Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3087 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pUserID, (2) aid, (3) aname, (4) uid, and (5) m parameter in (a) common/galleries.asp; (6) aid, (7) aname, (8) uid, (9) m, (10) gp, and (11) g parameter in (b) common/pupload.asp; and (12) msg, (13) fn and (14) gp parameter in (c) common/upload.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26371 - http://www.vupen.com/english/advi
nal Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26371 - http://www.vupen.com/english/advisories/2006/2298 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27066 - http://www.osvdb.org/26372 - http://secunia.com/advisories/20553 - http://pridels0.blogspot.com/2006/06/ezgallery-v15-xss-vuln.html - http://www.osvdb.org/26370
CVE ID: CVE-2006-3088 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.654Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20565 - http://www.osvdb.org/26489 - http://www.vupen.com/english/advisories/2006/2342
CVE ID: CVE-2006-3089 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) prefixe_dossier parameter in (a) /inc/header.php; (2) msg parameter in (b) /remises/ajouter_remise.php, (c) /tva/ajouter_tva.php, (d) /stocks/ajouter.php, (e) /pays/ajouter_pays.php, (f) /produits/ajouter_cat.php, (g) /produits/ajouter_produit.php and (h) /produits/modifier_cat.php; (3) tire parameter in /remises/ajouter_remise.php; (4) quantite, (5) t
r_produit.php and (h) /produits/modifier_cat.php; (3) tire parameter in /remises/ajouter_remise.php; (4) quantite, (5) taux and (6) date parameter in /stocks/ajouter.php; and (7) pays and (8) prefixe parameter in /pays/ajouter_pays.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26482 - http://www.osvdb.org/26481 - http://www.osvdb.org/26480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27208 - http://www.osvdb.org/26479 - http://www.osvdb.org/26478 - http://www.osvdb.org/26485 - http://www.osvdb.org/26483 - http://www.securityfocus.com/archive/1/437025/100/0/threaded - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advis
urityfocus.com/archive/1/437025/100/0/threaded - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advisories/phpmyfactures.txt - http://securityreason.com/securityalert/1111 - http://www.osvdb.org/26484
CVE ID: CVE-2006-3090 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_pays parameter in (a) /pays/modifier_pays.php; (2) id_produit, (3) quantite, (4) prix_ht, and (5) date parameter in (b) /stocks/ajouter.php; (6) id_cat parameter in (c) /produits/modifier_cat.php; (7) id_client parameter in (d) /clients/modifier_client.php; (8) id_remise parameter in (e) /remises/index.php; (9) id_taux parameter in (f)
ter in (d) /clients/modifier_client.php; (8) id_remise parameter in (e) /remises/index.php; (9) id_taux parameter in (f) /tva/index.php; (10) ref_produit, and (11) id_stock parameter in (g) /stocks/index.php; (12) id_pays parameter in (h) /pays/index.php; and (13) id_cat parameter in (i) /produits/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26472 - http://www.osvdb.org/26473 - http://www.osvdb.org/26469 - http://www.osvdb.org/26471 - http://www.osvdb.org/26476 - http://www.osvdb.org/26470 - http://www.osvdb.org/26474 - http://www.securityfocus.com/archive/1/437025/100/0/threaded - http://www.osvdb.org/26475 - https://exchange.xforce.ibmclo
tp://www.securityfocus.com/archive/1/437025/100/0/threaded - http://www.osvdb.org/26475 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27209 - http://www.osvdb.org/26467 - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advisories/phpmyfactures.txt - http://securityreason.com/securityalert/1111
CVE ID: CVE-2006-3091 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the installation path via a direct request to (1) /verif.php, (2) /inc/footer.php, and (3) /remises/ajouter_remise.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26488 - http://www.securityfocus.com/archive/1/437025/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27205 - http://www.osvdb.org/26487 - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advisories/phpmy
/27205 - http://www.osvdb.org/26487 - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advisories/phpmyfactures.txt - http://www.osvdb.org/26486 - http://securityreason.com/securityalert/1111
CVE ID: CVE-2006-3092 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters to (1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst N
of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26477 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27206 - http://www.securityfocus.com/archive/1/437025/100/0/threaded - http://secunia.com/advisories/20642 - http://www.acid-root.new.fr/advisories/phpmyfactures.txt - http://securityreason.com/securityalert/1111
CVE ID: CVE-2006-3093 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown impact and unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31829 - http://securitytracker.com/id?1016314 - http://www.osvdb.org/26535 - http://www.securityfocus.com/bid/18445 - http://www.novell.com/linux/security/advisories/2006_41_acroread.html - http://secunia.com/advisories/20576 - http://www.novell.com/linux/security/advisories/2006_16_sr.h
06_41_acroread.html - http://secunia.com/advisories/20576 - http://www.novell.com/linux/security/advisories/2006_16_sr.html - http://secunia.com/advisories/20925 - http://www.osvdb.org/26536 - http://secunia.com/advisories/20960 - http://www.adobe.com/support/techdocs/327817.html
CVE ID: CVE-2006-3094 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26528 - http://securitytracker.com/id?1016324 - http://www.osvdb.org/26529 - http://www.vupen.com/english/advisories/2006/2360 - http://secunia.com/advisories/20645 - http://marc.info/?l=bugtraq&m=1150488983
.vupen.com/english/advisories/2006/2360 - http://secunia.com/advisories/20645 - http://marc.info/?l=bugtraq&m=115048898305454&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27186
CVE ID: CVE-2006-3095 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26523 - http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html - http://secunia.com/advisories/20697 - http://www.vupen.com/english/advisories/2006/2382 - http://www.securityfocus.com/bid/18460 - http://www.osvdb.org/26522 -
tp://www.vupen.com/english/advisories/2006/2382 - http://www.securityfocus.com/bid/18460 - http://www.osvdb.org/26522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27140
CVE ID: CVE-2006-3096 State: PUBLISHED Published: 2006-06-19T21:00:00 Last Updated: 2024-08-07T18:16:05.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and (2) topic parameter in topics.cfm. NOTE: this item was created based on information in a blog entry that was apparently removed after CVE analysis. As of 20060619, CVE is attempting to determine the cause of the removal. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27144 - http:/
nalyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27144 - http://pridels0.blogspot.com/2006/06/ipostmx-2005-vuln.html
CVE ID: CVE-2006-3097 State: PUBLISHED Published: 2006-06-20T17:00:00 Last Updated: 2024-08-07T18:16:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2406 - http://securityreason.com/securityalert/1119 - http://securitytracker.com/id?1016307 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27314 - http://www.osvdb.org/26622 - http://www.securityfocus.com/archive/1/437401/100/0/th
ibmcloud.com/vulnerabilities/27314 - http://www.osvdb.org/26622 - http://www.securityfocus.com/archive/1/437401/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5627 - http://secunia.com/advisories/21491 - http://secunia.com/advisories/20711 - http://www.securityfocus.com/bid/18457 - http://www.securityfocus.com/archive/1/437401/100/0/threaded - http://www.vupen.com/english/advisories/2006/3292
CVE ID: CVE-2006-3100 State: PUBLISHED Published: 2019-11-06T02:34:16 Last Updated: 2024-08-07T18:16:05.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: termpkg 3.3 suffers from buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://security-tracker.debian.org/tracker/CVE-2006-3100 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=358028
CVE ID: CVE-2006-3101 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27166 - http://secunia.com/advisories/20699 - http://securitytracker.com/id?1016317 - http://www.securityfocus.com/archive/1/437480/100/0/threaded - http://www.securityfocus.com/bid/18449 - http://www.securit
tp://www.securityfocus.com/archive/1/437480/100/0/threaded - http://www.securityfocus.com/bid/18449 - http://www.securityfocus.com/archive/1/437441/100/0/threaded - http://www.osvdb.org/26531 - http://www.vupen.com/english/advisories/2006/2384 - http://securityreason.com/securityalert/1116 - http://www.cisco.com/en/US/products/sw/secursw/ps4911/tsd_products_security_response09186a00806b8bdb.html
CVE ID: CVE-2006-3102 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358 - http://retrogod.altervista.org/bitweaver_13_xpl.html - https://exchange.xforc
es.php?release_id=336854&group_id=141358 - http://retrogod.altervista.org/bitweaver_13_xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27215 - https://www.exploit-db.com/exploits/1918 - http://www.osvdb.org/26587 - http://secunia.com/advisories/20695 - http://www.bitweaver.org/articles/45 - http://securityreason.com/securityalert/1115 - http://www.vupen.com/english/advisories/2006/2405 - http://www.securityfocus.com/archive/1/437491/100/0/threaded
CVE ID: CVE-2006-3103 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter in articles/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358 - http://retrogod.altervista.org/bitweaver_13_xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27213 - http://secunia.com/advisories/20695 - http://www
xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27213 - http://secunia.com/advisories/20695 - http://www.osvdb.org/26588 - http://www.bitweaver.org/articles/45 - http://securityreason.com/securityalert/1115 - http://www.vupen.com/english/advisories/2006/2405 - http://www.securityfocus.com/archive/1/437491/100/0/threaded
CVE ID: CVE-2006-3104 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358 - http://retrogod.altervista.org/bitweaver_13_xpl.html - http://www.osvdb.org/26589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27214 - http://secunia.com/advi
html - http://www.osvdb.org/26589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27214 - http://secunia.com/advisories/20695 - http://www.bitweaver.org/articles/45 - http://securityreason.com/securityalert/1115 - http://www.vupen.com/english/advisories/2006/2405 - http://www.securityfocus.com/archive/1/437491/100/0/threaded
CVE ID: CVE-2006-3105 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=336854&group_id=141358 - http://retrogod.altervista.org/bitweaver_13_xpl.html - http://www.osvdb.org/26590 - http://www.bitweaver.org/articles/45 -
tp://retrogod.altervista.org/bitweaver_13_xpl.html - http://www.osvdb.org/26590 - http://www.bitweaver.org/articles/45 - http://securityreason.com/securityalert/1115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27348 - http://www.securityfocus.com/archive/1/437491/100/0/threaded
CVE ID: CVE-2006-3106 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbitrary web script or HTML via the subsite parameter in the subsite todo. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27345
CVE ID: CVE-2006-3107 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) admin/modules/news/news_class.php and (b) admin/modules/content/content_class.php, and (2) GLOBALS[where_cms] to (c) admin/modules/block_media/util.media.php. NOTE: this issue might be resultant from a global overwrite vulnerability. This issue is similar to CVE-2006-2576, but the vectors are different. Additional
rom a global overwrite vulnerability. This issue is similar to CVE-2006-2576, but the vectors are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26707 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26633 - http://www.osvdb.org/26708 - http://securitytracker.com/id?1016259 - http://www.osvdb.org/26709
CVE ID: CVE-2006-3108 State: PUBLISHED Published: 2006-06-21T01:00:00Z Last Updated: 2024-09-16T19:56:53.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016243
CVE ID: CVE-2006-3109 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.751Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1114 - http://www.osvdb.org/26651 - http://www.fishnetsecurity.com/csirt/disclosure/cis
securityreason.com/securityalert/1114 - http://www.osvdb.org/26651 - http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+CallManager+XSS+Advisory.htm - http://www.cisco.com/en/US/products/sw/voicesw/ps556/tsd_products_security_response09186a00806c0846.html - http://www.securityfocus.com/bid/18504 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047015.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27225 - http://securitytracker.com/id?1016328 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047019.html - http://secunia.com/advisories/20735 - http://www.vupen.com/english/advisories/2006/2443 - http://www.securityfocus.com/archive/1/437757/100/0
visories/20735 - http://www.vupen.com/english/advisories/2006/2443 - http://www.securityfocus.com/archive/1/437757/100/0/threaded - http://www.osvdb.org/26652
CVE ID: CVE-2006-3110 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in main.php in Chipmailer 1.09 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) betreff, (3) mail, and (4) text parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115024576618386&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27156 - http://securitytracker.com/id?1016315
CVE ID: CVE-2006-3111 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27158 - http://www.vupen.com/english/advisories/2006/2359 - http://www.securityfocus.com/bi
ibmcloud.com/vulnerabilities/27158 - http://www.vupen.com/english/advisories/2006/2359 - http://www.securityfocus.com/bid/18463 - http://marc.info/?l=bugtraq&m=115024576618386&w=2 - http://securitytracker.com/id?1016315
CVE ID: CVE-2006-3112 State: PUBLISHED Published: 2006-06-21T01:00:00 Last Updated: 2024-08-07T18:16:05.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Chipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to php.php, which displays the output of the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115024576618386&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27159 - http://securitytracker.com/id?1016315
CVE ID: CVE-2006-3113 State: PUBLISHED Published: 2006-07-27T20:00:00 Last Updated: 2024-08-07T18:16:05.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/239124 - http://secunia.com/advisories/21243 - http://www.redhat.com/support/errata/RHSA-2006-0608.html - http://security.gentoo.org/