Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
halerts/TA07-072A.html - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://www.vupen.com/english/advisories/2006/3079 - http://www.securityfocus.com/bid/19279 - http://www.ubuntu.com/usn/usn-338-1 - http://secunia.com/advisories/31226 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10468 - http://docs.info.apple.com/article.html?artnum=305214 - http://www.redhat.com/support/errata/RHSA-2008-0768.html - http://secunia.com/advisories/21382 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:149 - http://secunia.com/advisories/22080 - http://secuni
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:149 - http://secunia.com/advisories/22080 - http://secunia.com/advisories/21770 - http://secunia.com/advisories/21685 - http://dev.mysql.com/doc/refman/5.0/en/news-5-0-24.html - http://dev.mysql.com/doc/refman/4.1/en/news-4-1-21.html - http://securitytracker.com/id?1016617 - http://bugs.mysql.com/bug.php?id=15195 - http://secunia.com/advisories/30351 - http://www.vupen.com/english/advisories/2007/0930 - http://www.redhat.com/support/errata/RHSA-2007-0083.html - https://issues.rpath.com/browse/RPL-568 - http://www.redhat.com/support/errata/RHSA-2008-0364.html - http://secunia.com/advisories/24479
CVE ID: CVE-2006-4032 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:46.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417. Additional Analyst Notes: - CVE Program Container: References: - http://www.cisco.com/warp/public/707/cisco-sr-20060802-sip.shtml - http://secunia.com/advisories/21335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28185 - http://securitytracker.com/id?1016627 - http://www.securityfocus.
//exchange.xforce.ibmcloud.com/vulnerabilities/28185 - http://securitytracker.com/id?1016627 - http://www.securityfocus.com/bid/19309 - http://www.osvdb.org/27760 - http://www.vupen.com/english/advisories/2006/3126 - http://www.blackhat.com/html/bh-usa-06/bh-usa-06-speakers.html#Endler
CVE ID: CVE-2006-4033 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:45.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28102 - http://secunia.com/advisories/21256 - http://www.securityfocus.com/archive/1/441822/100/0/threaded - http://www.securityfocus.com/bid/19263 - http://www.osvdb.org/27667 - http://www7a.big
archive/1/441822/100/0/threaded - http://www.securityfocus.com/bid/19263 - http://www.osvdb.org/27667 - http://www7a.biglobe.ne.jp/~schezo/ - http://securitytracker.com/id?1016615 - http://vuln.sg/lhaplus152-en.html - http://securityreason.com/securityalert/1351 - http://www.vupen.com/english/advisories/2006/3076
CVE ID: CVE-2006-4034 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:44.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.solpotcrew.org/adv/solpot-adv-04.txt - http://www.securityfocus.com/archive/1/442126/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28207 - http://www.securityfocus.com/bid/19335
CVE ID: CVE-2006-4035 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:44.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28222 - http://securityreason.com/securityalert/1350 - http://www.frsirt.com/english/reference/17541 - http://archives.neohapsis.com/archives/bugtraq/2006-08/0080.html - http://www.vupen.com/english/advisories/2006/3153 - http://www.securityfocu
sis.com/archives/bugtraq/2006-08/0080.html - http://www.vupen.com/english/advisories/2006/3153 - http://www.securityfocus.com/bid/19344 - http://secunia.com/advisories/21356
CVE ID: CVE-2006-4036 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:44.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28223 - http://secunia.com/advisories/21353 - http://www.securityfocus.com/archive/1/444901/100/0/threaded - http://www.vupen.com/english/ad
ia.com/advisories/21353 - http://www.securityfocus.com/archive/1/444901/100/0/threaded - http://www.vupen.com/english/advisories/2006/3156 - http://securityreason.com/securityalert/1348 - http://www.securityfocus.com/archive/1/442152/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-September/001017.html
CVE ID: CVE-2006-4037 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:45.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21322 - http://www.irmplc.com/Vendor_alerts.htm#alert8 - http://www.securityfocus.com/bid/19328 - http://www.vupen.com/english/advisories/2006/3141
CVE ID: CVE-2006-4038 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:45.245Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gastname or (2) gastwohnort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=115464286427745&w=2 - http://www.vupen.com/english/advisories/2006/3155 - http://secunia.com/advisories/21357 - http://www.securityfocus.com/archive/1/442205/100/200/threaded - http://www.securityfocus.com/bid/19343
visories/21357 - http://www.securityfocus.com/archive/1/442205/100/200/threaded - http://www.securityfocus.com/bid/19343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28219
CVE ID: CVE-2006-4039 State: PUBLISHED Published: 2006-08-09T22:00:00 Last Updated: 2024-08-07T18:57:44.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=115464286427745&w=2 - http://www.vupen.com/english/advisories/2006/3155 - http://secunia.com/advisories/21357 - http://www.securityfocus.com/archive/1/442205/100/200/threaded - https://exchange.xforce.ibmcloud.com/v
visories/21357 - http://www.securityfocus.com/archive/1/442205/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28218 - http://www.securityfocus.com/bid/19343
CVE ID: CVE-2006-4040 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24725 - http://secunia.com/advisories/19680 - https://www.exploit-db.com/exploits/2093 - http://www.securityfocus.com/bid/19246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28347 - http://www.vupen.com/english/advisories/2006/1384
CVE ID: CVE-2006-4041 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200608-10.xml - http://secunia.com/advisories/20494 - http://www.securityfocus.com/bid/19367 - http://www.ubuntu.com/usn/usn-367-1 - http://secunia.com/advisories/21362 - http://secunia.com/advisories/22481 - http://www.vupen.com/english/advisories/2
- http://secunia.com/advisories/21362 - http://secunia.com/advisories/22481 - http://www.vupen.com/english/advisories/2006/2209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26992 - http://pike.ida.liu.se/download/notes/7.6.86.xml
CVE ID: CVE-2006-4042 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:45.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3179 - http://www.securityfocus.com/bid/19362 - http://www.securityfocus.com/archive/1/442323/100/0/threaded - https://www.exploit-db.com/exploits/2118 - http://secunia.com/advisories/21376 - https:
rchive/1/442323/100/0/threaded - https://www.exploit-db.com/exploits/2118 - http://secunia.com/advisories/21376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28241 - http://securityreason.com/securityalert/1347 - http://retrogod.altervista.org/mybloggie_214_sql.html
CVE ID: CVE-2006-4043 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:45.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3179 - http://www.securityfocus.com/archive/1/442323/100/0/threaded - https://www.exploit-db.com/exploits/2118 - http://secunia.com/advisories/21376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28242
-db.com/exploits/2118 - http://secunia.com/advisories/21376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28242 - http://securityreason.com/securityalert/1347 - http://retrogod.altervista.org/mybloggie_214_sql.html
CVE ID: CVE-2006-4044 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUT_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21386 - http://downloads.securityfocus.com/vulnerabilities/exploits/PHPCabinetRFIAugust052006.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28238 - http://www.securityfocus.com/bid/19359 - http://archives.neohapsis.com/arc
e.xforce.ibmcloud.com/vulnerabilities/28238 - http://www.securityfocus.com/bid/19359 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0146.html - http://www.vupen.com/english/advisories/2006/3168
CVE ID: CVE-2006-4045 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:46.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27798 - http://www.vupen.com/english/advisories/2006/3169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28248 - http://secunia.com/advisories/21375 - https://www.exploit-db.com/exploits/2121 - http://www.securityfocus.com/bid/19385
CVE ID: CVE-2006-4046 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via (1) a large .S3M file handled by the mpLoadS3M function, (2) a crafted .IT file handled by the itplayerclass::module::load function, (3) a crafted .ULT file handled by the mpLoadULT function, or (4) a crafted .AMS file handled by the mpLoadAMS function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/adviso
ed by the mpLoadAMS function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28104 - http://securityreason.com/securityalert/1349 - http://www.securityfocus.com/bid/19262 - https://www.exploit-db.com/exploits/2094 - http://www.securityfocus.com/archive/1/441730/100/100/threaded - http://aluigi.altervista.org/adv/ocpbof-adv.txt - http://www.vupen.com/english/advisories/2006/3078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28106 - http://securitytracker.com/id?1016611 - https://exchange.xforce.ibmcloud.com/vulnerabi
cloud.com/vulnerabilities/28106 - http://securitytracker.com/id?1016611 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28105
CVE ID: CVE-2006-4047 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:45.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21347 - http://www.vupen.com/english/advisories/2006/3167 - http://www.securityfocus.com/bid/19419 - http://www.osvdb.org/27788 - https://exchange.xforce.ibmcloud.com/vuln
6/3167 - http://www.securityfocus.com/bid/19419 - http://www.osvdb.org/27788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28263
CVE ID: CVE-2006-4048 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration section when originating from the same IP address as the administrator. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21347 - http://www.securityfocus.com/bid/19421 - http://www.vupen.com/english/advisories/2006/3167 - http://www.osvdb.
s/21347 - http://www.securityfocus.com/bid/19421 - http://www.vupen.com/english/advisories/2006/3167 - http://www.osvdb.org/27789 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28264
CVE ID: CVE-2006-4049 State: PUBLISHED Published: 2006-08-09T23:00:00 Last Updated: 2024-08-07T18:57:44.397Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-101924-1 - http://www.securityfocus.com/bid/19394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28260 - http://www.vupen.com/english/advisories/2006/3226 - http://securitytracker.com/id?1016647 - http://secunia.com/advisories/21398
CVE ID: CVE-2006-4050 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:44.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1352 - http://dwalker.co.uk/forum/viewtopic.php?t=517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28233 - http://www.securityfocus.com/bid/19354 - http://www.vupen.com/english/advisories/2006/3170
d.com/vulnerabilities/28233 - http://www.securityfocus.com/bid/19354 - http://www.vupen.com/english/advisories/2006/3170 - http://www.securityfocus.com/archive/1/442242/100/0/threaded - http://secunia.com/advisories/21373
CVE ID: CVE-2006-4051 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:44.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3194 - http://securityreason.com/securityalert/1369 - https://www.exploit-db.com/exploits/2120 - http://advisories.echo.or.id/adv/adv43-matdhule-2006.txt - http://www.securityfocus.com/archive/1/442219/100/0/threaded - http:
advisories.echo.or.id/adv/adv43-matdhule-2006.txt - http://www.securityfocus.com/archive/1/442219/100/0/threaded - http://securitytracker.com/id?1016639 - http://www.securityfocus.com/bid/19349
CVE ID: CVE-2006-4052 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php or (6) admin/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28247 - http://www.securityfocus.com/archive/1/442
svdb.org/27800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28247 - http://www.securityfocus.com/archive/1/442422/100/100/threaded - http://securitytracker.com/id?1016644 - http://secunia.com/advisories/21371 - http://www.osvdb.org/27802 - http://www.osvdb.org/27801 - http://www.osvdb.org/27803 - http://advisories.echo.or.id/adv/adv44-matdhule-2006.txt - http://www.vupen.com/english/advisories/2006/3171 - http://www.osvdb.org/27804 - http://www.osvdb.org/27805 - https://www.exploit-db.com/exploits/2119
CVE ID: CVE-2006-4053 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1355 - http://secunia.com/advisories/21359 - http://www.vupen.com/english/advisories/2006/3152 - http://www.osvdb.org/27765 - http://www.securityfocus.com/bid/19336 - http://www.securityfocus.com/archive/1/442140/100/0/threaded - htt
.org/27765 - http://www.securityfocus.com/bid/19336 - http://www.securityfocus.com/archive/1/442140/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28216 - http://www.bb-pcsecurity.de/sicherheit_282.htm
CVE ID: CVE-2006-4054 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) Vb8878b936c2bd8ae0cab parameter to (a) inc/sett_style.php or (b) inc/sett_smilies.php; or the (2) Vb6c4d0e18a204a63b38f, (3) V18a78b93c3adaaae84e2, or (4) V9ae5d2ca9e9e787969ff parameters to (c) inc/datei.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References:
; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21359 - http://www.vupen.com/english/advisories/2006/3152 - http://www.osvdb.org/27766 - http://www.osvdb.org/27767 - http://www.osvdb.org/27768
CVE ID: CVE-2006-4055 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:46.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php. NOTE: the copyright.php vector is already covered by CVE-2006-3993. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.c
eady covered by CVE-2006-3993. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28107 - http://secunia.com/advisories/21291 - http://sourceforge.net/forum/forum.php?thread_id=1546639&forum_id=369628 - http://www.securityfocus.com/bid/19326 - http://www.securityfocus.com/archive/1/442098/100/0/threaded - http://securityreason.com/securityalert/1354 - http://sourceforge.net/forum/forum.php?forum_id=597790
CVE ID: CVE-2006-4056 State: PUBLISHED Published: 2006-08-10T00:00:00 Last Updated: 2024-08-07T18:57:45.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. NOTE: portions of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21379 - http://www.securityfocus.com/bid/19378 - http://www.securityfocus.com/bid/19380