Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1212 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability. NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a "page" parameter or variable. Additional Analyst Notes: - CVE Program Container: References: - http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1 - http://securityreason.com/secu
: - http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1 - http://securityreason.com/securityalert/754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25180 - http://www.securityfocus.com/archive/1/427387/100/0/threaded - http://www.securityfocus.com/bid/17067 - http://www.osvdb.org/24080 - http://attrition.org/pipermail/vim/2006-March/000602.html
CVE ID: CVE-2006-1213 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427326/100/0/threaded - http://www.securityfocus.com/bid/17060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25169 - http://www.vupen.com/e
://www.securityfocus.com/bid/17060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25169 - http://www.vupen.com/english/advisories/2006/0911 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html - http://www.nukedx.com/?viewdoc=19 - http://www.osvdb.org/23780 - http://secunia.com/advisories/19184
CVE ID: CVE-2006-1214 State: PUBLISHED Published: 2006-03-14T01:00:00 Last Updated: 2024-08-07T17:03:28.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands, as demonstrated by "TKL - q\x08Q *\x08PoC." Additional Analyst Notes: - CVE Program Container: References: - http://forums.unrealircd.com/viewtopic.php?t=2985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25130 - http://secunia.com/advisories/19188 - http://www.osvdb.org/23778 - http://www.securityfocus.com/bid/17057 - http://www.securityfocus.com/archive/1/427213/100/0/t
p://www.osvdb.org/23778 - http://www.securityfocus.com/bid/17057 - http://www.securityfocus.com/archive/1/427213/100/0/threaded - http://www.vupen.com/english/advisories/2006/0908
CVE ID: CVE-2006-1215 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter. NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25156 - http://www.securityfocus.com/archive/1/426766 - http://www.securityfocus.com/archive/1/426816/30/0/thre
bilities/25156 - http://www.securityfocus.com/archive/1/426766 - http://www.securityfocus.com/archive/1/426816/30/0/threaded - http://www.securityfocus.com/bid/16959
CVE ID: CVE-2006-1216 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kapda.ir/advisory-280.html - http://www.securityfocus.com/bid/16970 - http://secunia.com/advisories/18997 - http://www.osvdb.org/23823 - http://securityreason.com/securityalert/474 - http://www.securityfocus.com/archive/1/426829
CVE ID: CVE-2006-1217 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23881 - http://secunia.com/advisories/19209 - http://securitytracker.com/id?1015758 - http://www.osvdb.org/23879 - http://www.securityfocus.com/bid/17103 - http://www.osvdb.org/23880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25192 - http://securityreason.
17103 - http://www.osvdb.org/23880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25192 - http://securityreason.com/securityalert/620 - http://www.securityfocus.com/archive/1/428663/100/0/threaded - http://securityreason.com/securityalert/622 - http://www.vupen.com/english/advisories/2006/0932 - http://evuln.com/vulns/96/summary.html
CVE ID: CVE-2006-1218 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1". Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0879 - http://www.securityfocus.com/bid/17031 - http://secunia.com/advisories/19163 - http://www.osvdb.org/23752 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972993.htm
CVE ID: CVE-2006-1219 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0895 - http://gallery.menalto.com/2.0.4_and_2.1_rc_2a_update - https://exchange.xforce.ibmcloud.com/vulnerabilities/25129 - https://www.exploit-db.com/exploits/1566 - http://
update - https://exchange.xforce.ibmcloud.com/vulnerabilities/25129 - https://www.exploit-db.com/exploits/1566 - http://www.securityfocus.com/bid/17051 - http://secunia.com/advisories/19175
CVE ID: CVE-2006-1220 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T17:03:28.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17056 - http://www.osvdb.org/28453 - http://www.felinemenace.org/~nemo/
CVE ID: CVE-2006-1221 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T17:03:28.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder. NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the e
endent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25097 - http://reedarvin.thearvins.com/20060308-01.html - http://www.securityfocus.com/bid/17037 - http://securitytracker.com/id?1015743 - http://www.securityfocus.com/archive/1/427145/100/0/threaded - http://www.securityfocus.com/archive/1/427309/100/0/threaded - http://www.vupen.com/english/advisories/2006/0947 - http://www.securityfocus.com/archive/1/427122/100/0/threaded
CVE ID: CVE-2006-1222 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T17:03:28.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19214 - http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf - http://www.vupen.com/english/advisories/2006/0944 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html - http://www.nzeo.com/b
advisories/2006/0944 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html - http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406 - http://www.securityfocus.com/bid/17075 - http://www.osvdb.org/23847 - http://www.securityfocus.com/archive/1/427466/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25212
CVE ID: CVE-2006-1223 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T17:03:28.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427406/100/0/threaded - http://www.vupen.com/english/advisories/2006/0942 - http://www.securityfocus.com/bid/17072 - http://securityreason.com/securityalert/572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25241 - http://ww
2 - http://securityreason.com/securityalert/572 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25241 - http://www.osvdb.org/23839 - http://www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313 - http://www.securityfocus.com/archive/1/430903/100/0/threaded - http://secunia.com/advisories/19215
CVE ID: CVE-2006-1224 State: PUBLISHED Published: 2006-03-14T11:00:00 Last Updated: 2024-08-07T17:03:28.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/569 - http://www.vupen.com/english/advisories/2006/0936 - http://www.osvdb.org/23993 - http://securitytracker.com/id?1015753 - http://www.freeguppy.org/?lng=en - http://www.securityfocus.com/bid/17068 - http://www.osvdb.org/23846 - http://www.kapda.ir/advisory
eeguppy.org/?lng=en - http://www.securityfocus.com/bid/17068 - http://www.osvdb.org/23846 - http://www.kapda.ir/advisory-291.html - http://www.securityfocus.com/archive/1/427329/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25141 - http://secunia.com/advisories/19222
CVE ID: CVE-2006-1225 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427591/100/0/threaded - http://drupal.org/node/53806 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25206 - http://www.debian.org/security/2006/dsa-1007 - http://www.osvdb.org/23912 - http://www.securityfocus.com/bid/17104 - http://secun
w.debian.org/security/2006/dsa-1007 - http://www.osvdb.org/23912 - http://www.securityfocus.com/bid/17104 - http://secunia.com/advisories/19245 - http://secunia.com/advisories/19257 - http://securityreason.com/securityalert/579
CVE ID: CVE-2006-1226 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23910 - http://securityreason.com/securityalert/581 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25202 - http://www.debian.org/security/2006/dsa-1007 - http://drupal.org/node/53803 - http://www.securityfocus.com/bid/17104 - http://www.securityfocus.com
ity/2006/dsa-1007 - http://drupal.org/node/53803 - http://www.securityfocus.com/bid/17104 - http://www.securityfocus.com/archive/1/427588/100/0/threaded - http://secunia.com/advisories/19245 - http://secunia.com/advisories/19257
CVE ID: CVE-2006-1227 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/53796 - http://www.osvdb.org/23909 - http://www.securityfocus.com/archive/1/427587/100/0/threaded - http://www.debian.org/security/2006/dsa-1007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25197 - http:
aded - http://www.debian.org/security/2006/dsa-1007 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25197 - http://www.securityfocus.com/bid/17104 - http://secunia.com/advisories/19245 - http://securityreason.com/securityalert/578 - http://secunia.com/advisories/19257
CVE ID: CVE-2006-1228 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/53805 - http://securityreason.com/securityalert/580 - http://www.osvdb.org/23911 - http://www.debian.org/security/2006/dsa-1007 - http://www.securityfocus.com/bid/17104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25205 - http://secunia
7 - http://www.securityfocus.com/bid/17104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25205 - http://secunia.com/advisories/19245 - http://secunia.com/advisories/19257 - http://www.securityfocus.com/archive/1/427589/100/0/threaded
CVE ID: CVE-2006-1229 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25140 - http://www.osvdb.org/23802 - http://www.vupen.com/english/advisories/2006/0914
CVE ID: CVE-2006-1230 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter. NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25181 - http://www.securityfocus.com/bid/17073 - htt
m/id?1016183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25181 - http://www.securityfocus.com/bid/17073 - http://www.osvdb.org/23838 - http://www.securityfocus.com/archive/1/427408/100/0/threaded - http://www.securityfocus.com/archive/1/461922/100/0/threaded - http://www.vupen.com/english/advisories/2006/0945 - http://www.securityfocus.com/archive/1/435310/100/0/threaded - http://secunia.com/advisories/19216 - http://www.securityfocus.com/bid/22819
CVE ID: CVE-2006-1231 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=full-disclosure&m=114176689513438&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25262 - http://www.securityfocus.com/bid/17034 - http://www.securityfocus.com/archive/1/427084/100/0/threaded
CVE ID: CVE-2006-1232 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23886 - http://securitytracker.com/id?1015755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25193 - http://evuln.com/vulns/99/summary.html - http://www.securityfocus.com/bid/17116 - http://secunia.com/advi
lities/25193 - http://evuln.com/vulns/99/summary.html - http://www.securityfocus.com/bid/17116 - http://secunia.com/advisories/19202 - http://www.osvdb.org/23887 - http://securityreason.com/securityalert/626 - http://www.vupen.com/english/advisories/2006/0934 - http://www.securityfocus.com/archive/1/428808/100/0/threaded
CVE ID: CVE-2006-1233 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23840 - http://biyosecurity.be/bugs/wmnews.txt - http://www.osvdb.org/23842 - http://www.osvdb.org/23841 - http://secunia.com/advisories/19204 - http://www.securityfocus.com/bid/17076 - http://www.
http://www.osvdb.org/23841 - http://secunia.com/advisories/19204 - http://www.securityfocus.com/bid/17076 - http://www.vupen.com/english/advisories/2006/0939 - http://www.securityfocus.com/archive/1/427479/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25210
CVE ID: CVE-2006-1234 State: PUBLISHED Published: 2006-03-14T19:00:00 Last Updated: 2024-08-07T17:03:28.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23882 - http://www.securityfocus.com/archive/1/428807/100/0/threaded - http://securitytracker.com/id?1015756 - http://secunia.com/advisories/19206 - http://securityreason.com/securityalert/627 - https://e
tytracker.com/id?1015756 - http://secunia.com/advisories/19206 - http://securityreason.com/securityalert/627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25190 - http://www.vupen.com/english/advisories/2006/0933 - http://evuln.com/vulns/98/summary.html - http://www.securityfocus.com/bid/17112
CVE ID: CVE-2006-1235 State: PUBLISHED Published: 2006-03-14T23:00:00 Last Updated: 2024-08-07T17:03:28.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable. NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25106 - http://
References: - http://secunia.com/advisories/19155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25106 - http://www.securityfocus.com/archive/1/426931/100/0/threaded - http://www.securityfocus.com/archive/1/427631/100/0/threaded
CVE ID: CVE-2006-1236 State: PUBLISHED Published: 2006-03-15T00:00:00 Last Updated: 2024-08-07T17:03:28.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0951 - http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log - http://secunia.com/advisories/19276 - https://www.exploit-db.com/exploits/1582 - http://www.debian.org/security/200
og - http://secunia.com/advisories/19276 - https://www.exploit-db.com/exploits/1582 - http://www.debian.org/security/2006/dsa-1009 - http://secunia.com/advisories/19237 - http://www.securityfocus.com/bid/17093 - http://www.osvdb.org/23904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25252 - http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html
CVE ID: CVE-2006-1237 State: PUBLISHED Published: 2006-03-15T16:00:00 Last Updated: 2024-08-07T17:03:28.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19207 - http://www.vupen.com/english/advisories/2006/0931 - http://www.securityfocus.com/bid/17111 - http://securityreason.com/securityalert/623 - http://www.osvdb.org/23883 - http://ev