Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
-17.txt - http://secunia.com/advisories/19050 - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://www.vupen.com/english/advisories/2006/0777 - http://www.securityfocus.com/archive/1/426574/100/0/threaded - http://www.securityfocus.com/archive/1/426504/100/0/threaded
CVE ID: CVE-2006-0986 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:15.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php, (11) admin-footer.php, and (12) menu.php in the wp-admin directory; and possibly (13) list directory contents of the wp-includes directory. NOTE: the vars.php, edit-f
e wp-admin directory; and possibly (13) list directory contents of the wp-includes directory. NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110. Other vectors might be covered by CVE-2005-1688. NOTE: if the typical installation of WordPress does not list any site-specific files to wp-includes, then vector [13] is not an exposure. Additional Analyst Notes: - CVE Program Container: References: - http://NeoSecurityTeam.net/advisories/Advisory-17.txt - http://secunia.com/advisories/19050 - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://ww
CVE ID: CVE-2006-0987 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://kb.isc.org/article/AA-00269 - http://dns.measurement-factory.com/surveys/sum1.html - http://www.securityfocus.com/archive/1/426368/
article/AA-00269 - http://dns.measurement-factory.com/surveys/sum1.html - http://www.securityfocus.com/archive/1/426368/100/0/threaded - http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf
CVE ID: CVE-2006-0988 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses. Additional Analyst Notes: - CVE Program Container: References: - http://dns.measurement-factory.com/surveys/sum1.html - http://www.securityfocus.com/ar
Program Container: References: - http://dns.measurement-factory.com/surveys/sum1.html - http://www.securityfocus.com/archive/1/426368/100/0/threaded - http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf
CVE ID: CVE-2006-0989 State: PUBLISHED Published: 2006-03-28T00:00:00 Last Updated: 2024-08-07T16:56:15.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015832 - http://www.securityfocus.com/bid/17264 - http://seer.support.veritas.com/docs/281521.htm - http://www.vupen.com/english/advisories/2006/1124 - http://securityresponse.symantec.com/avcenter/securit
s/281521.htm - http://www.vupen.com/english/advisories/2006/1124 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html - http://www.kb.cert.org/vuls/id/880801 - http://www.osvdb.org/24172 - http://www.zerodayinitiative.com/advisories/ZDI-06-005.html - http://www.securityfocus.com/archive/1/428944/100/0/threaded - http://securityreason.com/securityalert/639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25471
CVE ID: CVE-2006-0990 State: PUBLISHED Published: 2006-03-28T00:00:00 Last Updated: 2024-08-07T16:56:15.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015832 - http://www.securityfocus.com/bid/17264 - http://seer.support.veritas.com/docs/281521.htm - http://www.securityfocus.com/archive/1/428992/100/0/threaded - https://exchange.xforce.ibmcloud.com/
m/docs/281521.htm - http://www.securityfocus.com/archive/1/428992/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25472 - http://secunia.com/advisories/19417 - http://www.vupen.com/english/advisories/2006/1124 - http://www.kb.cert.org/vuls/id/744137 - http://securityreason.com/securityalert/642 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html - http://www.zerodayinitiative.com/advisories/ZDI-06-006.html - http://www.securityfocus.com/archive/1/428988/100/0/threaded
CVE ID: CVE-2006-0991 State: PUBLISHED Published: 2006-03-28T00:00:00 Last Updated: 2024-08-07T16:56:14.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724). Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015832 - http://www.securityfocus.com/bid/17264 - http://seer.support.veritas.com/docs/281521.htm - http://secunia.com/advisories/19417 - http://www.vupen.com/english/advisories/2006/1124 - https://e
om/docs/281521.htm - http://secunia.com/advisories/19417 - http://www.vupen.com/english/advisories/2006/1124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25473 - http://securityresponse.symantec.com/avcenter/security/Content/2006.03.27.html - http://www.securityfocus.com/archive/1/428979/100/0/threaded - http://www.tippingpoint.com/security/advisories/TSRT-06-01.html - http://www.kb.cert.org/vuls/id/377441
CVE ID: CVE-2006-0992 State: PUBLISHED Published: 2006-04-14T10:00:00 Last Updated: 2024-08-07T16:56:14.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon. NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092. This is the correct identifier. Additional Analyst Notes: - CVE Program Container: References: - http://metasploit.blogspot.com/2006/04/exploit-development-groupwise_14.html - http://www.zerodayinitiative.com/advisories/ZDI-06-008.html - http://www.o
06/04/exploit-development-groupwise_14.html - http://www.zerodayinitiative.com/advisories/ZDI-06-008.html - http://www.osvdb.org/24617 - http://www.vupen.com/english/advisories/2006/1355 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25828 - http://secunia.com/advisories/19663 - http://www.securityfocus.com/archive/1/430911/100/0/threaded - https://www.exploit-db.com/exploits/1679 - http://securitytracker.com/id?1015911 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100861.htm - http://cirt.dk/advisories/cirt-42-advisory.txt - http://www.securityfocus.com/bid/17503
CVE ID: CVE-2006-0993 State: PUBLISHED Published: 2006-05-10T01:00:00 Last Updated: 2024-08-07T16:56:15.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433432/100/0/threaded - http://www.securityfocus.com/bid/17935 - http://www.zerodayinitiative.com/advisories/ZDI-06-013.html - http://secunia.com/advisories/20058 - https://exchange.xforce.
://www.zerodayinitiative.com/advisories/ZDI-06-013.html - http://secunia.com/advisories/20058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26338 - http://www.3com.com/securityalert/alerts/3COM-06-002.html - http://securitytracker.com/id?1016051 - http://securityreason.com/securityalert/870 - http://www.osvdb.org/25360 - http://www.vupen.com/english/advisories/2006/1752
CVE ID: CVE-2006-0994 State: PUBLISHED Published: 2006-05-10T10:00:00 Last Updated: 2024-08-07T16:56:15.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-012.html - http://securitytracker.com/id?1016041 - http://securityreason.com/securityalert/869 - https://exchange.xforce.ibmcloud.com/
p://securitytracker.com/id?1016041 - http://securityreason.com/securityalert/869 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26305 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045897.html - http://www.securityfocus.com/bid/17876 - http://www.securityfocus.com/archive/1/433272/100/0/threaded - http://secunia.com/advisories/20028 - http://www.vupen.com/english/advisories/2006/1730
CVE ID: CVE-2006-0995 State: PUBLISHED Published: 2006-03-03T21:00:00 Last Updated: 2024-08-07T16:56:14.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service (client termination and loss of backup service) via a malformed packet to TCP port 497, which triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0811 - http://www.idefense.com/application/poi/display?type=vulnerabilities - http://secunia.com/advisories/19097 - http://kb.dantz.com/article.a
e.com/application/poi/display?type=vulnerabilities - http://secunia.com/advisories/19097 - http://kb.dantz.com/article.asp?article=8361&p=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25143 - http://securitytracker.com/id?1015714 - http://www.securityfocus.com/bid/16933
CVE ID: CVE-2006-0996 State: PUBLISHED Published: 2006-04-10T18:00:00 Last Updated: 2024-08-07T16:56:15.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/675 - http://secunia.com/advisories/19775 - http://secunia.com/advisories/21252 - http://www.osvdb.org/24484 - http://secunia.com/advisories/20222
dvisories/19775 - http://secunia.com/advisories/21252 - http://www.osvdb.org/24484 - http://secunia.com/advisories/20222 - http://secunia.com/advisories/20210 - http://www.php.net/ChangeLog-4.php#4.4.3 - http://support.avaya.com/elmodocs2/security/ASA-2006-160.htm - http://www.securityfocus.com/bid/17362 - http://rhn.redhat.com/errata/RHSA-2006-0276.html - http://security.gentoo.org/glsa/glsa-200605-08.xml - http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c?r1=1.260&r2=1.261 - http://www.vupen.com/english/advisories/2006/1290 - http://www.ubuntu.com/usn/usn-320-1 - http://www.redhat.com/support/errata/RHSA-2006-0501.html - http://securitytracker.com/id?1015879 - http://securityreaso
http://www.redhat.com/support/errata/RHSA-2006-0501.html - http://securitytracker.com/id?1015879 - http://securityreason.com/achievement_securityalert/34 - http://secunia.com/advisories/19979 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/20951 - http://secunia.com/advisories/21125 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10997 - http://support.avaya.com/elmodocs2/security/ASA-2006-129.htm - http://secunia.com/advisories/19599 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:074 - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - htt
4 - http://secunia.com/advisories/19832 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://cvs.php.net/viewcvs.cgi/php-src/ext/standard/info.c - http://secunia.com/advisories/20052 - http://secunia.com/advisories/21564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25702 - http://www.vupen.com/english/advisories/2006/2685 - http://www.novell.com/linux/security/advisories/05-05-2006.html - http://marc.info/?l=php-cvs&m=114374620416389&w=2
CVE ID: CVE-2006-0997 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T16:56:15.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1043 - http://securitytracker.com/id?1015799 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm - http://secunia.com/advisories/193
com/id?1015799 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm - http://secunia.com/advisories/19324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25380 - http://www.securityfocus.com/bid/17176 - http://www.osvdb.org/24046
CVE ID: CVE-2006-0998 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T16:56:15.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1043 - http://securitytracker.com/id?1015799 - http://www.osvdb.org/24047 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm - https://e
d?1015799 - http://www.osvdb.org/24047 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/25381 - http://secunia.com/advisories/19324 - http://www.securityfocus.com/bid/64758 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://www.securityfocus.com/bid/17176
CVE ID: CVE-2006-0999 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T16:56:15.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1043 - http://securitytracker.com/id?1015799 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100
isories/2006/1043 - http://securitytracker.com/id?1015799 - http://support.novell.com/cgi-bin/search/searchtid.cgi?10100633.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/25382 - http://secunia.com/advisories/19324 - http://www.securityfocus.com/bid/64758 - http://www.osvdb.org/24048 - http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html - http://www.securityfocus.com/bid/17176
CVE ID: CVE-2006-10001 State: PUBLISHED Published: 2023-03-05T20:31:03.187Z Last Updated: 2024-08-07T20:57:41.047Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: Subscribe to Comments Plugin Problem Types: CWE-79 Description: A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The identifier of the patch is 9683bdf462fcac2f32b33be98f0b96497fbd1bb6. It is recommended to upgrade th
ess this issue. The identifier of the patch is 9683bdf462fcac2f32b33be98f0b96497fbd1bb6. It is recommended to upgrade the affected component. The identifier VDB-222321 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://vuldb.com/?id.222321 - https://vuldb.com/?ctiid.222321 - https://github.com/wp-plugins/subscribe-to-comments/commit/9683bdf462fcac2f32b33be98f0b96497fbd1bb6 - https://github.com/wp-plugins/subscribe-to-comments/releases/tag/2.0.8
CVE ID: CVE-2006-1000 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:14.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042524.html - http://securitytracker.com/id?1015682 - http://www.securityfocus.com/bid/16818 - http://www.securityfocus.com/archive/1/426075/100/0
itytracker.com/id?1015682 - http://www.securityfocus.com/bid/16818 - http://www.securityfocus.com/archive/1/426075/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042525.html - http://www.nukedx.com/?viewdoc=14 - http://www.securityfocus.com/archive/1/426074/100/0/threaded - http://www.vupen.com/english/advisories/2006/0749 - http://www.nukedx.com/?viewdoc=13 - http://secunia.com/advisories/19024
CVE ID: CVE-2006-1001 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:15.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0747 - http://www.securityfocus.com/bid/16836 - http://www.osvdb.org/23533 - https://www.exploit-db.com/exploits/1526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24940 - http://secunia.com/advisories/19048
CVE ID: CVE-2006-1002 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:14.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24926 - http://www.securityfocus.com/archive/1/426187/100/0/threaded - http://www.securityfocus.com/bid/16835 - http://www.securityfocus.com/archive/1/4853
m/archive/1/426187/100/0/threaded - http://www.securityfocus.com/bid/16835 - http://www.securityfocus.com/archive/1/485396/100/0/threaded - http://www.securityfocus.com/archive/1/426313/100/0/threaded - http://www.securityfocus.com/archive/1/431026/30/5580/threaded
CVE ID: CVE-2006-1003 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:14.894Z Vendors: n/a Products: n/a Problem Types: n/a Description: The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24927 - http://www.securityfocus.com/archive/1/426185 - http://www.securityfocus.com/bid/16837
CVE ID: CVE-2006-1004 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:15.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in agencyprofile.asp in Parodia 6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the AG_ID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0763 - http://www.osvdb.org/23548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24971 - http://www.securityfocus.com/bid/16865 -
.osvdb.org/23548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24971 - http://www.securityfocus.com/bid/16865 - http://secunia.com/advisories/19025
CVE ID: CVE-2006-1005 State: PUBLISHED Published: 2006-03-06T20:00:00Z Last Updated: 2024-09-16T23:15:59.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19025
CVE ID: CVE-2006-1006 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:15.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in sendcard.php in sendcard before 3.3.0 allow remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=544749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24978 - http://secunia.com/advisories/19056 - http://www.securityfocus.com/bid/16900 - http://www.vupen.com/english/advisories/2006/0778