Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1464 State: PUBLISHED Published: 2006-05-12T20:00:00 Last Updated: 2024-08-07T17:12:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime MPEG4 (M4P) video format file. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/587937 - http://secunia.com/advisories/20069 - http://lists.apple.com/archives/security-announce/2006/May/msg00002.html - http://securitytracker.com/id?1016067 - http://www.us-cert.gov/cas/techalerts/TA06-132B.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26397 - http://
p://www.us-cert.gov/cas/techalerts/TA06-132B.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26397 - http://securityreason.com/securityalert/887 - http://www.securityfocus.com/bid/17953 - http://www.vupen.com/english/advisories/2006/1778 - http://www.securityfocus.com/archive/1/433831/100/0/threaded
CVE ID: CVE-2006-1465 State: PUBLISHED Published: 2006-05-12T20:00:00 Last Updated: 2024-08-07T17:12:22.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted QuickTime AVI video format file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20069 - http://lists.apple.com/archives/security-announce/2006/May/msg00002.html - http://securitytracker.com/id?1016067 - http://www.us-cert.gov/cas/techalerts/TA06-132B.html - http://securityreason.com/securityalert/887 - http://www.securityfocus.com/bid/17953 - http://www.vupen.com/english/
l - http://securityreason.com/securityalert/887 - http://www.securityfocus.com/bid/17953 - http://www.vupen.com/english/advisories/2006/1778 - http://www.securityfocus.com/archive/1/433831/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26399
CVE ID: CVE-2006-1466 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:12:22.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006/May/msg00004.html - http://securitytracker.com/id?1016143 - http://www.osvdb.org/25889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26634 - http://www.vupen.com/english/advisories/2006/1950 - http://secunia.com/advisories/20267 - htt
om/vulnerabilities/26634 - http://www.vupen.com/english/advisories/2006/1950 - http://secunia.com/advisories/20267 - http://www.securityfocus.com/bid/18091
CVE ID: CVE-2006-1467 State: PUBLISHED Published: 2006-06-29T23:00:00 Last Updated: 2024-08-07T17:12:22.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2601 - http://securitytracker.com/id?1016413 - http://www.zerodayinitiative.com/advisories/ZDI-06-020.html - http
s/2006/2601 - http://securitytracker.com/id?1016413 - http://www.zerodayinitiative.com/advisories/ZDI-06-020.html - http://secunia.com/advisories/20891 - http://www.kb.cert.org/vuls/id/907836 - http://www.securityfocus.com/archive/1/438812/100/0/threaded - http://docs.info.apple.com/article.html?artnum=303952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27481 - http://www.securityfocus.com/bid/18730
CVE ID: CVE-2006-1468 State: PUBLISHED Published: 2006-06-27T21:00:00 Last Updated: 2024-08-07T17:12:22.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of restricted files and folders within search results, which might allow remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016395 - http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html - http://www.securityfocus.com/bid/18686 - http://www.osvdb.org/26930 - https://exchange.xforce.ibmcloud.com/vulne
.html - http://www.securityfocus.com/bid/18686 - http://www.osvdb.org/26930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27477 - http://www.securityfocus.com/bid/18733 - http://secunia.com/advisories/20877 - http://www.vupen.com/english/advisories/2006/2566
CVE ID: CVE-2006-1469 State: PUBLISHED Published: 2006-06-27T22:00:00 Last Updated: 2024-08-07T17:12:22.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html - http://www.securityfocus.com/bid/18731 - http://www.securityfocus.com/bid/18686 - http://www.kb.cert.org/vuls/id/988356 - http://www.osvdb.org/26931 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
http://www.kb.cert.org/vuls/id/988356 - http://www.osvdb.org/26931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27478 - http://securitytracker.com/id?1016394 - http://secunia.com/advisories/20877 - http://www.vupen.com/english/advisories/2006/2566
CVE ID: CVE-2006-1470 State: PUBLISHED Published: 2006-06-27T22:00:00 Last Updated: 2024-08-07T17:12:22.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invalid LDAP request that triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26932 - http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html - http://www.securityfocus.com/bid/18686 - http://securitytracker.com/id?1016396 - http://www.kb.cert.org/vuls/id/652196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27480 - http://www.secur
- http://www.kb.cert.org/vuls/id/652196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27480 - http://www.securityfocus.com/bid/18728 - http://secunia.com/advisories/20877 - http://www.vupen.com/english/advisories/2006/2566
CVE ID: CVE-2006-1471 State: PUBLISHED Published: 2006-06-27T22:00:00 Last Updated: 2024-08-07T17:12:22.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to execute arbitrary code via format string specifiers that are not properly handled in a syslog call in the logging facility, as demonstrated by using a crafted plist file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006/Jun/msg00000.html - http://securitytracker.com/id?1016397 - http://www.securityfocus.com/bid/18686 - https://exchange.xfo
un/msg00000.html - http://securitytracker.com/id?1016397 - http://www.securityfocus.com/bid/18686 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27479 - http://www.securityfocus.com/archive/1/438699/100/0/threaded - http://www.osvdb.org/26933 - http://secunia.com/advisories/20877 - http://www.vupen.com/english/advisories/2006/2566 - http://www.securityfocus.com/bid/18724
CVE ID: CVE-2006-1472 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T17:12:22.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in AFP Server in Apple Mac OS X 10.3.9 allows remote attackers to determine names of unauthorized files and folders via unknown vectors related to the search results. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://secur
ies/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://securitytracker.com/id?1016620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28134
CVE ID: CVE-2006-1473 State: PUBLISHED Published: 2006-08-02T16:00:00 Last Updated: 2024-08-07T17:12:22.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in AFP Server for Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/575372 - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-
tp://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://securitytracker.com/id?1016620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28135 - http://www.osvdb.org/27731
CVE ID: CVE-2006-1474 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web Conferencing Pro allows remote attackers to inject arbitrary web script or HTML via the browser parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428971/100/0/threaded
CVE ID: CVE-2006-1475 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an application is executed using the NTFS Alternate Data Streams (ADS) filename:stream syntax, which might allow local users to launch a Trojan horse attack in which the victim does not obtain the alert that Windows Firewall would have produced for a non-ADS file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428970/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/
: - http://www.securityfocus.com/archive/1/428970/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25597 - http://www.securityfocus.com/archive/1/429111/100/0/threaded
CVE ID: CVE-2006-1476 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Windows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the application filename is ".exe" (with no characters before the "."), which might allow local user-assisted users to trick a user into unblocking a Trojan horse program, as demonstrated by a malicious ".exe" program in a folder named "Internet Explorer," which triggers a question about whether to unblock the "Internet Explorer" program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/arc
net Explorer" program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428970/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25598 - http://www.securityfocus.com/archive/1/429111/100/0/threaded
CVE ID: CVE-2006-1477 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow remote attackers to include and execute arbitrary PHP code via the abs_path parameter in (1) initiate.php, (2) waiting.php, (3) welcome.php, (4) admin/index.php, (5) javascript.php, (6) checkchat.php, and (7) blank.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24199 - http://www.securityfocus.com/archive/1/437741/100/0/threaded - http://www.osvdb.org/24194 - http://www.osvdb.org/24193 -
http://www.securityfocus.com/archive/1/437741/100/0/threaded - http://www.osvdb.org/24194 - http://www.osvdb.org/24193 - http://www.securityfocus.com/archive/1/428976/100/0/threaded - http://www.osvdb.org/24195 - http://secunia.com/advisories/19428 - http://www.vupen.com/english/advisories/2006/1137 - http://www.securityfocus.com/archive/1/437648/100/0/threaded - http://www.osvdb.org/24198 - http://www.osvdb.org/24197 - http://www.turnkeywebtools.com/forum/showthread.php?p=10415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25489 - http://www.worlddefacers.de/Public/WD-TMPLH.txt - http://www.osvdb.org/24196 - http://www.securityfocus.com/bid/18509
CVE ID: CVE-2006-1478 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as demonstrated by uploading PHP code in a gl_session cookie to users.php, which causes the code to be stored in error.log, which is then included by initiate.php. Additional Analyst Notes: - CVE Program Container: References: - http:/
ror.log, which is then included by initiate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428976/100/0/threaded - http://securityreason.com/securityalert/641 - http://secunia.com/advisories/19428 - http://www.turnkeywebtools.com/forum/showthread.php?p=10415 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25489 - http://www.worlddefacers.de/Public/WD-TMPLH.txt
CVE ID: CVE-2006-1479 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done) 0.5 allow remote attackers to inject arbitrary web script or HTML via the Description field in (1) newProject.php, (2) newList.php, and (3) newWaitingOn.php; the Title field in (4) newProject.php, (5) newList.php, (6) newWaitingOn.php, (7) newChecklist.php, (8) newContext.php, and (9) newGoal.php; the (10) Category Name field in newCategory.php; the (11) listTitle field in listReport.php; the (12) projectName field in projectRepo
ory Name field in newCategory.php; the (11) listTitle field in listReport.php; the (12) projectName field in projectReport.php; and the (13) checklistTitle field in checklistReport.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1203 - http://www.securityfocus.com/bid/17366 - http://www.osvdb.org/24156 - http://www.osvdb.org/24158 - http://osvdb.org/ref/24/24149-gtd-php.txt - http://www.osvdb.org/24151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25553 - http://www.osvdb.org/24154 - http://www.osvdb.org/24153 - http://www.osvdb.org/24149 - http://www.osvdb.org/24150 - http://www.osvdb.org/24152 - http://secunia.com/
b.org/24153 - http://www.osvdb.org/24149 - http://www.osvdb.org/24150 - http://www.osvdb.org/24152 - http://secunia.com/advisories/19512 - http://www.osvdb.org/24155 - http://www.osvdb.org/24157
CVE ID: CVE-2006-1480 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to include arbitrary files and execute commands by (1) injecting code into local log files via GET commands, then (2) accessing that log via a .. (dot dot) sequence and a trailing null (%00) byte in the skin2 COOKIE parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25443 - http://secunia.com/advisories/19400 - http://www.securityfocus
ps://exchange.xforce.ibmcloud.com/vulnerabilities/25443 - http://secunia.com/advisories/19400 - http://www.securityfocus.com/bid/17228 - http://www.vupen.com/english/advisories/2006/1108 - https://www.exploit-db.com/exploits/1608
CVE ID: CVE-2006-1481 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to execute arbitrary SQL commands and obtain usernames and passwords via the frm_search_in parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25436 - http://www.securityfocus.com/bid/17229 - https://www.exploit-db.com/exploits/1609 - http://www.vupen.com/english/advisories/2006/1106 - http://secunia.com/advisories/19412
CVE ID: CVE-2006-1482 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25437 - http://securityreason.com/securityalert/635 - http://www.securityfocus.com/archive/1/428899/100/0/threaded - http://www.osvdb.org/24264 - http://attrition.org/pipermail/vim/2006-March/000664.html
CVE ID: CVE-2006-1483 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot), (2) space, and (3) slash characters in the extension of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19341 - http://www.osvdb.org/24178 - http://securitytracker.com/id?1015837 - http://www.vupen.com/english/advisories/2006/1133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25485 - http://www.securityfocus.com/bid/17270 - http:/
2006/1133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25485 - http://www.securityfocus.com/bid/17270 - http://www.securityfocus.com/archive/1/429108/100/0/threaded - http://securityreason.com/securityalert/643 - http://secunia.com/secunia_research/2006-22/advisory/
CVE ID: CVE-2006-1484 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files via the "save as" dialog. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25501 - http://www.securityfocus.com/archive/1/429107/100/0/threaded - http://securitytracker.com/id?1015839 - http://www.securityfocus.com/bid/17284
CVE ID: CVE-2006-1485 State: PUBLISHED Published: 2006-03-29T01:00:00 Last Updated: 2024-08-07T17:12:22.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: gm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to execute arbitrary programs by uploading files to locations within the web root. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17271 - http://www.osvdb.org/24210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25496 - http://www.vupen.com/english/advisories/2006/11
org/24210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25496 - http://www.vupen.com/english/advisories/2006/1138 - http://secunia.com/advisories/19423
CVE ID: CVE-2006-1486 State: PUBLISHED Published: 2006-03-29T02:00:00 Last Updated: 2024-08-07T17:12:22.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) bamin, (2) bemin, (3) pmin, and (4) state parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25487 - http://secunia.com/advisories/19429 - http://www.vupen.com/english/advisories/2006/1128 - http://www.securityfocus.com/bid/17277 - http://pridels0.blogspot.com/20
://www.vupen.com/english/advisories/2006/1128 - http://www.securityfocus.com/bid/17277 - http://pridels0.blogspot.com/2006/03/realestatezone-42-multiple-xss-vuln.html
CVE ID: CVE-2006-1487 State: PUBLISHED Published: 2006-03-29T02:00:00 Last Updated: 2024-08-07T17:12:22.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the KnowledgeBase search module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1126 - http://www.securityfocus.com/bid/17276 - http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html - http://secunia.com/advisories/19431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
n-supporttrio-25-vuln.html - http://secunia.com/advisories/19431 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25495 - http://www.osvdb.org/24192
CVE ID: CVE-2006-1488 State: PUBLISHED Published: 2006-03-29T02:00:00 Last Updated: 2024-08-07T17:12:22.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via invalid (1) article or (2) print parameters in a kb action to index.php, or (3) an invalid category parameter to modules/KB/pdf.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1126 - http://pridels0.blogspot.com/2006/03/activecampaign-supporttrio-25-vuln.html - http://secunia.com/advisories/19431 - http://www.osvdb.org/24190
t.com/2006/03/activecampaign-supporttrio-25-vuln.html - http://secunia.com/advisories/19431 - http://www.osvdb.org/24190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25517 - http://www.osvdb.org/24191
CVE ID: CVE-2006-1489 State: PUBLISHED Published: 2006-03-29T20:00:00 Last Updated: 2024-08-07T17:12:22.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) companyid, (2) scat, and (3) coid parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24179 - http://www.securityfocus.com/bid/17274 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25576 - http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html