Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6135 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:33.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) have unknown impact and attack vectors, related to (1) a "Potential security vulnerability" (PK29725) and (2) "Potential security exposure" (PK30831). Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK30831&apar=only - http://secunia.com/advisories/23028 - http://www-1.ibm.com/support/docview.wss?rs=1
earch.wss?rs=0&q=PK30831&apar=only - http://secunia.com/advisories/23028 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013830 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK29725&apar=only - http://www.securityfocus.com/bid/21204 - http://www.vupen.com/english/advisories/2006/4639
CVE ID: CVE-2006-6136 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 6.1.0 before Fix Pack 3 (6.1.0.3) does not perform EAL4 authentication checks at the proper time during "registering of response operation," which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007951 - http://secunia.com/advisories/23028 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24013830 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK29847&apar=only - http://www.securit
cview.wss?rs=180&uid=swg24013830 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK29847&apar=only - http://www.securityfocus.com/bid/21204 - http://www.vupen.com/english/advisories/2006/4639
CVE ID: CVE-2006-6137 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:35.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Sisfo Kampus 0.8 allow remote attackers to execute arbitrary PHP code via a URL in the (1) exec parameter to index.php or (2) print parameter to print.php, which is also accessible via the print command to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21294 - https://www.exploit-db.com/exploits/2847
CVE ID: CVE-2006-6138 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:34.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in Sisfo Kampus 0.8 allows remote attackers to list arbitrary directories via an absolute pathname in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21294 - https://www.exploit-db.com/exploits/2847
CVE ID: CVE-2006-6139 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:35.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in downloadexcel.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the fn parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23109 - http://www.vupen.com/english/advisories/2006/4723
CVE ID: CVE-2006-6140 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:33.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to execute arbitrary PHP code via a URL in the slnt parameter to (1) index.php and (2) print.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23109 - http://www.vupen.com/english/advisories/2006/4723
CVE ID: CVE-2006-6141 State: PUBLISHED Published: 2006-11-28T02:00:00 Last Updated: 2024-08-07T20:19:35.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tftpd32 3.01 allows remote attackers to cause a denial of service via a long GET or PUT request, which is not properly handled when the request is displayed in the title of the gauge window. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1923 - http://www.securityfocus.com/bid/21148 - http://secunia.com/advisories/22968 - http://www.kb.cert.org/vuls/id/632633 - http://www.osvdb.org/30502 - http://www.securityfocus.com/archive/1/451951/100/200/threaded
kb.cert.org/vuls/id/632633 - http://www.osvdb.org/30502 - http://www.securityfocus.com/archive/1/451951/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30439 - http://www.vupen.com/english/advisories/2006/4606
CVE ID: CVE-2006-6142 State: PUBLISHED Published: 2006-12-05T11:00:00 Last Updated: 2024-08-07T20:19:34.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.0 through 1.4.9 allow remote attackers to inject arbitrary web script or HTML via the (1) mailto parameter in (a) webmail.php, the (2) session and (3) delete_draft parameters in (b) compose.php, and (4) unspecified vectors involving "a shortcoming in the magicHTML filter." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:226 - htt
ttp://www.vupen.com/english/advisories/2007/2732 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:226 - http://secunia.com/advisories/23195 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://www.redhat.com/support/errata/RHSA-2007-0022.html - http://fedoranews.org/cms/node/2438 - http://secunia.com/advisories/23409 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9988 - http://secunia.com/advisories/23504 - http://secunia.com/advisories/24284 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30695 - http://secunia.com/advisories/23322 - http
bilities/30693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30695 - http://secunia.com/advisories/23322 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30694 - http://www.debian.org/security/2006/dsa-1241 - http://fedoranews.org/cms/node/2439 - http://www.securityfocus.com/bid/21414 - http://docs.info.apple.com/article.html?artnum=306172 - http://sourceforge.net/project/shownotes.php?release_id=468482 - http://secunia.com/advisories/24004 - http://www.securityfocus.com/bid/25159 - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://squirrelmail.org/security/issue/2006-12-02 - http:
s.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://squirrelmail.org/security/issue/2006-12-02 - http://www.novell.com/linux/security/advisories/2006_29_sr.html - https://issues.rpath.com/browse/RPL-849 - http://www.vupen.com/english/advisories/2006/4828 - http://secunia.com/advisories/23811 - http://securitytracker.com/id?1017327 - http://secunia.com/advisories/26235
CVE ID: CVE-2006-6143 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T20:19:34.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017493 - http://fedoranews.org/cms/node/2376 - http://osvdb.org/31281 - http://secuni
: - http://securitytracker.com/id?1017493 - http://fedoranews.org/cms/node/2376 - http://osvdb.org/31281 - http://secunia.com/advisories/24966 - http://www.kb.cert.org/vuls/id/481564 - http://www.ubuntu.com/usn/usn-408-1 - http://www.us-cert.gov/cas/techalerts/TA07-009B.html - http://secunia.com/advisories/23696 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html - http://docs.info.apple.com/article.html?artnum=305391 - http://secunia.com/advisories/23706 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:008 - http://secunia.com/advisories/23903 - http://www.securityfocus.com/bid/21970 - http://secunia.com/advisories/23667 - http://security.gentoo.org/glsa/g
23903 - http://www.securityfocus.com/bid/21970 - http://secunia.com/advisories/23667 - http://security.gentoo.org/glsa/glsa-200701-21.xml - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-002-rpc.txt - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html - http://fedoranews.org/cms/node/2375 - http://www.us-cert.gov/cas/techalerts/TA07-109A.html - https://issues.rpath.com/browse/RPL-925 - http://secunia.com/advisories/23707 - http://www.vupen.com/english/advisories/2007/0111 - http://www.securityfocus.com/archive/1/456406/100/0/threaded - http://secunia.com/advisories/23772 - http://secunia.com/advisories/23701 - http://lists.apple.com/archives/Security-announce/200
cunia.com/advisories/23772 - http://secunia.com/advisories/23701 - http://lists.apple.com/archives/Security-announce/2007/Apr/msg00001.html - http://www.vupen.com/english/advisories/2007/1470 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31422
CVE ID: CVE-2006-6144 State: PUBLISHED Published: 2007-01-10T00:00:00 Last Updated: 2024-08-07T20:19:33.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other products that use this library, allows remote attackers to cause a denial of service (crash) via unspecified vectors that cause mechglue to free uninitialized pointers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31417 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102772-1 - http://sunsol
e.ibmcloud.com/vulnerabilities/31417 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102772-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-201294-1 - http://www.us-cert.gov/cas/techalerts/TA07-009B.html - http://secunia.com/advisories/23690 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0004.html - http://securitytracker.com/id?1017494 - http://secunia.com/advisories/23706 - http://www.securityfocus.com/archive/1/456409/100/0/threaded - http://secunia.com/advisories/23903 - http://security.gentoo.org/glsa/glsa-200701-21.xml - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html - http://fedoranews.org/cms/node/2375 - http://web.mit.edu
/www.openpkg.com/security/advisories/OpenPKG-SA-2007.006.html - http://fedoranews.org/cms/node/2375 - http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2006-003-mechglue.txt - https://issues.rpath.com/browse/RPL-925 - http://www.vupen.com/english/advisories/2007/0112 - http://osvdb.org/31280 - http://secunia.com/advisories/35151 - http://www.securityfocus.com/bid/21975 - http://www.vupen.com/english/advisories/2007/0111 - http://www.kb.cert.org/vuls/id/831452 - http://secunia.com/advisories/23701
CVE ID: CVE-2006-6145 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRYPTOCard CRYPTO-Server before 6.4.56 stores LDAP credentials in plaintext in UninstallerData\installvariables.properties, which has insecure permissions and allows local users to obtain the credentials. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21305 - http://www.vupen.com/english/advisories/2006/4710 - http://secunia.com/advisories/22138 - https://exchange
m/bid/21305 - http://www.vupen.com/english/advisories/2006/4710 - http://secunia.com/advisories/22138 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30557
CVE ID: CVE-2006-6146 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the HPDF_Page_Circle function in hpdf_page_operator.c in Takeshi Kanno Haru Free PDF Library (libharu2, aka libharu) 2.0.7 and earlier allows context-dependent attackers to cause a denial of service (application crash) via certain arguments that yield a large amount of PDF data, as demonstrated by a filled circle. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21259 - http://sourceforge.net/tracker/index.php?func=detail&aid=1597538&group_id=83044&atid=568129
ecurityfocus.com/bid/21259 - http://sourceforge.net/tracker/index.php?func=detail&aid=1597538&group_id=83044&atid=568129 - http://www.vupen.com/english/advisories/2006/4675 - http://sourceforge.net/project/shownotes.php?release_id=465886
CVE ID: CVE-2006-6147 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in JiRos Links Manager allow remote attackers to execute arbitrary SQL commands via the (1) LinkID parameter to openlink.asp or the (2) CategoryID parameter to viewlinks.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452265/100/0/threaded - http://www.frsirt.com/english/reference-2006-4664-1.php - http://securitytracker.com/id?1017280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30462 - http://www.securityfocus.com/bi
itytracker.com/id?1017280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30462 - http://www.securityfocus.com/bid/21226 - http://www.vupen.com/english/advisories/2006/4664 - http://secunia.com/advisories/23063
CVE ID: CVE-2006-6148 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in submitlink.asp in JiRos Links Manager allow remote attackers to inject arbitrary web script or HTML via the (1) lName, (2) lURL, (3) lImage, and (4) lDescription parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30465 - http://www.securityfocus.com/archive/1/452265/100/0/threaded - http://www.frsirt.com/english/reference-200
ities/30465 - http://www.securityfocus.com/archive/1/452265/100/0/threaded - http://www.frsirt.com/english/reference-2006-4664-1.php - http://securitytracker.com/id?1017280 - http://securityreason.com/securityalert/1924 - http://www.securityfocus.com/bid/21226 - http://www.vupen.com/english/advisories/2006/4664 - http://secunia.com/advisories/23063
CVE ID: CVE-2006-6149 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in JiRos FAQ Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the tID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2836 - http://secunia.com/advisories/23085 - http://www.vupen.com/english/advisories/2006/4688 - http://www.securityfocus.com/bid/21271
CVE ID: CVE-2006-6150 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in memory/OWLMemoryProperty.php in OWLLib 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the OWLLIB_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4690 - http://www.securityfocus.com/bid/21268 - http://secunia.com/advisories/23079 - https://www.exploit-db.com/exploits/2839 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30531
CVE ID: CVE-2006-6151 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:35.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in centre.php in Messagerie Locale as of 20061127 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21267 - http://secunia.com/advisories/23081 - http://www.vupen.com/english/advisories/2006/4684
CVE ID: CVE-2006-6152 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to (a) cat.asp, or the (2) keyword, (3) order, (4) sort, (5) menuSelect, or (6) state parameter to (b) search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22987 - http://s-a-p.ca/index.php?page=OurAdvisories&id=47 - http://securitytracker.com/id?1017259 - http://securityreason.com/securityalert/1926 - http://www.secur
visories&id=47 - http://securitytracker.com/id?1017259 - http://securityreason.com/securityalert/1926 - http://www.securityfocus.com/bid/21190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30444 - http://www.securityfocus.com/archive/1/452179/100/100/threaded
CVE ID: CVE-2006-6153 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vSpin.net Classified System 2004 allow remote attackers to inject arbitrary web script or HTML via (1) catname parameter to cat.asp or the (2) minprice parameter to search.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22987 - http://s-a-p.ca/index.php?page=OurAdvisories&id=47 - http://securitytracker.com/id?1017259 - http://securityreason.com/securityalert/1926 - http://www.securityfocus.com/bid/21190 - https://exchange
om/id?1017259 - http://securityreason.com/securityalert/1926 - http://www.securityfocus.com/bid/21190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30446 - http://www.securityfocus.com/archive/1/452179/100/100/threaded
CVE ID: CVE-2006-6154 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:33.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21280 - http://www.securityfocus.com/archive/1/494928/100/0/threaded - http://secunia.com/advisories/23078 - http://www.vupen.com/english/advisories/2006/4689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30527 - https://www.exp
ww.vupen.com/english/advisories/2006/4689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30527 - https://www.exploit-db.com/exploits/2838
CVE ID: CVE-2006-6155 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in addrating.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ipadd or (2) url parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30529 - http://www.vupen.com/english/advisories/2006/4689
CVE ID: CVE-2006-6156 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auth/message.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF). NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30530 - http://www.vupen.com/english/advisories/2006/4689
CVE ID: CVE-2006-6157 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in ContentNow 1.39 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter. NOTE: this issue can be leveraged for path disclosure with an invalid pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1925 - http://www.vupen.com/english/advisories/2006/4663 - http://sourceforge.net/project/shownotes.php?group_id=161604&release_id=465437 - http://securitytracker.com/id?1017265 - htt
://sourceforge.net/project/shownotes.php?group_id=161604&release_id=465437 - http://securitytracker.com/id?1017265 - https://www.exploit-db.com/exploits/2822 - http://www.securityfocus.com/bid/21237 - http://www.securityfocus.com/archive/1/452231/100/100/threaded - http://secunia.com/advisories/23005 - http://www.0xcafebabe.it/sploits/contentnow_139_sqlinj.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/30459
CVE ID: CVE-2006-6158 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T20:19:34.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (a) PMOS Help Desk 2.4, formerly (b) InverseFlow Help Desk 2.31 and also sold as (c) Ace Helpdesk 2.31, allow remote attackers to inject arbitrary web script or HTML via the (1) id or email parameter to ticketview.php, or (2) the email parameter to ticket.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23071 - http://www.vupen.com/english/advisories/2006/4672 - http://www.osvdb.org/30667 - http://www.vupen.com/english/adv
3071 - http://www.vupen.com/english/advisories/2006/4672 - http://www.osvdb.org/30667 - http://www.vupen.com/english/advisories/2006/4671 - http://www.securityfocus.com/bid/21250 - http://secunia.com/advisories/23070 - http://www.securityfocus.com/archive/1/452397/100/0/threaded - http://www.vupen.com/english/advisories/2006/4670 - http://www.osvdb.org/34034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30489 - http://secunia.com/advisories/23052 - http://www.attrition.org/pipermail/vim/2006-November/001148.html - http://securityreason.com/securityalert/1928