Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2336 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showthread.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/884 - http://www.securityfocus.com/archive/1/433564/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26376 - http://www.securityfocus.com/bid/17904 - http://www.osvdb.org/25674
CVE ID: CVE-2006-2337 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://securitytracker.com/id?1016038 - http://www.securiteam.com/securitynews/5JP0220IKK.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26
16038 - http://www.securiteam.com/securitynews/5JP0220IKK.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26555
CVE ID: CVE-2006-2338 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the (1) admin.php or (2) settings.php page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433372/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26436 - http://securityreason.com/securityalert/874
CVE ID: CVE-2006-2339 State: PUBLISHED Published: 2006-05-12T01:00:00 Last Updated: 2024-08-07T17:43:29.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in evoTopsites 2.x and evoTopsites Pro 2.x allows remote attackers to execute arbitrary SQL commands via the (1) cat_id and (2) id parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26328 - http://secunia.com/advisories/19989 - http://www.securityfocus.com/bid/17893 - http://www.vupen.com/english/advisories/2006/1689 - http://www.hamid.ir/security/evotopsites.txt - http://securitytracker.com/id?1016062 - http
glish/advisories/2006/1689 - http://www.hamid.ir/security/evotopsites.txt - http://securitytracker.com/id?1016062 - http://www.osvdb.org/25440
CVE ID: CVE-2006-2340 State: PUBLISHED Published: 2006-05-12T01:00:00 Last Updated: 2024-08-07T17:43:29.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PassMasterFlex and PassMasterFlexPlus (PassMasterFlex+) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password, or (3) User-Agent HTTP header in the Hack Log. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26298 - http://www.securityfocus.com/bid/17866 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0108.html - http://securityreason.com/securityal
.com/bid/17866 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0108.html - http://securityreason.com/securityalert/879 - http://secunia.com/advisories/20020 - http://www.vupen.com/english/advisories/2006/1696 - http://www.osvdb.org/25302
CVE ID: CVE-2006-2341 State: PUBLISHED Published: 2006-05-12T01:00:00 Last Updated: 2024-08-07T17:43:29.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI. Additional Analyst Notes: - CVE Program Container: References: - http://securityresponse.symantec.com/avcenter/security/Content/2006.05.10.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26370 - http://www.securityfocus.com/bid/179
tent/2006.05.10.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26370 - http://www.securityfocus.com/bid/17936 - http://www.vupen.com/english/advisories/2006/1764 - http://securitytracker.com/id?1016057 - http://securitytracker.com/id?1016058 - http://secunia.com/advisories/20082 - http://www.securityfocus.com/archive/1/433876/30/5040/threaded
CVE ID: CVE-2006-2342 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Application Server 6.0.2 before FixPack 3 allows remote attackers to bypass authentication for the Welcome Page via a request to the default context root. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17900 - http://www.vupen.com/english/advisories/2006/1724 - http://www-1.ibm.com/support/docview.wss?uid=swg24010245 - http://www.osvdb.org/25368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26312 - http://secunia.com/advisories/20025
CVE ID: CVE-2006-2343 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine OpManager 6.0 allows remote attackers to inject arbitrary web script or HTML via the searchTerm parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20067 - http://www.securityfocus.com/bid/17944 - http://www.vupen.com/english/advisories/2006/1774 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
.com/bid/17944 - http://www.vupen.com/english/advisories/2006/1774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26381
CVE ID: CVE-2006-2344 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in inc/elementz.php in AliPAGER 1.5, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the ubild parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20084 - http://www.hamid.ir/security/alipager.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26378 - http://www.vupen.com/english/advisories/2006/1773 - http://www.securityfocus.com/bid/17945
CVE ID: CVE-2006-2345 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc/elementz.php in AliPAGER 1.5 allows remote attackers to inject arbitrary web script or HTML via the ubild parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20084 - http://www.osvdb.org/25493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26379
CVE ID: CVE-2006-2346 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: vpopmail 5.4.14 and 5.4.15, with cleartext passwords enabled, allows remote attackers to authenticate to an account that does not have a cleartext password set by using a blank password to (1) SMTP AUTH or (2) APOP. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1698 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26333 - http://secunia.com/advisories/19987 - http://www.securityfocus.com/bid/17894 - http://www.osvdb.org/25445 - http://sourceforge.net/project
/advisories/19987 - http://www.securityfocus.com/bid/17894 - http://www.osvdb.org/25445 - http://sourceforge.net/project/shownotes.php?release_id=415350
CVE ID: CVE-2006-2347 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in (1) the id parameter to form_grupo.html, or requests to the (2) archivos/ and (3) files/ directories. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20071 - http://securityreason.com/securityalert/891 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-M
visories/20071 - http://securityreason.com/securityalert/891 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html - http://www.securityfocus.com/archive/1/433807/100/0/threaded - http://www.securityfocus.com/bid/17933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26476 - http://www.vupen.com/english/advisories/2006/1784
CVE ID: CVE-2006-2348 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:43:29.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in form_grupo.html in E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20071 - http://securityreason.com/securityalert/891 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html - http://www.securityfocus.com/archive/1/433807/100/0/threaded
ok.org.uk/pipermail/full-disclosure/2006-May/045980.html - http://www.securityfocus.com/archive/1/433807/100/0/threaded - http://www.securityfocus.com/bid/17933 - http://www.vupen.com/english/advisories/2006/1784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26475
CVE ID: CVE-2006-2349 State: PUBLISHED Published: 2006-05-12T17:00:00 Last Updated: 2024-08-07T17:51:03.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: E-Business Designer (eBD) 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) common/html_editor/html_editor.html. NOTE: this can also be used for cross-site scripting (XSS) attacks by uploading cascading style sheet (.CSS) files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115047779610633&w=2 - http:
ditional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115047779610633&w=2 - http://lists.oasyssoft.com/ebd-devel/200605/msg00000.html - http://secunia.com/advisories/20071 - http://securityreason.com/securityalert/891 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26474 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045980.html - http://www.securityfocus.com/archive/1/433807/100/0/threaded - http://www.securityfocus.com/bid/17933 - http://www.vupen.com/english/advisories/2006/1784 - http://securitytracker.com/id?1016326
CVE ID: CVE-2006-2350 State: REJECTED Published: 2006-05-15T10:00:00 Last Updated: 2006-05-20T09:00:00 Description: No description available.
CVE ID: CVE-2006-2351 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25469 - http://www.securityfocus.com/archive/1/433808 - http://secunia.com/advisories/20075 - https://exchange.x
vdb.org/25469 - http://www.securityfocus.com/archive/1/433808 - http://secunia.com/advisories/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26500 - http://www.vupen.com/english/advisories/2006/1787 - http://www.securityfocus.com/bid/17964 - http://securityreason.com/securityalert/897 - http://www.osvdb.org/25470
CVE ID: CVE-2006-2352 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via unknown vectors in (1) NmConsole/Tools.asp and (2) NmConsole/DeviceSelection.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26501 - http://secunia.
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26501 - http://secunia.com/advisories/20075 - http://www.osvdb.org/25471 - http://www.vupen.com/english/advisories/2006/1787 - http://www.osvdb.org/25472
CVE ID: CVE-2006-2353 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: NmConsole/DeviceSelection.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to redirect users to other websites via the (1) sCancelURL and possibly (2) sRedirectUrl parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26502 - http://www.securityfocus.com/archive/1/433808 - http://secunia.com/advisories/20075 - http://www.vupen.com/english/advisories/2006/1787 - http://securityreason.com/securityale
secunia.com/advisories/20075 - http://www.vupen.com/english/advisories/2006/1787 - http://securityreason.com/securityalert/897 - http://www.osvdb.org/25473
CVE ID: CVE-2006-2354 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: NmConsole/Login.asp in Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium generates different error messages in a way that allows remote attackers to enumerate valid usernames. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25476 - http://secunia.com/advisories/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26503
CVE ID: CVE-2006-2355 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WhatsUp Professional 2006 and Ipswitch WhatsUp Professional 2006 Premium allows remote attackers to obtain full path information via 404 error messages. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25477 - http://secunia.com/advisories/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26504
CVE ID: CVE-2006-2356 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: NmConsole/utility/RenderMap.asp in Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain sensitive information about network nodes via a modified nDeviceGroupID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433808 - http://secunia.com/advisories/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26505 - http://www.vupen.com/english/advisories/2006/1787 - http://www.osvdb.org/25475 - http://securit
/vulnerabilities/26505 - http://www.vupen.com/english/advisories/2006/1787 - http://www.osvdb.org/25475 - http://securityreason.com/securityalert/897
CVE ID: CVE-2006-2357 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433808 - http://secunia.com/advisories/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26506 - http://www.vupen.com/english/advisories/2006/1787 - http://securityreason.com/securityalert/897
CVE ID: CVE-2006-2358 State: PUBLISHED Published: 2006-05-15T10:00:00 Last Updated: 2024-08-07T17:51:03.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in various scripts in Web-Labs CMS allow remote attackers to inject arbitrary web script or HTML via (1) the search parameter and (2) unspecified fields related to e-mail alerts. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26421 - http://s
ttp://www.vupen.com/english/advisories/2006/1783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26421 - http://secunia.com/advisories/20060 - http://www.securityfocus.com/bid/17956
CVE ID: CVE-2006-2359 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2024-08-07T17:51:03.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434461/100/0/threaded - http://www.securityfocus.com/archive/1/433848/100/0/threaded - http://www.securityfocus.com/bid/17952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26414 - http://www.secur
- http://www.securityfocus.com/bid/17952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26414 - http://www.securityfocus.com/archive/1/433715/100/0/threaded
CVE ID: CVE-2006-2360 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2024-08-07T17:51:03.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434461/100/0/threaded - http://www.securityfocus.com/archive/1/433848/100/0/threaded - http://www.securityfocus.com/bid/17952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26415 - http://www.securityfocus.com/archive/1/433715/100/0/threaded
CVE ID: CVE-2006-2361 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2024-08-07T17:51:04.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25507 - http://www.securityfocus.com/bid/17930 - http://secunia.com/advisories/20062 - https://www.exploit-db.com/exploits/1774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26496 - http://www.vupen.com/
://www.exploit-db.com/exploits/1774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26496 - http://www.vupen.com/english/advisories/2006/1776
CVE ID: CVE-2006-2362 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2025-01-16T20:05:47.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in getsym in tekhex.c in libbfd in Free Software Foundation GNU Binutils before 20060423, as used by GNU strings, allows context-dependent attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a file with a crafted Tektronix Hex Format (TekHex) record in which the length character is not a valid hexadecimal character. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/20188 - http://secunia.com/advi
Program Container: - CISA ADP Vulnrichment: References: - http://secunia.com/advisories/20188 - http://secunia.com/advisories/20550 - http://secunia.com/advisories/22932 - http://secunia.com/advisories/27441 - http://www.trustix.org/errata/2006/0034/ - http://www.securityfocus.com/bid/17950 - http://www.mail-archive.com/bug-binutils%40gnu.org/msg01516.html - http://www.vupen.com/english/advisories/2007/3665 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://www.vupen.com/english/advisories/2006/1924 - http://www.securitytracker.com/id?1018872 - http://secunia.com/advisories/20531 - http://www.ubuntu.com/usn/usn-292-1 - http://lists.apple.com/archives/security-announc
://secunia.com/advisories/20531 - http://www.ubuntu.com/usn/usn-292-1 - http://lists.apple.com/archives/security-announce/2007/Oct/msg00001.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26644 - http://sourceware.org/bugzilla/show_bug.cgi?id=2584
CVE ID: CVE-2006-2363 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2024-08-07T17:51:03.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26366 - http://secunia.com/advisories/19891 - https://www.exploit-db.com/exploits/1751 - http://www.securityfocus.com/archive/1/433221/100/0/threaded - http://securityreason.com/securityalert/893 - http://forum.limboforge.org/index.php?topic=6.0
CVE ID: CVE-2006-2364 State: PUBLISHED Published: 2006-05-15T16:00:00 Last Updated: 2024-08-07T17:51:03.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the validation feature in Macromedia ColdFusion 5 and earlier allows remote attackers to inject arbitrary web script or HTML via a "_required" field when the associated normal field is missing or empty, which is not sanitized before being presented in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433819 - http://www.securityfocus.com/bid/17938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26508 - htt
ive/1/433819 - http://www.securityfocus.com/bid/17938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26508 - http://securityreason.com/securityalert/894