Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0649 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DataparkSearch before 4.37 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18751 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24627 - http://www.dataparksearch.org/ChangeLog - http://www.securityfocus.com/bid/16572 - http://www.vupen.com/english/advisories/2006/0488
CVE ID: CVE-2006-0650 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cpaint2.inc.php in the CPAINT library before 2.0.3, as used in multiple scripts, allows remote attackers to inject arbitrary web script or HTML via the cpaint_response_type parameter, which is displayed in a resulting error message, as demonstrated using a hex-encoded IFRAME tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015608 - http://www.securityfocus.com/archive/1/424663/100/0/threaded - http://secunia.com/advisories/18765 - h
.com/id?1015608 - http://www.securityfocus.com/archive/1/424663/100/0/threaded - http://secunia.com/advisories/18765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24594 - http://www.securityfocus.com/bid/16559 - http://cpaint.booleansystems.com/forums/viewtopic.php?t=98 - http://www.gulftech.org/?node=research&article_id=00097-02092006 - http://www.vupen.com/english/advisories/2006/0487
CVE ID: CVE-2006-0651 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24583 - http://securitytracker.com/id?1015594 - http://www.securityfocus.com/bid/16547
CVE ID: CVE-2006-0652 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: WHMCompleteSolution (WHMCS) before 2.3 assigns incorrect permissions to "resellers", which allows remote authenticated users to perform privileged actions or obtain sensitive information. NOTE: this report is based on a vendor bug report that identified "incorrect permissions." However, the vendor did not label it a security issue, and there was no statement regarding whether or not the permissions were actually more permissive than intended. If in fact the permissions were more restrictive than intended, then this would be a
lly more permissive than intended. If in fact the permissions were more restrictive than intended, then this would be a functional problem but not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.whmcs.com/changelog.php - http://www.securityfocus.com/bid/16560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24597 - http://www.vupen.com/english/advisories/2006/0484
CVE ID: CVE-2006-0653 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hinton Design phpht Topsites 1.3 allow remote attackers to execute arbitrary SQL commands via multiple vectors including the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16562 - http://www.securityfocus.com/archive/1/424741/100/0/threaded - http://evuln.com/vulns/59/summary.html - http://secunia.com/advisories/18782
CVE ID: CVE-2006-0654 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: check.php in Hinton Design phpht Topsites 1.3 does not validate passwords when using cookies, which allows remote attackers to bypass authentication via unspecified cookies. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16562 - http://www.securityfocus.com/archive/1/424741/100/0/threaded - http://evuln.com/vulns/59/summary.html - http://secunia.com/advisories/18782
CVE ID: CVE-2006-0655 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) link_edited.php and (2) link_added.php in Hinton Design phpht Topsites 1.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16562 - http://www.securityfocus.com/archive/1/424741/100/0/threaded - http://evuln.com/vulns/59/summary.html - http://secunia.com/advisories/18782
CVE ID: CVE-2006-0656 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HP Systems Insight Manager 4.2 through 5.0 SP3 for Windows allows remote attackers to access arbitrary files via unspecified vectors, a different vulnerability than CVE-2005-2006. Additional Analyst Notes: - CVE Program Container: References: - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967 - http://secunia.com/advisories/18789 - http://securitytracker.com/id?1015605 - http://www.securityfocus.com/bid/16571 - http://www.vupen.com/english/advisories/2006/0497 - http://www1
om/id?1015605 - http://www.securityfocus.com/bid/16571 - http://www.vupen.com/english/advisories/2006/0497 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00597967
CVE ID: CVE-2006-0657 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Softcomplex PHP Event Calendar 1.5 allows remote authenticated users to inject arbitrary web script or HTML, and corrupt data, via the (1) username and (2) password parameters, which are not sanitized before being written to users.php. NOTE: while this issue was originally reported as XSS, the primary issue might be direct static code injection with resultant XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23071 - http://evuln.com/vulns/63/s
dditional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23071 - http://evuln.com/vulns/63/summary.html - http://secunia.com/advisories/18792 - http://www.vupen.com/english/advisories/2006/0507 - http://www.osvdb.org/23072 - http://securityreason.com/securityalert/442 - http://www.securityfocus.com/bid/16588 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24523
CVE ID: CVE-2006-0658 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in connector.php in FCKeditor 2.0 and 2.2, as used in products such as RunCMS, allows remote attackers to upload and execute arbitrary script files by giving the files specific extensions that are not listed in the Config[DeniedExtensions][File], such as .php.txt. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/fckeditor_22_xpl.html - http://www.vupen.com/english/advisories/2006/0502 - http://www.securityfocus.com/archive/1/424708 - http://secun
.html - http://www.vupen.com/english/advisories/2006/0502 - http://www.securityfocus.com/archive/1/424708 - http://secunia.com/advisories/18767 - https://www.exploit-db.com/exploits/3702
CVE ID: CVE-2006-0659 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file include vulnerabilities in RunCMS 1.2 and earlier, with register_globals and allow_url_fopen enabled, allow remote attackers to execute arbitrary code via the bbPath[path] parameter in (1) class.forumposts.php and (2) forumpollrenderer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16578 - http://secunia.com/advisories/18800 - http://www.vupen.com/english/advisories/2006/0503 - http://www.securityfocus.com/archive/1/424708 - http://retrogod.alterv
tp://www.vupen.com/english/advisories/2006/0503 - http://www.securityfocus.com/archive/1/424708 - http://retrogod.altervista.org/runcms_13a_xpl.html
CVE ID: CVE-2006-0660 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in FarsiNews 2.5 and earlier allows remote attackers to (1) read arbitrary files or trigger an error message path disclosure via ".." or invalid names in the archive parameter to index.php, or (2) include arbitrary files via the template parameter to show_archives.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24598 - http://www.vupen.com/english/advisories/2006/0506 - https://exchange.xforce.ibmcloud.com/vu
.com/vulnerabilities/24598 - http://www.vupen.com/english/advisories/2006/0506 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24602 - http://www.securityfocus.com/archive/1/424720/100/0/threaded - http://forum.farsinewsteam.com/index.php?showtopic=76 - http://www.osvdb.org/23020 - http://www.securityfocus.com/bid/16580 - http://forum.farsinewsteam.com/index.php?showtopic=71 - http://www.osvdb.org/23021 - http://www.hamid.ir/security/farsinews2-5.txt - http://www.osvdb.org/23022 - http://secunia.com/advisories/18768
CVE ID: CVE-2006-0661 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Scriptme SmE GB Host 1.21 and SmE Blog Host allows remote attackers to inject arbitrary web script or HTML via the BBcode url tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16585 - http://secunia.com/advisories/18786 - http://www.vupen.com/english/advisories/2006/0504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24543 - http://evuln.com/vulns/65/summary.html - http://securityreason.com/securityalert/447
CVE ID: CVE-2006-0662 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:28.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Lotus Domino iNotes Client 6.5.4 allows remote attackers to inject arbitrary web script or HTML via email with attached html files, which are directly rendered in the browser. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-38/advisory/ - http://www.vupen.com/english/advisories/2006/0499 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24612 - http://www.o
m/support/docview.wss?rs=475&uid=swg21229919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24612 - http://www.osvdb.org/23077 - http://www.securityfocus.com/bid/16577 - http://secunia.com/advisories/16340 - http://securitytracker.com/id?1015610
CVE ID: CVE-2006-0663 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Lotus Domino iNotes Client 6.5.4 and 7.0 allow remote attackers to inject arbitrary web script or HTML via (1) an email subject; (2) an encoded javascript URI, as demonstrated using "java&#13;script:"; or (3) when the Domino Web Access ActiveX control is not installed, via an email attachment filename. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2005-38/advisory/ - http://www.vupen.com/english/advisories/2006/0499 -
ferences: - http://secunia.com/secunia_research/2005-38/advisory/ - http://www.vupen.com/english/advisories/2006/0499 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24614 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24611 - http://www-1.ibm.com/support/docview.wss?rs=475&uid=swg21229919 - http://www.osvdb.org/23079 - http://www.osvdb.org/23077 - http://www.securityfocus.com/bid/16577 - http://www.osvdb.org/23078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24613 - http://secunia.com/advisories/16340 - http://securitytracker.com/id?1015610
CVE ID: CVE-2006-0664 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in config_defaults_inc.php in Mantis before 1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24585 - http://www.vupen.com/eng
E Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24585 - http://www.vupen.com/english/advisories/2006/0485 - http://secunia.com/advisories/21400 - http://www.debian.org/security/2006/dsa-1133 - http://www.securityfocus.com/bid/16561
CVE ID: CVE-2006-0665 State: PUBLISHED Published: 2006-02-13T11:00:00 Last Updated: 2024-08-07T16:41:29.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in (1) query_store.php and (2) manage_proj_create.php in Mantis before 1.0.0 has unknown impact and attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. An original vendor bug report is referenced, but not accessible to the general public. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0485 - http://secunia.com/advisories/21400 - http://www.debian.org/security/20
p://www.vupen.com/english/advisories/2006/0485 - http://secunia.com/advisories/21400 - http://www.debian.org/security/2006/dsa-1133 - http://www.securityfocus.com/bid/16561
CVE ID: CVE-2006-0666 State: PUBLISHED Published: 2006-02-15T11:00:00 Last Updated: 2024-08-07T16:41:29.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the (1) unix_mp and (2) unix_64 kernels in IBM AIX 5.3 VRMF 5.3.0.30 through 5.3.0.33 allows local users to cause a denial of service (system crash) via unknown vectors related to EMULATE_VMX. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24711 - http://www.osvdb.org/23127 - http://www.securityfocus.com/bid/16624 - http://secunia.com/advisories/18795 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY79595&apar=only - http://ww
624 - http://secunia.com/advisories/18795 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY79595&apar=only - http://www.vupen.com/english/advisories/2006/0573
CVE ID: CVE-2006-0667 State: PUBLISHED Published: 2006-03-10T01:00:00 Last Updated: 2024-08-07T16:41:29.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: lscfg in IBM AIX 5.2 and 5.3 allows local users to modify arbitrary files via a symlink attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2005/2096 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY77624 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY77638 - http://securitytracker.com/id?1015622
CVE ID: CVE-2006-0668 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16567/exploit - http://secunia.com/advisories/19023 - http://www.securityfocus.com/bid/16567
CVE ID: CVE-2006-0669 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:28.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the (1) Forum and (2) pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database. SecurityTracker's research indicates that the original problem could be due to a vbscript parsing error based on invalid arguments Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1656
invalid arguments Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24616 - http://securitytracker.com/id?1015600 - http://www.attrition.org/pipermail/vim/2006-February/000561.html - http://www.osvdb.org/23509
CVE ID: CVE-2006-0670 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:28.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in l2cap.c in hcidump 1.29 allows remote attackers to cause a denial of service (crash) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=113924625825488&w=2 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:041 - http://www.osvdb.org/23056 - http://secunia.com/advisories/18971 - http://www.vupen.com/english/advisories/2006/0479 - h
http://www.osvdb.org/23056 - http://secunia.com/advisories/18971 - http://www.vupen.com/english/advisories/2006/0479 - http://www.debian.org/security/2006/dsa-990 - http://secunia.com/advisories/18741 - http://www.securityfocus.com/archive/1/424133/100/0/threaded - http://www.ubuntu.com/usn/usn-256-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24533 - http://securityreason.com/securityalert/465 - http://www.secuobs.com/news/05022006-bluetooth9.shtml#english - http://secunia.com/advisories/19122
CVE ID: CVE-2006-0671 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet whose length field is less than the actual length of the packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16512 - http://secunia.com/advisories/18747 - http://www.vupen.com/english/advisories/2006/0478 - http://
yfocus.com/bid/16512 - http://secunia.com/advisories/18747 - http://www.vupen.com/english/advisories/2006/0478 - http://marc.info/?l=full-disclosure&m=113924661724270&w=2 - http://marc.info/?l=bugtraq&m=113926179907655&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24534 - http://www.secuobs.com/news/05022006-bluetooth7.shtml#english
CVE ID: CVE-2006-0672 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP PSC 1210 All-in-One Drivers before 1.0.06 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16583 - http://www.vupen.com/english/advisories/2006/0498 - http://secunia.com/advisories/18770 - http://h10025.www1.hp.com/ewfrf/wc/softwareDownloadIndex?dlc=en&lc=en&os=228%20&product=90764&lang=en&cc=us&softwareitem=oj-37641-1
CVE ID: CVE-2006-0673 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cms/index.php in Magic Calendar Lite 1.02, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) $total_login and (2) $total_password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/459 - http://www.vupen.com/english/advisories/2006/0525 - http://evuln.com/vulns/71/summary.html - http://www.securityfocus.com/bid/16646 - http://securitytracker.com/id?1015650 - http://secuni
m/vulns/71/summary.html - http://www.securityfocus.com/bid/16646 - http://securitytracker.com/id?1015650 - http://secunia.com/advisories/18855 - http://www.securityfocus.com/bid/16734 - http://www.securityfocus.com/archive/1/425491/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24588
CVE ID: CVE-2006-0674 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the arp command of IBM AIX 5.3 L, 5.3, 5.2.2, 5.2 L, and 5.2 allows local users to cause a denial of service (crash) via a long iftype argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0531 - http://www.securityfocus.com/bid/16584 - http://secunia.com/advisories/18773 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY81476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24628 - http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY8
1476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24628 - http://www-1.ibm.com/support/docview.wss?rs=0&q1=IY81424&uid=isg1IY81424&loc=en_US&cs=utf-8&cc=us&lang=en
CVE ID: CVE-2006-0675 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Siteframe 5.0.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0533 - http://secunia.com/advisories/18804 - http://www.securityfocus.com/bid/16596 - http://kiki91.altervista.org/exploit/siteframe5.0.1a_xss.txt - http://siteframe.org/p/xss_vulnerability_in_siteframe_501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24
xt - http://siteframe.org/p/xss_vulnerability_in_siteframe_501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24649 - http://www.securityfocus.com/archive/1/424844/100/0/threaded
CVE ID: CVE-2006-0676 State: PUBLISHED Published: 2006-02-13T22:00:00 Last Updated: 2024-08-07T16:41:29.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/424956/100/0/threaded - http://www.securityfocus.com/bid/16608 - http://secunia.com/advisories/18820 - http://securityreason.com/securityalert/425 - http://www.waraxe.us/advisory-44.html - http://www.vupen.com/english/advisories/2006/0542 - https://exchange.