Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0767 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:48:55.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: CGIWrap before 3.10 allows remote attackers to obtain sensitive information via unknown attack vectors that cause errors in scripts that reveal system information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16669 - http://secunia.com/advisories/18797 - http://sourceforge.net/project/shownotes.php?release_id=393274&group_id=8209 - http://www.vupen.com/english/advisories/2006/0601 - http://sourceforge.net/project/showfiles.php?group_id=8209 - https://exchange.xforce.ibmcloud
ish/advisories/2006/0601 - http://sourceforge.net/project/showfiles.php?group_id=8209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24717
CVE ID: CVE-2006-0768 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:48:56.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kadu 0.4.3 allows remote attackers to cause a denial of service (application crash) via a large number of image send requests. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24720 - http://www.securityfocus.com/archive/1/425134/100/0/threaded - http://www.vupen.com/english/advisories/2006/0609 - http://www.piotrbania.com/all/adv/kadu-fun.txt - http://marc.info/?l=full-disclosure&m=114000770431441&w=2 - http://secunia.com/advisories/18824
CVE ID: CVE-2006-0769 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:48:55.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.ciac.org/ciac/bulletins/q-126.shtml - http://securitytracker.com/id?1015635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24680 - http://www.vupen.com/english/advisories/2006/0608 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1580 - http://sunsolve.sun.com/search/d
//oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1580 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102186-1 - http://secunia.com/advisories/18891 - http://www.securityfocus.com/bid/16658
CVE ID: CVE-2006-0770 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:48:55.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.php in MyBulletinBoard (MyBB) 1.0.4 allows remote attackers to inject arbitrary web script or HTML via a URL that is not sanitized before being returned as a link in "advanced details". NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24748 - http://www.vup
ces: - http://secunia.com/advisories/18866 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24748 - http://www.vupen.com/english/advisories/2006/0635 - http://www.osvdb.org/23264
CVE ID: CVE-2006-0771 State: PUBLISHED Published: 2006-02-18T21:00:00 Last Updated: 2024-08-07T16:48:55.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425286/100/0/threaded - http://secunia.com/advisories/18917 - h
er: References: - http://www.securityfocus.com/archive/1/425286/100/0/threaded - http://secunia.com/advisories/18917 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html - http://securityreason.com/securityalert/448 - http://aluigi.altervista.org/adv/sof2pbfs-adv.txt - http://www.securityfocus.com/bid/16703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24792
CVE ID: CVE-2006-0772 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to execute arbitrary SQL commands via unspecified vectors in the extended receiving box function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/23877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24621 - http://www.vupen.com/english/advisories/2006
lities/23877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24621 - http://www.vupen.com/english/advisories/2006/0532 - http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html - http://secunia.com/advisories/18817 - http://www.osvdb.org/23099
CVE ID: CVE-2006-0773 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitachi Business Logic - Container 02-03 through 03-00-/B on Windows, and 03-00 through 03-00-/B on Linux, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the extended receiving box function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16602 - http://www.vupen.com/english/advisories/2006/0532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24620 - http://www.hitachi-support.com/secu
/advisories/2006/0532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24620 - http://www.hitachi-support.com/security_e/vuls_e/HS06-002_e/index-e.html - http://secunia.com/advisories/18817
CVE ID: CVE-2006-0774 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:56.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, allows remote attackers to execute arbitrary SQL commands via the $_sess_id_set variable, which is usually derived from PHPSESSID. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16598 - http://www.securityfocus.com/archive/1/424819/100/0/threaded - http://www.vupen.com/english/advisories/2006/0528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24673 -
aded - http://www.vupen.com/english/advisories/2006/0528 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24673 - http://www.securityfocus.com/archive/1/433132/30/5160/threaded - http://www.gulftech.org/?node=research&article_id=00099-02112006 - http://secunia.com/advisories/18805 - http://www.osvdb.org/23104
CVE ID: CVE-2006-0775 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php (date.php) was originally reported, but this appears to be in error. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23185 - http://www.vupen.com/english/advisories/2006/0621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24617 - http://securityreason.com/securityalert/467 - htt
06/0621 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24617 - http://securityreason.com/securityalert/467 - http://attrition.org/pipermail/vim/2006-February/000549.html - http://www.evuln.com/vulns/74/summary.html - http://secunia.com/advisories/18893 - http://www.securityfocus.com/bid/16684
CVE ID: CVE-2006-0776 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18927 - http://www.securityfocus.com/bid/16711 - http://securitytracker.com/id?1015678 - http://www.evuln.com/vulns/77/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24644 - http://securityreason.com/securityalert/490 - http://www.osvdb.org/23182
ge.xforce.ibmcloud.com/vulnerabilities/24644 - http://securityreason.com/securityalert/490 - http://www.osvdb.org/23182 - http://www.vupen.com/english/advisories/2006/0640 - http://www.securityfocus.com/archive/1/426034/100/0/threaded
CVE ID: CVE-2006-0777 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in guestex.pl in Teca Scripts Guestex 1.0 allows remote attackers to execute arbitrary shell commands via the email parameter, possibly involving shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18927 - http://www.securityfocus.com/bid/16711 - http://securityreason.com/securityalert/489 - http://www.evuln.com/vulns/76/summary.html - http://www.osvdb.org/23183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24645 - http://www.se
6/summary.html - http://www.osvdb.org/23183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24645 - http://www.securityfocus.com/archive/1/425970/100/0/threaded - http://www.vupen.com/english/advisories/2006/0640
CVE ID: CVE-2006-0778 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:56.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in XMB Forums 1.9.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) $u2u_select array parameter to u2u.inc.php and (2) $val variable (fidpw0 cookie value) in today.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425084/100/0/threaded - http://www.vupen.com/english/advisories/2006/0529 - http://www.osvdb.org/23118 - http://www.securityfocus.com/bid/16604 - https://exchange.xforce.ibmcloud.com/vuln
6/0529 - http://www.osvdb.org/23118 - http://www.securityfocus.com/bid/16604 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24646 - http://secunia.com/advisories/18821 - http://www.osvdb.org/23117 - http://www.xmbforum.com/ - http://www.gulftech.org/?node=research&article_id=00100-02122006 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2006-0779 State: PUBLISHED Published: 2006-02-19T00:00:00 Last Updated: 2024-08-07T16:48:55.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in u2u.php in XMB Forums 1.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter, as demonstrated using a URL-encoded iframe tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425084/100/0/threaded - http://www.vupen.com/english/advisories/2006/0529 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24647 - http://www.securityfocus.com/bid/16604 - http://www.osvdb.org/23119
xchange.xforce.ibmcloud.com/vulnerabilities/24647 - http://www.securityfocus.com/bid/16604 - http://www.osvdb.org/23119 - http://www.xmbforum.com/ - http://www.gulftech.org/?node=research&article_id=00100-02122006 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2006-0780 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in weblog.pl in PerlBlog 1.09b and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24691 - http://www.securityfocus.com/archive/1/426260/100/0/threaded - http://evuln.com/vulns/81/summary.html - http://securityreason.com/securityalert/508 - http://secunia.com/advisories/18924 - http://www.securit
81/summary.html - http://securityreason.com/securityalert/508 - http://secunia.com/advisories/18924 - http://www.securityfocus.com/bid/16707
CVE ID: CVE-2006-0781 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:55.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to read certain files via the month parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24690 - http://www.securityfocus.com/archive/1/426260/100/0/threaded - http://evuln.com/vulns/81/summary.html - http://securityreason.com/securityalert/508 - http://secunia.com/advisories/18924 - http://www.securityfocus.com/bid/16707
CVE ID: CVE-2006-0782 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in weblog.pl in PerlBlog 1.09b and earlier allows remote attackers to create arbitrary files and possibly execute arbitrary code via unspecified attack vectors related to improper handling of (1) the reply parameter, possibly involving injection of (2) the name parameter and (3) the body parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426260/100/0/threaded - http://evuln.com/vulns/81/summary.html - http://securityreason.com/securityale
cus.com/archive/1/426260/100/0/threaded - http://evuln.com/vulns/81/summary.html - http://securityreason.com/securityalert/508 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24692 - http://secunia.com/advisories/18924 - http://www.securityfocus.com/bid/16707
CVE ID: CVE-2006-0783 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote attackers to inject arbitrary web script or HTML via the comment_text parameter to the user comment page (/edit/Comment). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425180/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24836 - http://securityreason.com/securityalert/443 - http://secunia.com/advisories/18892 - http://www.osvdb.o
abilities/24836 - http://securityreason.com/securityalert/443 - http://secunia.com/advisories/18892 - http://www.osvdb.org/23267 - http://www.securityfocus.com/bid/16695
CVE ID: CVE-2006-0784 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:55.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request composed of "GET" followed by a space and two newlines, possibly triggering the crash due to missing arguments. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/441 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24762 - http://www.vupen.com/english/advisories/2006/0637 - http://secunia.com/advisories/18932 - http://www.securit
ies/24762 - http://www.vupen.com/english/advisories/2006/0637 - http://secunia.com/advisories/18932 - http://www.securityfocus.com/bid/16690 - http://www.securityfocus.com/archive/1/425169/100/0/threaded
CVE ID: CVE-2006-0785 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to include and execute arbitrary local files via a direct request with a path parameter with a null character and beginning with (1) '/' (slash) for an absolute pathname or (2) a drive letter (such as "C:"), which bypasses checks for ".." sequences and trailing ".php" extensions. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015640 - http://retrogod.altervista.org/
st Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015640 - http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html - http://www.securityfocus.com/archive/1/425196/100/0/threaded
CVE ID: CVE-2006-0786 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, allows remote attackers to conduct PHP remote file include attacks via a path parameter that specifies a (1) UNC share or (2) ftps URL, which bypasses the check for "http://", "ftp://", and "https://" URLs. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015640 - http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html - http://securityreason.com/securityalert/4
r.com/id?1015640 - http://retrogod.altervista.org/phpkit_161r2_incl_xpl.html - http://securityreason.com/securityalert/445 - http://www.securityfocus.com/archive/1/425196/100/0/threaded
CVE ID: CVE-2006-0787 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary strings into trackme.txt via the (1) trackFile, (2) trackArtist, and (3) trackTitle parameters, which can result in providing false information about songs, occupying excessive disk space with very long parameter values, and storing executable code that might be invoked through a different vulnerability. NOTE: since this issue, as described by the original researcher, is entirely dependent on the presence of a
lnerability. NOTE: since this issue, as described by the original researcher, is entirely dependent on the presence of another vulnerability, it could be argued that Wimpy cannot be responsible for how its data file is processed by applications outside of its control. Since this issue might only be useful as a facilitator manipulation in another vulnerability, perhaps it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16696 - http://secunia.com/advisories/18900 - http://www.xorcrew.net/xpa/XPA-WimpyMP3Player.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24770
CVE ID: CVE-2006-0788 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kyocera 3830 (aka FS-3830N) printers have a back door that allows remote attackers to read and alter configuration settings via strings that begin with "!R!SIOP0", as demonstrated using (1) a connection to to TCP port 9100 or (2) the UNIX lp command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24772 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html - http://www.osvdb.org/23245 - http://www.vupen.com/english/advisories/2006/0620 -
ves/fulldisclosure/2006-02/0344.html - http://www.osvdb.org/23245 - http://www.vupen.com/english/advisories/2006/0620 - http://evader.wordpress.com/2006/02/16/kyocera-printers/ - http://www.securityfocus.com/bid/16685 - http://secunia.com/advisories/18896
CVE ID: CVE-2006-0789 State: PUBLISHED Published: 2006-02-19T11:00:00 Last Updated: 2024-08-07T16:48:56.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Certain unspecified Kyocera printers have a default "admin" account with a blank password, which allows remote attackers to access an administrative menu via a telnet session. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0344.html - http://www.osvdb.org/23246 - http://www.vupen.com/english/advisories/2006/0620 - http://evader.wordpress.com/2006/02/16/kyocera-printers/ - http://secunia.com/advisories/18896 - https://exchange.xforce.ibmcloud.com/vu
rdpress.com/2006/02/16/kyocera-printers/ - http://secunia.com/advisories/18896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24774
CVE ID: CVE-2006-0790 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:55.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rockliffe MailSite 7.0 and earlier allows remote attackers to cause a denial of service by sending crafted LDAP packets to port 389/TCP, as demonstrated by the ProtoVer LDAP testsuite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18888 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002926.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24686 - http://www.securityfocus.com/bid/16675 - http://www.vupen.com/english/advisories/2006/0598
CVE ID: CVE-2006-0791 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0618 - http://www.securityfocus.com/bid/16682 - http://securitytracker.com/id?1016273 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html - http://www.osvdb.org/23241 - http://www.securityfocus.com/archive/1/4970
com/archives/fulldisclosure/2006-02/0340.html - http://www.osvdb.org/23241 - http://www.securityfocus.com/archive/1/497093/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24723 - http://www.securityfocus.com/archive/1/435993/30/4650/threaded - http://secunia.com/advisories/18901 - http://www.xorcrew.net/xpa/XPA-HostAdmin.txt - http://www.securityfocus.com/archive/1/497133/100/0/threaded
CVE ID: CVE-2006-0792 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16706 - http://www.osvdb.org/23260 - http://secunia.com/advisories/18776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24749 - http://
b.org/23260 - http://secunia.com/advisories/18776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24749 - http://www.vupen.com/english/advisories/2006/0639