Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
SA-2006:080 - http://www.kb.cert.org/vuls/id/599220 - http://secunia.com/advisories/19963 - http://www.vupen.com/english/advisories/2006/1586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26182 - http://securitytracker.com/id?1016392 - http://secunia.com/advisories/19964 - http://www.trustix.org/errata/2006/0024 - http://secunia.com/advisories/19912 - http://www.novell.com/linux/security/advisories/2006_05_05.html - http://secunia.com/advisories/19880 - http://www.clamav.net/security/0.88.2.html - http://kolab.org/security/kolab-vendor-notice-09.txt - http://www.osvdb.org/25120 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/
vdb.org/25120 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - http://www.debian.org/security/2006/dsa-1050 - http://www.gentoo.org/security/en/glsa/glsa-200605-03.xml - http://secunia.com/advisories/20877 - http://www.vupen.com/english/advisories/2006/2566 - http://www.securityfocus.com/bid/17754 - http://secunia.com/advisories/19874
CVE ID: CVE-2006-1990 State: PUBLISHED Published: 2006-04-24T23:00:00 Last Updated: 2024-08-07T17:35:31.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context-dependent attackers to execute arbitrary code via certain long arguments that cause a small buffer to be allocated, which triggers a heap-based buffer overflow in a memcpy function call, a different vulnerability than CVE-2002-1396. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4750 - http://secunia.com/advisories/21723 - https://exchange.xforce.ibmcloud.com/vulnerabil
com/english/advisories/2006/4750 - http://secunia.com/advisories/21723 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26001 - https://issues.rpath.com/browse/RPL-683 - http://secunia.com/advisories/21252 - http://securitytracker.com/id?1015979 - http://secunia.com/advisories/20222 - http://docs.info.apple.com/article.html?artnum=304829 - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm - http://secunia.com/advisories/21050 - http://www.novell.com/linux/security/advisories/2006_31_php.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:091 - http://security.gentoo.org/glsa/glsa-200605-08.xml - http:/
//www.mandriva.com/security/advisories?name=MDKSA-2006:091 - http://security.gentoo.org/glsa/glsa-200605-08.xml - http://secunia.com/advisories/20269 - http://www.redhat.com/support/errata/RHSA-2006-0568.html - http://secunia.com/advisories/21135 - http://secunia.com/advisories/20676 - http://www.ubuntu.com/usn/usn-320-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9696 - http://secunia.com/advisories/19803 - http://www.securityfocus.com/archive/1/447866/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0501.html - http://secunia.com/advisories/23155 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/22
ttp://secunia.com/advisories/23155 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/22225 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/21125 - http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.vupen.com/english/advisories/2006/1500 - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://secunia.com/advisories/21031 - http://secunia.com/advisories/20052 - http://secunia.com/advisories/21564 - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - http://support.avaya.com/elmodocs2/secu
s/21564 - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm
CVE ID: CVE-2006-1991 State: PUBLISHED Published: 2006-04-24T23:00:00 Last Updated: 2024-08-07T17:35:31.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015979 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26003 - http://www.novell.com/linux/security/advisories/2006_31_php.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:091 - http://security.gentoo.org/glsa/glsa-200605-08.xml -
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:091 - http://security.gentoo.org/glsa/glsa-200605-08.xml - http://secunia.com/advisories/20269 - http://secunia.com/advisories/20676 - http://www.ubuntu.com/usn/usn-320-1 - http://secunia.com/advisories/21125 - http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02 - http://www.vupen.com/english/advisories/2006/1500 - http://secunia.com/advisories/20052
CVE ID: CVE-2006-1992 State: PUBLISHED Published: 2006-04-25T01:00:00 Last Updated: 2024-08-07T17:35:30.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: mshtml.dll 6.00.2900.2873, as used in Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via nested OBJECT tags, which trigger invalid pointer dereferences including NULL dereferences. NOTE: the possibility of code execution was originally theorized, but Microsoft has stated that this issue is non-exploitable. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html - http://securityreason.com/securityalert/
: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045422.html - http://securityreason.com/securityalert/781 - http://securitytracker.com/id?1016001 - http://securitytracker.com/id?1016291 - http://www.securityfocus.com/archive/1/431796/100/0/threaded - http://www.osvdb.org/27475 - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0616.html - http://www.vupen.com/english/advisories/2006/1507 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 - http://secunia.com/advisories/19762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25978 - http://www.securityfocus.com/bid/17658
CVE ID: CVE-2006-1993 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:30.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.2, when designMode is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code via certain Javascript that is not properly handled by the contentWindow.focus method in an iframe, which causes a reference to a deleted controller context object. NOTE: this was originally claimed to be a buffer overflow in (1) js320.dll and (2) xpcom_core.dll, but the vendor disputes this claim. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adviso
e vendor disputes this claim. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20214 - http://secunia.com/advisories/19802 - http://www.vupen.com/english/advisories/2006/3748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1790 - http://www.securityfocus.com/archive/1/434524/100/0/threaded - http://secunia.com/advisories/20019 - http://www.securident.com/vuln/ff.txt - http://www.securityfocus.com/bid/17671 - http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/25994 - http://www.vupen.com/english/advisories/2006/1922 - http://www.securityfocus.com
ce.ibmcloud.com/vulnerabilities/25994 - http://www.vupen.com/english/advisories/2006/1922 - http://www.securityfocus.com/archive/1/434524/100/0/threaded - http://www.debian.org/security/2006/dsa-1055 - http://www.kb.cert.org/vuls/id/866300 - http://secunia.com/advisories/20015 - http://securitytracker.com/id?1015981 - http://www.vupen.com/english/advisories/2008/0083 - http://www.vupen.com/english/advisories/2006/1614 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/431878/100/0/threaded - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.mozilla.org/security/announce/2006/mfsa2006-30.html - http://secunia.com
/archive/1/446658/100/200/threaded - http://www.mozilla.org/security/announce/2006/mfsa2006-30.html - http://secunia.com/advisories/22066 - http://secunia.com/advisories/20070 - http://www.debian.org/security/2006/dsa-1053 - http://securityreason.com/securityalert/780
CVE ID: CVE-2006-1994 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in dForum 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DFORUM_PATH parameter to (1) about.php, (2) admin.php, (3) anmelden.php, (4) losethread.php, (5) config.php, (6) delpost.php, (7) delthread.php, (8) dfcode.php, (9) download.php, (10) editanoc.php, (11) forum.php, (12) login.php, (13) makethread.php, (14) menu.php, (15) newthread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (
hread.php, (16) openthread.php, (17) overview.php, (18) post.php, (19) suchen.php, (20) user.php, (21) userconfig.php, (22) userinfo.php, and (23) verwalten.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1482 - http://www.securityfocus.com/archive/1/431758 - http://secunia.com/advisories/19788 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045369.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26035 - http://www.nukedx.com/?viewdoc=27 - http://www.securityfocus.com/bid/17650
CVE ID: CVE-2006-1995 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to read arbitrary files via ".." sequences in the p parameter, which is not properly sanitized due to an rtrim function call with the arguments in the wrong order. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17668 - http://www.vupen.com/english/advisories/2006/1490 - http://www.securityfocus.com/bid/17649 - http://www.osvdb.org/24889 - http://downloads.securityfocus.com/vulnerabilitie
http://www.securityfocus.com/bid/17649 - http://www.osvdb.org/24889 - http://downloads.securityfocus.com/vulnerabilities/exploits/17649-directory-traversal.exploit - http://securityreason.com/securityalert/784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25991 - http://attrition.org/pipermail/vim/2006-April/000716.html - http://www.securityfocus.com/archive/1/431716/100/0/threaded - http://secunia.com/advisories/19777
CVE ID: CVE-2006-1996 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:30.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Scry Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid p parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17668 - http://www.vupen.com/english/advisories/2006/1490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25990 - http://securityreason.com/securityalert/784 - http://attrition.org/pipermail/vim/2006-April/000716.html - http://www.securityfocus.com/archive/1/431716/100/0/threaded -
tp://attrition.org/pipermail/vim/2006-April/000716.html - http://www.securityfocus.com/archive/1/431716/100/0/threaded - http://secunia.com/advisories/19777 - http://www.osvdb.org/24890
CVE ID: CVE-2006-1997 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:30.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sybase Pylon Anywhere groupware synchronization server before 7.0 allows local users to obtain sensitive information such as email and PIM data of another user via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1477 - http://www.securityfocus.com/bid/17677 - http://www.sybase.com/detail?id=1040213 - http://secunia.com/advisories/19784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25989
CVE ID: CVE-2006-1998 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenTTD 0.4.7 and earlier allows local users to cause a denial of service (application exit) via a large invalid error number, which triggers an error. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/openttdx-adv.txt - http://www.vupen.com/english/advisories/2006/1480 - http://secunia.com/advisories/19768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26000 - http://security.gentoo.org/glsa/glsa-200609-03.xml - http://secunia.com/advisories/21799 - http://www.securityfo
26000 - http://security.gentoo.org/glsa/glsa-200609-03.xml - http://secunia.com/advisories/21799 - http://www.securityfocus.com/bid/17661 - http://www.securityfocus.com/archive/1/431871/100/0/threaded
CVE ID: CVE-2006-1999 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: The multiplayer menu in OpenTTD 0.4.7 allows remote attackers to cause a denial of service via a UDP packet with an incorrect size, which causes the client to return to the main menu. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/openttdx-adv.txt - http://www.vupen.com/english/advisories/2006/1480 - http://secunia.com/advisories/19768 - http://security.gentoo.org/glsa/glsa-200609-03.xml - http://secunia.com/advisories/21799 - http://www.securityfocus.com/bid/17661 - http://ww
o.org/glsa/glsa-200609-03.xml - http://secunia.com/advisories/21799 - http://www.securityfocus.com/bid/17661 - http://www.securityfocus.com/archive/1/431871/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26004
CVE ID: CVE-2006-20001 State: PUBLISHED Published: 2023-01-17T19:07:27.136Z Last Updated: 2025-02-13T16:27:07.996Z Vendors: Apache Software Foundation Products: Apache HTTP Server Problem Types: CWE-787 Description: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://httpd.apache.org/security/vulnerabilities_24.html - https://security.gentoo.org/glsa/202309-01
CVE ID: CVE-2006-2000 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1484 - http://www.osvdb.org/24876 - http://pridels0.blogspot.com/2006/04/logmethods-xss-vuln.html - http://www.securityfocus.com/bid/17675 - http://secunia.com/advisories/19793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25968
CVE ID: CVE-2006-2001 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Scry Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this is a different vulnerability than the directory traversal vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17668 - http://www.vupen.com/english/advisories/2006/1490 - http://securityreason.com/securityalert/783 - http://www.osvdb.org/24891 - http://www.securityfocus.com/archive/1/431853/100/0/threaded - h
on.com/securityalert/783 - http://www.osvdb.org/24891 - http://www.securityfocus.com/archive/1/431853/100/0/threaded - http://attrition.org/pipermail/vim/2006-April/000716.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26101 - http://secunia.com/advisories/19777
CVE ID: CVE-2006-2002 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dir[base] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=28 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25992 - http://www.vupen.com/english/advisories/2006/1483 - http://www.osvdb.org/24892 - http://www.securityfocus.com/archive/1/431902/100/0/threaded - http://www.securityfocus.com/bid/17657 - http://secunia.com
tp://www.securityfocus.com/archive/1/431902/100/0/threaded - http://www.securityfocus.com/bid/17657 - http://secunia.com/advisories/19773
CVE ID: CVE-2006-2003 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:30.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cgi-bin/guest in Community Architect Guestbook allows remote attackers to inject arbitrary web script or HTML by signing the guestbook, which is displayed by fsguestbook.html. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24784 - http://www.vupen.com/english/advisories/2006/1446 - http://secunia.com/advisories/19742
CVE ID: CVE-2006-2004 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RI Blog 1.1 allow remote attackers to execute arbitrary SQL command via the (1) username or (2) password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1489 - http://www.securityfocus.com/bid/17654 - http://www.securityfocus.com/archive/1/431868/100/0/threaded - http://colander.altervista.org/advisory/riblog.txt - http://secunia.com/advisories/19783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26132
CVE ID: CVE-2006-2005 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in index.php in ClanSys 1.1 allows remote attackers to execute arbitrary PHP code via PHP code in the page parameter, as demonstrated by using an "include" statement that is injected into the eval statement. NOTE: this issue has been described as file inclusion by some sources, but that is just one attack; the primary vulnerability is eval injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25976 - http://www.nukedx.com/?g
E Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25976 - http://www.nukedx.com/?getxpl=29 - http://www.securityfocus.com/archive/1/431873/100/0/threaded - http://securityreason.com/securityalert/782 - http://securitytracker.com/id?1015988 - http://www.osvdb.org/25083 - http://www.securityfocus.com/bid/17660
CVE ID: CVE-2006-2006 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in IZArc Archiver 3.5 beta 3 allow remote attackers to write arbitrary files via a ..\ (dot dot backslash) in a (1) .rar, (2) .tar, (3) .zip, (4) .jar, or (5) .gz archive. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24895 - http://secunia.com/advisories/19791 - http://www.securityfocus.com/bid/17664 - http://www.vupen.com/englis
b.org/24895 - http://secunia.com/advisories/19791 - http://www.securityfocus.com/bid/17664 - http://www.vupen.com/english/advisories/2006/1488 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26039
CVE ID: CVE-2006-2007 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Winny 2.0 b7.1 and earlier allows remote attackers to execute arbitrary code via long strings to certain commands sent to the file transfer port. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24883 - http://jvn.jp/jp/JVN%2374294680/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25986 - http://www.eeye.com/html/research/advisories/AD20060421.html - http://www.securityfocus.com/bid/17666 - http://www.kb.cert.org/vuls/id/167033 - http://secun
visories/AD20060421.html - http://www.securityfocus.com/bid/17666 - http://www.kb.cert.org/vuls/id/167033 - http://secunia.com/advisories/19795 - http://www.vupen.com/english/advisories/2006/1486
CVE ID: CVE-2006-2008 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26063 - https://www.exploit-db.com/exploits/1711 - http://www.vupen.com/english/advisories/2006/1481 - http://www.osvdb.org/24887 - http://secunia.com/advisories/19749 - http://www.securityfocus.com/bid/17679
CVE ID: CVE-2006-2009 State: PUBLISHED Published: 2006-04-25T10:00:00 Last Updated: 2024-08-07T17:35:31.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17670 - http://www.osvdb.org/24943 - http://www.securityfocus.com/archive/1/433995/100/0/threaded - http://securityreason.com/securityalert/787 - http://www.vupen.com/english/advisories/2006/1509 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
urityalert/787 - http://www.vupen.com/english/advisories/2006/1509 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26062 - http://securitytracker.com/id?1015984 - http://downloads.securityfocus.com/vulnerabilities/exploits/phpMyAgenda_fi.txt - http://osvdb.org/ref/29/2914x-phpmyagenda.txt - http://secunia.com/advisories/19748 - http://www.securityfocus.com/archive/1/431862/100/0/threaded