Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1529 State: PUBLISHED Published: 2006-04-14T10:00:00 Last Updated: 2024-08-07T17:12:22.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2006/mfs
rent. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2006/mfsa2006-20.html - http://www.vupen.com/english/advisories/2006/3748 - https://bugzilla.mozilla.org/show_bug.cgi?id=315254 - http://secunia.com/advisories/19941 - http://www.debian.org/security/2006/dsa-1051 - http://www.vupen.com/english/advisories/2006/3749 - http://secunia.com/advisories/21033 - http://www.kb.cert.org/vuls/id/350262 - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.vupen.com/english/advisories/2006/1356 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://se
/www.vupen.com/english/advisories/2006/1356 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://securitytracker.com/id?1015921 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://secunia.com/advisories/19649 - http://secunia.com/advisories/19863 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt - http://www.securityfocus.com/bid/17516 - http://securitytracker.com/id?1015919 - http://secunia.com/advisories/22066 - http://securitytracker.com/id?1015920 - http://secunia.com/advisories/22065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
015920 - http://secunia.com/advisories/22065 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1947 - http://secunia.com/advisories/19631 - http://www.debian.org/security/2006/dsa-1046
CVE ID: CVE-2006-1530 State: PUBLISHED Published: 2006-04-14T10:00:00 Last Updated: 2024-08-07T17:12:22.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/def
rent. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1903 - http://www.mozilla.org/security/announce/2006/mfsa2006-20.html - https://bugzilla.mozilla.org/show_bug.cgi?id=326615 - http://www.vupen.com/english/advisories/2006/3748 - http://secunia.com/advisories/19941 - http://www.debian.org/security/2006/dsa-1051 - http://www.vupen.com/english/advisories/2006/3749 - http://secunia.com/advisories/21033 - http://www.kb.cert.org/vuls/id/350262 - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.vupen.com/english/adv
advisories/2008/0083 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.vupen.com/english/advisories/2006/1356 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://securitytracker.com/id?1015921 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://secunia.com/advisories/19649 - http://secunia.com/advisories/19863 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt - http://www.securityfocus.com/bid/17516 - http://securitytracker.com/id?1015919 - http://secunia.com/advisories/22066 - http://securitytracker.com/id?1015920 - http://secunia.co
tracker.com/id?1015919 - http://secunia.com/advisories/22066 - http://securitytracker.com/id?1015920 - http://secunia.com/advisories/22065 - http://secunia.com/advisories/19631 - http://www.debian.org/security/2006/dsa-1046
CVE ID: CVE-2006-1531 State: PUBLISHED Published: 2006-04-14T10:00:00 Last Updated: 2024-08-07T17:12:22.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Firefox and Thunderbird before 1.5.0.2, and SeaMonkey before 1.0.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors related to DHTML. NOTE: due to the lack of sufficient public details from the vendor as of 20060413, it is unclear how CVE-2006-1529, CVE-2006-1530, CVE-2006-1531, and CVE-2006-1723 are different. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2006/mfs
rent. Additional Analyst Notes: - CVE Program Container: References: - http://www.mozilla.org/security/announce/2006/mfsa2006-20.html - http://www.vupen.com/english/advisories/2006/3748 - http://secunia.com/advisories/19941 - http://www.debian.org/security/2006/dsa-1051 - http://www.vupen.com/english/advisories/2006/3749 - http://secunia.com/advisories/21033 - http://www.kb.cert.org/vuls/id/350262 - http://www.vupen.com/english/advisories/2008/0083 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=326834 - http://securitytracker.com/id?1015921 - http://www.securityfo
ed - https://bugzilla.mozilla.org/show_bug.cgi?id=326834 - http://securitytracker.com/id?1015921 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://secunia.com/advisories/19649 - http://secunia.com/advisories/19863 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt - http://www.securityfocus.com/bid/17516 - http://securitytracker.com/id?1015919 - http://secunia.com/advisories/22066 - http://securitytracker.com/id?1015920 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2023 - http://secunia.com/advisories/22065 - http://secunia.com/advisories/1
ch/definition/oval%3Aorg.mitre.oval%3Adef%3A2023 - http://secunia.com/advisories/22065 - http://secunia.com/advisories/19631 - http://www.debian.org/security/2006/dsa-1046
CVE ID: CVE-2006-1532 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHP Classifieds 6.18, 6.20, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17305 - http://www.vupen.com/english/advisories/2006/1143 - http://secunia.com/advisories/19440 - http://osvdb.org/ref/24/24232-php_classifieds.txt - http://www.osvdb.org/24232 - https://exchange.xforce.ibmcloud.com/vulnerabil
svdb.org/ref/24/24232-php_classifieds.txt - http://www.osvdb.org/24232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25507
CVE ID: CVE-2006-1533 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newsletter.php in Sourceworkshop newsletter 1.0 allows remote attackers to execute arbitrary SQL commands via the newsletteremail parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25498 - http://www.securityfocus.com/bid/17304 - http://www.osvdb.org/24229 - http://www.securityfocus.com/archive/1/430375/100/0/threaded - http://secunia.com/advisories/19425 - http://evul
24229 - http://www.securityfocus.com/archive/1/430375/100/0/threaded - http://secunia.com/advisories/19425 - http://evuln.com/vulns/107/summary.html
CVE ID: CVE-2006-1534 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Null news allow remote attackers to execute arbitrary SQL commands via (1) the user_email parameter in (a) lostpass.php, and the (2) user_email and (3) user_username parameters in (b) sub.php and (c) unsub.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24240 - http://www.osvdb.org/24241 - http://secunia.com/advisories/19413 - http://evuln.com/vulns/109/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25502 - http://www.secu
- http://evuln.com/vulns/109/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25502 - http://www.securityfocus.com/archive/1/430298/100/0/threaded - http://www.osvdb.org/24242 - http://www.vupen.com/english/advisories/2006/1151 - http://www.securityfocus.com/bid/17300 - http://securityreason.com/securityalert/682
CVE ID: CVE-2006-1535 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login.php in Phoetux.net PhxContacts 0.93.1 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17307 - http://www.securityfocus.com/archive/1/429259/100/0/threaded
CVE ID: CVE-2006-1536 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Phoetux.net PhxContacts 0.93.1 beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) motclef and (2) nbr_line_view parameters in (a) carnet.php, and the (3) id_contact parameter in (b) contact_view.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17306 - http://www.securityfocus.com/archive/1/429259/100/0/threaded
CVE ID: CVE-2006-1537 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Craig Knudsen WebCalendar 1.1.0-CVS allows remote attackers to obtain sensitive information via a direct request to (1) includes/index.php, (2) tests/add_duration_test.php, (3) tests/all_tests.php, (4) groups.php, (5) nonusers.php, (6) includes/settings.php, (7) includes/init.php, (8) includes/settings.php.orig, (9) includes/js/admin.php, (10) includes/js/edit_entry.php, (11) includes/js/edit_layer.php, (12) includes/js/export_import.php, (13) includes/js/popups.php, (14) includes/js/pref.php, or (15) includes/menu/index.php,
includes/js/export_import.php, (13) includes/js/popups.php, (14) includes/js/pref.php, or (15) includes/menu/index.php, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24523 - http://www.osvdb.org/24535 - http://securityreason.com/securityalert/651 - http://www.osvdb.org/24534 - http://www.osvdb.org/24526 - http://www.securityfocus.com/archive/1/429267/100/0/threaded - http://www.osvdb.org/24531 - http://www.osvdb.org/24529 - http://www.osvdb.org/24524 - http://www.osvdb.org/24528 - http://www.osvdb.org/24525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25539 - http://www.osvdb.org/24533 - http:/
//www.osvdb.org/24525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25539 - http://www.osvdb.org/24533 - http://www.osvdb.org/24532 - http://www.osvdb.org/24530 - http://www.osvdb.org/24527 - http://www.osvdb.org/24522 - http://www.osvdb.org/24536
CVE ID: CVE-2006-1538 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:12:22.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Enova X-Wall ASIC encrypts with a key obtained via Microwire from a serial EEPROM that stores the key in cleartext, which allows local users with physical access to obtain the key by reading and duplicating an EEPROM that is located on a hardware token, or by sniffing the Microwire bus. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429253/100/0/threaded - http://www.hexview.com/docs/20060328-1.txt - http://securityreason.com/securityalert/648 - https://exchange.xfor
eaded - http://www.hexview.com/docs/20060328-1.txt - http://securityreason.com/securityalert/648 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25527
CVE ID: CVE-2006-1539 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:48.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another user launches tetris-bsd. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.gentoo.org/show_bug.cgi?id=122399 - http://www.osvdb.org/24261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25611 - http://
ow_bug.cgi?id=122399 - http://www.osvdb.org/24261 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25611 - http://www.securityfocus.com/bid/17308 - http://secunia.com/advisories/19442 - http://www.gentoo.org/security/en/glsa/glsa-200603-26.xml
CVE ID: CVE-2006-1540 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:47.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: MSO.DLL in Microsoft Office 2000, Office XP (2002), and Office 2003 allows user-assisted attackers to cause a denial of service and execute arbitrary code via multiple attack vectors, as originally demonstrated using a crafted document record with a malformed string, as demonstrated by replacing a certain "01 00 00 00" byte sequence with an "FF FF FF FF" byte sequence, possibly causing an invalid array index, in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which trigg
in (1) an Excel .xls document, which triggers an access violation in ole32.dll; (2) an Excel .xlw document, which triggers an access violation in excel.exe; (3) a Word document, which triggers an access violation in mso.dll in winword.exe; and (4) a PowerPoint document, which triggers an access violation in powerpnt.txt. NOTE: after the initial disclosure, this issue was demonstrated by triggering an integer overflow using an inconsistent size for a Unicode "Sheet Name" string. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439697/100/0/threaded - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756
chive/1/439697/100/0/threaded - http://secunia.com/advisories/21012 - http://www.vupen.com/english/advisories/2006/2756 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-038 - http://www.kb.cert.org/vuls/id/609868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27607 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27609 - http://www.securityfocus.com/bid/17252 - http://www.securityfocus.com/bid/18889 - http://www.us-cert.gov/cas/techalerts/TA06-192A.html - http://www.osvdb.org/27150 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A639 - https://www.exploit-db.com/exploits/1615 - http://securitytracker.com/id?
definition/oval%3Aorg.mitre.oval%3Adef%3A639 - https://www.exploit-db.com/exploits/1615 - http://securitytracker.com/id?1015855
CVE ID: CVE-2006-1541 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:48.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Default.asp in EzASPSite 2.0 RC3 and earlier allows remote attackers to execute arbitrary SQL commands and obtain the SHA1 hash of the admin password via the Scheme parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1623 - http://secunia.com/advisories/19441 - http://www.vupen.com/english/advisories/2006/1164 - http://www.securityfocus.com/bid/17309 - http://www.osvdb.org/24256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2554
www.securityfocus.com/bid/17309 - http://www.osvdb.org/24256 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25544 - http://www.securityfocus.com/archive/1/429487/100/0/threaded - http://marc.info/?l=full-disclosure&m=114367573519326&w=2 - http://www.nukedx.com/?viewdoc=22
CVE ID: CVE-2006-1542 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:47.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Python 2.4.2 and earlier, running on Linux 2.6.12.5 under gcc 4.0.3 with libc 2.3.5, allows local users to cause a "stack overflow," and possibly gain privileges, by running a script from a current working directory that has a long name, related to the realpath function. NOTE: this might not be a vulnerability. However, the fact that it appears in a programming language interpreter could mean that some applications are affected, although attack scenarios might be limited because the attacker migh
ter could mean that some applications are affected, although attack scenarios might be limited because the attacker might already need to cross privilege boundaries to cause an exploitable program to be placed in a directory with a long name; or, depending on the method that Python uses to determine the current working directory, setuid applications might be affected. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/31492 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - https://www.exploit-db.com/exploits/1591 - http://www.gotfault.net/research/exploit/gexp-python.py
CVE ID: CVE-2006-1543 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:47.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) loginvar parameter in (a) admin/admin.php, and the (2) news and (3) nom parameters in (b) news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17316 - http://www.securityfocus.com/archive/1/430674/100/0/threaded - http://secunia.com/advisories/19435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25529 - http://www.v
readed - http://secunia.com/advisories/19435 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25529 - http://www.vupen.com/english/advisories/2006/1173 - http://www.evuln.com/vulns/112 - http://www.osvdb.org/24274 - http://www.osvdb.org/24273
CVE ID: CVE-2006-1544 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:48.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in news.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorkomentarza and (2) tresckomentarza parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430674/100/0/threaded - http://secunia.com/advisories/19435 - http://www.vupen.com/english/advisories/2006/1173 - http://www.evuln.com/vulns/112 - http://www.osvdb.org/24275 - http://www.securit
upen.com/english/advisories/2006/1173 - http://www.evuln.com/vulns/112 - http://www.osvdb.org/24275 - http://www.securityfocus.com/bid/17317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25530
CVE ID: CVE-2006-1545 State: PUBLISHED Published: 2006-03-30T11:00:00 Last Updated: 2024-08-07T17:19:48.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in admin/config.php in vscripts (aka Kuba Kunkiewicz) VNews 1.2 allows remote authenticated administrators to execute code by inserting the code into variables that are stored in admin/config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24276 - http://www.securityfocus.com/archive/1/430674/100/0/threaded - http://secunia.com/advisories/19435 - http://www.vupen.com/english/advisories/2006/1173 - http://www.evuln.com/vulns/112 - https://exch
com/advisories/19435 - http://www.vupen.com/english/advisories/2006/1173 - http://www.evuln.com/vulns/112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25531
CVE ID: CVE-2006-1546 State: PUBLISHED Published: 2006-03-30T22:00:00 Last Updated: 2024-08-07T17:19:47.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to bypass validation via a request with a 'org.apache.struts.taglib.html.Constants.CANCEL' parameter, which causes the action to be canceled but would not be detected from applications that do not use the isCancelled check. Additional Analyst Notes: - CVE Program Container: References: - http://mail-archives.apache.org/mod_mbox/struts-user/200601.mbox/%3c20060121221800.15814.qmail%40web32607.mail.mud.yahoo.com%3e - http://securitytracker.com/id?101585
s-user/200601.mbox/%3c20060121221800.15814.qmail%40web32607.mail.mud.yahoo.com%3e - http://securitytracker.com/id?1015856 - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html - http://www.vupen.com/english/advisories/2006/1205 - http://www.securityfocus.com/bid/17342 - http://issues.apache.org/bugzilla/show_bug.cgi?id=38374 - http://secunia.com/advisories/19493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25612 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - http://mail-archives.apache.org/mod_mbox/struts-dev/200601.mbox/%3cdr169r%24623%242%40sea.gmane.org%3e
CVE ID: CVE-2006-1547 State: PUBLISHED Published: 2006-03-30T22:00:00.000Z Last Updated: 2025-10-22T00:05:56.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securitytracker.com/id?1015856 - http://struts.apache.org/
gram Container: - CISA ADP Vulnrichment: References: - http://securitytracker.com/id?1015856 - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html - http://www.vupen.com/english/advisories/2006/1205 - http://www.securityfocus.com/bid/17342 - http://secunia.com/advisories/19493 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25613 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117 - http://issues.apache.org/bugzilla/show_bug.cgi?id=38534