Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4753 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28847 - http://www.pconfig.com/cdg393/adviso/PHProg.txt - http://www.securityfocus.com/bid/19957 - http://marc.info/?l=full-disclosure&m=115796646100433&w=2 - http://secunia.com/advisories/21849 - http://www.comscripts.com/scripts/php.phprog-album-photo-ph
=115796646100433&w=2 - http://secunia.com/advisories/21849 - http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html
CVE ID: CVE-2006-4754 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.pconfig.com/cdg393/adviso/PHProg.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28846 - http://www.
tp://www.pconfig.com/cdg393/adviso/PHProg.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28846 - http://www.securityfocus.com/bid/19957 - http://marc.info/?l=full-disclosure&m=115796646100433&w=2 - http://secunia.com/advisories/21849 - http://www.comscripts.com/scripts/php.phprog-album-photo-php.2117.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28845
CVE ID: CVE-2006-4755 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21875 - http://www.vupen.com/english/advisories/2006/3562
CVE ID: CVE-2006-4756 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitrary SQL commands via the letter parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21875 - http://www.vupen.com/english/advisories/2006/3562
CVE ID: CVE-2006-4757 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative users to execute arbitrary SQL commands via the (1) linkopentype, (2) linkrender, (3) link_class, and (4) link_id parameters in (a) links.php; the (5) searchquery parameter in (b) users.php; and the (6) download_category_class parameter in (c) download.php. NOTE: an e107 developer has disputed the significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their
he significance of the vulnerability, stating that "If your admins are injecting you, you might want to reconsider their access." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1569 - http://www.securityfocus.com/archive/1/445005/100/100/threaded - http://e107.org/e107_plugins/bugtrack/bugtrack.php?id=3195&action=show
CVE ID: CVE-2006-4758 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20347 - http://www.securityfocus.com/archive/1/445788/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=388120 - http://secunia.com/advisories/28871 - https://exchange.xfor
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=388120 - http://secunia.com/advisories/28871 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28884 - http://www.securityfocus.com/bid/21806 - http://www.debian.org/security/2008/dsa-1488 - http://www.security.nnov.ru/Odocument221.html - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://secunia.com/advisories/22188
CVE ID: CVE-2006-4759 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated administrative users to upload arbitrary files and execute code, as demonstrated by a query to admin_options.php with an avatars_dir parameter ending in %00. NOTE: this issue was originally disputed by the vendor, but the dispute was withdrawn on 20060926. Additional Analyst Notes: - CVE Program Container: References: - http://forums.punbb.org/viewtopic.php?id=13255 - http://www.attrition.org/pipermail/vim/2006-S
Container: References: - http://forums.punbb.org/viewtopic.php?id=13255 - http://www.attrition.org/pipermail/vim/2006-September/001041.html - http://www.securityfocus.com/archive/1/445788/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-September/001055.html - http://www.securityfocus.com/archive/1/446420/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-September/001052.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28884 - http://www.security.nnov.ru/Odocument221.html
CVE ID: CVE-2006-4760 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29049 - http://www.vupen.com/english/advisories/2006/3685 - http://www.cgisecurity.com/papers/RSS-Security.ppt - http://secunia.c
ttp://www.vupen.com/english/advisories/2006/3685 - http://www.cgisecurity.com/papers/RSS-Security.ppt - http://secunia.com/advisories/21958 - http://downloads.sourceforge.net/project/rssowl/rssowl%20classic%201.0%20%28do%20not%20use%29/1.2.3/rssowl_1_2_3_src.zip - http://www.securityfocus.com/bid/20110
CVE ID: CVE-2006-4761 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20128 - http://www.cgisecurity.com/papers/RSS-Security.ppt - http://secunia.com/advisories/21963 - http://www.vupen.com/english/advisories/2006/3712 - https://exchan
-Security.ppt - http://secunia.com/advisories/21963 - http://www.vupen.com/english/advisories/2006/3712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29073
CVE ID: CVE-2006-4762 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web script or HTML via a web feed, as demonstrated by certain test cases of the Robert Auger and Caleb Sima RSS and Atom feed reader test suite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21994 - http://www.cgisecurity.com/papers/RSS-Security.ppt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29071 - http://www.securityfocus.com/bid/20129 - http://www.vupe
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29071 - http://www.securityfocus.com/bid/20129 - http://www.vupen.com/english/advisories/2006/3711
CVE ID: CVE-2006-4763 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaToken) upon logout, which allows remote attackers to obtain a user's privileges by intercepting the LtpaToken cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28881 - http://www.securityfocus.com/archive/1/445821/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html - http://www.fishnetsecurity.c
/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049408.html - http://www.fishnetsecurity.com/csirt/disclosure/ibm - http://www.securityfocus.com/bid/19966 - http://securityreason.com/securityalert/1571 - http://www-1.ibm.com/support/docview.wss?rs=463&uid=swg21245589
CVE ID: CVE-2006-4764 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28868 - http://www.securityfocus.com/archive/1/445815/100/0/threaded - https://www.exploit-db.com/exploits/2346 - http://securityreason.com/securityalert/1570 - http://www.securityfocus.com/bid/19962
CVE ID: CVE-2006-4765 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device hang) via a long string in the username field in the login window. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445819/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28902 - http://www.securityfocus.com/bid/19973 - http://securityreason.com/securityalert/1575
CVE ID: CVE-2006-4766 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.049Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attackers to read arbitrary files via a .. (dot dot) in the ide parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445818/100/0/threaded - http://securityreason.com/securityalert/1574 - http://www.osvdb.org/28811 - http://secunia.com/advisories/21826 - http://www.vupen.com/english/advisories/2006/3558
CVE ID: CVE-2006-4767 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to (1) read arbitrary local files via a .. (dot dot) sequence in the ide parameter in modify.php and (2) write to arbitrary local files via a .. sequence in the var parameter in add_go.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28812 - http://www.securityfocu
n. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28812 - http://www.securityfocus.com/bid/84154 - http://secunia.com/advisories/21826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28894 - http://www.vupen.com/english/advisories/2006/3558
CVE ID: CVE-2006-4768 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.111Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attackers to execute arbitrary PHP code via the (1) description, (2) issue, (3) title, (4) var, (5) name, (6) keywords, and (7) note parameters, which are stored in an article file. NOTE: the original source of this vulnerability is unknown; the details are obtained from third party information and CVE post-disclosure analysis. Additional Analyst Notes: - CVE Program Container: References: - http:/
ty information and CVE post-disclosure analysis. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28900 - http://secunia.com/advisories/21826 - http://www.osvdb.org/28814 - http://www.vupen.com/english/advisories/2006/3558
CVE ID: CVE-2006-4769 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP code via a URL in the abs_pfad parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28880 - http://www.securityfocus.com/bid/19971 - http://secunia.com/advisories/21891 - https://www.exploit-db.com/exploits/2350 - http://www.vupen.com/english/advisories/2006/3590
CVE ID: CVE-2006-4770 State: PUBLISHED Published: 2006-09-13T23:00:00 Last Updated: 2024-08-07T19:23:41.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the skiny parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2343 - http://www.securityfocus.com/bid/19949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28856
CVE ID: CVE-2006-4771 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to inject arbitrary web script or HTML via the nb_connecte parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19992 - http://securityreason.com/securityalert/1573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28911 - http://www.securityfocus.com/archive/1/445877/100/0/threaded
CVE ID: CVE-2006-4772 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: HotPlug CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to read the admin password and database credentials via a direct request for includes/class/config.inc. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1572 - http://www.securityfocus.com/archive/1/445761/100/0/threaded
CVE ID: CVE-2006-4773 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3637 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102601-1 - http://secunia.com/advisories/21925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28945
CVE ID: CVE-2006-4774 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/CiscoVTP.txt - http://www.osvdb.org/28775 - http://secunia.com/advisories/21896 - http://www.securityfocus.com/bid/19998 - http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml - http://securitytracker.com/id?1016843 - http://www.se
http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml - http://securitytracker.com/id?1016843 - http://www.securityfocus.com/archive/1/445938/100/0/threaded - http://www.kb.cert.org/vuls/id/821420 - http://www.vupen.com/english/advisories/2006/3600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28924 - http://www.securityfocus.com/archive/1/445896/100/0/threaded
CVE ID: CVE-2006-4775 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:40.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context. Additional Analyst Notes: - CVE Program Container: References: - http://www.phenoelit.de/stuff/CiscoVTP.txt - http://secunia.com/advisories/21896 - http://www.securityfocus.com/bid/19998 - http://www.osvdb.org/28776 - http://www.cisco.com/warp/publi
advisories/21896 - http://www.securityfocus.com/bid/19998 - http://www.osvdb.org/28776 - http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml - http://securitytracker.com/id?1016843 - http://www.securityfocus.com/archive/1/445938/100/0/threaded - http://www.vupen.com/english/advisories/2006/3600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28925 - http://www.kb.cert.org/vuls/id/175148 - http://www.securityfocus.com/archive/1/445896/100/0/threaded - http://secunia.com/advisories/21902
CVE ID: CVE-2006-4776 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/542108 - http://www.vupen.com/english/advisories/2006/3601 - http://www.phenoelit.de/stuff/CiscoVTP.txt - http://secunia.com/advisories/21896 - http://www.securityfocus.com/bid/19998 - http://www.cisco.com/warp/public/707/cisco-sr-20
secunia.com/advisories/21896 - http://www.securityfocus.com/bid/19998 - http://www.cisco.com/warp/public/707/cisco-sr-20060913-vtp.shtml - http://securitytracker.com/id?1016843 - http://www.securityfocus.com/archive/1/445938/100/0/threaded - http://www.osvdb.org/28777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28927 - http://www.vupen.com/english/advisories/2006/3600 - http://www.securityfocus.com/archive/1/445896/100/0/threaded
CVE ID: CVE-2006-4777 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?10
ty than CVE-2006-4446. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016854 - http://secunia.com/advisories/21910 - http://securityreason.com/securityalert/1577 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.microsoft.com/technet/security/advisory/925444.mspx - http://www.vupen.com/english/advisories/2006/3593 - http://www.osvdb.org/28842 - http://www.securityfocus.com/archive/1/446246/100/0/threaded - http://www.securityfocus.com/archive/1/446084/100/0/threaded - http://www.kb.cert.org/vuls/id/377369 - http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28942 - http://www.securityfocus.com/bid/20047 - http://www.securityfocus.com/archive/1/446065/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1103 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 - http://www.securityfocus.com/archive/1/445898/100/0/threaded - http://www.securityfocus.com/archive/1/446085/100/0/threaded
CVE ID: CVE-2006-4778 State: PUBLISHED Published: 2006-09-14T10:00:00 Last Updated: 2024-08-07T19:23:41.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID. NOTE: Some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19978 - http://sourceforge.net/project/shownotes.php?release_id=445818&group_id=80503 - http://secunia.com/advisories/21822 - http://www.vupen.com/english/advisories/2006/3567
CVE ID: CVE-2006-4779 State: PUBLISHED Published: 2006-09-14T10:00:00 Last Updated: 2024-08-07T19:23:41.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28889 - https://www.exploit-db.com/exploits/2353 - http://www.securityfocus.com/bid/19979 - http://www.vupen.com/english/advisories/2006/3571