Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5042 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T00:32:17.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://forum.joomla.org/index.php/topic%2C78533.0.html
CVE ID: CVE-2006-5043 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) file_upload.php or (2) image_upload.php, a variant of CVE-2006-3528. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C76852.0.html - http://jext.info/builds/joomlaboard/joomlaboard-1.1.1-stable.tgz - http://forum.joomla.org/index.php/topic%2C79477.0.html
ttp://jext.info/builds/joomlaboard/joomlaboard-1.1.1-stable.tgz - http://forum.joomla.org/index.php/topic%2C79477.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/33199 - http://secunia.com/advisories/21059 - https://www.exploit-db.com/exploits/3560 - http://www.vupen.com/english/advisories/2006/2804 - http://marc.info/?l=bugtraq&m=117468769820721&w=2 - http://www.securityfocus.com/bid/23129 - http://www.howtoria.com/index.php?option=com_docman&task=doc_download&gid=32&Itemid=27
CVE ID: CVE-2006-5044 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-16T16:17:41.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://www.princeclan.org
CVE ID: CVE-2006-5045 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and attack vectors, probably related to PHP remote file inclusion in the mosConfig_absolute_path to conf.pollxt.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19037 - http://forum.joomla.org/index.php/topic%2C77975.0.html - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://www.vupen.com/english/advisories/2006/2843 - https://exchange.xforce.ibmcl
a.org/index.php/topic%2C79477.0.html - http://www.vupen.com/english/advisories/2006/2843 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27779 - http://secunia.com/advisories/21068
CVE ID: CVE-2006-5046 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T04:04:40.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files." Additional Analyst Notes: - CVE Program Container: References: - http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/ - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://forum.joomla.org/index.php/topic%2C73453.0.html
CVE ID: CVE-2006-5047 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-16T19:30:39.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! allows attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://rsgallery2.net/component/option%2Ccom_rsgallery2/Itemid%2C7/page%2CviewChangelog/
CVE ID: CVE-2006-5048 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2083 - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://www.osvdb.org/27658 - https://exchange.xforce.ibmcloud
- http://forum.joomla.org/index.php/topic%2C79477.0.html - http://www.osvdb.org/27658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28078 - http://www.securityfocus.com/bid/19217 - http://secunia.com/advisories/21260 - http://forum.joomla.org/index.php/topic%2C81589.0.html - http://www.osvdb.org/27656 - http://www.osvdb.org/27657 - http://www.osvdb.org/27655 - http://www.vupen.com/english/advisories/2006/3062
CVE ID: CVE-2006-5049 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C79477.0.html - http://forum.joomla.org/index.php/topic%2C82457.0.html - http://www.securityfocus.com/bid/84256
CVE ID: CVE-2006-5050 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016875 - http://securityreason.com/securityalert/1636 - http://www.securityfocus.com/archive/1/446228/100/0/threaded - http://www.securityfocus.com/bid/20067
CVE ID: CVE-2006-5051 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.380Z Vendors: n/a Products: n/a Problem Types: n/a Description: Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc - http://sourceforge.net/forum/forum.php?forum_id=681763 - http://secunia.com/advisories/22270 - http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL36
hp?forum_id=681763 - http://secunia.com/advisories/22270 - http://www.arkoon.fr/upload/alertes/43AK-2006-09-FR-1.0_SSL360_OPENSSH.pdf - http://www.ubuntu.com/usn/usn-355-1 - http://lists.freebsd.org/pipermail/freebsd-security/2006-October/004051.html - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11387 - http://openssh.org/txt/release-4.4 - http://secunia.com/advisories/24805 - http://www.kb.cert.org/vuls/id/851340 - http://www.openbsd.org/errata.html#ssh - http://secunia.com/advisories/22487 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.arkoon.fr/upload/alertes/36AK
a.com/advisories/22487 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.arkoon.fr/upload/alertes/36AK-2006-07-FR-1.0_FAST360_OPENSSH.pdf - http://security.gentoo.org/glsa/glsa-200611-06.xml - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - http://secunia.com/advisories/22362 - http://secunia.com/advisories/23680 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://secunia.com/advisories/22352 - http://www.vupen.com/english/advisories/2006/4329 - http://secunia.com/advisories/22236 - http://secunia.com/advisories/24799 - http://www.vupen.com/english/advisories/2006/
ttp://secunia.com/advisories/22236 - http://secunia.com/advisories/24799 - http://www.vupen.com/english/advisories/2006/4018 - http://secunia.com/advisories/22495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29254 - http://www.securityfocus.com/bid/20241 - http://www.vupen.com/english/advisories/2007/1332 - http://www.osvdb.org/29264 - http://secunia.com/advisories/22823 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566 - http://www.redhat.com/support/errata/RHSA-2006-0697.html - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html
hat.com/support/errata/RHSA-2006-0697.html - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html - http://secunia.com/advisories/22183 - http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2 - http://www.vupen.com/english/advisories/2007/0930 - http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html - http://secunia.com/advisories/22926 - http://secunia.com/advisories/22173 - http://securitytracker.com/id?1016940 - http://secunia.com/advisories/22208 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - http://secunia.com/advisories/22245 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://secunia
secunia.com/advisories/22245 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://secunia.com/advisories/22196 - http://www.debian.org/security/2006/dsa-1212 - http://www.redhat.com/support/errata/RHSA-2006-0698.html - http://secunia.com/advisories/22158 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:179 - http://www.debian.org/security/2006/dsa-1189 - http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm - http://secunia.com/advisories/24479 - http://www.openwall.com/lists/oss-security/2024/07/01/3 - http://www.openwall.com/lists/oss-security/2024/07/28/3 - https://www.openwall.com/lists/oss-security/2024/07/28/3
CVE ID: CVE-2006-5052 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20245 - http://www.securityfocus.com/archive/1/447861/100/200/threaded - http://openssh.org/txt/release-4.4 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://security.gentoo.org/glsa/glsa-200611-06.xml -
lease-4.4 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://security.gentoo.org/glsa/glsa-200611-06.xml - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://www.osvdb.org/29266 - http://docs.info.apple.com/article.html?artnum=305214 - http://secunia.com/advisories/27588 - https://issues.rpath.com/browse/RPL-681 - http://securitytracker.com/id?1016939 - http://support.avaya.com/elmodocs2/security/ASA-2007-527.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29255 - http://sec
definition/oval%3Aorg.mitre.oval%3Adef%3A10178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29255 - http://secunia.com/advisories/22495 - http://secunia.com/advisories/22823 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566 - http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2 - http://www.redhat.com/support/errata/RHSA-2007-0703.html - http://rhn.redhat.com/errata/RHSA-2006-0697.html - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/28320 - http://secunia.com/advisories/22173 - http://www.redhat.com/support/errata/RHSA-2007-0540.html - http://secunia.com/advisories/22158 - http://secunia.com/
3 - http://www.redhat.com/support/errata/RHSA-2007-0540.html - http://secunia.com/advisories/22158 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-5053 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29106 - https://www.exploit-db.com/exploits/2419 - http://secunia.com/advisories/22075 - http://www.vupen.com/english/advisories/2006/3763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29119 - http://www.securityfocus.com/bid/20166
CVE ID: CVE-2006-5054 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uye_nu parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29125 - http://www.securityfocus.com/bid/20168 - https://www.exploit-db.com/exploits/2423 - http://www.vupen.com/english/advisories/2006/3761
CVE ID: CVE-2006-5055 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.288Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29122 - http://securitytracker.com/id?1016914 - http://marc.info/?l=full-disclosure&m=115913461828660&w=2 - https://www.exploit-db.com/exploits/2424 - http://www.securityfocus.com/bid/20171 - http://www.vupen.
913461828660&w=2 - https://www.exploit-db.com/exploits/2424 - http://www.securityfocus.com/bid/20171 - http://www.vupen.com/english/advisories/2006/3760 - http://www.syntaxcms.org/content/article/detail/513
CVE ID: CVE-2006-5056 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitrary web script or HTML via the destination parameter in the Login view. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22092 - http://www.securityfocus.com/bid/20174 - http://www.vupen.com/english/advisories/2006/3778 - http://securityreason.com/securityalert/1641 - http://www.securityfocus.com/archive/1/446896/100/0/threaded
CVE ID: CVE-2006-5057 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1640 - http://secunia.com/advisories/22122 - http://www.securityfocus.com/bid/20172 - http://www.vupen.com/english/advisories/2006/3781 - http://www.securityfocus.com/archive/1/446909/100/0/thread
d/20172 - http://www.vupen.com/english/advisories/2006/3781 - http://www.securityfocus.com/archive/1/446909/100/0/threaded
CVE ID: CVE-2006-5058 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the "callvote map" command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29129 - http://secunia.com/advisories/22078 - http://aluigi.altervista.org/adv/codmapbof-adv.txt - http://www.securityfocus.com/bid/20180
CVE ID: CVE-2006-5059 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1645 - http://www.vupen.com/english/advisories/2006/3858 - http://www.se
nces: - http://securityreason.com/securityalert/1645 - http://www.vupen.com/english/advisories/2006/3858 - http://www.securityfocus.com/archive/1/446911/100/0/threaded - http://secunia.com/advisories/22211 - http://www.securityfocus.com/bid/20178
CVE ID: CVE-2006-5060 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29131 - http://securityreason.com/securityalert/1649 - http://secunia.com/advisories/22077 - http://www.securityfocus.com/archive/1/446879/100/0/threaded - http://www.securityfocus.com/bid/20162 - http://www.vupen
http://www.securityfocus.com/archive/1/446879/100/0/threaded - http://www.securityfocus.com/bid/20162 - http://www.vupen.com/english/advisories/2006/3766
CVE ID: CVE-2006-5061 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29123 - http://www.securityfocus.com/bid/20167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29127 - http://secunia.com/advisories/22070 - http://www.vupen.com/english/advisories/2006/3765 - https://www.exploit-db.com/exploits/2422
CVE ID: CVE-2006-5062 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2428 - http://www.vupen.com/english/advisories/2006/3772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29139 - http://www.securityfocus.com/bid/20184 - http://secunia.com/advisories/22121
CVE ID: CVE-2006-5063 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20181 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=389361 - http://secunia.com/advisories/23580 - http://secunia.com/advisories/22057 - http://www.debian.org/security/2006/dsa-1242 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29137
CVE ID: CVE-2006-5064 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31367 - http://www.securityfocus.com/bid/20202 - http://securitytracker.com/id?
iner: References: - http://www.osvdb.org/31367 - http://www.securityfocus.com/bid/20202 - http://securitytracker.com/id?1017258 - http://www.osvdb.org/31369 - http://www.osvdb.org/31368
CVE ID: CVE-2006-5065 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20165 - https://www.exploit-db.com/exploits/2420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29120 - http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=mark
loud.com/vulnerabilities/29120 - http://zoomstats.cvs.sourceforge.net/zoomstats/zoomstats/libs/dbmax/mysql.php?view=markup
CVE ID: CVE-2006-5066 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in index.php or the (2) do parameter in admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20203 - http://www.securityfocus.com/archive/1/447002/100/0/threaded - http://securityreason.com/securityalert/1648 - http://www.securityfocus.com/archive/1/448693/100/0/threaded - https://
- http://securityreason.com/securityalert/1648 - http://www.securityfocus.com/archive/1/448693/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29175
CVE ID: CVE-2006-5067 State: PUBLISHED Published: 2006-09-28T00:00:00 Last Updated: 2024-08-07T19:32:23.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446882/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29133 - http://www.securityfocus.