Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5827 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in phpComasy CMS 0.7.9pre and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1843 - http://www.securityfocus.com/archive/1/450712 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls32 - http://secunia.com/advisories/22760 - http://www.securityfocus.com/bid/20938 - https://exchang
p?major_rls=major_rls32 - http://secunia.com/advisories/22760 - http://www.securityfocus.com/bid/20938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30053
CVE ID: CVE-2006-5828 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30023 - http://www.securityfocus.com/bid/20935 - https://www.exploit-db.com/exploits/2720 - http://www.vupen.com/english/advisories/2006/4403 - http://secunia.com/advisories/22704
CVE ID: CVE-2006-5829 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) choosed_language parameter to (a) cp_dpage.php, (b) cp_news.php, (c) cp_forum_view.php, (d) cp_edit_user.php, (e) cp_newsletter.php, (f) cp_links.php, (g) cp_contact_us.php, (h) cp_login.php, and (i) cp_codice_fiscale.php in public/code/; (2) news_category parameter to public/code/cp_news.php; (3) nlmsg_nlcatid parameter to public/code/cp_newsletter.php; (4) links_c
category parameter to public/code/cp_news.php; (3) nlmsg_nlcatid parameter to public/code/cp_newsletter.php; (4) links_category parameter to public/code/cp_links.php; (5) product_category_id parameter to public/code/cp_show_ec_products.php; (6) order_field parameter to public/code/cp_show_ec_products.php; (7) firstrow parameter to public/code/cp_users_online.php; and (8) orderdir parameter to public/code/cp_links_search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4378 - http://www.securityfocus.com/archive/1/450701/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30051 - http://sourceforge.net/project
ve/1/450701/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30051 - http://sourceforge.net/project/shownotes.php?release_id=478370 - http://securityreason.com/securityalert/1839 - http://secunia.com/advisories/22719 - http://www.securityfocus.com/bid/20931
CVE ID: CVE-2006-5830 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) topid, (2) forid, and (3) catid parameters to code/cp_forum_view.php; (4) choosed_language parameter to cp_dpage.php; (5) orderdir parameter to cp_links_search.php; (6) order_field parameter to (a) cp_show_ec_products.php and (b) cp_users_online.php; and the (7) signature and (8) fiscal code fields in the user profile. Additional Analyst Notes: - C
cp_users_online.php; and the (7) signature and (8) fiscal code fields in the user profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4378 - http://www.securityfocus.com/archive/1/450701/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=478370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30048 - http://securityreason.com/securityalert/1839 - http://secunia.com/advisories/22719 - http://www.securityfocus.com/bid/20931
CVE ID: CVE-2006-5831 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the load_page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450701/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=478370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30050 - http://securityreason.com/securityalert/1839 - http://www.security
/exchange.xforce.ibmcloud.com/vulnerabilities/30050 - http://securityreason.com/securityalert/1839 - http://www.securityfocus.com/bid/20931
CVE ID: CVE-2006-5832 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to (1) public/code/cp_dpage.php, possibly involving the aiocp_dp[] parameter, (2) public/code/cp_show_ec_products.php, possibly involving the order_field[] parameter, and (3) public/code/cp_show_page_help.php, possibly involving the hp[] parameter, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcl
n various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30052 - http://www.securityfocus.com/archive/1/450701/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=478370 - http://securityreason.com/securityalert/1839 - http://www.securityfocus.com/bid/20931
CVE ID: CVE-2006-5833 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: gbcms_php_files/up_loader.php GreenBeast CMS 1.3 does not require authentication to upload files, which allows remote attackers to cause a denial of service (disk consumption) and execute arbitrary code by uploading arbitrary files, such as executing PHP code via an uploaded PHP file. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30069 - http://www.vupen.com/english/advisories/2006/4416 - http://newhack.org/ad
ge.xforce.ibmcloud.com/vulnerabilities/30069 - http://www.vupen.com/english/advisories/2006/4416 - http://newhack.org/advisories/GreenBeastCMS.txt - http://secunia.com/advisories/22769 - http://www.securityfocus.com/archive/1/450785/100/0/threaded - http://securitytracker.com/id?1017176 - http://www.securityfocus.com/bid/20950
CVE ID: CVE-2006-5834 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.707Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the sLanguage Cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30024 - http://www.securityfocus.com/bid/20923 - http://www.vupen.com/english/advisories/2006/4402 - http://secunia.com/advisories/22703 - https://www.exploit-db.com/exploits/2719
CVE ID: CVE-2006-5835 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Notes Remote Procedure Call (NRPC) protocol in IBM Lotus Notes Domino before 6.5.5 FP2 and 7.x before 7.0.2 does not require authentication to perform user lookups, which allows remote attackers to obtain the user ID file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017203 - http://www.securityfocus.com/bid/20960 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21248026 - http://www.fortconsult.net/images/pdf/lotusnotes_keyfiles.pdf - https://exchange.xforce.ibmcl
s?rs=463&uid=swg21248026 - http://www.fortconsult.net/images/pdf/lotusnotes_keyfiles.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/30118 - http://secunia.com/advisories/22741 - http://www.vupen.com/english/advisories/2006/4411
CVE ID: CVE-2006-5836 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows local users to cause a denial of service (kernel panic) and possibly execute arbitrary code via a file descriptor with an unrecognized file type. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30152 - http://www.securityfocus.com/bid/20982 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.osvdb.org/30216 - http://projects.inf
.com/bid/20982 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://www.osvdb.org/30216 - http://projects.info-pull.com/mokb/MOKB-09-11-2006.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.securitytracker.com/id?1017751 - http://secunia.com/advisories/22808 - http://www.vupen.com/english/advisories/2006/4448 - http://www.vupen.com/english/advisories/2007/0930 - http://secunia.com/advisories/24479
CVE ID: CVE-2006-5837 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows remote attackers to inject arbitrary PHP code into chat_log.php via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30078 - http://secunia.com/advisories/22748 - http://www.vupen.com/english/advisories/2006/4376 - http://www.securityfocus.com/bid/20947 - https://www.exploit-db.com/exploits/2733
CVE ID: CVE-2006-5838 State: PUBLISHED Published: 2006-11-10T01:00:00 Last Updated: 2024-08-07T20:04:55.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30086 - http://securityreason.com/securityalert/1835 - http://www.securityfocus.com/archive/1/450823/100/0/threaded - http://www.securityfocus.com/bid/20893
CVE ID: CVE-2006-5839 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _mygamefile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30091 - http://www.vupen.com/english/advisories/2006/4413 - https://www.exploit-db.com/exploits/2736
CVE ID: CVE-2006-5840 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the (1) neid parameter to newsdetails.php, or the (2) slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853. NOTE: the vendor has notified CVE that the current version only creates static pages, and that slistl.php/slid never existed in any version Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30249 - http://securityreason.com/secur
ional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30249 - http://securityreason.com/securityalert/1840 - http://secunia.com/advisories/22792 - http://attrition.org/pipermail/vim/2006-December/001190.html - http://www.securityfocus.com/bid/20970 - http://s-a-p.ca/index.php?page=OurAdvisories&id=7 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30135 - http://www.vupen.com/english/advisories/2006/4418 - http://www.osvdb.org/30250 - http://www.attrition.org/pipermail/vim/2006-December/001170.html - http://www.securityfocus.com/archive/1/450946/100/0/threaded
CVE ID: CVE-2006-5841 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dodosmail_header_file or (2) dodosmail_footer_file parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4414 - http://www.securityfocus.com/archive/1/452130/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30099 - https://www.exploit-db.com/exploits/
52130/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30099 - https://www.exploit-db.com/exploits/2742 - http://www.osvdb.org/30248 - http://secunia.com/advisories/22775
CVE ID: CVE-2006-5842 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The keystore file in Unicore Client before 5.6 build 5, when running on Unix systems, has insecure default permissions, which allows local users to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22765 - http://www.securityfocus.com/bid/20981 - http://sourceforge.net/project/shownotes.php?release_id=461942 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30157 - http://www.vupen.com/english/advisories/2006/4419
CVE ID: CVE-2006-5843 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Speedywiki 2.0 allows remote attackers to inject arbitrary web script or HTML via the showRevisions parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=116302805802656&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30132 - http://secunia.com/advisories/22788 - http://www.vupen.com/english/advisories/2006/4421 - http://www.securityfocus.com/bid/20976 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - htt
/advisories/2006/4421 - http://www.securityfocus.com/bid/20976 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - http://securitytracker.com/id?1017201
CVE ID: CVE-2006-5844 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Speedywiki 2.0 allows remote attackers to obtain the full path of the web server via the (1) showRevisions[] and (2) searchText[] parameters in (a) index.php, and (b) a direct request to upload.php without any parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=116302805802656&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30133 - http://www.vupen.com/english/advisories/2006/4421 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - http://securitytracker.com/i
upen.com/english/advisories/2006/4421 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - http://securitytracker.com/id?1017201
CVE ID: CVE-2006-5845 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in index.php in Speedywiki 2.0 allows remote authenticated users to upload and execute arbitrary PHP code by setting the upload parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=116302805802656&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30131 - http://secunia.com/advisories/22788 - http://www.vupen.com/english/advisories/2006/4421 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - http://securitytracker.com/id
pen.com/english/advisories/2006/4421 - http://s-a-p.ca/index.php?page=OurAdvisories&id=9 - http://securitytracker.com/id?1017201
CVE ID: CVE-2006-5846 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2006-5773. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22786 - http://www.securityfocus.com/bid/20969 - http://www.vupen.com/english/advisories/2006/4420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30125 - http://marc.info/?l=bugtraq&m=116303405916694&w=2 - ht
20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30125 - http://marc.info/?l=bugtraq&m=116303405916694&w=2 - http://www.freewebshop.org/?id=28 - http://www.freewebshop.org/index.php?id=28 - http://securitytracker.com/id?1017200
CVE ID: CVE-2006-5847 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22786 - http://www.securityfocus.com/bid/20969 - http://www.vupen.com/english/advisories/2006/4420 - http://www.freewebshop.org/?id=28 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30126 - http://marc.info/?l=bugtraq&m=116303405916694&w=2 - http://www.fre
/exchange.xforce.ibmcloud.com/vulnerabilities/30126 - http://marc.info/?l=bugtraq&m=116303405916694&w=2 - http://www.freewebshop.org/?id=27 - http://securitytracker.com/id?1017200
CVE ID: CVE-2006-5848 State: REJECTED Published: 2006-11-10T02:00:00 Last Updated: 2006-11-18T10:00:00 Description: No description available.
CVE ID: CVE-2006-5849 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execute arbitrary PHP code via a URL in the irayodirhack parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30097 - http://www.vupen.com/english/advisories/2006/4415 - https://www.exploit-db.com/exploits/2741
CVE ID: CVE-2006-5850 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code via a long URI, as demonstrated by a GET or HEAD request. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20910 - http://securityreason.com/securityalert/1846 - http://www.securityfocus.com/archive/1/451382/100/200/threaded - http://secunia.com/advisories/22718 - https://exchange.xforce.ibmcl
ecurityfocus.com/archive/1/451382/100/200/threaded - http://secunia.com/advisories/22718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30049 - https://www.exploit-db.com/exploits/2716 - http://www.vupen.com/english/advisories/2006/4384 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050537.html - http://www.securityfocus.com/archive/1/451115/100/0/threaded
CVE ID: CVE-2006-5851 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/output file, a different vulnerability than CVE-2006-5328. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22742 - http://marc.info/?l=full-disclosure&m=116296717330758&w=2 - http://www.vupen.com/english/advisories/2006/4404 - https://www.exploit-db.com/exploits/2737 - http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt
CVE ID: CVE-2006-5852 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via a modified PATH that references a malicious helper binary, as demonstrated by (1) cp, (2) rm, and (3) killall, different vectors than CVE-2006-5327. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22742 - http://www.vupen.com/english/advisories/2006/4404 - https://www.exploit-db.com/exploits/2738 - http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt - http://m
2006/4404 - https://www.exploit-db.com/exploits/2738 - http://www.digitalmunition.com/DMA%5B2006-1107a%5D.txt - http://marc.info/?l=full-disclosure&m=116296717330758&w=2
CVE ID: CVE-2006-5853 State: PUBLISHED Published: 2006-11-10T02:00:00 Last Updated: 2024-08-07T20:04:55.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attackers to inject arbitrary web script or HTML via the lang parameter, which is returned to the client in a lang cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30136 - http://securityreason.com/securityalert/1845 - http://www.securityfocus.com/archive/1/450960 - http://www.procheckup.com/Vulner_PR0
rityreason.com/securityalert/1845 - http://www.securityfocus.com/archive/1/450960 - http://www.procheckup.com/Vulner_PR0506.php
CVE ID: CVE-2006-5854 State: PUBLISHED Published: 2006-12-03T17:00:00 Last Updated: 2024-08-07T20:04:55.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow remote attackers to execute arbitrary code via a long argument to the (1) EnumPrinters and (2) OpenPrinter functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/300636 - http://www.securityfocus.com/data/vulnerabilities/exploits/testlpc.c - http://www.novell.com/support/search.do?cmd=displayKC&externalId=3125538&sliceId=SAL_Public - http://securitytracker.com/i