Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-7104 State: PUBLISHED Published: 2007-03-03T21:00:00 Last Updated: 2024-08-07T20:50:06.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created on May 2006, a component for Mambo 4.5.4, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29598 - http://www.securityfocus.com/bid/20549 - http://securityreason.com/securityalert/2363 - http://www.securityfocus.com/archive/1/448786
CVE ID: CVE-2006-7105 State: PUBLISHED Published: 2007-03-03T21:00:00 Last Updated: 2025-01-17T14:15:54.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter. NOTE: in the original disclosure, filename is used in a function definition, so this report is probably incorrect Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29603 - http://www.security-express.com/archives/fulldisclosure/2006-10/0292.html - http://www.security
/vulnerabilities/29603 - http://www.security-express.com/archives/fulldisclosure/2006-10/0292.html - http://www.securityfocus.com/bid/20557 - http://www.security-express.com/archives/fulldisclosure/2006-10/0299.html
CVE ID: CVE-2006-7106 State: PUBLISHED Published: 2007-03-03T21:00:00 Last Updated: 2024-08-07T20:50:05.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rel_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29701 - http://www.securityfocus.com/bid/20638 - http://www.securityfocus.com/bid/20644
CVE ID: CVE-2006-7107 State: PUBLISHED Published: 2007-03-03T21:00:00 Last Updated: 2024-08-07T20:50:06.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20785 - https://www.exploit-db.com/exploits/2665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29879
CVE ID: CVE-2006-7108 State: PUBLISHED Published: 2007-03-04T22:00:00 Last Updated: 2024-08-07T20:50:06.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: login in util-linux-2.12a skips pam_acct_mgmt and chauth_tok when authentication is skipped, such as when a Kerberos krlogin session has been established, which might allow users to bypass intended access policies that would be enforced by pam_acct_mgmt and chauth_tok. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25098 - https://issues.rpath.com/browse/RPL-1359 - http://secunia.com/advisories/25935 - http://www.securityfocus.com/bid/24321 - http://www.redhat.com/support/errata/
9 - http://secunia.com/advisories/25935 - http://www.securityfocus.com/bid/24321 - http://www.redhat.com/support/errata/RHSA-2007-0235.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:111 - http://secunia.com/advisories/25692 - http://secunia.com/advisories/25530 - http://support.avaya.com/elmodocs2/security/ASA-2007-252.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9689 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=177331
CVE ID: CVE-2006-7109 State: PUBLISHED Published: 2007-03-05T20:00:00 Last Updated: 2024-08-07T20:50:06.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in IMCE before 1.6, a Drupal module, allows remote authenticated users to upload arbitrary PHP code via a filename with a double extension such as .php.gif. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/87101 - http://www.vupen.com/english/advisories/2006/3892 - http://secunia.com/advisories/22261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29325
CVE ID: CVE-2006-7110 State: PUBLISHED Published: 2007-03-05T20:00:00 Last Updated: 2024-08-07T20:50:06.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the delete function in IMCE before 1.6, a Drupal module, allows remote authenticated users to delete arbitrary files via ".." sequences. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29324 - http://www.securityfocus.com/bid/20312 - http://drupal.org/node/87101 - http://www.vupen.com/english/advisories/2006/3892 - http://secunia.com/advisories/22261
CVE ID: CVE-2006-7111 State: PUBLISHED Published: 2007-03-05T20:00:00 Last Updated: 2024-08-07T20:50:06.044Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Futomi's CGI Cafe KMail CGI 1.0.3 and earlier allows remote attackers to bypass authentication and obtain unauthorized email access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20506 - http://secunia.com/advisories/22351 - http://futomi.com/library/info/20061012.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29513
CVE ID: CVE-2006-7112 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:05.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary files via the PNSVlang cookie, as demonstrated by uploading a GIF image using AddDownload or injecting PHP code into a log file, then accessing it. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30026 - https://www.exploit-db.com/exploits/2712 - http://www.securityfocus.com/bid/20912
CVE ID: CVE-2006-7113 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30579 - http://secunia.com/advisories/23103 - http://www.vupen.com/english/advisories/2006/4770
CVE ID: CVE-2006-7114 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes via a direct request. NOTE: this might be the same issue as CVE-2006-6888. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30578 - http://secunia.com/advisories/23103 - http://www.vupen.com/english/advisories/2006/4770
CVE ID: CVE-2006-7115 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include.php when the path parameter is set to faq/faq.php, and other unspecified vectors involving guestbook/print.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451304/100/0/threaded - http://www.securityfocus.com/bid/21002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30209 - http://www.osvdb.org/31265 - http://www.bb-pcsecur
/21002 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30209 - http://www.osvdb.org/31265 - http://www.bb-pcsecurity.de/websecurity/532/org/PHPKit_1.6.1_RC2_%28faq-faq.php%29_Remote_SQL_Injection_Exploit.htm - http://secunia.com/advisories/17479 - http://securityreason.com/securityalert/2357
CVE ID: CVE-2006-7116 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the member_id parameter ($id variable) to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30571 - https://www.exploit-db.com/exploits/2863 - http://www.securityfocus.com/bid/21352
CVE ID: CVE-2006-7117 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local files via ".." sequences in the theme cookie to index.php, which is not properly handled by includes/head.php; and (2) read arbitrary files via ".." sequences in the file parameter in an add_dl action to adm_index.php, as demonstrated by reading connect.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30570 - https://www
t Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30570 - https://www.exploit-db.com/exploits/2863 - http://www.securityfocus.com/bid/21352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30572
CVE ID: CVE-2006-7118 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30260 - http://www.securityfocus.com/bid/21064 - http://securityreason.com/securityalert/2358 - http://www.securityfocus.com/archive/1/451535/100/0/threaded
CVE ID: CVE-2006-7119 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in kernel/system/startup.php in J. He PHPGiggle 12.08 and earlier, as distributed on comscripts.com, allows remote attackers to execute arbitrary PHP code via a URL in the CFG_PHPGIGGLE_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2732 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30072
CVE ID: CVE-2006-7120 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. NOTE: this issue might be in phpHtmlLib. NOTE: CVE disputes this issue for proper installations of maintain, since $phphtmllib is set in includes.inc before being used in example6.php Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20560 - https://exchange.xforce.ibmcloud.com
es: - CVE Program Container: References: - http://www.securityfocus.com/bid/20560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29596 - http://securityreason.com/securityalert/2359 - http://www.securityfocus.com/archive/1/448780/100/0/threaded
CVE ID: CVE-2006-7121 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or a long (2) username or (3) password during Basic Authentication. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29671 - http://www.securityfocus.com/bid/20346 - http://secunia.com/advisories/22267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29349 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0089.html
CVE ID: CVE-2006-7122 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to inject arbitrary web script and HTML via the ip parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29266 - http://www.securityfocus.com/bid/20267 - http://securityreason.com/securityalert/2360 - http://www.securityfocus.com/archive/1/447356/100/0/threaded -
d/20267 - http://securityreason.com/securityalert/2360 - http://www.securityfocus.com/archive/1/447356/100/0/threaded - http://secunia.com/secunia_research/2006-63/advisory/
CVE ID: CVE-2006-7123 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.080Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters when importing the (a) ip-to-country.csv file; and the (2) HTTP Referer, (3) HTTP User Agent, and (4) HTTP Accept Language headers to (b) bsqtemplateinc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20267 - https://exchange.xforce.ibmcloud.com/vulnerabilities
m Container: References: - http://www.securityfocus.com/bid/20267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29268 - http://securityreason.com/securityalert/2360 - http://www.securityfocus.com/archive/1/447356/100/0/threaded - http://secunia.com/secunia_research/2006-63/advisory/
CVE ID: CVE-2006-7124 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29287 - http://www.securityfocus.com/bid/20267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29269 - http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats - http://securityreason.c
rabilities/29269 - http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats - http://securityreason.com/securityalert/2360 - http://www.securityfocus.com/archive/1/447356/100/0/threaded - http://secunia.com/secunia_research/2006-63/advisory/
CVE ID: CVE-2006-7125 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer header, which is not properly handled when the administrator views site statistics. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4090 - http://www.securityfocus.com/bid/20614 - http://www.securityfocus.com/archive/1/449125/100/0/threaded - http://secunia.com/secunia_research/2006-65/advisory/ - https:
//www.securityfocus.com/archive/1/449125/100/0/threaded - http://secunia.com/secunia_research/2006-65/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29661
CVE ID: CVE-2006-7126 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query string, possibly PHP_SELF. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4090 - http://www.securityfocus.com/bid/20614 - http://www.securityfocus.com/archive/1/449125/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29662 - http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats - http:
ibmcloud.com/vulnerabilities/29662 - http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats - http://secunia.com/secunia_research/2006-65/advisory/
CVE ID: CVE-2006-7127 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the main_dir parameter to (1) forum/main.php and (2) forum/headlines.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20329 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29348 - https://www.exploit-db.com/exploits/5317 - http://secunia.com/advisories/22143 - https://www.exploit-db.com/exploits/2474/ - http://www.rahim.webd.
exploits/5317 - http://secunia.com/advisories/22143 - https://www.exploit-db.com/exploits/2474/ - http://www.rahim.webd.pl/exploity/Exploits/92.txt
CVE ID: CVE-2006-7128 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the website parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22143 - http://www.rahim.webd.pl/exploity/Exploits/92.txt - http://www.securityfocus.com/bid/20310 - https://www.exploit-db.com/exploits/2469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29322
CVE ID: CVE-2006-7129 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the ZwDeleteFile API function to delete the critical filelock.txt file, which stores information about protected files. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0298.html - http://securityreason.com/securityalert/2361 - http://www.securityfocus.com/bid/20546 - http://www.osvdb.org/30901 - http://www.securityfo
son.com/securityalert/2361 - http://www.securityfocus.com/bid/20546 - http://www.osvdb.org/30901 - http://www.securityfocus.com/archive/1/448763/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29575 - http://www.matousec.com/info/advisories/BlackICE-Filelock-protection-bypass.php
CVE ID: CVE-2006-7130 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter, a different vector than CVE-2006-6770. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29436 - http://securityreason.com/securityalert/2351 - http://www.securityfocus.com/archive/1/448290/100/0/threaded - http://www.sec
://securityreason.com/securityalert/2351 - http://www.securityfocus.com/archive/1/448290/100/0/threaded - http://www.securityfocus.com/bid/20446
CVE ID: CVE-2006-7131 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2352 - https://www.exploit-db.com/exploits/2558 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29556 - http://www.securityfocus.com/archive/1/448703/100/0/threaded
CVE ID: CVE-2006-7132 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pmdlang parameter to viewticket.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29872 - https://www.exploit-db.com/exploits/2664
CVE ID: CVE-2006-7133 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (1) ".." sequences or (2) absolute pathnames in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.craigheffner.com/security/exploits/upload_tool_php.txt - http://secunia.com/advisories/22973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30322 - http://www.securityfocus.com/bid/21150 - http://www.vupen.com/english/advisories/2006/45
oud.com/vulnerabilities/30322 - http://www.securityfocus.com/bid/21150 - http://www.vupen.com/english/advisories/2006/4575
CVE ID: CVE-2006-7134 State: PUBLISHED Published: 2007-03-06T01:00:00 Last Updated: 2024-08-07T20:50:06.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in main_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload and execute arbitrary files with executable extensions such as .php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22973 - http://www.securityfocus.com/bid/21150 - http://www.vupen.com/english/advisories/2006/4575 - https://exchange.xforce.ibmcloud.co
ww.securityfocus.com/bid/21150 - http://www.vupen.com/english/advisories/2006/4575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30365