Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0159 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to execute arbitrary SQL commands via the email parameter. NOTE: the provenance of this information is unknown, although it may be based on post-disclosure analysis of CVE-2006-0110; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22264 - http://secunia.com/advisories/18327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24017 - http://
b.org/22264 - http://secunia.com/advisories/18327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24017 - http://www.vupen.com/english/advisories/2006/0073
CVE ID: CVE-2006-0160 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL commands via the (1) parent, (2) root, and (3) topic_id parameters to post.php3. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24046 - http://www.vupen.com/english/advisories/2006/0122 - http://evuln.com/vulns/21/summary.html - http://securityreason.com/securityalert/326 - http://www.securityfocus.com/bid/16176 - http://www.osvdb.org/22297 - ht
- http://securityreason.com/securityalert/326 - http://www.securityfocus.com/bid/16176 - http://www.osvdb.org/22297 - http://secunia.com/advisories/18383 - http://marc.info/?l=bugtraq&m=113683807903915&w=2
CVE ID: CVE-2006-0161 State: PUBLISHED Published: 2006-01-10T19:00:00 Last Updated: 2024-08-07T16:25:33.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in uucp in Sun Solaris 8 and 9 has unknown impact and attack vectors. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2004-0780. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1534 - http://www.vupen.com/english/advisories/2006/0113 - http://securitytracker.com/id?1015455 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1 - http://s
3 - http://securitytracker.com/id?1015455 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101933-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm - http://secunia.com/advisories/18371 - http://secunia.com/advisories/19087
CVE ID: CVE-2006-0162 State: PUBLISHED Published: 2006-01-10T19:00:00 Last Updated: 2024-08-07T16:25:34.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in libclamav/upx.c in Clam Antivirus (ClamAV) before 0.88 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted UPX files. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/342 - http://www.gentoo.org/security/en/glsa/glsa-200601-07.xml - http://secunia.com/advisories/18478 - http://secunia.com/advisories/18379 - http://www.vupen.com/english/advisories/2006/0116 - http://www.securityfocus.com
- http://secunia.com/advisories/18379 - http://www.vupen.com/english/advisories/2006/0116 - http://www.securityfocus.com/bid/16191 - http://secunia.com/advisories/18453 - http://www.trustix.org/errata/2006/0002/ - http://securitytracker.com/id?1015457 - http://secunia.com/advisories/18463 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24047 - http://www.osvdb.org/22318 - http://www.debian.org/security/2006/dsa-947 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041325.html - http://www.clamav.net/doc/0.88/ChangeLog - http://www.zerodayinitiative.com/advisories/ZDI-06-001.html - http://secunia.com/advisories/18548 - http://www.mandriva.com/security/advisories?name=MD
m/advisories/ZDI-06-001.html - http://secunia.com/advisories/18548 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:016 - http://www.kb.cert.org/vuls/id/385908
CVE ID: CVE-2006-0163 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL commands via the query parameter, which is used by the search field. NOTE: This is a different vulnerability than CVE-2005-3792. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22316 - http://lostmon.blogspot.com/2006/01/phpnuke-ev-77-search-module-query.html - http://www.vupen.com/english/advisories/2006/0120 - http://www.securityfocus.com/bid/
e-ev-77-search-module-query.html - http://www.vupen.com/english/advisories/2006/0120 - http://www.securityfocus.com/bid/16186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/44978 - http://secunia.com/advisories/18394
CVE ID: CVE-2006-0164 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=384232 - http://www.osvdb.org/22302 - http://www.vupen.com/english/advisories/2006/0123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24062 - http://www.securityfocus.com/bid/17469 - http://secunia.com/advisorie
change.xforce.ibmcloud.com/vulnerabilities/24062 - http://www.securityfocus.com/bid/17469 - http://secunia.com/advisories/18346
CVE ID: CVE-2006-0165 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DataForm Entries functionality in Plain Black WebGUI before 6.8.4 (gamma) allows remote attackers to inject arbitrary Javascript via the (1) url and (2) name field of the default email form. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18372 - http://sourceforge.net/tracker/index.php?func=detail&aid=1395371&group_id=51417&atid=463213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24053 - http://sourceforge.net/project/show
_id=51417&atid=463213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24053 - http://sourceforge.net/project/shownotes.php?release_id=384153&group_id=51417 - http://www.vupen.com/english/advisories/2006/0126
CVE ID: CVE-2006-0166 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other products. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0143 - http://securityresponse.symantec.com/avcenter/security/Content/2006.01.10.html - https://exchange.xforce.ib
/2006/0143 - http://securityresponse.symantec.com/avcenter/security/Content/2006.01.10.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24061 - http://secunia.com/advisories/18402 - http://securitytracker.com/id?1015462
CVE ID: CVE-2006-0167 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/22/summary.html - http://www.securityfocus.com/archive/1/421863/100/0/threaded - http://www.osvdb.org/22325 - http://www.osvdb.org/22324 - http://secunia.com/advisories/18399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24075 - http://www.
g/22324 - http://secunia.com/advisories/18399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24075 - http://www.securityfocus.com/bid/16210 - http://www.vupen.com/english/advisories/2006/0147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24066
CVE ID: CVE-2006-0168 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyPhPim 01.05 allows remote attackers to inject arbitrary web script or HTML via the description field on the "Create New todo" page. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/22/summary.html - http://www.securityfocus.com/archive/1/421863/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24071 - http://secunia.com/advisories/18399 - http://www.securityfocus.com/bid/16210 - http://www.osvdb.org/22326 - http://www.vupen
://secunia.com/advisories/18399 - http://www.securityfocus.com/bid/16210 - http://www.osvdb.org/22326 - http://www.vupen.com/english/advisories/2006/0147
CVE ID: CVE-2006-0169 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/23/summary.html - http://www.securityfocus.com/bid/16208 - http://secunia.com/advisories/18399 - http://www.securityfocus.com/archive/1/421626/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24070 - http://
securityfocus.com/archive/1/421626/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24070 - http://www.vupen.com/english/advisories/2006/0147
CVE ID: CVE-2006-0170 State: REJECTED Published: 2006-01-11T21:00:00Z Last Updated: 2024-09-17T03:54:17.886Z Description: No description available.
CVE ID: CVE-2006-0171 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: it is not clear, but OrjinWeb might be an application service, in which case it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421312/100/0/threaded - http://www.osvdb.org/22387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24097 - http://www.securityfocus.com/bid/16199
CVE ID: CVE-2006-0172 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0145 - http://www.securityfocus.com/bid/16195 - http://secunia.com/advisories/18411 - https://exchange.xforce.ibmcloud.com
45 - http://www.securityfocus.com/bid/16195 - http://secunia.com/advisories/18411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24067 - http://www.securenetwork.it/advisories/sn-2006-01.html - http://www.securityfocus.com/archive/1/421392/100/0/threaded
CVE ID: CVE-2006-0173 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0145 - http://www.securityfocus.com/bid/16195 - http://secunia.com/advisories/18411 - http://www.securenetwork.it/advisories/sn-2006-01.html - http://www
om/bid/16195 - http://secunia.com/advisories/18411 - http://www.securenetwork.it/advisories/sn-2006-01.html - http://www.securityfocus.com/archive/1/421392/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24068
CVE ID: CVE-2006-0174 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0145 - http://www.securityfocus.com/bid/16195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24069 - http://securi
45 - http://www.securityfocus.com/bid/16195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24069 - http://securityreason.com/securityalert/328 - http://secunia.com/advisories/18411 - http://www.securenetwork.it/advisories/sn-2006-01.html - http://www.securityfocus.com/archive/1/421392/100/0/threaded
CVE ID: CVE-2006-0175 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421615/100/0/threaded - http://www.osvdb.org/22398 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0299.html - http://www.securityfocus.com/bid/16196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24048
CVE ID: CVE-2006-0176 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -rec argument on many operating systems, and via a long (5) -jdev argument on Ubuntu Linux. Additional Analyst Notes: - CVE Program Container: References: - http://x.mame.net/changes-unix.html - http://www.securityfocus.com/archive/1/421849/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24102 - http://archives
focus.com/archive/1/421849/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24102 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0353.html - http://www.securityfocus.com/bid/16203
CVE ID: CVE-2006-0177 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/script with a long command line argument or (2) setting the -c option of /etc/nu to the name of a file containing a long line. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24276 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html
CVE ID: CVE-2006-0178 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:33.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in /bin/ftp in UNICOS 9.0.2.2 allows local users to have an unknown impact via format string specifiers in the quote command. NOTE: because the program is not setuid and not normally called from remote programs, there may not be a typical attack vector for the issue that crosses privilege boundaries. Therefore this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
Container: References: - http://www.securityfocus.com/bid/16205 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24277 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0343.html
CVE ID: CVE-2006-0179 State: PUBLISHED Published: 2006-01-11T21:00:00 Last Updated: 2024-08-07T16:25:34.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN packets (syn flood) to arbitrary ports, as demonstrated to port 80. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24117 - http://www.osvdb.org/22469 - http://www.vupen.com/english/advisories/2006/0202 - http://www.cisco.com/warp/public/707/cisco-response-20060113-ip-phones.shtml - http://securitytracker.com/id?1015488 - http://secunia.com/adv
warp/public/707/cisco-response-20060113-ip-phones.shtml - http://securitytracker.com/id?1015488 - http://secunia.com/advisories/18479 - http://downloads.securityfocus.com/vulnerabilities/exploits/cisco_ip7940_dos.pl - https://www.exploit-db.com/exploits/1411 - http://www.securityfocus.com/bid/16200
CVE ID: CVE-2006-0180 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:34.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the Title field on the "Adding New Event" page, and possibly other vectors, involving iframe tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24077 - http://www.securityfocus.com/archive/1/422163/100/0/threaded - http://www.securityfocus.com/bid/16206 - http://www.osvdb
http://www.securityfocus.com/archive/1/422163/100/0/threaded - http://www.securityfocus.com/bid/16206 - http://www.osvdb.org/22322 - http://secunia.com/advisories/18417 - http://evuln.com/vulns/24/summary.html
CVE ID: CVE-2006-0181 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:33.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Security Monitoring, Analysis and Response System (CS-MARS) before 4.1.3 has an undocumented administrative account with a default password, which allows local users to gain privileges via the expert command. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/335 - http://www.securityfocus.com/bid/16211 - http://securitytracker.com/id?1015471 - http://www.vupen.com/english/advisories/2006/0154 - http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml - https
//www.vupen.com/english/advisories/2006/0154 - http://www.cisco.com/warp/public/707/cisco-sa-20060111-mars.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24065 - http://secunia.com/advisories/18424 - http://seclists.org/bugtraq/2006/Jan/202 - http://www.osvdb.org/22346
CVE ID: CVE-2006-0182 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:33.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.php in ACal Calendar Project 2.2.5 allows remote attackers to bypass authentication by setting the ACalAuthenticate cookie variable to "inside". Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/343 - http://evuln.com/vulns/25/summary.html - http://www.vupen.com/english/advisories/2006/0152 - http://secunia.com/advisories/18432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24104 - http://www.securityfocus.com/archive/1/421744/100/0/threaded - http://www.osvd
orce.ibmcloud.com/vulnerabilities/24104 - http://www.securityfocus.com/archive/1/421744/100/0/threaded - http://www.osvdb.org/22344
CVE ID: CVE-2006-0183 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:34.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in edit.php in ACal Calendar Project 2.2.5 allows authenticated users to execute arbitrary PHP code via (1) the edit=header value, which modifies header.php, or (2) the edit=footer value, which modifies footer.php. NOTE: this issue might be resultant from the poor authentication as identified by CVE-2006-0182. Since the design of the product allows the administrator to edit the code, perhaps this issue should not be included in CVE, except as a consequence of CVE-2006-0182. Additional
to edit the code, perhaps this issue should not be included in CVE, except as a consequence of CVE-2006-0182. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22345 - http://securityreason.com/securityalert/343 - http://evuln.com/vulns/25/summary.html - http://www.vupen.com/english/advisories/2006/0152 - http://secunia.com/advisories/18432 - http://www.securityfocus.com/archive/1/421744/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24107
CVE ID: CVE-2006-0184 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:34.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AspTopSites allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to goto.asp or (2) password parameter to includeloginuser.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploitlabs.com/files/advisories/EXPL-A-2006-001-asptopsites.txt - http://www.vupen.com/english/advisories/2006/0146 - http://www.osvdb.org/22330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24072 - http://secunia.com/advisories/18408 - http://arc
rg/22330 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24072 - http://secunia.com/advisories/18408 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0351.html
CVE ID: CVE-2006-0185 State: PUBLISHED Published: 2006-01-12T11:00:00 Last Updated: 2024-08-07T16:25:34.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0125 - http://secunia.com/advisories/18374 - http://www.securityfocus.com/archive/1/421322 - http://www.securityfocus.com/bid/16192
CVE ID: CVE-2006-0186 State: REJECTED Published: 2006-01-12T11:00:00 Last Updated: 2006-01-17T10:00:00 Description: No description available.