Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6748 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-07T20:42:06.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in i-accueil.php in Newxooper 0.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5118
CVE ID: CVE-2006-6749 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-07T20:42:06.347Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the parse_expression function in parse_config in OpenSER 1.1.0 allows attackers to have an unknown impact via a long str parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2083 - http://www.securityfocus.com/bid/21706 - http://www.vupen.com/english/advisories/2006/5167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31035 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.042.html - http://www.securityfocus.com/archive/1/455097
35 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.042.html - http://www.securityfocus.com/archive/1/455097/100/0/threaded - http://www.securityfocus.com/archive/1/455300/100/0/threaded
CVE ID: CVE-2006-6750 State: PUBLISHED Published: 2006-12-27T00:00:00Z Last Updated: 2024-09-16T18:48:40.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in XM Easy Personal FTP Server 5.0.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in a long PORT command. NOTE: this issue might be related to CVE-2006-2226. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/18632.pl - http://www.securityfocus.com/bid/18632
CVE ID: CVE-2006-6751 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-07T20:42:06.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0786 - http://downloads.securityfocus.com/vulnerabilities/exploits/22747.pl - http://downloads.securityfocus.com/vulnerabili
- http://downloads.securityfocus.com/vulnerabilities/exploits/22747.pl - http://downloads.securityfocus.com/vulnerabilities/exploits/18632.txt - http://www.securityfocus.com/bid/22747 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31140 - http://www.securityfocus.com/bid/18632
CVE ID: CVE-2006-6752 State: PUBLISHED Published: 2006-12-27T00:00:00Z Last Updated: 2024-09-16T23:46:41.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host field. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Also, it is not clear whether this issue crosses security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21714
CVE ID: CVE-2006-6753 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) characters, which might make it impossible to use Event Viewer to determine the actual data that triggered an event, and might produce long strings that are not properly handled by certain processes that rely on Event Viewer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455071/100/0/threaded - http://www.securityfocus.com/archive/1/455087/100/0/threaded - htt
w.securityfocus.com/archive/1/455071/100/0/threaded - http://www.securityfocus.com/archive/1/455087/100/0/threaded - http://www.securityfocus.com/archive/1/455077/100/0/threaded - http://www.securityfocus.com/archive/1/455044/100/0/threaded - http://www.securityfocus.com/archive/1/455079/100/0/threaded
CVE ID: CVE-2006-6754 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the story_id parameter to ixm_ixpnews.php, and unspecified other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455084/100/0/threaded - http://www.vupen.com/english/advisories/2006/5133 - http://www.securityfocus.com/bid/21710 - http://secunia.com/advisories/23453 - http://acid-root.new.fr/poc/16061221.txt - http://securityreason.com/securityalert/20
p://secunia.com/advisories/23453 - http://acid-root.new.fr/poc/16061221.txt - http://securityreason.com/securityalert/2073
CVE ID: CVE-2006-6755 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprim_api.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455084/100/0/threaded - https://www.exploit-db.com/exploits/2975 - http://acid-root.new.fr/poc/16061221.txt - http://securityreason.com/securityalert/2073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31144
CVE ID: CVE-2006-6756 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential IXP_CODE in mainfile.php, which might allow remote attackers to gain access to the administration panel via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31142 - http://www.securityfocus.com/archive/1/455084/100/0/threaded - https://www.exploit-db.com/exploits/2975 - http://acid-root.new.fr/poc/16061221.txt - http://securityreason.com/sec
ed - https://www.exploit-db.com/exploits/2975 - http://acid-root.new.fr/poc/16061221.txt - http://securityreason.com/securityalert/2073
CVE ID: CVE-2006-6757 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.802Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and source code, and obtain sensitive information via directory traversal sequences in the show_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2963 - http://www.vupen.com/english/advisories/2006/5117 - http://www.securityfocus.com/bid/21683
CVE ID: CVE-2006-6758 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5128 - https://www.exploit-db.com/exploits/2974 - http://securitytracker.com/id?1017432 - http://www.securityfocus.com/bid/21712
CVE ID: CVE-2006-6759 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: A certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer crash) by invoking the RealPlayer.Initialize method with certain arguments. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/21689.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31138 - https://www.exploit-db.com/exploits/2966 - http://www.securityfocus.com/bid/21689
CVE ID: CVE-2006-6760 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:42:06.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) actionsPage or (2) formPage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2578 - http://phpmanga.sourceforge.net/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/29588 - http://www.securityfocus.com/bid/20572
CVE ID: CVE-2006-6761 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via a long argument to the SUBSCRIBE command. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=454 - https://secure-support.novell.com/KanisaPlatform/Publishing/328/3717068_f.SAL_Public.html - http://www.kb.cert.org/vuls/id/863313 - http://www.vupen.com/english/advisories/2006/5134 - http://secu
AL_Public.html - http://www.kb.cert.org/vuls/id/863313 - http://www.vupen.com/english/advisories/2006/5134 - http://securitytracker.com/id?1017437 - http://secunia.com/advisories/23437 - http://www.securityfocus.com/bid/21728
CVE ID: CVE-2006-6762 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of service via an APPEND command with a single "(" (parenthesis) in the argument. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=455 - http://www.securityfocus.com/bid/21729 - https://secure-support.novell.com/KanisaPlatform/Publishing/328/3717068_f.SAL_Public.html - http://www.kb.cert.org/vuls/id/944273 - http://www.vupen.com/engl
isaPlatform/Publishing/328/3717068_f.SAL_Public.html - http://www.kb.cert.org/vuls/id/944273 - http://www.vupen.com/english/advisories/2006/5134 - http://secunia.com/advisories/23437
CVE ID: CVE-2006-6763 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_to_themes parameter in (a) authenticate.php, and the (2) default_path_for_themes parameter in (b) admin.php and (c) upconfig.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.security.nnov.ru/Pdocument470.html - http://www.securityfocus.com/archive/1/455198/100/0/threaded
CVE ID: CVE-2006-6764 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP through CGI, allows remote attackers to execute arbitrary PHP code via a URL in the default_path_to_themes parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21721 - https://www.exploit-db.com/exploits/2979 - http://secunia.com/advisories/23477 - http://www.vupen.com/english/advisories/2006/5147
CVE ID: CVE-2006-6765 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local filename or FTP/share URI in the config_file parameter or (2) a URL in the ptconf[src] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5163 - https://www.exploit-db.com/exploits/3000 - http://secunia.com/advisories/23508
CVE ID: CVE-2006-6766 State: PUBLISHED Published: 2006-12-27T02:00:00 Last Updated: 2024-08-07T20:42:06.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: The provenance of this information is unknown; details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31148 - http://www.vupen.com/english/advisories/2006/5117
CVE ID: CVE-2006-6767 State: PUBLISHED Published: 2007-01-16T19:00:00 Last Updated: 2024-08-07T20:42:06.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: oftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1) LPRT or (2) LPASV command with an unsupported address family, which triggers an assertion failure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/22073 - http://secunia.com/advisories/23797 - http://secunia.com/advisories/23790 - http://securitytracker.com/id?1017517 - http://www.vupen.com/english/advisories/2007/0198 - http://osvdb.org/32822 - http://www.gentoo.org/security/en/gls
517 - http://www.vupen.com/english/advisories/2007/0198 - http://osvdb.org/32822 - http://www.gentoo.org/security/en/glsa/glsa-200701-09.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/31520
CVE ID: CVE-2006-6768 State: PUBLISHED Published: 2006-12-27T11:00:00 Last Updated: 2024-08-07T20:42:06.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow remote attackers to inject arbitrary web script or HTML via the (1) cat or (2) main parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30445 - http://www.securityfocus.com/archive/1/452194/100/200/threaded - http://securityreason.com/securityalert/2075 - http://secunia.com/advisories/23289 - http://www.securityfocus.com/bid/21198
CVE ID: CVE-2006-6769 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search_string parameter in (a) setup/transcripts.php, the (2) l parameter in (b) index.php, the (3) login field in (c) phplive/index.php, and the (4) deptid and (5) x parameters in (d) phplive/message_box.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2068 - http://secunia.com/advisories/23488 - http://www.hack
iner: References: - http://securityreason.com/securityalert/2068 - http://secunia.com/advisories/23488 - http://www.hackerscenter.com/archive/view.asp?id=26833 - http://www.securityfocus.com/bid/21737 - http://www.securityfocus.com/archive/1/455269/100/0/threaded
CVE ID: CVE-2006-6770 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter in (1) popup.php, (2) rss.php, (3) ajax_request.php, and (4) mediabroadcast.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21741 - https://www.exploit-db.com/exploits/3003 - http://secunia.com/advisories/23501 - http://www.vupen.com/english/advisories/2006
://www.exploit-db.com/exploits/3003 - http://secunia.com/advisories/23501 - http://www.vupen.com/english/advisories/2006/5177
CVE ID: CVE-2006-6771 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[PTH][func] parameter in (a) scripts/gallery.scr.php; the (2) GLOBALS[PTH][spaw] parameter in (b) scripts/xtextarea.scr.php; and the (3) GLOBALS[PTH][classes] parameter in (c) sitemap.scr.php, (d) news.scr.php, (e) polls.scr.php, (f) rss.scr.php, (g) search.scr.php in scripts/, and (h) form.fun.php, (i) general.func.php, (j) groups
) polls.scr.php, (f) rss.scr.php, (g) search.scr.php in scripts/, and (h) form.fun.php, (i) general.func.php, (j) groups.func.php, (k) js.func.php, (l) sections.func.php, and (m) users.func.php in functions/. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21769 - http://www.vupen.com/english/advisories/2006/5178 - https://www.exploit-db.com/exploits/3007 - http://secunia.com/advisories/23497
CVE ID: CVE-2006-6772 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backend option, allows remote attackers to execute arbitrary code via format string specifiers in the Common Name (CN) field of an SSL certificate associated with an https URL. Additional Analyst Notes: - CVE Program Container: References: - http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?view=log - http://fedoranews.org/cms/node/2415 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html - htt
http://fedoranews.org/cms/node/2415 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051457.html - http://www.vupen.com/english/advisories/2006/5164 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.044.html - http://w3m.cvs.sourceforge.net/w3m/w3m/file.c?r1=1.249&r2=1.250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31114 - http://secunia.com/advisories/23717 - http://security.gentoo.org/glsa/glsa-200701-06.xml - http://secunia.com/advisories/23492 - http://secunia.com/advisories/23792 - http://w3m.cvs.sourceforge.net/%2Acheckout%2A/w3m/w3m/NEWS?revision=1.79 - http://securitytracker.com/id?1017440 - https://exchange.xforce.ibmcloud.com/vulnerabilities
3m/w3m/NEWS?revision=1.79 - http://securitytracker.com/id?1017440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/34821 - http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439 - http://www.novell.com/linux/security/advisories/2007_05_w3m.html - http://www.securityfocus.com/bid/21735 - http://www.securityfocus.com/bid/24332 - http://www.ubuntu.com/usn/usn-399-1 - http://secunia.com/advisories/23773 - http://secunia.com/advisories/23588 - http://fedoranews.org/cms/node/2416
CVE ID: CVE-2006-6773 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users by setting the is_admin HTTP POST parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455260/100/0/threaded - http://securityreason.com/securityalert/2077 - http://www.securityfocus.com/bid/21731 - http://secunia.com/advisories/23490 - http://www.vupen.com/english/advisories/2006/5182
CVE ID: CVE-2006-6774 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members/maquetacion_member.php) in Ciberia Content Federator 1.0 allows remote attackers to execute arbitrary PHP code via the path parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3008 - http://secunia.com/advisories/23498 - http://www.securityfocus.com/bid/21757 - http://www.vupen.com/english/advisories/2006/5180
CVE ID: CVE-2006-6775 State: PUBLISHED Published: 2006-12-27T23:00:00 Last Updated: 2024-08-07T20:42:06.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) PBSZ command. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2985 - http://www.vupen.com/english/advisories/2006/5149 - http://www.securityfocus.com/bid/21767 - http://secunia.com/advisories/23481
CVE ID: CVE-2006-6776 State: PUBLISHED Published: 2006-12-28T00:00:00 Last Updated: 2024-08-07T20:42:06.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via the (1) newsId or (2) categoryid parameter in a Portal.Showpage action in index.cfm, or (3) the langId parameter in index.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455206/100/0/threaded - http://securityreason.com/securityalert/2061 - http://www.securityfocus.com/bid/21727
CVE ID: CVE-2006-6777 State: PUBLISHED Published: 2006-12-28T00:00:00 Last Updated: 2024-08-07T20:42:06.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary web script or HTML via the categoryId parameter in a Portal.ShowPage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455206/100/0/threaded - http://securityreason.com/securityalert/2061 - http://www.securityfocus.com/bid/21727
CVE ID: CVE-2006-6778 State: PUBLISHED Published: 2006-12-28T00:00:00 Last Updated: 2024-08-07T20:42:06.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5162 - http://securitytracker.com/id?1017438 - http://www.securityfocus.com/bid/21733 - http://securityreason.com/securityalert/2062 - http://secunia.com/advisories/23494 - http://www.securityfocus.com/archive/1/455262/100/0/threaded