Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1683 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the User name. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19584 - http://www.securityfocus.com/bid/17483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25695 - http://www.vupen.com/english/advisories/2006/1323 - http://www.securityfocus.com/archive/1/430315/100/0/threaded
CVE ID: CVE-2006-1684 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local files via (1) the lang parameter in news.php and (2) other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/ecotwo-shopsystem-vuln.html
CVE ID: CVE-2006-1685 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow remote attackers to execute arbitrary SQL commands via the (1) group, (2) seite, and (3) id parameter, possibly involving the artikel functionality. NOTE: this vulnerability also allows resultant path disclosure when the SQL queries are invalid. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19592 - http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html -
References: - http://secunia.com/advisories/19592 - http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html - http://www.vupen.com/english/advisories/2006/1293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25731 - http://www.securityfocus.com/bid/17425
CVE ID: CVE-2006-1686 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to access unspecified files via a modified warp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html
CVE ID: CVE-2006-1687 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attackers to inject arbitrary web script or HTML via the message parameter, probably involving the basket functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19592 - http://pridels0.blogspot.com/2006/04/apt-webshop-system-vuln.html - http://www.vupen.com/english/advisories/2006/1293
CVE ID: CVE-2006-1688 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allow remote attackers to execute arbitrary PHP code via a URL in the libpath parameter to scripts in the lib directory including (1) ase.php, (2) devi.php, (3) doom3.php, (4) et.php, (5) flashpoint.php, (6) gameSpy.php, (7) gameSpy2.php, (8) gore.php, (9) gsvari.php, (10) halo.php, (11) hlife.php, (12) hlife2.php, (13) igi2.php, (14) main.lib.php, (15) netpanzer.php, (16) old_hlife.php, (17) pk
.php, (11) hlife.php, (12) hlife2.php, (13) igi2.php, (14) main.lib.php, (15) netpanzer.php, (16) old_hlife.php, (17) pkill.php, (18) q2a.php, (19) q3a.php, (20) qworld.php, (21) rene.php, (22) rvbshld.php, (23) savage.php, (24) simracer.php, (25) sof1.php, (26) sof2.php, (27) unreal.php, (28) ut2004.php, and (29) vietcong.php. NOTE: the lib/armygame.php vector is already covered by CVE-2006-1610. The provenance of most of these additional vectors is unknown, although likely from post-disclosure analysis. NOTE: this only occurs when register_globals is disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24402 - http://www.blogcu.com/Liz0ziM/431845/
Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24402 - http://www.blogcu.com/Liz0ziM/431845/ - http://www.osvdb.org/24404 - http://www.osvdb.org/24411 - http://www.vupen.com/english/advisories/2006/1284 - http://www.osvdb.org/24403 - http://www.osvdb.org/24421 - http://www.osvdb.org/24428 - http://www.osvdb.org/24407 - http://www.osvdb.org/24414 - http://www.osvdb.org/24424 - http://www.osvdb.org/24425 - http://www.osvdb.org/24410 - http://www.osvdb.org/24413 - http://www.securityfocus.com/bid/17434 - http://www.osvdb.org/24412 - http://www.osvdb.org/24406 - http://securityreason.com/securityalert/679 - http://www.osvdb.org/24409 - http://secunia.com/advisories/19
.org/24406 - http://securityreason.com/securityalert/679 - http://www.osvdb.org/24409 - http://secunia.com/advisories/19588 - http://www.osvdb.org/24423 - http://www.osvdb.org/24416 - http://www.osvdb.org/24408 - http://www.osvdb.org/24405 - http://www.osvdb.org/24427 - http://www.securityfocus.com/archive/1/439874/100/0/threaded - http://www.securityfocus.com/archive/1/430289/100/0/threaded - http://www.osvdb.org/24418 - http://secunia.com/advisories/19482 - http://www.securityfocus.com/archive/1/441015/100/0/threaded - http://www.osvdb.org/24426 - http://www.osvdb.org/24401 - http://www.osvdb.org/24429 - http://www.osvdb.org/24422 - http://www.osvdb.org/24420 - http://liz0zim.no-ip.org/alp
01 - http://www.osvdb.org/24429 - http://www.osvdb.org/24422 - http://www.osvdb.org/24420 - http://liz0zim.no-ip.org/alp.txt - http://www.osvdb.org/24419 - http://securitytracker.com/id?1015884 - http://www.osvdb.org/24417 - http://www.osvdb.org/24415
CVE ID: CVE-2006-1689 State: PUBLISHED Published: 2006-04-10T23:00:00 Last Updated: 2024-08-07T17:19:49.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain unspecified access. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015874 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1754 - http://www.securityfocus.com/bid/17400 - http://www.securityfocus.com/archive/1/430411/100/0/threaded - http://www.vupen.com/english/advisories/2006/1272 - https://exchange.xforce.ibmcloud.com/vu
ve/1/430411/100/0/threaded - http://www.vupen.com/english/advisories/2006/1272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25691 - http://www.securityfocus.com/archive/1/430411/100/0/threaded - http://secunia.com/advisories/19560 - http://www.osvdb.org/24449
CVE ID: CVE-2006-1690 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in subscribe.php in MWNewsletter 1.0.0b allows remote attackers to inject arbitrary web script or HTML via the user_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/752 - http://secunia.com/advisories/19568 - http://www.vupen.com/english/advisories/2006/1270 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25684 - http://www.securityfocus.com/bid/17412 - http://www.osvdb.org/24446 - http://archives.neohapsis.c
ulnerabilities/25684 - http://www.securityfocus.com/bid/17412 - http://www.osvdb.org/24446 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html - http://evuln.com/vulns/123/summary.html
CVE ID: CVE-2006-1691 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MWNewsletter 1.0.0b allows remote attackers to execute arbitrary SQL commands via the user_name parameter to unsubscribe.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25683 - http://secunia.com/advisories/19568 - http://www.vupen.com/english/advisories/2006/1270 - http://www.securityfocus.com/bid/17412 - http://www.osvdb.org/24905 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html - http://evuln.com/vulns
- http://www.osvdb.org/24905 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0447.html - http://evuln.com/vulns/123/summary.html - http://www.osvdb.org/24445
CVE ID: CVE-2006-1692 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MWNewsletter 1.0.0b allow remote attackers to execute arbitrary SQL commands via the (1) user_email parameter to (a) unsubscribe.php or (b) subscribe.php; or the (2) user_name parameter to subscribe.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that this was discovered during post-disclosure analysis. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisor
ng post-disclosure analysis. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19568 - http://www.vupen.com/english/advisories/2006/1270 - http://www.osvdb.org/24905 - http://www.osvdb.org/24445
CVE ID: CVE-2006-1693 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in GlobalSCAPE Secure FTP Server before 3.1.4 Build 01.10.2006 allows attackers to cause a denial of service (application crash) via a "custom command" with a long argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.globalscape.com/gsftps/history.asp - http://www.osvdb.org/24451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25665 - http://secunia.com/advisories/19547 - http://www.securityfocus.com/bid/17398
CVE ID: CVE-2006-1694 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25708 - http://secunia.com/advisories/19602 - https://www.exploit-db.com/exploits/1655 - http://www.vupen.com/english/advisories/2006/1283 - http://www.securityfocus.com/bid/17424
CVE ID: CVE-2006-1695 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fbgs script in the fbi package 2.01-1.4, when the TMPDIR environment variable is not defined, allows local users to overwrite arbitrary files via a symlink attack on temporary files in /var/tmp/fbps-[PID]. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1281 - http://www.debian.org/security/2006/dsa-1068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25729 - http://www.securityfocus.com/bid/17436 - http://secunia.com/advisories/20166 - http://secunia.com
ulnerabilities/25729 - http://www.securityfocus.com/bid/17436 - http://secunia.com/advisories/20166 - http://secunia.com/advisories/21459 - http://www.novell.com/linux/security/advisories/2006_19_sr.html - http://www.gentoo.org/security/en/glsa/glsa-200604-13.xml - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=361370 - http://secunia.com/advisories/19559 - http://secunia.com/advisories/19766
CVE ID: CVE-2006-1696 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery before 1.5.3 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17437 - http://www.osvdb.org/24466 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25707 - http://sourceforge.net/project/shownotes.php?release_id=408602&group_id=7130 - http://www.vupen.com/english/advisories/2006/1285 - http://secunia.com/advisories/19580
CVE ID: CVE-2006-1697 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17438 - http://www.osvdb.org/24479 - http://secunia.com/advisories/19586 - http://liz0zim.no-ip.org/mattguestbook.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25697 - http://www.vupen.com/english/advis
org/mattguestbook.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25697 - http://www.vupen.com/english/advisories/2006/1287 - http://www.securityfocus.com/archive/1/430356/100/0/threaded - http://securityreason.com/securityalert/681
CVE ID: CVE-2006-1698 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that they are the result of post-disclosure analysis. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19586 - https://exchange.xforce.ibmcloud.com/
otes: - CVE Program Container: References: - http://secunia.com/advisories/19586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25697 - http://www.vupen.com/english/advisories/2006/1287
CVE ID: CVE-2006-1699 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the banner parameter in view mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25782 - http://www.vupen.com/english/advisories/2006/1348 - http://secunia.com/advisories/19621 - http://securitytracker.com/id?1015877
CVE ID: CVE-2006-1700 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buy.php in Aweb Scripts Seller uses predictable cookies for authentication based on the time and the script number, which allows remote attackers to bypass authentication. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015878 - http://secunia.com/advisories/19626 - http://www.securityfocus.com/bid/17417
CVE ID: CVE-2006-1701 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbitrary web script or HTML via the page parameter to load.php. Additional Analyst Notes: - CVE Program Container: References: - http://liz0zim.no-ip.org/shad0w.txt - http://secunia.com/advisories/19595 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25716 - http://www.securityfocus.com/archive/1/430376/100/0/threaded - http://securityreason.com/securityalert/685 - http://www.securityfocus.com/bid/17430 - h
chive/1/430376/100/0/threaded - http://securityreason.com/securityalert/685 - http://www.securityfocus.com/bid/17430 - http://www.vupen.com/english/advisories/2006/1286
CVE ID: CVE-2006-1702 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17423 - http://www.securityfocus.com/archive/1/430443/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25711
CVE ID: CVE-2006-1703 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.475Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lire.php in Sire 2.0 nws allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25726 - http://www.securityfocus.com/bid/17428 - http://www.securityfocus.com/archive/1/430301/100/0/threaded
CVE ID: CVE-2006-1704 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17431 - http://securitytracker.com/id?1015885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25727 - http://www.securityfocus.com/archive/1/430301/100/0/threaded
CVE ID: CVE-2006-1705 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044990.html - http://www.kb.cert.org/vuls/id/805737 - http://www.red-database-security.com/advisory/oracle_modify_data_via_views.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25696 - http:
rity.com/advisory/oracle_modify_data_via_views.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25696 - http://secunia.com/advisories/19574 - http://securitytracker.com/id?1015886 - http://www.vupen.com/english/advisories/2006/1297 - http://www.securityfocus.com/bid/17426 - http://www.securityfocus.com/archive/1/430434/100/0/threaded
CVE ID: CVE-2006-1706 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) login.php and (b) memo.php; and the (2) itemgr, (3) brandID, and (4) album parameters to (c) index.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24473 - http://secunia.com/advisories/19593 - http://www.osvdb.org/24472 - http://www.securityfocus.com/
//www.osvdb.org/24473 - http://secunia.com/advisories/19593 - http://www.osvdb.org/24472 - http://www.securityfocus.com/bid/17441 - http://www.osvdb.org/24471 - http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25723 - http://www.osvdb.org/24470 - http://www.vupen.com/english/advisories/2006/1291 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25724
CVE ID: CVE-2006-1707 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Shopweezle 2.0 allows remote attackers to include arbitrary local files via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25725 - http://pridels0.blogspot.com/2006/04/shopweezle-20-multiple-vuln.html
CVE ID: CVE-2006-1708 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via the showid parameter in the member page to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25746 - https://www.exploit-db.com/exploits/1662 - http://www.vupen.com/english/advisories/2006/1295 - http://www.securityfocus.com/bid/17456 - http://secunia.com/advisories/19609
CVE ID: CVE-2006-1709 State: PUBLISHED Published: 2006-04-11T10:00:00 Last Updated: 2024-08-07T17:19:49.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitrary web script or HTML via the (1) pn and (2) sbeg parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25739 - http://pridels0.blogspot.com/2006/04/interaktivshop-v5-xss-vuln.html - http://www.osvdb.org/24557 - http://secunia.com/advisories/19622 - http://www.vupen.com/english/advisories/2006/1326 - http://www.securityfocus.com/bid/1
://secunia.com/advisories/19622 - http://www.vupen.com/english/advisories/2006/1326 - http://www.securityfocus.com/bid/17485
CVE ID: CVE-2006-1710 State: PUBLISHED Published: 2006-04-11T18:00:00 Last Updated: 2024-08-07T17:19:49.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) email and (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19601 - http://www.vupen.com/english/advisories/2006/1299 - https://www.exploit-db.com/exploits/1653 - http://www.securityfocus.com/bid/17435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25699
CVE ID: CVE-2006-1711 State: PUBLISHED Published: 2006-04-11T18:00:00 Last Updated: 2024-08-07T17:19:49.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits. Additional Analyst Notes: - CVE Program Container: References: - http://dev.plone.org/plone/ticket/5432 - http://secunia.com/advisories/19633 - http://www.securityfocus.com/bid/17484 - http://www.debian.org/security/2006/dsa-1032 - http://secunia.com/advisories/19640 - http://www.vupen.com/english/advisories/2006/1340 - ht
rg/security/2006/dsa-1032 - http://secunia.com/advisories/19640 - http://www.vupen.com/english/advisories/2006/1340 - https://svn.plone.org/svn/plone/PloneHotfix20060410/trunk/README.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25781