Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ient that does not understand multibyte encodings, aka a second variant of "Encoding-Based SQL Injection." NOTE: it could be argued that this is a class of issue related to interaction errors between the client and PostgreSQL, but a CVE has been assigned since PostgreSQL is treating this as a preventative measure against this class of problem. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26628 - http://security.gentoo.org/glsa/glsa-200607-04.xml - http://secunia.com/advisories/20435 - http://www.securityfocus.com/bid/18092 - http://secunia.com/advisories/20503 - http://secunia.com/advisories/20451 - http://secunia.com/a
tyfocus.com/bid/18092 - http://secunia.com/advisories/20503 - http://secunia.com/advisories/20451 - http://secunia.com/advisories/21001 - http://www.postgresql.org/docs/techdocs.50 - http://secunia.com/advisories/20231 - http://secunia.com/advisories/20653 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0002.html - http://secunia.com/advisories/21749 - http://www.osvdb.org/25731 - http://secunia.com/advisories/20782 - http://www.redhat.com/support/errata/RHSA-2006-0526.html - http://www.trustix.org/errata/2006/0032/ - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.vupen.com/english/advisories/2006/1941 - http://www.securityfocus.com/arch
ity/advisories/20060602-01-U.asc - http://www.vupen.com/english/advisories/2006/1941 - http://www.securityfocus.com/archive/1/435161/100/0/threaded - http://secunia.com/advisories/20232 - http://www.securityfocus.com/archive/1/435038/100/0/threaded - https://usn.ubuntu.com/288-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:098 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://support.avaya.com/elmodocs2/security/ASA-2006-113.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/26627 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9947 - http://secunia.com/advisories/20555 - http://archives.postgresql.or
arch/definition/oval%3Aorg.mitre.oval%3Adef%3A9947 - http://secunia.com/advisories/20555 - http://archives.postgresql.org/pgsql-announce/2006-05/msg00010.php - http://securitytracker.com/id?1016142 - http://www.ubuntu.com/usn/usn-288-3 - http://www.ubuntu.com/usn/usn-288-2 - http://secunia.com/advisories/20314 - http://www.debian.org/security/2006/dsa-1087
CVE ID: CVE-2006-2315 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter. NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17909 - http://www.osvdb.org/25355 - http://www.vupen.com/english/advisories
erences: - http://www.securityfocus.com/bid/17909 - http://www.osvdb.org/25355 - http://www.vupen.com/english/advisories/2006/1727 - https://www.exploit-db.com/exploits/1762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26299 - http://www.howtoforge.com/forums/showthread.php?t=4123 - http://secunia.com/advisories/19994 - http://www.xorcrew.net/xpa/XPA-ISPConfig.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045855.html - http://www.securityfocus.com/archive/1/437456/100/200/threaded
CVE ID: CVE-2006-2316 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory section with weak permissions, which allows local users to read or modify passwords or other data, or cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.reversemode.com/index.php?option=com_content&task=view&id=10&Itemid=1 - http://secunia.com/advisories/20001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26317 - http://www.securityfocus.com/archiv
.com/advisories/20001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26317 - http://www.securityfocus.com/archive/1/433133/100/0/threaded - http://securityreason.com/securityalert/877 - http://securitytracker.com/id?1016621 - http://www.vupen.com/english/advisories/2006/1737 - http://www.securityfocus.com/bid/17914
CVE ID: CVE-2006-2317 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to read arbitrary files under the web root via unspecified attack vectors related to the OpenTextFile method in Scripting.FileSystemObject. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26348 - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.osvdb.o
pen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.osvdb.org/25455 - http://www.securityfocus.com/bid/17920 - http://securityreason.com/securityalert/871 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0203.html - http://www.idealscience.com/ibb/posts.aspx?postID=24415
CVE ID: CVE-2006-2318 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25456 - http://secunia.com/advisories/20035 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/arc
l-disclosure/2006-May/045887.html - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.securityfocus.com/bid/17920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26353 - http://securityreason.com/securityalert/871 - http://www.idealscience.com/ibb/posts.aspx?postID=24415
CVE ID: CVE-2006-2319 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25456 - http://secunia.com/advisories/20035 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/arch
-disclosure/2006-May/045887.html - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.securityfocus.com/bid/17920 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26353 - http://securityreason.com/securityalert/871 - http://www.idealscience.com/ibb/posts.aspx?postID=24415
CVE ID: CVE-2006-2320 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors related to stored procedure calls. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2209. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20035 - http://www.osvdb.org/25457 - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive
- http://www.osvdb.org/25457 - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.securityfocus.com/bid/17920 - http://securityreason.com/securityalert/871 - http://www.idealscience.com/ibb/posts.aspx?postID=24415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26354
CVE ID: CVE-2006-2321 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ideal Science Ideal BB 1.5.4a and earlier allow remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: due to lack of details from the researcher, it is not clear whether this overlaps CVE-2004-2207. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25458 - http://secunia.com/advisories/20035 - http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - ht
- http://www.vupen.com/english/advisories/2006/1729 - http://www.securityfocus.com/archive/1/433248/100/0/threaded - http://www.securityfocus.com/bid/17920 - http://securityreason.com/securityalert/871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26355 - http://www.idealscience.com/ibb/posts.aspx?postID=24415
CVE ID: CVE-2006-2322 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transparent proxy feature of the Cisco Application Velocity System (AVS) 3110 5.0 and 4.0 and earlier, and 3120 5.0.0 and earlier, has a default configuration that allows remote attackers to proxy arbitrary TCP connections, aka Bug ID CSCsd32143. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26351 - http://www.vupen.com/english/advisories/2006/1762 - http://www.securityfocus.com/bid/17937 - http://secunia.com/adv
51 - http://www.vupen.com/english/advisories/2006/1762 - http://www.securityfocus.com/bid/17937 - http://secunia.com/advisories/20079 - http://www.osvdb.org/25459 - http://www.cisco.com/warp/public/707/cisco-sa-20060510-avs.shtml
CVE ID: CVE-2006-2323 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SmartISoft phpListPro 2.01 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the returnpath parameter in (1) editsite.php, (2) addsite.php, and (3) in.php. NOTE: The config.php vector is already covered by CVE-2006-1749. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/882 - http://securityreason.com/securityalert/688 - http://securityreason.com/securityalert/156 - http://securitytracker.com
- http://securityreason.com/securityalert/688 - http://securityreason.com/securityalert/156 - http://securitytracker.com/id?1016060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26359 - http://www.securityfocus.com/archive/1/433562/100/0/threaded - http://www.securityfocus.com/archive/1/433285/100/0/threaded - http://www.osvdb.org/25905 - http://www.osvdb.org/25904 - http://www.osvdb.org/25906
CVE ID: CVE-2006-2324 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: 180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433566/100/0/threaded - http://secdev.zoller.lu/research/zango.htm - http://securityreason.com/securityalert/890
CVE ID: CVE-2006-2325 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to inject arbitrary web script or HTML via the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Also, this issue might be resultant from directory traversal. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26342 - http://www.securityfocus.com/b
ram Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26342 - http://www.securityfocus.com/bid/17889 - http://www.vupen.com/english/advisories/2006/1704 - http://secunia.com/advisories/20005 - http://www.osvdb.org/25452
CVE ID: CVE-2006-2326 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in OnlyScript.info Online Universal Payment System Script allows remote attackers to read arbitrary files via directory traversal sequences in the read parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17889 - http://www.vupen.com/english/advisories/2006/1704 - http://secunia.com/advisories/20005 - http://www.
us.com/bid/17889 - http://www.vupen.com/english/advisories/2006/1704 - http://secunia.com/advisories/20005 - http://www.osvdb.org/25451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26341
CVE ID: CVE-2006-2327 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the DPRPC library (DPRPCNLM.NLM) NDPS/iPrint module in Novell Distributed Print Services in Novell NetWare 6.5 SP3, SP4, and SP5 allow remote attackers to execute arbitrary code via an XDR encoded array with a field that specifies a large number of elements, which triggers the overflows in the ndps_xdr_array function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17922 - http://www.vupen.com/english/advisories/2006/1740 - http://www.hustlelabs.co
- http://www.securityfocus.com/bid/17922 - http://www.vupen.com/english/advisories/2006/1740 - http://www.hustlelabs.com/novell_ndps_advisory.pdf - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046048.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26314 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973700.htm - http://securitytracker.com/id?1016068 - http://www.securityfocus.com/archive/1/434017/100/0/threaded - http://www.osvdb.org/25433
CVE ID: CVE-2006-2328 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lib/adodb/server.php in AngelineCMS 0.6.5 and earlier might allow remote attackers to execute arbitrary SQL commands via the query string. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26382 - http://securityreason.com/securityalert/883 - http://www.subjectzero.net/research/ang_CMS.htm - http://www.securityfocus.com/archive/1/433241/100/0/threaded
CVE ID: CVE-2006-2329 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: AngelineCMS 0.6.5 and earlier allow remote attackers to obtain sensitive information via a direct request for (1) adodb-access.inc.php, (2) adodb-ado.inc.php, (3) adodb-ado_access.inc, (4) adodb-ado_mssql.inc.php, (5) adodb-borland_ibase, (6) adodb-csv.inc.php, (7) adodb-db2.inc.php, (8) adodb-fbsql.inc.php, (9) adodb-firebird.inc.php, (10) adodb-ibase.inc.php, (11) adodb-informix.inc.php, (12) adodb-informix72.inc, (13) adodb-mssql.inc.php, (14) adodb-mssqlpo.inc.php, (15) adodb-mysql.inc.php, (16) adodb-mysqlt.inc.php, (17)
72.inc, (13) adodb-mssql.inc.php, (14) adodb-mssqlpo.inc.php, (15) adodb-mysql.inc.php, (16) adodb-mysqlt.inc.php, (17) adodb-oci8.inc.php, (18) adodb-oci805.inc.php, (19) adodb-oci8po.inc.php, and (20) adodb-odbc.inc.php, which reveal the path in various error messages; and via a direct request for the (21) lib/system/ directory and (22) possibly other lib/ directories, which provide a directory listing and "architecture view." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26383 - http://securityreason.com/securityalert/883 - http://www.subjectzero.net/research/ang_CMS.htm - http://www.securityfocus.com/archive/1/433241
.com/securityalert/883 - http://www.subjectzero.net/research/ang_CMS.htm - http://www.securityfocus.com/archive/1/433241/100/0/threaded
CVE ID: CVE-2006-2330 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Fusion 6.00.306 and earlier, running under Apache HTTP Server 1.3.27 and PHP 4.3.3, allows remote authenticated users to upload files of arbitrary types using a filename that contains two or more extensions that ends in an assumed-valid extension such as .gif, which bypasses the validation, as demonstrated by uploading then executing an avatar file that ends in ".php.gif" and contains PHP code in EXIF metadata. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/873 - ht
adata. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/873 - http://www.php-fusion.co.uk/news.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/26388 - http://www.osvdb.org/25537 - http://www.securityfocus.com/archive/1/433277/100/0/threaded - http://secunia.com/advisories/19992 - http://www.securityfocus.com/bid/17898 - http://www.vupen.com/english/advisories/2006/1735
CVE ID: CVE-2006-2331 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP-Fusion 6.00.306 allow remote attackers to include and execute arbitrary local files via (1) a .. (dot dot) in the settings[locale] parameter in infusions/last_seen_users_panel/last_seen_users_panel.php, and (2) a .. (dot dot) in the localeset parameter in setup.php. NOTE: the vendor states that this issue might exist due to problems in third party local files. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/873 - http:/
s. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/873 - http://www.php-fusion.co.uk/news.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/26389 - http://www.osvdb.org/25539 - http://www.securityfocus.com/archive/1/433277/100/0/threaded - http://securityreason.com/securityalert/194 - http://secunia.com/advisories/19992 - http://www.securityfocus.com/bid/17898 - http://www.osvdb.org/25538 - http://www.vupen.com/english/advisories/2006/1735 - http://www.php-fusion.co.uk/news.php?readmore=321
CVE ID: CVE-2006-2332 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.3 allows remote attackers to cause a denial of service via a web page with a large number of IMG elements in which the SRC attribute is a mailto URI. NOTE: another researcher found that the web page caused a temporary browser slowdown instead of a crash. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433568/100/0/threaded - http://securityreason.com/securityalert/876 - http://www.securityfocus.com/archive/1/433984/30/5010/threaded - http://www.secur
securityreason.com/securityalert/876 - http://www.securityfocus.com/archive/1/433984/30/5010/threaded - http://www.securityview.org/confirmed-bug-in-firefox-1503.html - http://www.securityfocus.com/archive/1/433534/100/0/threaded
CVE ID: CVE-2006-2333 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MyBB (aka MyBulletinBoard) 1.1.1 allow remote attackers to execute arbitrary SQL commands via the e-mail address when registering for a forum that requires e-mail verification, which is not properly handled in (1) usercp.php and (2) member.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26545 - http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-a
ge.xforce.ibmcloud.com/vulnerabilities/26545 - http://myimei.com/security/2006-05-07/mybb111email-verification-in-user-activation-sql-injection-attack.html - http://www.securityfocus.com/archive/1/433231/100/0/threaded
CVE ID: CVE-2006-2334 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RtlDosPathNameToNtPathName_U API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or prevent access to other similarly named files in the same directory, which prevents those files from being detected or disinfected by certain anti-virus and anti-spyware software. Additional Analyst Notes: - CVE Program Container: Ref
d or disinfected by certain anti-virus and anti-spyware software. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26487 - http://www.securityfocus.com/archive/1/433583/100/0/threaded - http://www.osvdb.org/25761 - http://www.48bits.com/advisories/rtldospath.pdf
CVE ID: CVE-2006-2335 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed. NOTE: the vendor was unable to reproduce this issue in 3.5.x. NOTE: this issue might be due to direct static code injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433
e injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433580/100/0/threaded - http://www.securityfocus.com/archive/1/433678/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26440 - http://b3hr0uz.persiangig.com/VbStyleVuln.txt