Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2629 State: PUBLISHED Published: 2006-05-27T10:00:00 Last Updated: 2024-08-07T17:58:51.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of service (crash) by creating and exiting a large number of tasks, then accessing the /proc entry of a task that is exiting, which causes memory corruption that leads to a failure in the prune_dcache function or a BUG_ON error in include/linux/list.h. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26746 - http://
ntainer: References: - http://www.osvdb.org/25847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26746 - http://www.vupen.com/english/advisories/2006/2070 - http://www.securityfocus.com/bid/18183 - http://marc.info/?l=linux-kernel&m=114860432801543&w=2 - http://secunia.com/advisories/20349
CVE ID: CVE-2006-2630 State: PUBLISHED Published: 2006-05-27T21:00:00 Last Updated: 2024-08-07T17:58:51.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2005 - http://www.eeye.com/html/research/upcoming/20060524.html - http://securitytracker.com/id?1016161 - http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html - http://securitytracker.com/id?1016162 - http://www.securityfocus.com/archive/1
center/security/Content/2006.05.25.html - http://securitytracker.com/id?1016162 - http://www.securityfocus.com/archive/1/435200/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26706 - http://www.kb.cert.org/vuls/id/404910 - http://secunia.com/advisories/20318 - http://www.securityfocus.com/bid/18107 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html
CVE ID: CVE-2006-2631 State: PUBLISHED Published: 2006-05-27T21:00:00 Last Updated: 2024-08-07T17:58:51.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpFoX allows remote authenticated users to modify arbitrary accounts via a modified NATIO cookie value, possibly the phpfox_user parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26697 - http://www.vupen.com/english/advisories/2006/1994 - http://www.securityfocus.com/archive/1/435887/100/0/threaded - http://secunia.com/advisories/20280 - http://www.securityfocus.com/archive/1/435001/100/0/threaded - http://securityreason.com/securityalert/969
CVE ID: CVE-2006-2632 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via file descriptions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2033 - http://www.securityfocus.com/bid/18136 - http://www.securityfocus.com/archive/1/435135/100/0/threaded - http://sourceforge.net/forum/forum.php?forum_id=576219 - http://secunia.com/advisories/20304 - https://exchange.xforce.ibmcloud.com
ceforge.net/forum/forum.php?forum_id=576219 - http://secunia.com/advisories/20304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26704 - http://securityreason.com/securityalert/968 - http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199
CVE ID: CVE-2006-2633 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in the copy action in index.php in Andrew Godwin ByteHoard 2.1 and earlier allows remote authenticated users to create or overwrite files in other users' directories by specifying the absolute path of the directory in the infolder parameter and simultaneously specifying the filename in the filepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2033 - http://www.securityfocus.com/archive/1/435135/100/0/threaded - htt
- http://www.vupen.com/english/advisories/2006/2033 - http://www.securityfocus.com/archive/1/435135/100/0/threaded - http://sourceforge.net/forum/forum.php?forum_id=576219 - http://www.securityfocus.com/bid/18139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26705 - http://secunia.com/advisories/20304 - http://securityreason.com/securityalert/968 - http://sourceforge.net/project/shownotes.php?release_id=420549&group_id=90199
CVE ID: CVE-2006-2634 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Neocrome Land Down Under (LDU) in Neocrome Seditio 102 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26713 - http://securityreason.com/securityalert/967 - http://www.securityfocus.com/bid/18130 - http://www.vupen.com/english/advisories/2006/2026 - http://yns.zaxaz.com/advisories/seditio.txt - http://secunia.com/advisories/20
.vupen.com/english/advisories/2006/2026 - http://yns.zaxaz.com/advisories/seditio.txt - http://secunia.com/advisories/20307 - http://www.securityfocus.com/archive/1/435145/100/0/threaded
CVE ID: CVE-2006-2635 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers to inject arbitrary web script or HTML via malformed nested HTML tags such as "<scr<script>ipt>" in (1) offset and (2) days parameters in (a) tiki-lastchanges.php, the (3) find and (4) offset parameters in (b) tiki-orphan_pages.php, the (5) offset and (6) initial parameters in (c) tiki-listpages.php, and (7) an unspecified field in (d) tiki-remind_password.php; and allow remote authenticated users with admin pr
es.php, and (7) an unspecified field in (d) tiki-remind_password.php; and allow remote authenticated users with admin privileges to inject arbitrary web script or HTML via (8) an unspecified field in a metatags action in (e) tiki-admin.php, the (9) offset parameter in (f) tiki-admin_rssmodules.php, the (10) offset and (11) max parameters in (g) tiki-syslog.php, the (12) numrows parameter in (h) tiki-adminusers.php, (13) an unspecified field in (i) tiki-adminusers.php, (14) an unspecified field in (j) tiki-admin_hotwords.php, unspecified fields in (15) "Assign new module" and (16) "Create new user module" in (k) tiki-admin_modules.php, (17) an unspecified field in "Add notification" in (l) ti
d (16) "Create new user module" in (k) tiki-admin_modules.php, (17) an unspecified field in "Add notification" in (l) tiki-admin_notifications.php, (18) the offset parameter in (m) tiki-admin_notifications.php, the (19) Name and (20) Dsn fields in (o) tiki-admin_dsn.php, the (21) offset parameter in (p) tiki-admin_content_templates.php, (22) an unspecified field in "Create new template" in (q) tiki-admin_content_templates.php, and the (23) offset parameter in (r) tiki-admin_chat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18143 - http://tikiwiki.org/tiki-read_article.php?articleId=131 - http://www.osvdb.org/26050 - http://www.osvdb.o
om/bid/18143 - http://tikiwiki.org/tiki-read_article.php?articleId=131 - http://www.osvdb.org/26050 - http://www.osvdb.org/26059 - http://www.osvdb.org/26061 - http://www.osvdb.org/26053 - http://www.osvdb.org/26060 - http://www.osvdb.org/26056 - http://www.osvdb.org/26054 - http://www.osvdb.org/26051 - http://www.vupen.com/english/advisories/2006/2024 - http://www.osvdb.org/26062 - http://securityreason.com/securityalert/976 - http://www.osvdb.org/26057 - http://secunia.com/advisories/20334 - http://www.osvdb.org/26052 - http://www.osvdb.org/26058 - http://www.osvdb.org/26048 - http://www.securityfocus.com/archive/1/435127/100/0/threaded - http://www.securityfocus.com/archive/1/436432/100/0
048 - http://www.securityfocus.com/archive/1/435127/100/0/threaded - http://www.securityfocus.com/archive/1/436432/100/0/threaded - http://www.osvdb.org/26049 - http://www.osvdb.org/26055
CVE ID: CVE-2006-2636 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative access by setting the loggedIn cookie to "xY1zZoPQ". Additional Analyst Notes: - CVE Program Container: References: - http://www.bugreport.ir/index_62.htm - http://www.securityfocus.com/archive/1/435019/100/0/threaded - http://www.kapda.ir/advisory-332.html - http://www.vupen.com/english/advisories/2006/1993 - http://secunia.com/advisories/20294 - http://www.securityfocus.com/archive/1/500407/100/0/threaded - http
es/2006/1993 - http://secunia.com/advisories/20294 - http://www.securityfocus.com/archive/1/500407/100/0/threaded - http://securityreason.com/securityalert/974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26698
CVE ID: CVE-2006-2637 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in TuttoPhp (1) Morris Guestbook 1, (2) Pretty Guestbook 1, and (3) Smile Guestbook 1 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the pagina parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435171/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26731 - http://secunia.com/advisories/20320 - http://secunia.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26731 - http://secunia.com/advisories/20320 - http://secunia.com/advisories/20322 - http://www.securityfocus.com/bid/18128 - http://securityreason.com/securityalert/973 - http://secunia.com/advisories/20321 - http://www.vupen.com/english/advisories/2006/2018 - http://www.vupen.com/english/advisories/2006/2016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26735 - http://www.securityfocus.com/archive/1/435172/100/0/threaded - http://www.vupen.com/english/advisories/2006/2017 - http://www.securityfocus.com/archive/1/435173/100/0/threaded
CVE ID: CVE-2006-2638 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the uName parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26780 - http://www.securityfocus.com/archive/1/435120/100/0/threaded - http://www.securityfocus.com/bid/18164 - http://secunia.com/advisories/20309 - http://securityreason.com/securityalert/972 - http://www.vupen.com/english/advisories/2006/2029
CVE ID: CVE-2006-2639 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.723Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the input forms in prattmic and Master5006 PHPSimpleChoose 0.3 allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26714 - http://securityreason.com/securityalert/971 - http://www.securityfocus.com/archive/1/435165/100/0/threaded - http://www.vupen.com/english/advisories/2006/2019 - http://secunia
w.securityfocus.com/archive/1/435165/100/0/threaded - http://www.vupen.com/english/advisories/2006/2019 - http://secunia.com/advisories/20306 - http://www.securityfocus.com/archive/1/435684/100/0/threaded
CVE ID: CVE-2006-2640 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in OmegaMw7a.ASP in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allows remote attackers to inject arbitrary web script or HTML via the WCE parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26789 - http://secunia.com/advisories/20319 - http://www.vupen.com/english/advisories/2006/2072 - http://securityreason.com/securityalert/970 - http://www.securityfocus.com/archive/1/435109/100/0/threaded
CVE ID: CVE-2006-2641 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) vulnerability in John Frank Asset Manager (AssetMan) 2.4a and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE. Additi
ked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18131 - http://www.vupen.com/english/advisories/2006/2023 - http://www.securityfocus.com/archive/1/435139/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26702 - http://secunia.com/advisories/20285 - http://securityreason.com/securityalert/979
CVE ID: CVE-2006-2642 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE ** NOTE: this issue does not contain any verifiable or actionable details. Cross-site scripting (XSS) vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input." NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE. Additio
ed with any future identifier that identifies more specific vectors. Perhaps this should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26701 - http://www.vupen.com/english/advisories/2006/2025 - http://secunia.com/advisories/20311 - http://www.securityfocus.com/archive/1/435131/100/0/threaded - http://www.securityfocus.com/bid/18133 - http://securityreason.com/securityalert/978
CVE ID: CVE-2006-2643 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script or HTML via the user_error_message parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435113/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26806 - http://securityreason.com/securityalert/977
CVE ID: CVE-2006-2644 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20710 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=365910 - http://secunia.com/advisories/20502 - http://secunia.com/advisories/20164 - http://www.osreviews.n
port.cgi?bug=365910 - http://secunia.com/advisories/20502 - http://secunia.com/advisories/20164 - http://www.osreviews.net/reviews/comm/awstats - http://www.vupen.com/english/advisories/2006/1998 - http://www.securityfocus.com/bid/18327 - http://www.debian.org/security/2006/dsa-1075 - http://secunia.com/advisories/20283 - https://usn.ubuntu.com/290-1/ - http://www.novell.com/linux/security/advisories/2006_33_awstats.html
CVE ID: CVE-2006-2645 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-0725. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20310 - http://securityreason.com/securityalert/975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27699 - http://www.securityfocus.com/archive/1/435130/100/0/threaded - http://www.vupen.com/english/advisories/2006/2014 - http://securitytracker.com/id?1016165
CVE ID: CVE-2006-2646 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '"' (double quote). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18129 - http://securitytracker.com/id?1016167 - http://marc.info/?l=full-disclosure&m=114882270912151&w=2
CVE ID: CVE-2006-2647 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2007 - http://securitytracker.com/id?1016166 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY88524&apar=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only - http://www.securityfocus.com/bid/18114 - htt
r=only - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85517&apar=only - http://www.securityfocus.com/bid/18114 - http://www-1.ibm.com/support/search.wss?rs=0&q=IY85518&apar=only - http://secunia.com/advisories/20325
CVE ID: CVE-2006-2648 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.708Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016169 - http://www.securityfocus.com/archive/1/435280/100/0/threaded - http://www.securityfocus.com/bid/18146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26819 - http://securityreason.com/securityalert/983 - http://www.nukedx.com/?viewdoc=32 - h
ibmcloud.com/vulnerabilities/26819 - http://securityreason.com/securityalert/983 - http://www.nukedx.com/?viewdoc=32 - http://secunia.com/advisories/20360 - http://www.vupen.com/english/advisories/2006/2027
CVE ID: CVE-2006-2649 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26092 - http://www.osvdb.org/26091 - http://www.secu
Notes: - CVE Program Container: References: - http://www.osvdb.org/26092 - http://www.osvdb.org/26091 - http://www.securityfocus.com/bid/18709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26681 - http://www.zone-h.org/advisories/read/id=9058 - http://securitytracker.com/id?1016164 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html - http://secunia.com/advisories/20272 - http://www.osvdb.org/26093 - http://www.vupen.com/english/advisories/2006/1984 - http://www.osvdb.org/26090
CVE ID: CVE-2006-2650 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26089 - http://www.securityfocus.com/bid/18709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26683 - http://www.zone-h.org/advisories/read/id=9058 - http://securitytracker.com/id?1016164 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html - http://secunia.com
itytracker.com/id?1016164 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0683.html - http://secunia.com/advisories/20272 - http://www.vupen.com/english/advisories/2006/1984
CVE ID: CVE-2006-2651 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18134 - http://www.securityfocus.com/archive/1/435167/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26728 - http://www.securityfocus.com/archive/1/437938/100/200/threaded - http://secunia.com/advisories/20324 - http://securityreason.com/sec
ecurityfocus.com/archive/1/437938/100/200/threaded - http://secunia.com/advisories/20324 - http://securityreason.com/securityalert/982 - http://www.vupen.com/english/advisories/2006/2015
CVE ID: CVE-2006-2652 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:52.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to inject arbitrary HTML and web script by editing a Wiki page to contain the script. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26772 - http://www.securityfocus.com/archive/1/435307/100/0/threaded - http://zone14.free.fr/advisories/3/ - http://www.osvdb.org/25802 - http://secunia.com/advisories/20366 - http://www.securityfocus.com/bid/18156 - http://securityrea