Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1109 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: it is not clear whether this report is associated with a specific product. If not, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16960 - http://secunia.com/advisories/19103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25045 - http://www.securityfocus.com/archive/1/426765/100/0/thr
3 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25045 - http://www.securityfocus.com/archive/1/426765/100/0/threaded - http://securityreason.com/securityalert/530 - http://www.vupen.com/english/advisories/2006/0840 - http://www.nukedx.com/?viewdoc=18
CVE ID: CVE-2006-1110 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1547 - http://www.osvdb.org/23610 - http://secunia.com/advisories/19096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25035 - http://www.securityfocus.com/bid/16938 - http://www.securityfocus.com/archive/1/426650/100/0/threaded
CVE ID: CVE-2006-1111 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1547 - http://www.osvdb.org/23611 - http://www.securityfocus.com/bid/16938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25036 - http://www.securityfocus.com/archive/1/426650/100/0/threa
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25036 - http://www.securityfocus.com/archive/1/426650/100/0/threaded
CVE ID: CVE-2006-1112 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.701Z Vendors: n/a Products: n/a Problem Types: n/a Description: Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1547 - http://securityreason.com/securityalert/539 - http://www.osvdb.org/23612 - http://www.securityfocus.com/bid/16938 - http://www.securityfocus.com/archive/1/426650/100/0/threaded
CVE ID: CVE-2006-1113 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://loudblog.de/forum/viewtopic.php?id=590 - http://www.securityfocus.com/bid/17023 - http://www.securityfocus.com/archive/1/426973/100/0/threaded - http://secunia.com/advisories/19172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25101 - http://www.vupen.com/english/advisories/2006/0878
CVE ID: CVE-2006-1114 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b) inc/backend_settings.php. Additional Analyst Notes: - CVE Program Container: References: - http://loudblog.de/forum/viewtopic.php?id=590 - http://www.securityfocus.com/bid/17023 - http://www.securityfocus.com/archive/1/426973/100/0/threaded - https://exchan
- http://www.securityfocus.com/bid/17023 - http://www.securityfocus.com/archive/1/426973/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25103 - http://secunia.com/advisories/19172 - http://www.vupen.com/english/advisories/2006/0878
CVE ID: CVE-2006-1115 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0862 - http://securitytracker.com/id?1015719 - http://www.securityfocus.com/archive/1/427146/100/0/threaded - http://www.ncipher.com/resources/95/sa12_in
/id?1015719 - http://www.securityfocus.com/archive/1/427146/100/0/threaded - http://www.ncipher.com/resources/95/sa12_insecure_generation_of_diffiehellman_keys - http://www.securityfocus.com/bid/17006 - http://secunia.com/advisories/19137 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25060
CVE ID: CVE-2006-1116 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427150/100/0/threaded - http://www.vupen.com/english/advisories/2006/0862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25062 - http://www.securit
vupen.com/english/advisories/2006/0862 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25062 - http://www.securityfocus.com/bid/17011 - http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface - http://securitytracker.com/id?1015718 - http://secunia.com/advisories/19137
CVE ID: CVE-2006-1117 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/200
rute force. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0862 - http://www.securityfocus.com/archive/1/427151/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25063 - http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security - http://securitytracker.com/id?1015718 - http://www.securityfocus.com/bid/17012 - http://secunia.com/advisories/19137
CVE ID: CVE-2006-1118 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving GBK character sets. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19147 - http://www.vupen.com/english/advisories/2006/0863 - http://sourceforge.net/project/shownotes.php?group_id=144412&release_id=399256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25073
CVE ID: CVE-2006-1119 State: PUBLISHED Published: 2006-03-09T20:00:00 Last Updated: 2024-08-07T16:56:15.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426957/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25277
CVE ID: CVE-2006-1120 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T16:56:15.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) its_url parameter in the documents page and (2) url parameter in the send_write page of (a) index.php; (3) subject, and (4) images parameters to (b) calendar.php; (5) bid, (6) replying_msg, (7) subject, (8) body, and (9) mid parameters to (c) forums.php; (10) subject and (11) message parameters to (d) inbox.php; (12) subject_color and (13)
id parameters to (c) forums.php; (10) subject and (11) message parameters to (d) inbox.php; (12) subject_color and (13) email parameters to (e) lostpassword.php; and the (14) c_name, (15) content_inicial, and (16) cid parameters to (f) mycontents.php. NOTE: the calendar.php/day vector is already subsumed by CVE-2006-0220, and the calendar.php/month, calendar.php/year, and search.php/q parameters for calendar.php are already subsumed by CVE-2004-2511. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25279 - http://www.osvdb.org/23979 - http://www.osvdb.org/23981 - http://www.securityfocus.com/archive/1/427175/100/0/threaded
http://www.osvdb.org/23979 - http://www.osvdb.org/23981 - http://www.securityfocus.com/archive/1/427175/100/0/threaded - http://www.osvdb.org/23980 - http://www.securityfocus.com/bid/17050 - http://securityreason.com/securityalert/392 - http://www.osvdb.org/23978 - http://www.osvdb.org/23976 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-001.txt - http://www.osvdb.org/23977
CVE ID: CVE-2006-1121 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T16:56:15.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query string to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25052 - http://www.securityfocus.com/archive/1/426759/100/0/threaded - http://www.securityfocus.com/bid/16961 - http://securitytracker.com/id?1015726 - http://kapda.ir/advisory-277.html - http://securityreason.com/securityalert/531
CVE ID: CVE-2006-1122 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T17:03:28.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17035 - http://securityreason.com/securityalert/559 - http://www.vupen.com/english/advisories/2006/0896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25214 - http://www.osvdb.org/23771 - http://www.securityfocus.com/archive/1/427103/100/0/threaded - http
vulnerabilities/25214 - http://www.osvdb.org/23771 - http://www.securityfocus.com/archive/1/427103/100/0/threaded - http://secunia.com/advisories/19177
CVE ID: CVE-2006-1123 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T17:03:26.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17035 - http://www.osvdb.org/23770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25215 - http://securityreason.com/securityalert/559 - http://www.vupen.com/english/advisories/2006/0896 - http://www.securityfocus.com/archive/1/427103/100/0/threaded - http://secunia.com/ad
.com/english/advisories/2006/0896 - http://www.securityfocus.com/archive/1/427103/100/0/threaded - http://secunia.com/advisories/19177
CVE ID: CVE-2006-1124 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T17:03:27.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19119 - http://www.morx.org/rev.txt - http://www.securityfocus.com/bid/16997 - http://www.securityfocus.com/archive/1/427192/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0910.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25072 - http://www.vupen.com/english/ad
closure/2006-02/0910.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25072 - http://www.vupen.com/english/advisories/2006/0867 - http://securitytracker.com/id?1015739 - http://www.osvdb.org/23735
CVE ID: CVE-2006-1125 State: PUBLISHED Published: 2006-03-09T21:00:00 Last Updated: 2024-08-07T17:03:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16952 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html - http://secunia.com/advisories/19118 - http://securitytracker.com/id?1015728 - https://exchange.xforce.ibmcloud.c
.html - http://secunia.com/advisories/19118 - http://securitytracker.com/id?1015728 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25139 - http://www.vupen.com/english/advisories/2006/0845 - http://www.dslreports.com/forum/remark%2C15601404
CVE ID: CVE-2006-1126 State: PUBLISHED Published: 2006-03-09T22:00:00 Last Updated: 2024-08-07T17:03:26.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR. Additional Analyst Notes: - CVE Program Container: References: - http://www.gulftech.org/?node=research&article_id=00106-03022006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25120 - http://gallery.menalto.com/gallery_2.0.3_released - http://www.vupen.com/english/advisories/20
m/vulnerabilities/25120 - http://gallery.menalto.com/gallery_2.0.3_released - http://www.vupen.com/english/advisories/2006/0813 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html - http://secunia.com/advisories/19104 - http://securitytracker.com/id?1015717
CVE ID: CVE-2006-1127 State: PUBLISHED Published: 2006-03-09T22:00:00 Last Updated: 2024-08-07T17:03:26.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16940 - http://www.osvdb.org/23596 - http://www.gulftech.org/?node=research&article_id=00106-03022006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25117 - http://gallery.menal
e=research&article_id=00106-03022006 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25117 - http://gallery.menalto.com/gallery_2.0.3_released - http://www.vupen.com/english/advisories/2006/0813 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html - http://secunia.com/advisories/19104 - http://securitytracker.com/id?1015717
CVE ID: CVE-2006-1128 State: PUBLISHED Published: 2006-03-09T22:00:00 Last Updated: 2024-08-07T17:03:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25118 - http://www.osvdb.org/23597 - http://www.gulftech.org/?node=research&article_id=00106-03022006 - http://gallery.menalto.com/g
://www.osvdb.org/23597 - http://www.gulftech.org/?node=research&article_id=00106-03022006 - http://gallery.menalto.com/gallery_2.0.3_released - http://www.securityfocus.com/bid/16948 - http://www.vupen.com/english/advisories/2006/0813 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html - http://secunia.com/advisories/19104 - http://securitytracker.com/id?1015717
CVE ID: CVE-2006-1129 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427073/100/0/threaded - http://www.vupen.com/english/advisories/2006/0758 - http://evuln.com/vulns/88/summary.html - http://www.ekinboard.com/forums/v1/viewtopic.php?id=469 - http://www.securityfocus.com/bid/16861 - https://exchange.xforce.ibmcloud.com/vulne
com/forums/v1/viewtopic.php?id=469 - http://www.securityfocus.com/bid/16861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24922 - http://secunia.com/advisories/19045 - http://www.ekinboard.com/patch_for_1.0.3.txt - http://www.osvdb.org/23547
CVE ID: CVE-2006-1130 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:26.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427073/100/0/threaded - http://securityreason.com/securityalert/558 - http://www.vupen.com/english/advisories/2006/0758 - http://evuln.com/vulns/88/summary.html - http://www.ekinboard.com/forums/v1/viewtopic.php?id=469 - http://www.securityfocus.com/bid/16861 - h
s/88/summary.html - http://www.ekinboard.com/forums/v1/viewtopic.php?id=469 - http://www.securityfocus.com/bid/16861 - http://secunia.com/advisories/19045 - http://www.osvdb.org/23546 - http://www.ekinboard.com/patch_for_1.0.3.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24921
CVE ID: CVE-2006-1131 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:26.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the comment_title parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25053 - http://kiki91.altervista.org/exploit/bitweaver_1.2.1_XSS.txt - http://www.vupen.com/english/advisories/2006/0837 - http://secunia.com/advisories/19101
CVE ID: CVE-2006-1132 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:26.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the MainID parameter. NOTE: the SubjectID vector is already covered by CVE-2005-4729. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426874/100/0/threaded - http://www.securityfocus.com/bid/16955 - http://securityreason.com/securityalert/552
CVE ID: CVE-2006-1133 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:28.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php. NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16956 - http://www.securityfocus.com/archive/1/426874/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25090 - http://www.osvdb.org/23813 - http:
/426874/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25090 - http://www.osvdb.org/23813 - http://securityreason.com/securityalert/552 - http://www.securityfocus.com/bid/16969 - http://www.osvdb.org/23812
CVE ID: CVE-2006-1134 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19135 - http://www.gold-sonata.com/forums/read.php?board=1&id=17271 - http://securityreason.com/securityalert/582 - http://www.osvdb.org/23692 - http://www.securityfocus.com/archive/1/427623/100/0/threaded - http:
om/securityalert/582 - http://www.osvdb.org/23692 - http://www.securityfocus.com/archive/1/427623/100/0/threaded - http://www.securityfocus.com/bid/17107 - http://www.vupen.com/english/advisories/2006/0820 - http://www.securityfocus.com/bid/16987 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25061 - http://evuln.com/vulns/91/description.html
CVE ID: CVE-2006-1135 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:28.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to search.php or (2) username parameter to comments_do.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25111 - http://kiki91.altervista.org/exploit/sBlog_0.72_xss.txt - http://www.vupen.com/english/advisories/2006/0883 - http://secunia.com/advisories/19151
rg/exploit/sBlog_0.72_xss.txt - http://www.vupen.com/english/advisories/2006/0883 - http://secunia.com/advisories/19151 - http://www.osvdb.org/23759 - http://www.osvdb.org/23760