Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0520 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability index.php in Dragoran Portal module 1.3 for Invision Power Board (IPB) allows remote attackers to execute arbitrary SQL commands via the site parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0396 - http://www.securityfocus.com/bid/16447 - http://www.osvdb.org/22851 - https://exchange.xforce.ibmcloud.com/vulnerabilit
http://www.securityfocus.com/bid/16447 - http://www.osvdb.org/22851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24404 - http://secunia.com/advisories/18664
CVE ID: CVE-2006-0521 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in results.php in BrowserCRM allows remote attackers to inject arbitrary web script or HTML via certain manipulations of the query parameter, as demonstrated using an IMG SRC tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24390 - http://www.vupen.com/english/advisories/2006/0391 - http://www.securityfocus.com/archive/1/423546/100/0/threaded - http://secunia.com/advisories/18658 - http://www.securityfocus.com/bid
curityfocus.com/archive/1/423546/100/0/threaded - http://secunia.com/advisories/18658 - http://www.securityfocus.com/bid/16435 - http://www.osvdb.org/22841 - http://securityreason.com/securityalert/393
CVE ID: CVE-2006-0522 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server (SMS) version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015561 - http://securityresponse.symantec.com/avcenter/security/Content/2006.02.01.html - http://www.securityfocus.com/bid/16452 - http://secunia.com/advisories/18689 - ht
ter/security/Content/2006.02.01.html - http://www.securityfocus.com/bid/16452 - http://secunia.com/advisories/18689 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24413 - http://www.osvdb.org/22883 - http://www.vupen.com/english/advisories/2006/0402
CVE ID: CVE-2006-0523 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in global.php in MyBB before 1.03 allows remote attackers to execute arbitrary SQL commands via the templatelist variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24416 - http://www.osvdb.org/22903 - http://www.vupen.com/english/advisories/2006/0400 - http://secunia.com/advisories/18678 - http://community.mybboard.net/showthread.php?tid=6418
CVE ID: CVE-2006-0524 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ashnews.php in Derek Ashauer ashNews 0.83 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24365 - http://secunia.com/advisories/9331 - http://www.osvdb.org/22934 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0979.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html - http://archives.neoha
sure/2006-01/0979.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0969.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0955.html - http://www.securityfocus.com/bid/16426
CVE ID: CVE-2006-0525 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Adobe products, including (1) Photoshop CS2, (2) Illustrator CS2, and (3) Adobe Help Center, install a large number of .EXE and .DLL files with write-access permission for the Everyone group, which allows local users to gain privileges via Trojan horse programs. Additional Analyst Notes: - CVE Program Container: References: - http://www.adobe.com/support/techdocs/332644.html - http://www.securityfocus.com/bid/16451 - http://securitytracker.com/id?1015577 - http://securitytracker.com/id?1015579 - http://www.securityfoc
s.com/bid/16451 - http://securitytracker.com/id?1015577 - http://securitytracker.com/id?1015579 - http://www.securityfocus.com/archive/1/423587/100/0/threaded - http://www.kb.cert.org/vuls/id/953860 - http://secunia.com/advisories/18698 - http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - http://securitytracker.com/id?1015578 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24464 - http://www.vupen.com/english/advisories/2006/0431 - http://www.osvdb.org/22908
CVE ID: CVE-2006-0526 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16453 - http://www.securityfocus.com/archive/1/423587/100/0/threaded - http://www.kb.cert.org/vuls/id/953860 - http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - https://exchange.xforce.ibmcloud.c
b.cert.org/vuls/id/953860 - http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/24498
CVE ID: CVE-2006-0527 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND 4 (BIND4) and BIND 8 (BIND8), if used as a target forwarder, allows remote attackers to gain privileged access via a "Kashpureff-style DNS cache corruption" attack. Additional Analyst Notes: - CVE Program Container: References: - http://computerworld.com/networkingtopics/networking/story/0%2C10801%2C103744%2C00.html - http://www.osvdb.org/22888 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837 - http://www.vupen.com/english/advisories/2006/0399 - http://securitytracker.com/id?1015606 - http://www.securit
0595837 - http://www.vupen.com/english/advisories/2006/0399 - http://securitytracker.com/id?1015606 - http://www.securityfocus.com/archive/1/425083/100/0/threaded - http://secunia.com/advisories/18690 - http://securityreason.com/securityalert/438 - http://www.securityfocus.com/archive/1/425083/100/0/threaded - http://securityreason.com/securityalert/748 - http://securitytracker.com/id?1015551 - http://www.securityfocus.com/bid/16455 - http://attrition.org/pipermail/vim/2006-February/000551.html - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00595837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24414
CVE ID: CVE-2006-0528 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securi
demonstrated using an XML attachment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16408 - https://usn.ubuntu.com/265-1/ - http://www.novell.com/linux/security/advisories/2006_07_sr.html - http://securityreason.com/securityalert/610 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:057 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.html - http://secunia.com/advisories/19504
CVE ID: CVE-2006-0529 State: PUBLISHED Published: 2006-02-02T20:00:00 Last Updated: 2024-08-07T16:41:28.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via a crafted message to TCP port 4105. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16475 - http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_notice.asp - http://securitytracker.com/id?1015571 - http://www.vupen.com/english/advisories/2006/0414 - http://secunia.com/adviso
- http://securitytracker.com/id?1015571 - http://www.vupen.com/english/advisories/2006/0414 - http://secunia.com/advisories/18681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24448 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581 - http://www.osvdb.org/21146 - http://www.securityfocus.com/archive/1/423785/100/0/threaded
CVE ID: CVE-2006-0530 State: PUBLISHED Published: 2006-02-02T20:00:00 Last Updated: 2024-08-07T16:41:28.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Computer Associates (CA) Message Queuing (CAM / CAFT) before 1.07 Build 220_16 and 1.11 Build 29_20, as used in multiple CA products, allows remote attackers to cause a denial of service via spoofed CAM control messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24449 - http://securityreason.com/securityalert/404 - http://securitytracker.com/id?1015571 - http://www.vupen.com/english/advisories/2006/0414 - http:/
m/securityalert/404 - http://securitytracker.com/id?1015571 - http://www.vupen.com/english/advisories/2006/0414 - http://secunia.com/advisories/18681 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581 - http://www.securityfocus.com/archive/1/423785/100/0/threaded
CVE ID: CVE-2006-0531 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:27.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as "root" to bypass authentication and gain top-level administrator privileges via the amadmin CLI tool. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A360 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A755 - http://www.securityfocus.com/bid/16474 - http://sunsolve.sun.com/search/document.do
/oval%3Aorg.mitre.oval%3Adef%3A755 - http://www.securityfocus.com/bid/16474 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102140-1 - http://www.vupen.com/english/advisories/2006/0430 - http://securitytracker.com/id?1015567 - http://secunia.com/advisories/18699 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24423
CVE ID: CVE-2006-0532 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:28.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in resultat.asp in SoftMaker Shop allows remote attackers to inject arbitrary web script or HTML via a strSok parameter containing a javascript: URI in an IMG SRC attribute. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0434 - http://www.securityfocus.com/archive/1/423768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24451 - http://www.osvdb.org/22911 - http://secunia.com/advisories/18683 - http://securityreason.co
.com/vulnerabilities/24451 - http://www.osvdb.org/22911 - http://secunia.com/advisories/18683 - http://securityreason.com/securityalert/400 - http://www.securityfocus.com/bid/16471
CVE ID: CVE-2006-0533 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:29.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in webmailaging.cgi in cPanel allows remote attackers to inject arbitrary web script or HTML via the numdays parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24468 - http://marc.info/?l=full-disclosure&m=113894933522271&w=2 - http://www.osvdb.org/22906 - http://secunia.com/advisories/18691
CVE ID: CVE-2006-0534 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:27.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in CyberShop Ultimate E-commerce allow remote attackers to inject arbitrary web script or HTML via the (1) ortak or (2) kat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/401 - http://www.securityfocus.com/archive/1/423787/100/0/threaded - http://secunia.com/advisories/18730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24454 - http://www.securityfocus.com/bid/16473
CVE ID: CVE-2006-0535 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:28.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contain any actionable or distinguishing information. Perhaps it should not be included in CVE. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16478
CVE ID: CVE-2006-0536 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:27.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbitrary web script or HTML via the sort parameter. NOTE: some sources say that the affected parameter is "date," but the demonstration URL shows that it is "sort". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423901/100/0/threaded - http://securitytracker.com/id?1015581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24470 - http://www.vupen.com/english/adv
tytracker.com/id?1015581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24470 - http://www.vupen.com/english/advisories/2006/0449 - http://www.osvdb.org/22978
CVE ID: CVE-2006-0537 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:28.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the POP3 server in Kinesphere Corporation eXchange before 5.0.060125 allows remote attackers to execute arbitrary code via a long RCPT TO argument. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1466 - http://securityreason.com/securityalert/408 - http://secunia.com/advisories/18687 - http://downloads.securityfocus.com/vulnerabilities/exploits/exchangepop3.pl - http://www.vupen.com/english/advisories/2006/0437 - http://archives.neohapsis.com/archives/bugt
ploits/exchangepop3.pl - http://www.vupen.com/english/advisories/2006/0437 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0040.html - http://www.securityfocus.com/bid/16485 - http://www.osvdb.org/22907 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24477 - http://securitytracker.com/id?1015580
CVE ID: CVE-2006-0538 State: PUBLISHED Published: 2006-02-04T00:00:00 Last Updated: 2024-08-07T16:41:28.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: CipherTrust IronMail 5.0.1, when "Denial of Service Protection" is enabled, allows remote attackers to cause a denial of service (possibly CPU consumption) via a SYN flood with malformed TCP packets from multiple connections. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24445 - http://www.securityfocus.com/bid/16465 - http://securitytracker.com/id?1015555 - http://www.securityfocus.com/archive/1/423898/100/0/t
urityfocus.com/bid/16465 - http://securitytracker.com/id?1015555 - http://www.securityfocus.com/archive/1/423898/100/0/threaded
CVE ID: CVE-2006-0539 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: The convert-fcrontab program in fcron 3.0.0 might allow local users to gain privileges via a long command-line argument, which causes Linux glibc to report heap memory corruption, possibly because a strcpy in the strdup2 function can "overwrite some data." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423697/100/0/threaded - http://fcron.free.fr/news.php#a20060206a.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24444 - http://archives.neohapsis.com/archives/
hp#a20060206a.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24444 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0999.html - http://www.vupen.com/english/advisories/2006/0435 - http://www.trustix.org/errata/2006/0036 - http://secunia.com/advisories/18719 - http://www.securityfocus.com/bid/16467 - https://bugs.trustix.org/show_bug.cgi?id=1754 - http://fcron.free.fr/doc/en/changes.html
CVE ID: CVE-2006-0540 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.evuln.com/vulns/54/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24412 - http://www.securityfocus.com/archive/1/423957/100/0/threaded - http://www.securityfocus.com/bid/16464
CVE ID: CVE-2006-0541 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tachyon Vanilla Guestbook 1.0 beta allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "posting new messages." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24411 - http://www.evuln.com/vulns/54/summary.html - http://www.securityfocus.com/archive/1/423957/100/0/threaded - http://www.securityfocus.com/bid/16464 - http://www.securityfocus.com/archive/1/426200/100/
ve/1/423957/100/0/threaded - http://www.securityfocus.com/bid/16464 - http://www.securityfocus.com/archive/1/426200/100/0/threaded
CVE ID: CVE-2006-0542 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in config.php in NukedWeb GuestBookHost 2005.04.25 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16545 - http://www.vupen.com/english/advisories/2006/0465 - http://www.securityfocus.com/archive/1/424714/100/0/threaded - http://secunia.com/advisories/18761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24406 - http://www.evuln.c
- http://secunia.com/advisories/18761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24406 - http://www.evuln.com/vulns/56/summary.html
CVE ID: CVE-2006-0543 State: PUBLISHED Published: 2006-02-04T02:00:00Z Last Updated: 2024-09-16T23:45:55.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d2, (3) \'d3, (4) \'d4, and (5) \'d5. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22877
CVE ID: CVE-2006-0544 State: PUBLISHED Published: 2006-02-04T02:00:00Z Last Updated: 2024-09-17T01:40:37.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND element with its SRC attribute set to "file://" followed by a large number of "-" (dash of hyphen) characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.security-protocols.com/advisory/sp-x23-advisory.txt - http://www.securityfocus.com/bid/16463
CVE ID: CVE-2006-0545 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showflat.php in Groupee (formerly known as Infopop) UBB.threads 6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-03/0494.html - http://www.osvdb.org/22808 - http://www.securityfocus.com/bid/16520 - http://securitytracker.com/id?1015549 - http://www.cyberlords.net/advisories/cl_ubb.txt - https://exchange.xforce.ibmcloud.com/vulnerab
tracker.com/id?1015549 - http://www.cyberlords.net/advisories/cl_ubb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24381
CVE ID: CVE-2006-0546 State: PUBLISHED Published: 2006-02-04T02:00:00 Last Updated: 2024-08-07T16:41:28.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in a certain application available from /v1/tr/portfoy.php on www.egeinternet.com allows remote attackers to execute arbitrary code via "evilcode" in the key parameter, possibly a PHP remote file include vulnerability in which the attack vector is a URL in the key parameter. NOTE: it is not clear whether this vulnerability is associated with an online service or application service provider. If so, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: R
ion service provider. If so, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423365/100/0/threaded