Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3367 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27572 - http://securityreason.com/securityalert/1192 - http://www.securityfocus.com/archive/1/438964/100/0/threaded
CVE ID: CVE-2006-3368 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27574 - http://securityreason.com/securityalert/1192 - http://secunia.com/advisories/20902 - http://www.securityfocus.com/archive/1/438964/100/0/threaded - http://www.securityfocus.com/bid/18811 - http://www.vupen.com/english/advisories/2006/2664
CVE ID: CVE-2006-3369 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2662 - http://www.securityfocus.com/bid/18816 - http://securityreason.com/securityalert/1192 - http://secunia.com/advisories/20918 - http://www.securityfocus.com/archive/1/438964/100/0/threaded - https://exchange.xforce.ibm
ecunia.com/advisories/20918 - http://www.securityfocus.com/archive/1/438964/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27575
CVE ID: CVE-2006-3370 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blueboy 1.0.3 stores bb_news_config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27576 - http://securityreason.com/securityalert/1192 - http://www.securityfocus.com/archive/1/438964/100/0/threaded
CVE ID: CVE-2006-3371 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18817 - http://secunia.com/advisories/20945 - http://www.vupen.com/english/advisories/2006/2663 - http://securityreason.com/securityalert/1192 - http://www.securityfocus.com/archive/1/438964/100/0/threaded - https://exchange
/securityreason.com/securityalert/1192 - http://www.securityfocus.com/archive/1/438964/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27577
CVE ID: CVE-2006-3372 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttributeNode function call with zero arguments, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-5-dhtml-setattributenode.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27594 - http://securitytracker.com/id?1016441 - http://www.osvdb.org/26838 - http://www.vupen.com/english/advisories/2006/2671 - http://www.s
tytracker.com/id?1016441 - http://www.osvdb.org/26838 - http://www.vupen.com/english/advisories/2006/2671 - http://www.securityfocus.com/bid/18822
CVE ID: CVE-2006-3373 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27591 - http://securityreason.com/securityalert/1191 - http://www.securityfocus.com/bid/18752 - http://www.securityfocus.com/archive/1/438818/100/0/threaded
CVE ID: CVE-2006-3374 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attackers to execute arbitrary PHP code via a URL in the incl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18809 - http://www.securityfocus.com/archive/1/439040/100/0/threaded - http://securitytracker.com/id?1016438 - http://www.securityfocus.com/archive/1/439063/100/0/threaded
CVE ID: CVE-2006-3375 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute arbitrary PHP code via the dateiPfad parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2740 - http://securitytracker.com/id?1016436 - http://www.securityfocus.com/bid/18763 - https://www.exploit-db.com/exploits/1971 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27541
CVE ID: CVE-2006-3376 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including (1) wv, (2) abiword, (3) freetype, (4) gimp, (5) libgsf, and (6) imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438803/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262 - http://secunia.com/advisories/20921 - https:/
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10262 - http://secunia.com/advisories/20921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27516 - http://securitytracker.com/id?1016518 - http://secunia.com/advisories/21473 - http://secunia.com/advisories/22311 - http://www.ubuntu.com/usn/usn-333-1 - http://securityreason.com/securityalert/1190 - http://secunia.com/advisories/21459 - http://www.securityfocus.com/bid/18751 - http://www.novell.com/linux/security/advisories/2006_19_sr.html - http://secunia.com/advisories/21064 - http://www.vupen.com/english/advisories/2006/2646 - https://www.debian.org/security/2006/dsa-1194 - http://secunia.com/advisories/21261 - http
nglish/advisories/2006/2646 - https://www.debian.org/security/2006/dsa-1194 - http://secunia.com/advisories/21261 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:132 - http://secunia.com/advisories/21419 - http://rhn.redhat.com/errata/RHSA-2006-0597.html - http://security.gentoo.org/glsa/glsa-200608-17.xml
CVE ID: CVE-2006-3377 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earlier, allows remote attackers to inject arbitrary web script or HTML via the (1) Keyword parameter in search.php and the (2) Username parameter in main.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2658 - http://www.securityfocus.com/archive/1/438941/100/0/threaded - http://securitytracker.com/id?1016428 - http://secunia.com/advisories/20929 -
cus.com/archive/1/438941/100/0/threaded - http://securitytracker.com/id?1016428 - http://secunia.com/advisories/20929 - http://www.majorsecurity.de/advisory/major_rls19.txt - http://secunia.com/advisories/20903 - http://www.vupen.com/english/advisories/2006/2659 - http://securitytracker.com/id?1016429 - http://www.securityfocus.com/bid/18796 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27552
CVE ID: CVE-2006-3378 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21480 - http://www.osvdb.org/26995 - http://www.debian.org/security/2006/dsa-1150 - http://www.ubuntu.com/usn/usn-308-1 - http://www.securityfocus.com/bid/18850 - http:/
ebian.org/security/2006/dsa-1150 - http://www.ubuntu.com/usn/usn-308-1 - http://www.securityfocus.com/bid/18850 - http://secunia.com/advisories/20966 - http://secunia.com/advisories/20950
CVE ID: CVE-2006-3379 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18785 - http://www.osvdb.org/26970 - http://secunia.com/advisories/21150 - http://www.debian.org/security/2006/dsa-1119 - http://www.vupen.com/english/advisories/2006/2643 - http://jvn.jp/jp
50 - http://www.debian.org/security/2006/dsa-1119 - http://www.vupen.com/english/advisories/2006/2643 - http://jvn.jp/jp/JVN%2398836916/index.html - http://hikiwiki.org/en/advisory20060703.html - http://secunia.com/advisories/20741 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27507
CVE ID: CVE-2006-3380 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service (CPU consumption) by performing a diff between large, crafted pages that trigger the worst case. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26975 - http://fswiki.poi.jp/wiki.cgi?page=%CD%FA%CE%F2%2F2006-7-3 - http://www.vupen.com/english/advisories/2006/2644 - http://secunia.com/advisories/20875 - http://jvn.jp/jp/JVN%2398836916/index.html
CVE ID: CVE-2006-3381 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then directly accessing the file. NOTE: It is uncertain whether this is a vulnerability or a feature of the product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18764 - http://acidr00t.free.fr/poc/sturgeonupv1.txt - http://www.securityfocus.com/archive/1/438876/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27612
CVE ID: CVE-2006-3382 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via the "search string". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27510 - http://secunia.com/advisories/20932 - http://www.youfucktard.com/blog/2006/06/30/mads-v10/ - http://securityreason.com/securityalert/1189 - http://www.securityfocus.com/bid/18761 - http://www.securit
0/mads-v10/ - http://securityreason.com/securityalert/1189 - http://www.securityfocus.com/bid/18761 - http://www.securityfocus.com/archive/1/438869/100/0/threaded
CVE ID: CVE-2006-3383 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web script or HTML via Javascript events such as onmouseover within a URL. NOTE: the provenance of this information is unknown; the details are obtained solely from third party reports. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27510 - http://secunia.com/advisories/20932
CVE ID: CVE-2006-3384 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) texte parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438859/100/0/threaded - http://www.vupen.com/english/advisories/2006/2642 - http://secunia.com/advisories/20936 - http://www.securityfocus.com/bid/18775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27504 - http://www.acid-root.new.fr/advisories/new
.com/bid/18775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27504 - http://www.acid-root.new.fr/advisories/news52.txt
CVE ID: CVE-2006-3385 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) id and (2) disabled parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27505 - http://www.securityfocus.com/archive/1/438859/100/0/threaded - http://www.vupen.com/english/advisories/2006/2642 - http://secunia.com/advisories/20936 - http://www.securityfocus.com/bid/18775 - http://www.acid-root.
isories/2006/2642 - http://secunia.com/advisories/20936 - http://www.securityfocus.com/bid/18775 - http://www.acid-root.new.fr/advisories/news52.txt
CVE ID: CVE-2006-3386 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Vincent Leclercq News 5.2 allows remote attackers to obtain sensitive information, such as the installation path, via a mail[] parameter with invalid values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438859/100/0/threaded - http://secunia.com/advisories/20936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27506 - http://www.acid-root.new.fr/advisories/news52.txt
CVE ID: CVE-2006-3387 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the fil_config parameter, which can be used to execute PHP code that has been injected into a log file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26619 - https://www.exploit-db.com/exploits/1812
CVE ID: CVE-2006-3388 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.352Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-4 - http://www.vupen.com/english/advisories/2006/2622 - http://securityreason.com/securityalert/1194 - http://securitynews.ir/advisories/phpmyadmin281.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27493 - http://secunia.com/advisori
/advisories/phpmyadmin281.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27493 - http://secunia.com/advisories/20907 - http://www.securityfocus.com/archive/1/438870/100/0/threaded - http://www.securityfocus.com/bid/18754 - http://secunia.com/advisories/23086 - http://lists.suse.com/archive/suse-security-announce/2006-Nov/0010.html
CVE ID: CVE-2006-3389 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via an invalid paged parameter, which displays the information in an SQL error message. NOTE: this issue has been disputed by a third party who states that the issue does not leak any target-specific information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440127/100/0/threaded - http://securityreason.com/securityalert/1187 - http://secunia.com/advisories/
ocus.com/archive/1/440127/100/0/threaded - http://securityreason.com/securityalert/1187 - http://secunia.com/advisories/20928 - http://secunia.com/advisories/21447 - http://www.securityfocus.com/bid/18779 - http://www.securityfocus.com/archive/1/439062/100/0/threaded - http://security.gentoo.org/glsa/glsa-200608-19.xml - http://www.vupen.com/english/advisories/2006/2661 - http://www.securityfocus.com/archive/1/438942/100/0/threaded - http://www.securityfocus.com/archive/1/439031/100/0/threaded
CVE ID: CVE-2006-3390 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as those in the (1) wp-admin, (2) wp-content, and (3) wp-includes directories, possibly due to uninitialized variables. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1187 - http://secunia.com/advisories/20928 - http://secunia.com/advisories/21447 - http://www.securityfocus.com/bid/18779 - http://www.securityfocus.com/archive/1/439062/100/0/threaded - http
ies/21447 - http://www.securityfocus.com/bid/18779 - http://www.securityfocus.com/archive/1/439062/100/0/threaded - http://security.gentoo.org/glsa/glsa-200608-19.xml - http://www.vupen.com/english/advisories/2006/2661 - http://www.securityfocus.com/archive/1/438942/100/0/threaded
CVE ID: CVE-2006-3391 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files via the file URI handler. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27049 - http://www.vupen.com/english/advisories/2006/2672 - http://www.securityfocus.com/bid/18848 - http://secunia.com/advisories/20938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27710
CVE ID: CVE-2006-3392 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote attackers to read arbitrary files, as demonstrated using "..%01" sequences, which bypass the removal of "../" sequences before bytes such as "%01" are removed from the filename. NOTE: This is a different issue than CVE-2006-3274. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21365 - http://security.gentoo.org/glsa/glsa-200608-11.xml - http://www.webmin.com/chan
- http://secunia.com/advisories/21365 - http://security.gentoo.org/glsa/glsa-200608-11.xml - http://www.webmin.com/changes.html - http://www.securityfocus.com/archive/1/440125/100/0/threaded - http://secunia.com/advisories/21105 - http://www.securityfocus.com/bid/18744 - http://www.securityfocus.com/archive/1/440493/100/0/threaded - http://www.securityfocus.com/archive/1/440466/100/0/threaded - http://www.kb.cert.org/vuls/id/999601 - http://www.debian.org/security/2006/dsa-1199 - http://attrition.org/pipermail/vim/2006-June/000912.html - http://secunia.com/advisories/20892 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:125 - http://www.vupen.com/english/advisories/2006/2612 -
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:125 - http://www.vupen.com/english/advisories/2006/2612 - http://www.securityfocus.com/archive/1/439653/100/0/threaded - http://www.osvdb.org/26772 - http://secunia.com/advisories/22556 - http://attrition.org/pipermail/vim/2006-July/000923.html
CVE ID: CVE-2006-3393 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27522 - http://aluigi.altervista.org/adv/nascarzero-adv.txt - http://www
://exchange.xforce.ibmcloud.com/vulnerabilities/27522 - http://aluigi.altervista.org/adv/nascarzero-adv.txt - http://www.vupen.com/english/advisories/2006/2647 - http://secunia.com/advisories/20947
CVE ID: CVE-2006-3394 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary SQL commands via the where parameter in a view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18765 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27496 - http://www.osvdb.org/26938 - https://www.exploit-db.com/exploits/1975 - http://www.vupen.com/english/advisories/2006/2630 - http://secunia.com/advisories/20908