Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4133 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SAP Internet Graphics Service (IGS) 6.40 and earlier, and 7.00 and earlier, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via an HTTP request with an ADM:GETLOGFILE command and a long portwatcher argument, which triggers the overflow during error message construction when the _snprintf function returns a negative value that is used in a memcpy operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/
mcpy operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/472889/100/0/threaded - http://www.securityfocus.com/bid/19470 - http://www.vupen.com/english/advisories/2006/3267 - http://www.securityfocus.com/archive/1/457286/100/0/threaded - http://securitytracker.com/id?1016675 - http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Buffer_Overflow.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/28334 - http://www.securityfocus.com/archive/1/442840/100/0/threaded - http://securitytracker.com/id?1017534 - http://secunia.com/advisories/21448 - http://securityreason.com/securityalert/1386 - http://www.kb.cert
com/id?1017534 - http://secunia.com/advisories/21448 - http://securityreason.com/securityalert/1386 - http://www.kb.cert.org/vuls/id/259540
CVE ID: CVE-2006-4134 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:45.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability related to a "design flaw" in SAP Internet Graphics Service (IGS) 6.40 and earlier and 7.00 and earlier allows remote attackers to cause a denial of service (service shutdown) via certain HTTP requests. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115524314804055&w=2 - http://www.securityfocus.com/bid/19469 - http://www.vupen.com/e
s: - http://marc.info/?l=bugtraq&m=115524314804055&w=2 - http://www.securityfocus.com/bid/19469 - http://www.vupen.com/english/advisories/2006/3267 - http://securitytracker.com/id?1016675 - http://securityreason.com/securityalert/1390 - http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Denial_of_Service.pdf - http://www.securityfocus.com/archive/1/442838/100/0/threaded - http://secunia.com/advisories/21448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28328
CVE ID: CVE-2006-4135 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cal_config.inc.php in Calendarix 0.7.20060401 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the calpath parameter. NOTE: this issue has been disputed by a third party, who says that the affected $calpath variable is set to a constant value in the beginning of the script. CVE concurs that the initial report is invalid Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-August/000975.html - https:/
t Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-August/000975.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28349 - http://www.securityfocus.com/archive/1/443292/100/0/threaded - http://www.securityfocus.com/archive/1/443225/100/0/threaded - http://securitytracker.com/id?1016694 - http://www.osvdb.org/28284 - http://www.securityfocus.com/archive/1/443018/100/0/threaded - http://www.securityfocus.com/archive/1/443152/100/0/threaded
CVE ID: CVE-2006-4136 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.1.0.1 have unspecified impact and attack vectors involving (1) "SOAP requests and responses", (2) mbean, (3) ThreadIdentitySupport, and possibly others. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK25199&apar=only - http://www.vupen.com/english/advisories/2006/3262 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only - http://www-1.ibm.com/support/docview.wss?rs=18
3262 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK24334&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://www.securityfocus.com/bid/19463 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK26498&apar=only - http://secunia.com/advisories/21440
CVE ID: CVE-2006-4137 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/search.wss?rs=0&q=PK28408&apar=only - http://www.vupen.com/english/advisories/2006/3262 - http://www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=
www-1.ibm.com/support/search.wss?rs=0&q=PK27547&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=PK27857&apar=only - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27007951 - http://www.securityfocus.com/bid/19463 - http://secunia.com/advisories/21440
CVE ID: CVE-2006-4138 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Microsoft Windows Help File viewer (winhlp32.exe) allow user-assisted attackers to execute arbitrary code via crafted HLP files. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1382 - http://www.securityfocus.com/bid/19490 - http://www.securityfocus.com/archive/1/443034/100/0/threaded - http://www.securityfocus.com/archive/1/443039/100/0/threaded
CVE ID: CVE-2006-4139 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19493 - http://www.vupen.com/english/advisories/2006/3274 - http://securitytracker.com/id?1016690 - http://secunia.com/advisories/21471 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102569-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
tp://sunsolve.sun.com/search/document.do?assetkey=1-26-102569-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28373
CVE ID: CVE-2006-4140 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444227/100/0/threaded - http://www.paessler.com/ipcheck/history - http://www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d949
readed - http://www.paessler.com/ipcheck/history - http://www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d9498338797c6ea3cc6733 - http://securityreason.com/securityalert/1389 - http://secunia.com/advisories/21468 - http://www.securityfocus.com/bid/19473 - http://www.securityfocus.com/archive/1/442822/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28341 - http://securitytracker.com/id?1016676 - http://www.vupen.com/english/advisories/2006/3259
CVE ID: CVE-2006-4141 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) sortby and (2) sortorder parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1383 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28332 - http://www.securityfocus.com/archive/1/442880/100/0/threaded
CVE ID: CVE-2006-4142 State: PUBLISHED Published: 2006-08-14T23:00:00 Last Updated: 2024-08-07T18:57:46.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in extra/online.php in Virtual War (VWar) 1.5.0 R14 and earlier allows remote attackers to execute arbitrary SQL commands via the n parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2170 - http://www.securityfocus.com/bid/19472 - http://www.securityfocus.com/archive/1/442989/100/0/threaded - http://www.attrition.org/pipermail/vim/2007-April/001519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28323 - http://www.vwar.de/ - ht
rmail/vim/2007-April/001519.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28323 - http://www.vwar.de/ - http://securityreason.com/securityalert/1384
CVE ID: CVE-2006-4143 State: PUBLISHED Published: 2006-08-15T00:00:00 Last Updated: 2024-08-07T18:57:46.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear FVG318 running firmware 1.0.40 allows remote attackers to cause a denial of service (router reset) via TCP packets with bad checksums. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19468/info - http://securityreason.com/securityalert/1388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28346 - http://www.securityfocus.com/archive/1/442870/100/0/threaded
CVE ID: CVE-2006-4144 State: PUBLISHED Published: 2006-08-15T23:00:00 Last Updated: 2024-08-07T18:57:46.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the ReadSGIImage function in sgi.c in ImageMagick before 6.2.9 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via large (1) bytes_per_pixel, (2) columns, and (3) rows values, which trigger a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28372 - http://www.securityfocus.com/bid/19507 - http://secunia.com/advisories/2
nge.xforce.ibmcloud.com/vulnerabilities/28372 - http://www.securityfocus.com/bid/19507 - http://secunia.com/advisories/21671 - http://secunia.com/advisories/21832 - http://www.overflow.pl/adv/imsgiheap.txt - http://www.novell.com/linux/security/advisories/2006_50_imagemagick.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11129 - http://www.securityfocus.com/archive/1/443362/100/0/threaded - https://issues.rpath.com/browse/RPL-605 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:155 - http://security.gentoo.org/glsa/glsa-200609-14.xml - http://secunia.com/advisories/22096 - http://secunia.com/advisories/21621 - ftp://patches.sgi.com/
/glsa-200609-14.xml - http://secunia.com/advisories/22096 - http://secunia.com/advisories/21621 - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://www.ubuntu.com/usn/usn-337-1 - http://www.redhat.com/support/errata/RHSA-2006-0633.html - http://secunia.com/advisories/21462 - http://securitytracker.com/id?1016699 - http://secunia.com/advisories/22998 - http://www.debian.org/security/2006/dsa-1213 - http://securityreason.com/securityalert/1385 - http://secunia.com/advisories/22036 - http://www.securityfocus.com/archive/1/443208/100/0/threaded - http://secunia.com/advisories/21525
CVE ID: CVE-2006-4145 State: PUBLISHED Published: 2006-08-21T19:00:00 Last Updated: 2024-08-07T18:57:46.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Universal Disk Format (UDF) filesystem driver in Linux kernel 2.6.17 and earlier allows local users to cause a denial of service (hang and crash) via certain operations involving truncated files, as demonstrated via the dd command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21934 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/27227 - http://www.novell.c
www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/27227 - http://www.novell.com/linux/security/advisories/2007_53_kernel.html - http://secunia.com/advisories/21695 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10796 - http://secunia.com/advisories/31685 - http://lkml.org/lkml/2006/6/16/6 - http://www.redhat.com/support/errata/RHSA-2008-0665.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:182 - http://secunia.com/advisories/22382 - http://secunia.com/advisories/23474 - http://www.vupen.com/english/advisories/2006/3308 - http://www.ubuntu.com/usn/usn-346-1 - https://issues.rpath.com/browse/
tp://www.vupen.com/english/advisories/2006/3308 - http://www.ubuntu.com/usn/usn-346-1 - https://issues.rpath.com/browse/RPL-611 - http://secunia.com/advisories/21515 - http://www.securityfocus.com/archive/1/444887/100/0/threaded - http://www.securityfocus.com/bid/19562 - http://support.avaya.com/elmodocs2/security/ASA-2008-365.htm - http://secunia.com/advisories/22093 - http://secunia.com/advisories/21711 - http://www.debian.org/security/2006/dsa-1184 - http://secunia.com/advisories/31229
CVE ID: CVE-2006-4146 State: PUBLISHED Published: 2006-08-31T22:00:00 Last Updated: 2024-08-07T18:57:46.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the (1) DWARF (dwarfread.c) and (2) DWARF2 (dwarf2read.c) debugging code in GNU Debugger (GDB) 6.5 allows user-assisted attackers, or restricted users, to execute arbitrary code via a crafted file with a location block (DW_FORM_block) that contains a large number of operations. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2007-September/065902.html - http://www.vupen.com/english/advisories/2006/4283 - http://secunia.com/advisories/25098 -
e/2007-September/065902.html - http://www.vupen.com/english/advisories/2006/4283 - http://secunia.com/advisories/25098 - http://security.gentoo.org/glsa/glsa-200711-23.xml - http://secunia.com/advisories/25894 - http://www.redhat.com/support/errata/RHSA-2007-0469.html - http://www.vupen.com/english/advisories/2007/3229 - http://lists.apple.com/archives/security-announce/2006/Oct/msg00000.html - http://www.osvdb.org/28318 - http://securitytracker.com/id?1017138 - http://support.avaya.com/elmodocs2/security/ASA-2007-253.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10463 - http://www.redhat.com/support/errata/RHSA-2007-0229.html - http://secunia.c
nition/oval%3Aorg.mitre.oval%3Adef%3A10463 - http://www.redhat.com/support/errata/RHSA-2007-0229.html - http://secunia.com/advisories/22662 - http://secunia.com/advisories/25632 - http://secunia.com/advisories/25934 - http://docs.info.apple.com/article.html?artnum=304669 - http://www.vupen.com/english/advisories/2006/3433 - http://secunia.com/advisories/26909 - http://secunia.com/advisories/27706 - http://secunia.com/advisories/21713 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204841 - http://secunia.com/advisories/22205 - http://www.securityfocus.com/bid/19802 - ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc - http://www.ubuntu.com/usn/usn-356-1
CVE ID: CVE-2006-4154 State: PUBLISHED Published: 2006-10-16T19:00:00 Last Updated: 2024-08-07T18:57:46.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20527 - http://securitytracker.com/id?1017062 - http://secunia.com/advisories/22549 - http://www.osvdb.org/29536 - http://labs.idefense.com/intelligence/vulnerabilities/display.php
ia.com/advisories/22549 - http://www.osvdb.org/29536 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421 - http://www.vupen.com/english/advisories/2006/4033 - http://security.gentoo.org/glsa/glsa-200610-12.xml - http://secunia.com/advisories/22458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29550 - http://www.kb.cert.org/vuls/id/366020
CVE ID: CVE-2006-4155 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in func_topic_threaded.php (aka threaded view mode) in Invision Power Board (IPB) before 2.1.7 21013.60810.s allows remote attackers to "access posts outside the topic." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21442 - http://forums.invisionpower.com/index.php?&showtopic=225755 - http://www.vupen.com/english/advisories/2006/3260
CVE ID: CVE-2006-4156 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate. CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type Additional Analyst Notes: - CVE Program Container: References: -
ade several significant errors regarding this bug type Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19458 - http://www.securityfocus.com/archive/1/442867/100/0/threaded - http://securityreason.com/securityalert/1391 - http://www.securityfocus.com/archive/1/443153/100/0/threaded
CVE ID: CVE-2006-4157 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Yet another Bulletin Board (YaBB) allows remote attackers to inject arbitrary web script or HTML via the categories parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442817/100/0/threaded - http://www.securityfocus.com/bid/19460 - http://securitytracker.com/id?1016684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28324
CVE ID: CVE-2006-4158 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27893 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28312 - http://secunia.com/advisories/21469 - http://www.vupen.com/english/advisories/2006/3256 - http://www.securityfocus.com/bid/19466 - https://www.exploit-db.com/exploits/2165
CVE ID: CVE-2006-4159 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:45.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Chaussette 080706 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _BASE parameter to scripts in Classes/ including (1) Evenement.php, (2) Event.php, (3) Event_for_month.php, (4) Event_for_week.php, (5) My_Log.php, (6) My_Smarty.php, and possibly (7) Event_for_month_per_day.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27899 - http://www.osvdb.org/27900 - http://www.osvdb.org/27902 - https://www.e
iner: References: - http://www.osvdb.org/27899 - http://www.osvdb.org/27900 - http://www.osvdb.org/27902 - https://www.exploit-db.com/exploits/2169 - http://www.osvdb.org/27901 - http://secunia.com/advisories/21489 - http://www.osvdb.org/27898 - http://www.vupen.com/english/advisories/2006/3269 - http://www.osvdb.org/27897 - http://www.securityfocus.com/bid/19480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28327
CVE ID: CVE-2006-4160 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Tony Bibbs and Vincent Furia MVCnPHP 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the glConf[path_library] parameter to (1) BaseCommand.php, (2) BaseLoader.php, and (3) BaseView.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2173 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28339 - http://www.osvdb.org/27895 - http://www.osvdb.org/27894 - http://www.vupen.com/english/advisories/200
rabilities/28339 - http://www.osvdb.org/27895 - http://www.osvdb.org/27894 - http://www.vupen.com/english/advisories/2006/3268 - http://www.osvdb.org/27896 - http://secunia.com/advisories/21455 - http://www.securityfocus.com/bid/19481
CVE ID: CVE-2006-4161 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the avatar_gallery action in profile.php in XennoBB 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19446 - http://www.securityfocus.com/archive/1/442881/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28337 - http://securityreason.com/securityalert/1395 - http://www.surfionline.com/security_advisories/2006081
rabilities/28337 - http://securityreason.com/securityalert/1395 - http://www.surfionline.com/security_advisories/20060810_xennobb_avatar_gallery_transversal.txt - http://secunia.com/advisories/21483
CVE ID: CVE-2006-4162 State: PUBLISHED Published: 2006-08-16T21:00:00 Last Updated: 2024-08-07T18:57:46.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Dragonfly CMS 9.0.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the search field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28333 - http://www.securityfocus.com/archive/1/442885/100/0/threaded - http://securityreason.com/securityalert/1394