Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3215 State: PUBLISHED Published: 2006-06-24T01:00:00 Last Updated: 2024-08-07T18:23:21.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26737 - http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm - http://www.securityfocus.com/bid/18584 - https://exchange.xforce.ibmcloud.com/vulnerab
ation/ReadMe_MSW_4%2C3%2C20.htm - http://www.securityfocus.com/bid/18584 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27301 - http://secunia.com/advisories/20756 - http://www.vupen.com/english/advisories/2006/2473
CVE ID: CVE-2006-3216 State: PUBLISHED Published: 2006-06-24T01:00:00 Last Updated: 2024-08-07T18:23:21.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vu
more messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27305 - http://www.osvdb.org/26739 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27303 - http://download.mimesweeper.com/www/TechnicalDocumentation/ReadMe_MSW_4%2C3%2C20.htm - http://www.securityfocus.com/bid/18584 - http://secunia.com/advisories/20756 - http://www.osvdb.org/26738 - http://www.vupen.com/english/advisories/2006/2473
CVE ID: CVE-2006-3217 State: PUBLISHED Published: 2006-06-24T01:00:00 Last Updated: 2024-08-07T18:23:20.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18576 - http://secunia.com/advisories/20759 - http://www.vupen.com/english/advisories/2006/2489 - http://www.srlabs.net/bulten/JaguarEdit_2.htm - htt
visories/20759 - http://www.vupen.com/english/advisories/2006/2489 - http://www.srlabs.net/bulten/JaguarEdit_2.htm - http://www.srlabs.net/bulten/source/Jaguar.htm - http://securityreason.com/securityalert/1145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27290 - http://www.securityfocus.com/archive/1/437937/100/0/threaded
CVE ID: CVE-2006-3218 State: PUBLISHED Published: 2006-06-24T10:00:00 Last Updated: 2024-08-07T18:23:21.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27143 - http://securityreason.com/securityalert/1144 - http://www.securityfocus.com/archive/1/437118/100/100/threaded
CVE ID: CVE-2006-3219 State: PUBLISHED Published: 2006-06-24T10:00:00 Last Updated: 2024-08-07T18:23:20.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1143 - http://www.securityfocus.com/archive/1/437114/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27138
CVE ID: CVE-2006-3220 State: PUBLISHED Published: 2006-06-24T10:00:00 Last Updated: 2024-08-07T18:23:20.794Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27141 - http://securityreason.com/securityalert/1142 - http://www.securityfocus.com/archive/1/437115/100/100/threaded
CVE ID: CVE-2006-3221 State: PUBLISHED Published: 2006-06-24T10:00:00 Last Updated: 2024-08-07T18:23:21.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1938 - https://www.exploit-db.com/exploits/1939 - http://www.vupen.com/english/advisories/2006/2486 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27321 - http://www.securityfocus.com/bid/18592 - http://secunia.com/a
tps://exchange.xforce.ibmcloud.com/vulnerabilities/27321 - http://www.securityfocus.com/bid/18592 - http://secunia.com/advisories/20765
CVE ID: CVE-2006-3222 State: PUBLISHED Published: 2006-06-24T10:00:00 Last Updated: 2024-08-07T18:23:21.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-15.html - http://secunia.com/advisories/20720 - http://www.securityfocus.com/bid/18570 - http://www.osvdb.org/26736 - http://attrition.org/pipermail/vim/2006-July/000921.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
6736 - http://attrition.org/pipermail/vim/2006-July/000921.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27532 - http://www.vupen.com/english/advisories/2006/2467
CVE ID: CVE-2006-3223 State: PUBLISHED Published: 2006-06-27T21:00:00 Last Updated: 2024-08-07T18:23:21.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18689 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047423.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27374 - http://www.sec
mail/full-disclosure/2006-June/047423.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27374 - http://www.securityfocus.com/archive/1/438503/100/0/threaded - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34325 - http://secunia.com/advisories/20856 - http://www.vupen.com/english/advisories/2006/2565 - http://www.securityfocus.com/archive/1/438582/100/0/threaded - http://www.osvdb.org/26654 - http://securitytracker.com/id?1016391
CVE ID: CVE-2006-3224 State: PUBLISHED Published: 2006-06-26T16:00:00 Last Updated: 2024-08-07T18:23:20.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop. NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046150.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26558
CVE ID: CVE-2006-3225 State: PUBLISHED Published: 2006-06-26T16:00:00 Last Updated: 2024-08-07T18:23:20.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20835 - http://www.securityfocus.com/bid/18635 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1 - http://www.vupen.com/en
ecurityfocus.com/bid/18635 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1 - http://www.vupen.com/english/advisories/2006/2508 - http://securitytracker.com/id?1016378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27392
CVE ID: CVE-2006-3226 State: PUBLISHED Published: 2006-06-26T16:00:00 Last Updated: 2024-08-07T18:23:21.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016369 - http://www.osvdb.org/26825 - http://securityreason.com/securityalert/1157 - https://exchange.xforce.ibmcloud.com/vuln
- http://www.osvdb.org/26825 - http://securityreason.com/securityalert/1157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27328 - http://www.vupen.com/english/advisories/2006/2524 - http://secunia.com/advisories/20816 - http://www.securityfocus.com/archive/1/438161/100/0/threaded - http://www.cisco.com/en/US/products/sw/secursw/ps2086/tsd_products_security_response09186a00806c68f9.html - http://www.securityfocus.com/bid/18621 - http://www.securityfocus.com/archive/1/438258/100/0/threaded
CVE ID: CVE-2006-3227 State: PUBLISHED Published: 2006-06-26T16:00:00 Last Updated: 2024-08-07T18:23:20.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, which could be stripped by Internet Explorer to render legible text, but not when using other browsers. NOTE: there has been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this is
s been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this issue lies, although it might be due to vagueness within the associated standards. NOTE: this might only be exploitable with certain encodings. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438051/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27288 - http://www.securityfocus.com/archive/1/438163/100/0/threaded - http://www.securityfocus.com/archive/1/438358/100/0/threaded - http://www.securityfocus.com/archive/1/438066/100/0/threaded - http://www.securityfocus.com/archive/1/437948/100/0/threaded
p://www.securityfocus.com/archive/1/438066/100/0/threaded - http://www.securityfocus.com/archive/1/437948/100/0/threaded - http://ha.ckers.org/blog/20060621/us-ascii-xss-part-2 - http://www.securityfocus.com/archive/1/438049/100/0/threaded - http://ha.ckers.org/blog/20060621/malformed-ascii-bypasses-filters/ - http://www.securityfocus.com/archive/1/438154/100/0/threaded - http://www.securityfocus.com/archive/1/438359/100/0/threaded - http://www.osvdb.org/28376
CVE ID: CVE-2006-3228 State: PUBLISHED Published: 2006-06-26T19:00:00 Last Updated: 2024-08-07T18:23:20.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-June/000892.html - http://secunia.com/advisories/20722 - https://www.exploit-db.com/exploits/1935 - http://www.winamp.com/about/article.php?aid=10694 - http://forums.winamp.com/showthread.php?threadid=248100 - http://www.attrition.org/pipermail/vim/2006-June/000893.
694 - http://forums.winamp.com/showthread.php?threadid=248100 - http://www.attrition.org/pipermail/vim/2006-June/000893.html
CVE ID: CVE-2006-3229 State: PUBLISHED Published: 2006-06-27T01:00:00 Last Updated: 2024-08-07T18:23:21.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27309 - http://secunia.com/advisories/20714 - http://openwebmail.acaty
ps://exchange.xforce.ibmcloud.com/vulnerabilities/27309 - http://secunia.com/advisories/20714 - http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-main.pl?rev1=235%3Brev2=236 - http://openwebmail.org/openwebmail/doc/changes.txt - http://www.attrition.org/pipermail/vim/2006-June/000902.html
CVE ID: CVE-2006-3230 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016357 - http://pridels0.blogspot.com/2006/06/azureus-2402-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27300 - http://www.vupen.com/english/advisories/2006/2484 - http://secunia.com/advisories/20
bmcloud.com/vulnerabilities/27300 - http://www.vupen.com/english/advisories/2006/2484 - http://secunia.com/advisories/20755 - http://www.osvdb.org/26768 - http://www.securityfocus.com/bid/18596
CVE ID: CVE-2006-3231 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20732 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 - http://www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www.vupen.com/english/advisori
www.vupen.com/english/advisories/2007/0970 - http://secunia.com/advisories/24478 - http://www.vupen.com/english/advisories/2006/2482 - http://www-1.ibm.com/support/docview.wss?uid=swg21243541 - http://www.securityfocus.com/bid/18578 - http://www.securityfocus.com/bid/22991 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
CVE ID: CVE-2006-3232 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameToken cache was improperly used." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20732 - http://www.vupen.com/english/advisories/2006/2482 - http://www.securityfocus.com/bid/18578 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876 - http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006876
CVE ID: CVE-2006-3233 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:21.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field. NOTE: some third party sources have mentioned the "to" and "from" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerab
rent CVE. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27309 - http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/openwebmail-read.pl?rev1=236%3Brev2=237 - http://secunia.com/advisories/20714 - http://www.vupen.com/english/advisories/2006/2485 - http://openwebmail.org/openwebmail/doc/changes.txt - http://www.attrition.org/pipermail/vim/2006-June/000902.html - http://www.securityfocus.com/bid/18598
CVE ID: CVE-2006-3234 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/fineshop-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27280 - http://secunia.com/advisories/20901 - http://www.vupen.com/english/advisories/2006/2616 - http://securitytracker.com/id?1016350 - http://www.securit
s/20901 - http://www.vupen.com/english/advisories/2006/2616 - http://securitytracker.com/id?1016350 - http://www.securityfocus.com/bid/18743
CVE ID: CVE-2006-3235 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) promocja, (2) wysw, or (3) id_produc parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/fineshop-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27279 - http://secunia.com/advisories/20901 - http://www.vupen.com/english/advisories/2006/2616 - http://securitytracker.com/id?1016350 - ht
ia.com/advisories/20901 - http://www.vupen.com/english/advisories/2006/2616 - http://securitytracker.com/id?1016350 - http://www.securityfocus.com/bid/18743
CVE ID: CVE-2006-3236 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26743 - http://www.securityfocus.com/bid/18567 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27270 - http://www.osvdb.org/26742 - http://securitytracker.com/id?1016355 - http://secunia.com/advisories/2074
bilities/27270 - http://www.osvdb.org/26742 - http://securitytracker.com/id?1016355 - http://secunia.com/advisories/20747 - http://www.vupen.com/english/advisories/2006/2470 - http://pridels0.blogspot.com/2006/06/thinkwms-sql-injection-vuln.html
CVE ID: CVE-2006-3237 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:21.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27282 - http://pridels0.blogspot.com/2006/06/enterprise-groupware-system-xss-vuln.html - http://secunia.com/advisories/20757 - http://securitytracker.com/id?1016358 - http://www.vupen.com/english/advisories/2006/2483
secunia.com/advisories/20757 - http://securitytracker.com/id?1016358 - http://www.vupen.com/english/advisories/2006/2483 - http://www.securityfocus.com/bid/18590
CVE ID: CVE-2006-3238 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:20.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437651/100/100/threaded - http://www.vupen.com/english/advisories/2006/2468 - http://www.securityfocus.com/archive/1/437658/100/100/threaded - http://secunia.com/advisories/20701/ - http://www.securityfocus.com/bid/1849
cus.com/archive/1/437658/100/100/threaded - http://secunia.com/advisories/20701/ - http://www.securityfocus.com/bid/18497 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27294 - http://securityreason.com/securityalert/1149
CVE ID: CVE-2006-3239 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:21.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27295 - http://www.securityfocus.com/archive/1/437655 - http://www.securityfocus.com/bid/18497 - http://securityreason.com/securityalert/1148
CVE ID: CVE-2006-3240 State: PUBLISHED Published: 2006-06-27T10:00:00 Last Updated: 2024-08-07T18:23:21.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2509 - http://secunia.com/advisories/20822 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27585 - http://dotproject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114 - http://sourceforge.net/project
roject.cvs.sourceforge.net/dotproject/dotproject/classes/ui.class.php?r1=1.113&r2=1.114 - http://sourceforge.net/project/shownotes.php?release_id=427236 - http://www.securityfocus.com/bid/18650 - http://jvn.jp/jp/JVN%2339188922/index.html