Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ww.kapda.ir/advisory-445.html - http://www.securityfocus.com/archive/1/449668/100/0/threaded - http://secunia.com/advisories/22576
CVE ID: CVE-2006-5593 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Desknet's (niokeru) before 5.0J R1.0 might allow remote authenticated users to execute arbitrary code via unspecified vectors. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29758 - http://secunia.com/advisories/22456 - http://www.securityfocus.com/bid/20716 - http://www.vupen.com/english/advisories/2006/4163 - http://jvn.jp/jp/JVN%2307235355/index.html - http://www.de
d/20716 - http://www.vupen.com/english/advisories/2006/4163 - http://jvn.jp/jp/JVN%2307235355/index.html - http://www.desknets.com/standard/download/
CVE ID: CVE-2006-5594 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in University of British Columbia iPeer 2.0, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: it is possible that this issue is related to CakePHP. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29754 - http://www.securityfocus.com/archive/1/449460/100/0/threaded - http://securityreason.com/securityalert/1787
CVE ID: CVE-2006-5595 State: PUBLISHED Published: 2006-10-28T00:00:00 Last Updated: 2024-08-07T19:55:53.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the AirPcap support in Wireshark (formerly Ethereal) 0.99.3 has unspecified attack vectors related to WEP key parsing. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14787 - http://www.wireshark.org/security/wnpa-sec-2006-03.html - http://secunia.com/advisories/22590 - http://www.securityfocus.com/bid/20762
CVE ID: CVE-2006-5596 State: PUBLISHED Published: 2006-10-28T00:00:00 Last Updated: 2024-08-07T19:55:53.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22550 - http://www.vupen.com/english/advisories/2006/4224 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29817 - https://www.exploit-db.com/exploits/2637 - http://www.securityfocus.com/bid/20722 - https://prdelka.blackart.org.uk/exploitz/prd
www.exploit-db.com/exploits/2637 - http://www.securityfocus.com/bid/20722 - https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c
CVE ID: CVE-2006-5597 State: PUBLISHED Published: 2006-10-28T00:00:00 Last Updated: 2024-08-07T19:55:53.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22568 - https://www.exploit-db.com/exploits/2651 - http://www.securityfocus.com/bid/20743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29826 - http://www.vupen.com/english/advisories/2006/4217
CVE ID: CVE-2006-5598 State: PUBLISHED Published: 2006-10-28T01:00:00 Last Updated: 2024-08-07T19:55:53.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php for GOOP Gallery 2.0, and possibly other versions before 2.0.3, allows remote attackers to inject arbitrary HTML or web script via the image parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2006/10/goop-gallery-image-param-cross-site.html - http://webgeneius.com/index.php?mod=blog&id=49 - http://www.securityfocus.com/bid/20554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29643 - http://securitytracker.com/id?1
curityfocus.com/bid/20554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29643 - http://securitytracker.com/id?1017081
CVE ID: CVE-2006-5599 State: PUBLISHED Published: 2006-10-28T01:00:00 Last Updated: 2024-08-07T19:55:53.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Oracle Application Express (formerly HTML DB) before 2.2.1 allows remote attackers to inject arbitrary HTML or web script via the WWV_FLOW_ITEM_HELP package. NOTE: it is likely that this issue overlaps one of the Oracle VulnIDs covered by CVE-2006-5351. Oracle has not publicly disputed claims by a reliable researcher that this has been fixed by the October 2006 CPU. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1792 - http://
Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1792 - http://www.securityfocus.com/archive/1/449500/100/0/threaded - http://www.red-database-security.com/advisory/oracle_apex_css_wwv_flow_item_help.html - http://www.us-cert.gov/cas/techalerts/TA06-291A.html - http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuoct2006.html
CVE ID: CVE-2006-5600 State: PUBLISHED Published: 2006-10-28T01:00:00 Last Updated: 2024-08-07T19:55:53.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: Axalto Protiva 1.1, possibly only non-commercial versions, stores passwords in plaintext in files with insecure permissions, which allows local users to gain privileges by reading the passwords from (1) KeyTool\keytool.config or (2) webapps\protiva\WEB-INF\classes\authserver.config. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29839 - http://securityreason.com/securityalert/1793 - http://www.securityfocus.com/bid/20755 - http://www.securityfocus.com/archi
tp://securityreason.com/securityalert/1793 - http://www.securityfocus.com/bid/20755 - http://www.securityfocus.com/archive/1/449891/100/0/threaded
CVE ID: CVE-2006-5601 State: PUBLISHED Published: 2006-10-28T01:00:00 Last Updated: 2024-08-07T19:55:53.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the eap_do_notify function in eap.c in xsupplicant before 1.2.6, and possibly other versions, allows remote authenticated users to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://open1x.cvs.sourceforge.net/open1x/xsupplicant/src/eap.c?r1=1.135&r2=1.136 - http://www.securityfocus.com/bid/20775 - http://secunia.com/advisories/22612 - http://www.vupen.com/english/advisories/2006/4233 - https://exchange.xforce.ibmcloud.com/vulner
a.com/advisories/22612 - http://www.vupen.com/english/advisories/2006/4233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29902 - http://secunia.com/advisories/22641 - http://www.novell.com/linux/security/advisories/2007_01_sr.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:189
CVE ID: CVE-2006-5602 State: PUBLISHED Published: 2006-10-28T01:00:00 Last Updated: 2024-08-07T19:55:53.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in xsupplicant before 1.2.6, and possibly other versions, allow attackers to cause a denial of service (memory consumption) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29903 - http://secunia.com/advisories/22612 - http://www.vupen.com/english/advisories/2006/4232 - http://sourceforge.net/project/shownotes.php?release_id=421973&group_id=60236 - http://secunia.com/advisories/22641 - http://www.mandriva.com/sec
oject/shownotes.php?release_id=421973&group_id=60236 - http://secunia.com/advisories/22641 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:189
CVE ID: CVE-2006-5603 State: PUBLISHED Published: 2006-10-30T18:00:00.000Z Last Updated: 2025-04-03T15:39:54.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the RC parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/20712
CVE ID: CVE-2006-5604 State: PUBLISHED Published: 2006-10-30T18:00:00 Last Updated: 2024-08-07T19:55:53.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in phpcards.header.php in phpCards 1.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the CardLanguageFile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29615 - http://securitytracker.com/id?1017070
CVE ID: CVE-2006-5605 State: PUBLISHED Published: 2006-10-30T18:00:00 Last Updated: 2024-08-07T19:55:53.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpcards.footer.php in phpCards 1.3 allow remote attackers to inject arbitrary web script or HTML via the CardFontFace parameter and other unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29616 - http://securitytracker.com/id?1017070
CVE ID: CVE-2006-5606 State: PUBLISHED Published: 2006-10-31T19:00:00 Last Updated: 2024-08-07T19:55:53.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in BytesFall Explorer (bfExplorer) 0.0.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the username ($User variable) to login/doLogin.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=627671 - http://www.vupen.com/english/advisories/2006/4255 - http://www.securityfocus.com/bid/20800 - http://www.securityfocus.com/archive/1/450166/100/100/threaded - https://exchang
ttp://www.securityfocus.com/bid/20800 - http://www.securityfocus.com/archive/1/450166/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29942 - http://sourceforge.net/project/shownotes.php?release_id=458642&group_id=174110 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-007.php?lang=en
CVE ID: CVE-2006-5607 State: PUBLISHED Published: 2006-10-30T23:00:00 Last Updated: 2024-08-07T19:55:53.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in /cgi-bin/webcm in INCA IM-204 allows remote attackers to read arbitrary files via a "/./." (modified dot dot) sequences in the getpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22557 - http://www.securityfocus.com/bid/20696/info - http://www.securityfocus.com/archive/1/449504/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29815 - http://securityreason.com/securityalert/1796 - http://www.vupen.com/english/
xforce.ibmcloud.com/vulnerabilities/29815 - http://securityreason.com/securityalert/1796 - http://www.vupen.com/english/advisories/2006/4223
CVE ID: CVE-2006-5608 State: PUBLISHED Published: 2006-10-30T23:00:00 Last Updated: 2024-08-07T19:55:53.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29821 - http://secunia.com/advisories/22566 - http://www.securityfocus.com/bid/20759 - http://drupal.org/node/91358
CVE ID: CVE-2006-5609 State: PUBLISHED Published: 2006-10-30T23:00:00 Last Updated: 2024-08-07T19:55:53.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories via "\.\./" sequences in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1797 - http://www.securityfocus.com/archive/1/449893/100/0/threaded - http://www.securityfocus.com/bid/20771
CVE ID: CVE-2006-5610 State: PUBLISHED Published: 2006-10-31T00:00:00.000Z Last Updated: 2025-04-03T15:37:23.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in player/includes/common.php in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/22499
CVE ID: CVE-2006-5611 State: PUBLISHED Published: 2006-10-31T00:00:00 Last Updated: 2024-08-07T19:55:53.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of details in the vendor advisory, it is not clear whether this issue is related to CVE-2006-5405. Additional Analyst Notes: - CVE Program Container: References: - http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=bltstack-42001-notebook - https://exchange.xforce.ibmcloud.com/vulnerabilities/44391
CVE ID: CVE-2006-5612 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the aide parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1795 - http://www.securityfocus.com/archive/1/449887/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29853 - http://www.vupen.com/english/advisories/2007/0943 - https://www.exploit-db.com/exploits/3467 - ht
ulnerabilities/29853 - http://www.vupen.com/english/advisories/2007/0943 - https://www.exploit-db.com/exploits/3467 - http://www.securityfocus.com/bid/20750
CVE ID: CVE-2006-5613 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2666 - http://www.securityfocus.com/bid/20783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29888 - http://www.osvdb.org/30110 - http://secunia.com/advisories/22605 - http://www.vupen.com/english/advisories/2006/4230
CVE ID: CVE-2006-5614 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22592 - http://www.securityfocus.com/bid/20804 - http://research.eeye.com/html/alerts/zeroday/20061028.html - https://www.exploit-db.com/exploits/2672 - http://securitytrack
://research.eeye.com/html/alerts/zeroday/20061028.html - https://www.exploit-db.com/exploits/2672 - http://securitytracker.com/id?1017133 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29917 - http://www.vupen.com/english/advisories/2006/4248 - http://www.osvdb.org/30096
CVE ID: CVE-2006-5615 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfg[txpath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1794 - http://www.securityfocus.com/bid/20769 - http://www.securityfocus.com/archive/1/449907/100/0/threaded
CVE ID: CVE-2006-5616 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in OpenPBS, as used in SUSE Linux 9.2 through 10.1, allow attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20776 - http://secunia.com/advisories/24716 - http://lists.suse.com/archive/suse-security-announce/2006-Oct/0007.html - http://secunia.com/advisories/22637 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29944 - http://www.vupen.com/english/advisories/2006/4250 - http://
https://exchange.xforce.ibmcloud.com/vulnerabilities/29944 - http://www.vupen.com/english/advisories/2006/4250 - http://security.gentoo.org/glsa/glsa-200704-04.xml
CVE ID: CVE-2006-5617 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Thepeak File Upload Manager 1.3 allows remote attackers to read or download arbitrary files via a base64-encoded file path containing a .. (dot dot) sequence in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1798 - http://www.securityfocus.com/archive/1/449936/100/0/threaded - http://www.securityfocus.com/bid/20760
CVE ID: CVE-2006-5618 State: PUBLISHED Published: 2006-10-31T01:00:00 Last Updated: 2024-08-07T19:55:53.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the ad_direct parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4259 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29889 - https://www.exploit-db.com/exploits/2677 - http://www.securityfocus.com/bid/20789 - http://secunia.com/advisories/22610
CVE ID: CVE-2006-5619 State: PUBLISHED Published: 2006-10-31T19:00:00 Last Updated: 2024-08-07T19:55:53.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: The seqfile handling (ip6fl_get_n function in ip6_flowlabel.c) in Linux kernel 2.6 up to 2.6.18-stable allows local users to cause a denial of service (hang or oops) via unspecified manipulations that trigger an infinite loop while searching for flowlabels. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2006/11/5/46 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://rhn.redhat.com/errata/RHSA-200
A-2007:025 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://rhn.redhat.com/errata/RHSA-2007-0014.html - https://issues.rpath.com/browse/RPL-760 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:012 - http://secunia.com/advisories/23593 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://secunia.com/advisories/23384 - http://secunia.com/advisories/23752 - http://www.securityfocus.com/bid/20847 - http://secunia.com/advisories/24206 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9311 - http://secunia.com/advisories/22754 - http://secunia.com/advisories/22665 - http://secunia.com/advisories/23
ef%3A9311 - http://secunia.com/advisories/22754 - http://secunia.com/advisories/22665 - http://secunia.com/advisories/23474 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://www.securityfocus.com/archive/1/451097/100/0/threaded - http://secunia.com/advisories/23997 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:002 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=bcd620757d3a4ae78ef0ca41adb5d9e400ed92b6 - http://www.ubuntu.com/usn/usn-395-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29970 - http://www.vupen.com/english/advisories/2006/4297
CVE ID: CVE-2006-5620 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the config[page_dir] parameter, a different vector than CVE-2006-4489. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22632 - http://www.vupen.com/english/advisories/2006/4249 - http://www.securityfocus.com/archive/1/449890/100/0/threaded - http://securityreason.com/secu
ish/advisories/2006/4249 - http://www.securityfocus.com/archive/1/449890/100/0/threaded - http://securityreason.com/securityalert/1803 - https://www.exploit-db.com/exploits/2656 - http://www.ultrize.com/minibill/index.php?page=changelog - http://www.securityfocus.com/bid/20766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29834
CVE ID: CVE-2006-5621 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29825 - https://www.exploit-db.com/exploits/2654 - http://www.securityfocus.com/bid/20758 - http://www.vupen.com/english/advisories/2006/4211 - http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/
CVE ID: CVE-2006-5622 State: PUBLISHED Published: 2006-10-31T20:00:00 Last Updated: 2024-08-07T19:55:53.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://coppermine-gallery.net/forum/index.php?topic=37895.0 - http://www.vupen.com/english/advisories/2006/4226 - http://www.securityfocus.com/bid/20774 - https://www.exploit-db.com/exploits/2660 - http://secunia.com/advisories/22625