Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6696 State: PUBLISHED Published: 2006-12-22T02:00:00 Last Updated: 2024-08-07T20:34:00.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox function with a MB_SERVICE_NOTIFICATION message with crafted data, which sends a HardError message to Client/Server Runtime Server Subsystem (CSRSS) process, which is not properly handled when invoking the UserHardError and GetHardErrorText functions in WINSRV.DLL. Additional Analyst Notes: - CVE Program Container: References: - http://www.kuban.ru/forum_new/forum2/files/19124.html - http://w
l Analyst Notes: - CVE Program Container: References: - http://www.kuban.ru/forum_new/forum2/files/19124.html - http://www.securityfocus.com/archive/1/455546/100/0/threaded - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://securitytracker.com/id?1017433 - http://groups.google.ca/group/microsoft.public.win32.programmer.kernel/browse_thread/thread/c5946bf40f227058/7bd7b5d66a4e5aff - http://www.security.nnov.ru/Gnews944.html - http://research.eeye.com/html/alerts/zeroday/20061215.html - http://www.determina.com/security.research/vulnerabilities/csrss-harderror.html - http://www.securityfocus.com/archive/1/455088/100/0/threaded - http://blogs.technet.com/msrc/archive/2006
rderror.html - http://www.securityfocus.com/archive/1/455088/100/0/threaded - http://blogs.technet.com/msrc/archive/2006/12/22/new-report-of-a-windows-vulnerability.aspx - http://www.securityfocus.com/archive/1/455158/100/0/threaded - http://www.securityfocus.com/bid/21688 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-021 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1816 - http://www.vupen.com/english/advisories/2007/1325 - http://www.security.nnov.ru/files/messagebox.c - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051394.html - http://www.securityfocus.com/bid/23324 - http://www.securityfocus.
pipermail/full-disclosure/2006-December/051394.html - http://www.securityfocus.com/bid/23324 - http://www.securityfocus.com/archive/1/455104/100/0/threaded - http://www.securityfocus.com/archive/1/455061/100/0/threaded - http://secunia.com/advisories/23448 - http://www.securityfocus.com/archive/1/466331/100/200/threaded - http://isc.sans.org/diary.php?n&storyid=1965 - http://www.vupen.com/english/advisories/2006/5120
CVE ID: CVE-2006-6697 State: PUBLISHED Published: 2006-12-22T02:00:00 Last Updated: 2024-08-07T20:33:59.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2057 - http://www.securityfocus.com/archive/1/454965/100/0/threaded - http://marc.info/?l=full-disclosure&m=116664018702238&w=2 - http://marc.info/?l=full-disclosure&m=1166661558
/threaded - http://marc.info/?l=full-disclosure&m=116664018702238&w=2 - http://marc.info/?l=full-disclosure&m=116666155824901&w=2 - http://secunia.com/advisories/23461 - http://www.securityfocus.com/archive/1/455106/100/0/threaded - http://www.vupen.com/english/advisories/2006/5124 - http://www.securityfocus.com/bid/21686 - http://www.securityfocus.com/archive/1/454945/100/0/threaded
CVE ID: CVE-2006-6698 State: PUBLISHED Published: 2006-12-22T18:00:00 Last Updated: 2024-08-07T20:34:00.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GConf daemon (gconfd) in GConf 2.14.0 creates temporary files under directories with names based on the username, even when GCONF_GLOBAL_LOCKS is not set, which allows local users to cause a denial of service by creating the directories ahead of time, which prevents other users from using Gnome. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23452 - http://www.vupen.com/english/advisories/2006/5148 - http://www.securityfocus.com/bid/21762 - http://bugzilla.redhat.com/bugzilla
ww.vupen.com/english/advisories/2006/5148 - http://www.securityfocus.com/bid/21762 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=219279 - http://bugzilla.gnome.org/show_bug.cgi?id=167030
CVE ID: CVE-2006-6699 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the enc parameter to (1) calendarDialog.jsp or (2) fred.jsp. NOTE: the calendar.jsp vector is covered by CVE-2006-6697. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455106/100/0/threaded
CVE ID: CVE-2006-6700 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in @Mail WebMail allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017435 - http://www.netragard.com/html/recent_research.html - http://secunia.com/advisories/23472 - http://www.securityfocus.com/bid/21708
CVE ID: CVE-2006-6701 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in util.pl in @Mail WebMail 4.51, and util.php in 5.x before 5.03, allows remote attackers to modify arbitrary settings and perform unauthorized actions as an arbitrary user, as demonstrated using a settings action in the SRC attribute of an IMG element in an HTML e-mail. Additional Analyst Notes: - CVE Program Container: References: - http://terra.calacode.com/mail/docs/changelog.html - http://secunia.com/advisories/25328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31
mail/docs/changelog.html - http://secunia.com/advisories/25328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31259 - http://www.vupen.com/english/advisories/2007/1864 - http://securitytracker.com/id?1017435 - http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0512.html - http://www.securityfocus.com/archive/1/458109/100/100/threaded - http://www.netragard.com/html/recent_research.html - http://secunia.com/advisories/23472 - http://www.netragard.com/pdfs/research/ATMAIL-XSRF-ADVISORY-20061206.txt
CVE ID: CVE-2006-6702 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Global.pm in @Mail before 4.61 allows remote attackers to inject arbitrary web script or HTML via crafted e-mail messages. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5127 - http://support.atmail.com/changelog.html - http://kb.atmail.com/view_article.php?num=669
CVE ID: CVE-2006-6703 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via the tc parameter in webapp/jsp/container_tabs.jsp, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455143/100/0/threaded - http://www.vupen.com/english/advisories/2006/5143 - http://www.securityfocus.com/bid/21717
CVE ID: CVE-2006-6704 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Webadmin in @Mail before 4.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "unescaped data in the database." Additional Analyst Notes: - CVE Program Container: References: - http://terra.calacode.com/mail/docs/changelog.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31260
CVE ID: CVE-2006-6705 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the template files in Soumu Workflow for Groupmax 01-00 through 01-01, Soumu Workflow 02-00 through 03-03, and Koukyoumuke Soumu Workflow 01-00 through 01-01 allow remote attackers to bypass authentication mechanisms on web pages via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5114 - http://www.hitachi-support.com/security_e/vuls_e/HS06-016_e/01-e.html - http://secunia.com/advisories/23399
CVE ID: CVE-2006-6706 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Soumu Workflow for Groupmax 01-00 through 01-01, Soumu Workflow 02-00 through 03-03, and Koukyoumuke Soumu Workflow 01-00 through 01-01 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors in certain web pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5114 - http://www.hitachi-support.com/security_e/vuls_e/HS06-016_e/01-e.html - http://secunia.com/advisories/23399
CVE ID: CVE-2006-6707 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NeoTraceExplorer.NeoTraceLoader ActiveX control (NeoTraceExplorer.dll) in NeoTrace Express 3.25 and NeoTrace Pro (aka McAfee Visual Trace) 3.25 allows remote attackers to execute arbitrary code via a long argument string to the TraceTarget method. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21697 - http://secunia.com/advisorie
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21697 - http://secunia.com/advisories/23463
CVE ID: CVE-2006-6708 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in listings.asp in MGinternet Property Site Manager allows remote attackers to inject arbitrary web script or HTML via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451565 - http://www.securityfocus.com/bid/21073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30292 - http://securityreason.com/securityalert/2078
CVE ID: CVE-2006-6709 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MGinternet Property Site Manager allow remote attackers to execute arbitrary SQL commands via the (1) p parameter to (a) detail.asp; the (2) l, (3) typ, or (4) loc parameter to (b) listings.asp; or the (5) Password or (6) Username parameter to (c) admin_login.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451565 - http://www.securityfocus.com/bid/21073 -
ogram Container: References: - http://www.securityfocus.com/archive/1/451565 - http://www.securityfocus.com/bid/21073 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30289 - http://securityreason.com/securityalert/2078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30291
CVE ID: CVE-2006-6710 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) lang parameter to (a) index.php, the (2) CFG[libdir] and (3) CFG[localedir] parameters to (b) common.inc.php, and the CFG[localelangdir] parameter to (c) form_header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5116 - http://www.securityfocus.com/bid/21696 - http://secunia.com/advisories/23480 - https:/
om/english/advisories/2006/5116 - http://www.securityfocus.com/bid/21696 - http://secunia.com/advisories/23480 - https://www.exploit-db.com/exploits/2971
CVE ID: CVE-2006-6711 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in compteur/mapage.php in Newxooper 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5118 - http://secunia.com/advisories/23479 - http://www.securityfocus.com/bid/21699 - https://www.exploit-db.com/exploits/2970
CVE ID: CVE-2006-6712 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SugarCRM Open Source 4.5.0f and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in crafted email messages. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017434 - http://jvn.jp/jp/JVN%2374079537/index.html - http://www.vupen.com/english/advisories/2006/5100 - http://secunia.com/advisories/23424 - http://www.securityfocus.com/bid/21694 - http://dl.sugarforge.org/sugardocs/Notes/ReleaseNotes
ia.com/advisories/23424 - http://www.securityfocus.com/bid/21694 - http://dl.sugarforge.org/sugardocs/Notes/ReleaseNotes/SugarOpenSource_ReleaseNotes_4.5.0g.pdf
CVE ID: CVE-2006-6713 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:33:59.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows, and P-1B44-A121 before 02-10-/V on HP-UX, allows remote attackers to execute arbitrary code via crafted LDAP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5098 - http://secunia.com/advisories/23421 - http://www.securityfocus.com/bid/21692 - http://www.hitachi-support.com/security_e/vuls_e/HS06-018_e/01-e.html
CVE ID: CVE-2006-6714 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Hitachi Directory Server 2 P-2444-A124 before 02-11-/K on Windows, and P-1B44-A121 before 02-10-/V on HP-UX, allow remote attackers to cause a denial of service (memory consumption) via invalid LDAP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5098 - http://secunia.com/advisories/23421 - http://www.securityfocus.com/bid/21692 - http://www.hitachi-support.com/security_e/vuls_e/HS06-018_e/01-e.html
CVE ID: CVE-2006-6715 State: PUBLISHED Published: 2006-12-23T01:00:00 Last Updated: 2024-08-07T20:34:00.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in footer.inc.php in PowerClan 1.14a and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings[footer] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2973 - http://secunia.com/advisories/23450 - http://www.vupen.com/english/advisories/2006/5119 - http://www.securityfocus.com/bid/21707 - http://www.securityfocus.com/archive/1/490009/100/0/threaded - http://
6/5119 - http://www.securityfocus.com/bid/21707 - http://www.securityfocus.com/archive/1/490009/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-December/001194.html
CVE ID: CVE-2006-6716 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:34:00.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in administration/administre2.php in Eric GUILLAUME uploader&downloader 3 allows remote attackers to execute arbitrary SQL commands via the id_user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30928 - http://www.securityfocus.com/bid/21648 - https://www.exploit-db.com/exploits/2945
CVE ID: CVE-2006-6717 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:33:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Allied Telesis AT-9000/24 Ethernet switch accepts management packets from arbitrary VLANs, contrary to the documentation, which allows remote attackers to conduct attacks against the switch from unexpected locations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454630/100/0/threaded - http://secunia.com/advisories/23590 - http://www.securityfocus.com/bid/21628 - http://secunia.com/advisories/23451 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30924
CVE ID: CVE-2006-6718 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:34:00.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Allied Telesis AT-9000/24 Ethernet switch has a default password for its admin account, "manager," which allows remote attackers to perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454630/100/0/threaded
CVE ID: CVE-2006-6719 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:33:59.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ftp_syst function in ftp-basic.c in Free Software Foundation (FSF) GNU wget 1.10.2 allows remote attackers to cause a denial of service (application crash) via a malicious FTP server with a large number of blank 220 responses to the SYST command. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-930 - http://www.securityfocus.com/bid/21650 - https://www.exploit-db.com/exploits/2947 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:017
CVE ID: CVE-2006-6720 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:33:59.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/index_sitios.php in Azucar CMS 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _VIEW parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5060 - http://www.securityfocus.com/bid/21638 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30935 - http://secunia.com/advisories/23416 - https://www.exploit-db.com/exploits/2943
CVE ID: CVE-2006-6721 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:34:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in shout.php in Knusperleicht ShoutBox 2.6 allow remote attackers to inject arbitrary web script or HTML via the (1) sbNick or (2) sbKommentar parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/data/vulnerabilities/exploits/21637.html - http://secunia.com/advisories/23526 - http://www.securityfocus.com/bid/21637
CVE ID: CVE-2006-6722 State: PUBLISHED Published: 2006-12-23T11:00:00 Last Updated: 2024-08-07T20:34:00.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bandwebsite (aka Bandsite portal system) 1.5 allows remote attackers to create administrative accounts via a direct request to admin.php with the Login parameter set to 1. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30921 - https://www.exploit-db.com/exploits/2938 - http://www.securityfocus.com/data/vulnerabilities/exploits/21625.html
CVE ID: CVE-2006-6723 State: PUBLISHED Published: 2006-12-26T20:00:00 Last Updated: 2024-08-07T20:33:59.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service (memory consumption) via a large maxlen value in an NetrWkstaUserEnum RPC request. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3013 - http://secunia.com/advisories/23487 - http://securitytracker.com/id?1017441 - http://www.vupen.com/english/advisories/2006/5142 - http://www.eeye.com/Resources/Security-Center/Research/Zero-Day-Tracker/2005/20051116
CVE ID: CVE-2006-6724 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:34:00.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: BolinTech Dream FTP Server 1.02 allows remote authenticated users, including anonymous users, to cause a denial of service (application crash) via a certain invalid PORT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5126 - http://secunia.com/advisories/23471 - https://www.exploit-db.com/exploits/2972
CVE ID: CVE-2006-6725 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:34:00.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHPBuilder 0.0.2 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter to (1) lib/htm2php.php and (2) sitetools/htm2php.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5125
CVE ID: CVE-2006-6726 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:33:59.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inertianews_main.php in inertianews 0.02 beta allows remote attackers to execute arbitrary PHP code via a URL in the inews_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5130 - https://www.exploit-db.com/exploits/2976 - http://www.securityfocus.com/bid/21713
CVE ID: CVE-2006-6727 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:34:00.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inertianews_class.php in inertianews 0.02 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5130