: PUBLISHED Published: 2006-03-13T19:00:00 Last Updated: 2024-08-07T16:48:56.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0937 - http://securitytracker.com/id?1015779 - http://www.securityfocus.com/bid/17123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25178 - http://www.securityfocus.com/archive/1/427478/100/0/threaded - http://secunia.com/
.ibmcloud.com/vulnerabilities/25178 - http://www.securityfocus.com/archive/1/427478/100/0/threaded - http://secunia.com/secunia_research/2006-13/advisory - http://www.osvdb.org/23836 - http://securityreason.com/securityalert/576 - http://secunia.com/advisories/18962
CVE ID: CVE-2006-0820 State: PUBLISHED Published: 2006-03-13T19:00:00 Last Updated: 2024-08-07T16:48:56.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0937 - http://securitytracker.com/id?1015779 - http://www.securityfocus.com/bid/17123 - http://www.osvdb.org/23837 - http://www.securityfocus.com/archive/1/427478/100/0/threaded - http://secunia.com/secunia_research/2006-13/advisory - https://exchange.xforce.
us.com/archive/1/427478/100/0/threaded - http://secunia.com/secunia_research/2006-13/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/25179 - http://secunia.com/advisories/18962
CVE ID: CVE-2006-0821 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18929 - http://www.vupen.com/english/advisories/2006/0660 - https://www.exploit-db.com/exploits/1513 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24783
CVE ID: CVE-2006-0822 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service (probably resource consumption) via a crafted packet that causes a "ghost game" to be left on the server. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18938 - http://www.securityfocus.com/bid/16733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24784 - http://www.vupen.com/english/advisories/2006/0665 - http://sourceforge.net/project/shownotes.php?r
lnerabilities/24784 - http://www.vupen.com/english/advisories/2006/0665 - http://sourceforge.net/project/shownotes.php?release_id=394690&group_id=127754
CVE ID: CVE-2006-0823 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0661 - http://www.geeklog.net/article.php/geeklog-1.4.0sr1 - http://www.osvdb.org/23348 - http://www.securityfocus.com/bid/16755 - http://www.securityfocus.com/archive/1/425506/100/
http://www.osvdb.org/23348 - http://www.securityfocus.com/bid/16755 - http://www.securityfocus.com/archive/1/425506/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24775 - http://secunia.com/advisories/18920 - http://www.gulftech.org/?node=research&article_id=00102-02192006
CVE ID: CVE-2006-0824 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0661 - http://www.geeklog.net/article.php/geeklog-1.4.0sr1 - http://www.osvdb.org/23349 - htt
om/english/advisories/2006/0661 - http://www.geeklog.net/article.php/geeklog-1.4.0sr1 - http://www.osvdb.org/23349 - http://www.securityfocus.com/bid/16755 - http://www.securityfocus.com/archive/1/425506/100/0/threaded - http://secunia.com/advisories/18920 - http://www.gulftech.org/?node=research&article_id=00102-02192006
CVE ID: CVE-2006-0825 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain "unauthorized network access" via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16726 - http://www.vupen.com/english/advisories/2006/0668 - http://securitytracker.com/id?1015648 - http://secunia.com/advisories/18952
www.vupen.com/english/advisories/2006/0668 - http://securitytracker.com/id?1015648 - http://secunia.com/advisories/18952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24804 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf - http://www.osvdb.org/23359
CVE ID: CVE-2006-0826 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of service via a crafted Postscript request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0668 - http://securitytracker.com/id?1015648 - http://secunia.com/advisories/18952 - http://www.securityfocus.com/bid/16723 - https://exchange.xforce.ibmcloud.co
648 - http://secunia.com/advisories/18952 - http://www.securityfocus.com/bid/16723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24805 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf
CVE ID: CVE-2006-0827 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0668 - http://secunia.com/advisories/18952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24806 - http://www.xerox.com/downloads/usa/en/c/ce
visories/18952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24806 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf - http://www.securityfocus.com/bid/16727
CVE ID: CVE-2006-0828 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectiveness of security features" via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0668 - http://securitytracker.com/id?1015648 - http://secunia.com/advisories/18952 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf
CVE ID: CVE-2006-0829 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24777 - http://www.vupen.com/english/advisories/2006/0638 - http://secunia.com/advisories/18992 - http://evuln.com/vulns/83/summary.html - http://www.eblah.com/forum/m-11
06/0638 - http://secunia.com/advisories/18992 - http://evuln.com/vulns/83/summary.html - http://www.eblah.com/forum/m-1140116897/ - http://www.osvdb.org/23299 - http://securityreason.com/securityalert/528 - http://www.securityfocus.com/bid/16713 - http://www.securityfocus.com/archive/1/426582/100/0/threaded
CVE ID: CVE-2006-0830 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the "location" variable within the loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425378/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24788 -
://www.securityfocus.com/archive/1/425378/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24788 - http://www.securityfocus.com/archive/1/425283/100/0/threaded - http://www.securityfocus.com/bid/16687
CVE ID: CVE-2006-0831 State: PUBLISHED Published: 2006-02-21T23:00:00 Last Updated: 2024-08-07T16:48:56.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the (1) sayfaadi or (2) sayfa parameter. NOTE: this might be a site-specific issue. If so, it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425389/100/0/threaded
CVE ID: CVE-2006-0832 State: PUBLISHED Published: 2006-02-22T00:00:00 Last Updated: 2024-08-07T16:48:56.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/456 - http://www.securityfocus.com/archive/1/425395/100/0/threaded - http://www.vupen.com/english/advisories/2006/0662 - http://www.securityfocus.com/bid/16721 - http://secunia.com/advisories/18945
CVE ID: CVE-2006-0833 State: PUBLISHED Published: 2006-02-22T00:00:00 Last Updated: 2024-08-07T16:48:56.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) Add URL and (2) Suggest Category module. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24807 - http://www.securityfocus.com/bi
unia.com/advisories/18965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24807 - http://www.securityfocus.com/bid/16746 - http://www.vupen.com/english/advisories/2006/0674 - http://www.osvdb.org/23372
CVE ID: CVE-2006-0834 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts. NOTE: it is possible that this password was configured by a reseller, not the original vendor; if so, then this is not a vulnerability in the product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425362/100/0/th
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425362/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24786
CVE ID: CVE-2006-0835 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service (inaccessible database) via the tabls parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html - http://secunia.com/advisories/18902 - http://www.vupen.com/english/advisories/2006/0700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24729 - http://www.xorcrew.net/xpa/XPA-WebC
/advisories/2006/0700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24729 - http://www.xorcrew.net/xpa/XPA-WebCalendarPro.txt - http://www.securityfocus.com/bid/16789
CVE ID: CVE-2006-0836 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIF file with a long field into the address book, as demonstrated by a long homePhone field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24810 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0399.html - http://www.securityfocus.com/archive/1/425602/100/0/threaded - http://www.securityfocus.com/bid/16716
06-02/0399.html - http://www.securityfocus.com/archive/1/425602/100/0/threaded - http://www.securityfocus.com/bid/16716 - http://securityreason.com/securityalert/469
CVE ID: CVE-2006-0837 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf, and (3) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24785 - http://www.securityfocus.com/archive/1/425304/100/0/
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24785 - http://www.securityfocus.com/archive/1/425304/100/0/threaded - http://www.osvdb.org/23914 - http://www.securityfocus.com/bid/16693 - http://www.osvdb.org/23270 - http://www.osvdb.org/23271 - http://secunia.com/advisories/18922 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html - http://securitytracker.com/id?1015642 - http://www.securityfocus.com/bid/16700
CVE ID: CVE-2006-0838 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix is available for these issues. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24785 - http://www.securityfocus.com/archive/1/425304/100/0/threaded - http
exchange.xforce.ibmcloud.com/vulnerabilities/24785 - http://www.securityfocus.com/archive/1/425304/100/0/threaded - http://www.securityfocus.com/bid/16698 - http://www.securityfocus.com/bid/16693 - http://www.osvdb.org/23270 - http://www.osvdb.org/23271 - http://secunia.com/advisories/18922 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24787 - http://securitytracker.com/id?1015642
CVE ID: CVE-2006-0839 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425290/100/0/threaded - http://www.securityfocus.com/bid/16705 - http://secunia.com/advisories/18959 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24811
CVE ID: CVE-2006-0840 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie. NOTE: this issue might be the same as vector 2 in CVE-2005-4519. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24726 - http:/
ferences: - http://www.securityfocus.com/bid/16657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24726 - http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963 - http://www.securityfocus.com/archive/1/425046/100/0/threaded - http://morph3us.org/advisories/20060214-mantis-100rc4.txt - http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059
CVE ID: CVE-2006-0841 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_resolution, (10) show_build, (11) show_profile, (12) show_priority, (13) highlight_changed, (14) relationship_type, and (15) relationship_bug parameters in (a) view_all_set.php; the (16) sort parameter in (b) manage_user_page.php; th
e, and (15) relationship_bug parameters in (a) view_all_set.php; the (16) sort parameter in (b) manage_user_page.php; the (17) view_type parameter in (c) view_filters_page.php; and the (18) title parameter in (d) proj_doc_delete.php. NOTE: item 17 might be subsumed by CVE-2005-4522. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16657 - http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963 - http://secunia.com/advisories/21400 - http://www.debian.org/security/2006/dsa-1133 - http://www.securityfocus.com/archive/1/425046/100/0/threaded - http://www.osvdb.org/23248 - http://morph3us.org/advisories/20060214-mantis-100rc4
com/archive/1/425046/100/0/threaded - http://www.osvdb.org/23248 - http://morph3us.org/advisories/20060214-mantis-100rc4.txt - http://www.osvdb.org/22487 - http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059
CVE ID: CVE-2006-0842 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "java&#09;script:." NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24742 - http://www.securityfocus.com/bi