Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5722 State: PUBLISHED Published: 2006-11-04T01:00:00 Last Updated: 2024-08-07T20:04:54.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Segue CMS 1.5.9 and earlier, when magic_quotes_gpc is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the theme parameter to (1) themesettings.php or (2) index.php, a different vector than CVE-2006-5497. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22582 - http://www.vupen.com/english/
nalyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22582 - http://www.vupen.com/english/advisories/2006/4215
CVE ID: CVE-2006-5723 State: PUBLISHED Published: 2006-11-04T01:00:00 Last Updated: 2024-08-07T20:04:54.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DataparkSearch Engine 4.42 and earlier allows remote attackers to execute arbitrary SQL commands via a malformed hostname in a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4311 - http://www.dataparksearch.org/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/29979 - http://www.securityfocus.com/bid/20872
CVE ID: CVE-2006-5724 State: PUBLISHED Published: 2006-11-04T01:00:00 Last Updated: 2024-08-07T20:04:54.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow the "Answering Service" function in ICQ 2003b Build 3916 allows local users to cause a denial of service (application crash) via a long string in the "AwayMsg Presets" value in the ICQ\ICQPro\DefaultPrefs\Presets registry key. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29933 - http://securityreason.com/securityalert/1818 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050461.html
CVE ID: CVE-2006-5725 State: PUBLISHED Published: 2006-11-04T01:00:00 Last Updated: 2024-08-07T20:04:54.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22550 - http://www.vupen.com/english/advisories/2006/4224 - https://www.exploit-db.com/exploits/2637 - https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c - https://exchange.xforce.ibmcloud.com/v
oits/2637 - https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/29802
CVE ID: CVE-2006-5726 State: PUBLISHED Published: 2006-11-06T17:00:00 Last Updated: 2024-08-07T20:04:54.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by mounting crafted UFS filesystems with malformed data structures. Additional Analyst Notes: - CVE Program Container: References: - http://projects.info-pull.com/mokb/MOKB-04-11-2006.html - http://secunia.com/advisories/22714 - http://www.vupen.com/english/advisories/2006/4357 - http://www.securityfocus.com/bid/20919
CVE ID: CVE-2006-5727 State: PUBLISHED Published: 2006-11-06T17:00:00 Last Updated: 2024-08-07T20:04:54.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute arbitrary PHP code via the (1) _saz[settings][shippingfolder] and (2) _saz[settings][taxfolder] parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20922 - http://www.vupen.com/english/advisories/2006/4343 - http://www.securityfocus.com/archive/1/456542/100/0/threaded - https://www.exploit-db.com/exploits/2718 - http://secunia.com/advisories/22708 - http:
archive/1/456542/100/0/threaded - https://www.exploit-db.com/exploits/2718 - http://secunia.com/advisories/22708 - http://www.attrition.org/pipermail/vim/2007-January/001232.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30013 - http://www.osvdb.org/30194
CVE ID: CVE-2006-5728 State: PUBLISHED Published: 2006-11-06T17:00:00 Last Updated: 2024-08-07T20:04:54.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long argument to the NLST command, possibly involving the -al flags. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30041 - http://secunia.com/advisories/22717 - http://www.vupen.com/english/advisories/2006/4365 - https://www.exploit-db.com/exploits/2715
CVE ID: CVE-2006-5729 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to (1) reply to a message in an arbitrary forum, if authorized to create a message in any forum; and (2) perform certain unauthorized forum actions, related to an "error in how the permissions were assembled" that assigns extra permissions to users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
Container: References: - http://www.securityfocus.com/bid/20889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29994 - http://sourceforge.net/project/shownotes.php?group_id=39239&release_id=460547 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29996 - http://secunia.com/advisories/22690
CVE ID: CVE-2006-5730 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CMS 0.9.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter. NOTE: it is possible that this is a vulnerability in FCKeditor. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29989 - http://www.securityfocus.com/bid/20898 - http://secunia.com/advisories/22675 - http://www.vupen.com/english/a
es/29989 - http://www.securityfocus.com/bid/20898 - http://secunia.com/advisories/22675 - http://www.vupen.com/english/advisories/2006/4346 - https://www.exploit-db.com/exploits/2706 - http://www.osvdb.org/30186
CVE ID: CVE-2006-5731 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the siteconf[curl] parameter, as demonstrated by a POST to news/comment.php containing PHP code, which is stored under db/comments/news/ and included by classes/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2702 - http://secunia.com/advisories/22593 - https://exchange.xforce.ibmcloud.co
: - https://www.exploit-db.com/exploits/2702 - http://secunia.com/advisories/22593 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29966 - http://www.securityfocus.com/bid/20871 - http://www.vupen.com/english/advisories/2006/4361
CVE ID: CVE-2006-5732 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the myauthorid cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20850 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29941 - http://www.vupen.com/english/advisories/2006/4667 - http://sourceforge.net/project/shownotes.php?release_id=464660&group_id=173946 - https://www.exploit-db.com/exploits/2694
CVE ID: CVE-2006-5733 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2707 - http://secunia.com/advisories/22983 - http://www.securityfocus.com/bid/21218 - http://community.postnuke.c
ploits/2707 - http://secunia.com/advisories/22983 - http://www.securityfocus.com/bid/21218 - http://community.postnuke.com/Article2787.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/29992 - http://www.securityfocus.com/bid/20897
CVE ID: CVE-2006-5734 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lang parameter in documentation/common/search.php and (c) documentation/common/vitals.inc.php, the (3) row[dir_name] parameter in (d) include/classes/module/module.class.php, and the (4) lang_path parameter in (e) include/classes/phpmailer/class.phpmailer.php. NOTE: the print
/module.class.php, and the (4) lang_path parameter in (e) include/classes/phpmailer/class.phpmailer.php. NOTE: the print.php vector is already covered by CVE-2005-3404. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29693 - http://securityreason.com/securityalert/1823 - http://www.securityfocus.com/bid/20634 - http://www.securityfocus.com/archive/1/449233/100/200/threaded
CVE ID: CVE-2006-5735 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the language parameter, related to register.php storing a language value in the users table. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017131 - http://securityreason.com/securityalert/1824 - http://www.osvdb.org/30132 - http://www.securityfocus.com/archive/1/450055/100/0/threaded - http://www.vupe
alert/1824 - http://www.osvdb.org/30132 - http://www.securityfocus.com/archive/1/450055/100/0/threaded - http://www.vupen.com/english/advisories/2006/4256 - http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities - http://secunia.com/advisories/22622 - http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt
CVE ID: CVE-2006-5736 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3017, allows remote attackers to execute arbitrary SQL commands via the result_list array parameter, which is not initialized. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017131 - http://securityreason.com/securityalert/1824 - http://www.securityfocus.com/archive/1/450055/100/0/threaded - http://www.vupen.com/english/advisories/2006/4256 - http://www.wargan.or
rityfocus.com/archive/1/450055/100/0/threaded - http://www.vupen.com/english/advisories/2006/4256 - http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities - http://www.osvdb.org/30133 - http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt
CVE ID: CVE-2006-5737 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017131 - http://www.securityfocus.com/archive/1/450055/100/0/threaded - http://www.osvdb.org/30134 - http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities
CVE ID: CVE-2006-5738 State: PUBLISHED Published: 2006-11-06T18:00:00.000Z Last Updated: 2025-04-03T15:23:43.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://forums.punbb.org/viewtopic.php?id=13496 - http://www.punbb.org/changelogs/1.2.13_to_1.2.14.txt
CVE ID: CVE-2006-5739 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-31-18 allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter, a different vector than CVE-2006-5280. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017047 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29487
CVE ID: CVE-2006-5740 State: PUBLISHED Published: 2006-10-27T23:00:00 Last Updated: 2024-08-07T20:04:54.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the LDAP dissector in Wireshark (formerly Ethereal) 0.99.3 allows remote attackers to cause a denial of service (crash) via a crafted LDAP packet. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm - http://secunia.com/advisories/23096 - http://www.wireshark.org/security/wnpa-sec-2006-03.html - https://issues.rpath.com/browse/RPL-746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29841 - http://secunia.com/advisories
es.rpath.com/browse/RPL-746 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29841 - http://secunia.com/advisories/22590 - http://securitytracker.com/alerts/2006/Oct/1017129.html - ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P - http://www.vupen.com/english/advisories/2006/4220 - http://secunia.com/advisories/22841 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9482 - http://www.securityfocus.com/bid/20762 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14679 - http://www.novell.com/linux/security/advisories/2006_65_ethereal.html - http://www.redhat.com/support/errata/RHSA-2006-072
tp://www.novell.com/linux/security/advisories/2006_65_ethereal.html - http://www.redhat.com/support/errata/RHSA-2006-0726.html - http://secunia.com/advisories/22929 - http://www.securityfocus.com/archive/1/450307/100/0/threaded - http://secunia.com/advisories/22692 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:195 - http://secunia.com/advisories/22672 - http://secunia.com/advisories/22797
CVE ID: CVE-2006-5741 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:55.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon, when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Ser
an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449119/100/200/threaded - http://www.osvdb.org/29919 - http://www.osvdb.org/29918 - http://www.osvdb.org/29920 - http://www.securityfocus.com/bid/20602 - http://www.securityfocus.com/archive/1/449739/100/100/threaded - http://www.securityfocus.com/archive/1/451978/100/100/threaded - http://secunia.com/advisories/22475
CVE ID: CVE-2006-5742 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting (XAS)". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449119/100/200/threaded - http://www.securityfocus.com/bid/20602 - http://www.securityfocus.com/archive/1/449739/100/100/threaded -
00/threaded - http://www.securityfocus.com/bid/20602 - http://www.securityfocus.com/archive/1/449739/100/100/threaded - http://www.securityfocus.com/archive/1/451978/100/100/threaded - http://secunia.com/advisories/22475
CVE ID: CVE-2006-5743 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to inject arbitrary web script or HTML via (1) an Access Point with a crafted SSID, (2) the name of the sensor WIDS, (3) the name of the Highwall EndPoint workstation, or other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29916 - http://www.securityfocus.com/archive/1/449118/100/200/threaded - http://www.securityfoc
: - http://www.osvdb.org/29916 - http://www.securityfocus.com/archive/1/449118/100/200/threaded - http://www.securityfocus.com/bid/20605 - http://www.securityfocus.com/archive/1/449739/100/100/threaded
CVE ID: CVE-2006-5744 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29916 - http://www.securityfocus.com/archive/1/449118/100/200/threaded - http://www.securityfocus.com/bid/20605 - http://www.securityfocus.com/archive/1/449739/100
e/1/449118/100/200/threaded - http://www.securityfocus.com/bid/20605 - http://www.securityfocus.com/archive/1/449739/100/100/threaded
CVE ID: CVE-2006-5745 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http:
ional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://xforce.iss.net/xforce/alerts/id/239 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104 - http://securitytracker.com/id?1017157 - https://www.exploit-db.com/exploits/2743 - http://www.iss.net/threats/239.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071 - http://www.vupen.com/english/advisories/2006/4334 - http://blogs.securiteam.com/?p=717 - http://www.securityfocus.com/bid/20915 - http://secunia.com/advisories/22687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30004 - http://www.mi
20915 - http://secunia.com/advisories/22687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30004 - http://www.microsoft.com/technet/security/advisory/927892.mspx - http://www.kb.cert.org/vuls/id/585137
CVE ID: CVE-2006-5746 State: PUBLISHED Published: 2006-11-06T18:00:00 Last Updated: 2024-08-07T20:04:54.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29921 - http://www.securityfocus.com/archive/1/449119/100/200/threaded - http://www.securityfocus.com/bid/20602 - http://www.securityfocus.com/archive/1/449739/100/100/threaded
0/200/threaded - http://www.securityfocus.com/bid/20602 - http://www.securityfocus.com/archive/1/449739/100/100/threaded - http://www.securityfocus.com/archive/1/451978/100/100/threaded - http://secunia.com/advisories/22475
CVE ID: CVE-2006-5747 State: PUBLISHED Published: 2006-11-08T21:00:00 Last Updated: 2024-08-07T20:04:54.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers to execute arbitrary code via the XML.prototype.hasOwnProperty JavaScript function. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=355569 - http://www.vupen.com/english/advisories/2006/3748 - http://securitytracker.com/id?1017178 - http://securitytracker.com/id?1017179 - http://security.gentoo.org/glsa/glsa-200612-08.xml - http
acker.com/id?1017178 - http://securitytracker.com/id?1017179 - http://security.gentoo.org/glsa/glsa-200612-08.xml - http://secunia.com/advisories/23013 - http://support.avaya.com/elmodocs2/security/ASA-2006-246.htm - http://www.mozilla.org/security/announce/2006/mfsa2006-65.html - http://www.securityfocus.com/archive/1/451099/100/0/threaded - http://secunia.com/advisories/22770 - http://www.vupen.com/english/advisories/2006/4387 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30093 - https://issues.rpath.com/browse/RPL-765 - http://secunia.com/advisories/23009 - http://www.us-cert.gov/cas/techalerts/TA06-312A.html - http://secunia.com/advisories/22980 - http://rhn.redhat.com/errata/RH