Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unia.com/advisories/20942 - http://secunia.com/advisories/20766 - http://security.gentoo.org/glsa/glsa-200609-08.xml - http://www.securityfocus.com/bid/18187 - http://secunia.com/advisories/20549 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26972 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html - https://usn.ubuntu.com/295-1/ - http://secunia.com/advisories/20828 - https://www.exploit-db.com/exploits/1852 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:108 - http://secunia.com/advisories/21919
CVE ID: CVE-2006-2803 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:26.046Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) id parameter to index.php, (2) search field (possibly the s parameter), or (3) comment field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435717/100/0/threaded - http://www.securityfocus.com/bid/18244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26926 - http://securityreason.com/securityalert/1024 - http://www.
https://exchange.xforce.ibmcloud.com/vulnerabilities/26926 - http://securityreason.com/securityalert/1024 - http://www.vupen.com/english/advisories/2006/2138 - http://secunia.com/advisories/20453
CVE ID: CVE-2006-2804 State: PUBLISHED Published: 2006-06-03T10:00:00 Last Updated: 2024-08-07T18:06:26.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM) 7.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26822 - http://secunia.com/advisories/20372 - http://www.securityfocus.com/bid/18221 - http://www.
d.com/vulnerabilities/26822 - http://secunia.com/advisories/20372 - http://www.securityfocus.com/bid/18221 - http://www.vupen.com/english/advisories/2006/2089
CVE ID: CVE-2006-2805 State: PUBLISHED Published: 2006-06-03T10:00:00Z Last Updated: 2024-09-16T23:51:30.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featureid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/vbulletin-3.0.10-sql-inj.txt - http://www.securityfocus.com/bid/18197
CVE ID: CVE-2006-2806 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denial of service (CPU consumption) via a long argument to the MAIL command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435278/100/0/threaded - http://advisories.echo.or.id/adv/adv31-y3dips-2006.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26786 - http://securityreason.com/securityalert/1038 - http://www.securityfocus.com/bid/18138
CVE ID: CVE-2006-2807 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified account id and possibly arbitrary values of the name, email, country, password, and passwordre parameters to profileupdate.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26811 - http://securityreason.com/securityalert/1037 - http://www.securityfocus.com/bid/18170 - http://www.securityfocus.com/archive/1/435209/100/0/threaded
CVE ID: CVE-2006-2808 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to inject arbitrary web script or HTML via a guestbook post containing a javascript URI in the SRC attribute of the BR element after an extra "iframe" tagname within that element, followed by a double ">", which might bypass cleansing operations. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1036 - http://www.securityfocus.com/archive/1/435220/100/0/thre
r: References: - http://securityreason.com/securityalert/1036 - http://www.securityfocus.com/archive/1/435220/100/0/threaded
CVE ID: CVE-2006-2809 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) count parameter, and possibly the (2) next, (3) Year_the_news, and (4) mo parameters. NOTE: the year and month vectors are already covered by CVE-2006-0333. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26787 - http://securityreason.com/securityalert/1035 - http://www.securityfocus.com/archive/1/435205/10
/vulnerabilities/26787 - http://securityreason.com/securityalert/1035 - http://www.securityfocus.com/archive/1/435205/100/0/threaded
CVE ID: CVE-2006-2810 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:27.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) toprated.php and (2) newcards.php. NOTE: the card_id vector is already covered by CVE-2006-1230. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26838 - http://securitytracker.com/id?1016183 - http://www.securityfocus.com/archive/1/435310/10
oud.com/vulnerabilities/26838 - http://securitytracker.com/id?1016183 - http://www.securityfocus.com/archive/1/435310/100/0/threaded - http://secunia.com/advisories/19216 - http://securityreason.com/securityalert/571
CVE ID: CVE-2006-2811 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitrary PHP code via a URL in the babInstallPath parameter in (1) index.php, (2) topman.php, (3) approb.php, (4) vacadmb.php, (5) vacadma.php, (6) vacadm.php, (7) statart.php, (8) search.php, (9) posts.php, (10) options.php, (11) login.php, (12) frchart.php, (13) flbchart.php, (14) fileman.php, (15) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional uns
5) faq.php, (16) event.php, (17) directory.php, (18) articles.php, (19) artedit.php, (20) calday.php, and additional unspecified PHP scripts. NOTE: the utilit.php vector is already covered by CVE-2005-1964. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26981 - http://www.osvdb.org/27228 - http://www.osvdb.org/27215 - http://www.osvdb.org/27224 - http://www.osvdb.org/27214 - http://securityreason.com/securityalert/1033 - http://www.osvdb.org/27216 - http://www.osvdb.org/27212 - http://www.osvdb.org/27222 - http://www.osvdb.org/27221 - http://www.osvdb.org/27226 - http://www.osvdb.org/27220 - h
- http://www.osvdb.org/27222 - http://www.osvdb.org/27221 - http://www.osvdb.org/27226 - http://www.osvdb.org/27220 - http://www.osvdb.org/27225 - http://www.osvdb.org/27211 - http://www.osvdb.org/27229 - http://www.securityfocus.com/bid/18232 - http://www.securityfocus.com/archive/1/456893/100/200/threaded - http://www.osvdb.org/27209 - http://www.osvdb.org/27218 - http://www.osvdb.org/27217 - http://www.osvdb.org/27227 - http://www.osvdb.org/27213 - http://www.securityfocus.com/archive/1/435590/100/0/threaded - http://www.osvdb.org/27219 - http://www.securityfocus.com/archive/1/459572/100/0/threaded
CVE ID: CVE-2006-2812 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the (1) name (aka nick), (2) email, and (3) comment boxes; and via the (4) id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1032 - http://www.securityfocus.com/archive/1/435599/100/0/threaded
CVE ID: CVE-2006-2813 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:25.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a .. (dot dot) in the query string. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27015 - http://www.securityfocus.com/bid/18223 - http://www.securityfocus.com/archive/1/435597/100/0/threaded - http://secunia.com/advisories/20415 - http://www.vupen.com/english/advisories/2006/2108
CVE ID: CVE-2006-2814 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact via a large amount of posted data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27014 - http://www.securityfocus.com/bid/18222 - http://securityreason.com/sec
hange.xforce.ibmcloud.com/vulnerabilities/27014 - http://www.securityfocus.com/bid/18222 - http://securityreason.com/securityalert/1031 - http://www.securityfocus.com/archive/1/435597/100/0/threaded - http://secunia.com/advisories/20415 - http://www.vupen.com/english/advisories/2006/2108
CVE ID: CVE-2006-2815 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_simpleboard), as used in Mambo and Joomla!, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in "post ne topic" in the Frontend, (2) the Title (aka Community-Title) field in Simpleboard Configuration in the Backend Admin Panel, and the (3) Name (aka Forum-Title) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel. NOTE: some sources
e) and (4) Name (aka Category-Title) fields in Simpleboard Administration in the Backend Admin Panel. NOTE: some sources have stated that the sb_authorname parameter is affected, but it is unclear which field is related to it. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20409 - http://www.securityfocus.com/archive/1/435615/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046484.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27021 - http://www.vupen.com/english/advisories/2006/2111 - http://securityreason.com/securityalert/1030 - http://www.securityfocus.com/bid/18251
CVE ID: CVE-2006-2816 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote attackers to inject arbitrary web script or HTML via the (1) op and (2) nick parameters, and possibly the (3) 0000, (4) userinfo, (5) comp_der, (6) encuestas, and (7) pagina parameters. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus
should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435309/100/0/threaded - http://www.securityfocus.com/bid/18124 - http://securityreason.com/securityalert/1029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26950
CVE ID: CVE-2006-2817 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/Tekno.Portal-0601-sql.txt - http://secunia.com/advisories/20464 - http://www.securityfocus.com/bid/18216 - https://exchange.xforce.ibmcloud.com/vulnerabilit
ecunia.com/advisories/20464 - http://www.securityfocus.com/bid/18216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26990 - http://www.vupen.com/english/advisories/2006/2192
CVE ID: CVE-2006-2818 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to execute arbitrary PHP code via a URL in the CONF[local_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18249 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26901 - http://secunia.com/advisories/20448 - http://www.vupen.com/english/advisories/2006/2131 - https://www.exploit-db.com/exploits/1865
CVE ID: CVE-2006-2819 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the c_node[class_path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18250 - https://www.exploit-db.com/exploits/1863 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27683
CVE ID: CVE-2006-2820 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitrary web script or HTML via a comment, possibly involving a javascript URI in the SRC attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1028 - http://www.securityfocus.com/bid/18240 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26928 - http://secunia.com/advisories/20447 - http://www.securityfocus.com/archive/1/435713/10
cloud.com/vulnerabilities/26928 - http://secunia.com/advisories/20447 - http://www.securityfocus.com/archive/1/435713/100/0/threaded
CVE ID: CVE-2006-2821 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitrary web script or HTML via the (1) artid parameter in art.php and the (2) catname parameter in cat.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1027 - http://www.securityfocus.com/bid/18243 - http://www.securityfocus.com/archive/1/435787/100/0/threaded - http://soot.shabgard.org/bugs/propublish.txt
CVE ID: CVE-2006-2822 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remote attackers to execute arbitrary SQL commands via the password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1026 - http://www.securityfocus.com/archive/1/435613/100/0/threaded - http://securitytracker.com/id?1016212 - http://colander.altervista.org/advisory/CAForum.txt - http://secunia.com/advisories/20411 - http://www.vupen.com/english/adv
://colander.altervista.org/advisory/CAForum.txt - http://secunia.com/advisories/20411 - http://www.vupen.com/english/advisories/2006/2117
CVE ID: CVE-2006-2823 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) admin/scart.mdb and possibly (2) admin/scart97.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435746/100/0/threaded - http://secunia.com/advisories/20485 - http://securitytracker.com/id?1009549 - http://securityreason.com/securityalert/1025 - http://www.o
m/advisories/20485 - http://securitytracker.com/id?1009549 - http://securityreason.com/securityalert/1025 - http://www.osvdb.org/26237 - http://www.vupen.com/english/advisories/2006/2208 - https://exchange.xforce.ibmcloud.com/vulnerabilities/15599
CVE ID: CVE-2006-2824 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 (0xc8 followed by a single-quote character) from the data stream to the server, which allows remote attackers to modify data and gain administrative access when PostgreSQL is used, aka "bug #1494281 - Postgres encoding security hole." NOTE: while this issue involves PostgreSQL, it is specific to MailManager's interface to PostgreSQL and is therefore a different vulnerability than CVE-2006-2313 and CVE-2006-2314. Additional Analyst Notes: - CVE Program Container: R
ore a different vulnerability than CVE-2006-2313 and CVE-2006-2314. Additional Analyst Notes: - CVE Program Container: References: - http://svn.sourceforge.net/viewcvs.cgi/mailmanager/MailManager/branches/RELENG_2_1/sql/__init__.py?r1=3019&r2=3063 - http://sourceforge.net/project/shownotes.php?group_id=85788&release_id=419822 - http://www.vupen.com/english/advisories/2006/1995 - http://secunia.com/advisories/20303
CVE ID: CVE-2006-2825 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virtual hosts that share physical directories, which might allow a local user to bypass open_basedir restrictions and access other virtual hosts via a PHP script that uses a main server URL (such as ~username) that is blocked by the user's own open_basedir directive, but not the main server's open_basedir directive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.c
n_basedir directive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26613 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0402.html - http://osvdb.org/31835 - http://securityreason.com/securityalert/1039
CVE ID: CVE-2006-2826 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2024-08-07T18:06:26.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute arbitrary SQL commands via the id variable, which is set by a client through a query string or a cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24873 - http://www.vupen.com/english/advisories/2006/0720 - http://sourceforge.net/project/shownotes.php?group_id=31885&release_id=396091 - http://www.gulftech.org/?node=research&article_id
urceforge.net/project/shownotes.php?group_id=31885&release_id=396091 - http://www.gulftech.org/?node=research&article_id=00107-03052006 - http://www.osvdb.org/23466 - http://secunia.com/advisories/16902 - http://securitytracker.com/id?1016123 - http://www.securityfocus.com/bid/16801
CVE ID: CVE-2006-2827 State: PUBLISHED Published: 2006-06-05T17:00:00 Last Updated: 2025-01-17T13:56:38.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vendor disputed this issue in a comment on the original researcher's blog, saying "the bug does not impose any security threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-craf
threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters." As of 20060605, the original blog entry is unavailable, although ISS also reports the same dispute. CVE has not been able to investigate this issue further, although the researcher sometimes makes inaccurate claims Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://pridels0.blogspot.com/2006/04/x-cart-sql-inj-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25944 - http://www.osvdb.org/25204
CVE ID: CVE-2006-2828 State: PUBLISHED Published: 2006-06-05T20:00:00 Last Updated: 2024-08-07T18:06:26.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbb_root_path parameter to the admin scripts (1) index.php, (2) admin_ug_auth.php, (3) admin_board.php, (4) admin_disallow.php, (5) admin_forumauth.php, (6) admin_groups.php, (7) admin_ranks.php, (8) admin_styles.php, (9) admin_user_ban.php, (10) admin_words.php, (11) admin_avatar.php, (12) admin_db_utilities.php, (13) admin_forum_prune.php, (14) admin_forums.php, (15) admin_mass_email.php,