Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2854 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26996 - http://secunia.com/advisories/20509 - http://downloads.securityfocus.com/vulnerabilities/exploits/iBWD_poc.txt - http://www.securityfocus.com/bid/18256
CVE ID: CVE-2006-2855 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18262 - http://secunia.com/advisories/20511 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27002 - http://downloads.securityfocus.com/vulnerabilities/exploits/xueBook_poc.txt - http://www.vupen.com/english/advisories/2006/2212
CVE ID: CVE-2006-2856 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious sitecustomize.pl file in that directory. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2140 - http://secunia.com/advisories/20328 - https://exchange.xforce
ces: - http://www.vupen.com/english/advisories/2006/2140 - http://secunia.com/advisories/20328 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26915 - http://www.securityfocus.com/bid/18269 - http://www.osvdb.org/25974
CVE ID: CVE-2006-2857 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.975Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a ViewArticle action (viewarticleaction.class.php). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18264 - http://www.vupen.com/english/advisories/2006/2120 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26916 - http://securityreason.com/securityalert/1046 - http://www.securityfocus.com/archive/1/435874/100/0/threaded - htt
6916 - http://securityreason.com/securityalert/1046 - http://www.securityfocus.com/archive/1/435874/100/0/threaded - http://secunia.com/advisories/20460 - http://www.lifetype.net/blog.php/lifetype_development_journal/2006/06/04/important_security_upgrade_lifetype_1.0.5_released
CVE ID: CVE-2006-2858 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary SQL commands via the msgid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2136 - http://securitytracker.com/id?1016222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26900 - http://www.securityfocus.com/archive/1/435986/100/0/threaded - http://www.securityfocus.com/bid/18254 - http://www.securityfocus.com/archive/1/435867/100/0/
/1/435986/100/0/threaded - http://www.securityfocus.com/bid/18254 - http://www.securityfocus.com/archive/1/435867/100/0/threaded - http://secunia.com/advisories/20462 - http://securityreason.com/securityalert/1048
CVE ID: CVE-2006-2859 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mybloggie_root_path parameter to (1) admin.php or (2) scode.php. NOTE: this issue has been disputed in multiple third party followups, which say that the MyBloggie source code does not demonstrate the issue, so it might be the result of another module. CVE analysis as of 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution Additional Analyst
f 20060605 agrees with the dispute. In addition, scode.php is not part of the MyBloggie distribution Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1049 - http://www.securityfocus.com/archive/1/435789/100/0/threaded - http://www.securityfocus.com/bid/18241 - http://www.securityfocus.com/archive/1/436124/100/0/threaded - http://www.securityfocus.com/archive/1/435866/100/0/threaded
CVE ID: CVE-2006-2860 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) inc/logincheck.inc.php, (2) inc/adminheader.inc.php, (3) inc/global.php, or (4) inc/mainheader.inc.php. NOTE: some of these vectors were also reported for 3.0 in a separate disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20439 - http://www.osvdb.org/25994 - http://www.securityfocus.com/archive/1/447001/100/0/threa
://secunia.com/advisories/20439 - http://www.osvdb.org/25994 - http://www.securityfocus.com/archive/1/447001/100/0/threaded - http://www.vupen.com/english/advisories/2006/2127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26910 - http://www.securityfocus.com/archive/1/447576/100/200/threaded - http://www.osvdb.org/25995 - http://www.osvdb.org/25992 - https://www.exploit-db.com/exploits/1871 - http://www.osvdb.org/25993 - http://arfis.wordpress.com/2007/09/14/rfi-02-webspotblogging/ - http://www.securityfocus.com/bid/18260
CVE ID: CVE-2006-2861 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/particle-wiki-sql-inj.html - http://www.vupen.com/english/advisories/2006/2122 - http://www.securityfocus.com/bid/18273 - http://secunia.com/advisories/20428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26907 - http://www.osvdb.org/25976
CVE ID: CVE-2006-2862 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.007Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the imageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18270 - http://www.vupen.com/english/advisories/2006/2121 - http://pridels0.blogspot.com/2006/06/particle-gallery-sql-inj.html - http://secunia.com/advisories/20427 - http://www.osvdb.org/25953
CVE ID: CVE-2006-2863 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the classes_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2125 - http://www.attrition.org/pipermail/vim/2006-June/000824.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26911 - http://www.securityfocus.com/bid/18263 - https://www.exploit-db.com/exploits/1872 - http://secunia.com/advisories/
911 - http://www.securityfocus.com/bid/18263 - https://www.exploit-db.com/exploits/1872 - http://secunia.com/advisories/20440
CVE ID: CVE-2006-2864 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) APP[path][applications] parameter to (a) Bs_Faq.class.php, (2) APP[path][core] parameter to (b) fileBrowserInner.php, (c) file.php, and (d) viewer.php, and (e) Bs_ImageArchive.class.php, (3) GLOBALS[APP][path][core] parameter to (f) Bs_Ml_User.class.php, or (4) APP[path][plugins] parameter to (g) Bs_Wse_Profile.class.php. Additional Analyst Notes: - CVE Program Container: Refer
) APP[path][plugins] parameter to (g) Bs_Wse_Profile.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2128 - http://www.osvdb.org/25998 - http://secunia.com/advisories/20438 - http://www.blueshoes.org/en/news/ - http://www.osvdb.org/25996 - http://www.securityfocus.com/bid/18261 - http://www.osvdb.org/26001 - https://www.exploit-db.com/exploits/1870 - http://www.osvdb.org/26002 - http://www.osvdb.org/26000 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26908 - http://www.osvdb.org/25999 - http://www.osvdb.org/25997
CVE ID: CVE-2006-2865 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: followup posts have disputed this issue, stating that template.php does not appear in phpBB and does not use a $page variable. It is possible that this is a site-specific vulnerability, or an issue in a mod Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435995/100/0/threaded - http://www.securityfocus.com/archive/
iner: References: - http://www.securityfocus.com/archive/1/435995/100/0/threaded - http://www.securityfocus.com/archive/1/435869/100/0/threaded - http://www.securityfocus.com/bid/18255 - http://www.securityfocus.com/archive/1/436118/100/0/threaded - http://www.securityfocus.com/archive/1/435978/100/0/threaded
CVE ID: CVE-2006-2866 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a FTP URL in the blog_dc_path parameter, which passes file_exists() and is_dir() tests on PHP 5. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26917 - http://www.vupen.com/english/advisories/2006/2137 - http://retrogod.altervista.org/dotclear_124_php5_xpl.html - http://securityreason.com/securityalert/1053 -
/2006/2137 - http://retrogod.altervista.org/dotclear_124_php5_xpl.html - http://securityreason.com/securityalert/1053 - http://secunia.com/advisories/20437 - http://www.securityfocus.com/bid/18259 - http://www.securityfocus.com/archive/1/435873/100/0/threaded
CVE ID: CVE-2006-2867 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26920 - http://www.securityfocus.com/archive/1/435862/100/0/threaded - http://www.securityfocus.com/bid/18268 - http://mgsdl.free.fr/advisories/coolforum083ba.txt - http://securitytracker.com/id?1016218 - http://securityreason.com/securityalert/1052
CVE ID: CVE-2006-2868 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to (1) auth/extauth/drivers/mambo.inc.php or (2) auth/extauth/drivers/postnuke.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25324 - http://www.securityfocus.com/bid/18265 - http://www.osvdb.org/25327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26909 - http://www.vupen.com/english/advisories/2006/2126 - http://s
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/26909 - http://www.vupen.com/english/advisories/2006/2126 - http://secunia.com/advisories/20434 - https://www.exploit-db.com/exploits/1877
CVE ID: CVE-2006-2869 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18238 - http://www.avast.com/eng/av4_revision_history.html - http://secunia.com/advisories/20387 - http://www.vupen.com/english/advisories/2006/2115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26927
CVE ID: CVE-2006-2870 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26929 - http://colander.altervista.org/advisory/ASPDisc.txt - http://www.securityfocus.com/bid/18237 - http://secunia.com/advisories/20425 - http://www.vupen.com/english/advisories/2006/2113
CVE ID: CVE-2006-2871 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter. NOTE: CVE disputes this issue, since $script_path is set to a constant value Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26596 - http://www.securityfocus.com/archive/1/435977/100/0/threaded - http://securityreason.com/securityalert/1051 - http://securitytracker.com/id?1016225 - https://exchange.xforce.ibmcl
d - http://securityreason.com/securityalert/1051 - http://securitytracker.com/id?1016225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26962 - http://www.attrition.org/pipermail/vim/2007-April/001510.html - http://www.securityfocus.com/bid/18272
CVE ID: CVE-2006-2872 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArr[pathtodir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26930 - http://www.attrition.org/pipermail/vim/2006-June/000819.html - http://www.securityfocus.com/archive/1/435974/100/0/threaded - http://securityreason.com/securityalert/1050 - http://www.attrition.org/pipermail/vim/2006-June/000815.html
CVE ID: CVE-2006-2873 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26989 - http://secunia.com/advisories/20454 - http://www.securityfocus.com/bid/18226 - http://www.vupen.com/english/advisories/2006/2191 - ht
a.com/advisories/20454 - http://www.securityfocus.com/bid/18226 - http://www.vupen.com/english/advisories/2006/2191 - http://downloads.securityfocus.com/vulnerabilities/exploits/enigmahaber-4.2-xss.txt
CVE ID: CVE-2006-2874 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in HTML-Code," possibly due to a cross-site scripting (XSS) vulnerability involving comments. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26914 - http://osads.sourceforge.net/viewtopic.php?t=3 - http://www.vupen.com/english/advisories/2006/2143 - http://www.securityfocus.com/bid/18280 - http://secunia.com/advisories/20
//www.vupen.com/english/advisories/2006/2143 - http://www.securityfocus.com/bid/18280 - http://secunia.com/advisories/20441 - http://sourceforge.net/project/shownotes.php?release_id=422081
CVE ID: CVE-2006-2875 State: PUBLISHED Published: 2006-06-07T00:00:00 Last Updated: 2024-08-07T18:06:27.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/q3cbof-adv.txt - http://www.securityfocus.com/bid/18271 - http://securitytracker.com/id?1016219 - http://www.vupen.com/english/advisories/2006/2129 - http://secuni
om/bid/18271 - http://securitytracker.com/id?1016219 - http://www.vupen.com/english/advisories/2006/2129 - http://secunia.com/advisories/20401 - http://www.securityfocus.com/archive/1/435963/100/0/threaded
CVE ID: CVE-2006-2876 State: PUBLISHED Published: 2006-06-07T00:00:00 Last Updated: 2024-08-07T18:06:27.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in cat.php in PHP Pro Publish 2.0 allows remote attackers to inject arbitrary web script or HTML via the catname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20444 - http://www.vupen.com/english/advisories/2006/2130
CVE ID: CVE-2006-2877 State: PUBLISHED Published: 2006-06-07T00:00:00 Last Updated: 2024-08-07T18:06:27.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php, (2) inc/config.php, (3) inc/common.php, and (4) inc/function.php. NOTE: it has been reported that the inc directory is protected by a .htaccess file, so this issue only applies in certain environments or configurations. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26601 - http://www.osvdb.org/26600 - http://
Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26601 - http://www.osvdb.org/26600 - http://www.securityfocus.com/archive/1/436027/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26933 - http://secunia.com/advisories/19758 - http://www.osvdb.org/26602 - http://www.osvdb.org/26599 - http://securityreason.com/securityalert/1058 - http://www.securityfocus.com/archive/1/435964/100/0/threaded - http://www.securityfocus.com/bid/18281 - http://securitytracker.com/id?1016224
CVE ID: CVE-2006-2878 State: PUBLISHED Published: 2006-06-07T00:00:00 Last Updated: 2024-08-07T18:06:27.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: The spellchecker (spellcheck.php) in DokuWiki 2006/06/04 and earlier allows remote attackers to insert and execute arbitrary PHP code via "complex curly syntax" that is inserted into a regular expression that is processed by preg_replace with the /e (executable) modifier. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.splitbrain.org/index.php?do=details&id=823 - http://www.securityfocus.com/bid/18289 - http://www.securityfocus.com/archive/1/435989/100/0/threaded - http://securitytracker.com/id?101
tyfocus.com/bid/18289 - http://www.securityfocus.com/archive/1/435989/100/0/threaded - http://securitytracker.com/id?1016221 - http://www.osvdb.org/25980 - http://secunia.com/advisories/20429 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046602.html - http://secunia.com/advisories/20669 - http://www.vupen.com/english/advisories/2006/2142 - http://www.hardened-php.net/advisory_042006.119.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26913 - http://www.gentoo.org/security/en/glsa/glsa-200606-16.xml
CVE ID: CVE-2006-2879 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26946 - http://secunia.com/advisories/20469 - http://www.securityfocus.com/archive/1/435988 - http://www.vupen.com/english/advisories/2006/2151 - http://www.securityfocus.com/bid/18274 - http://securityreason.com/securityalert/1057
CVE ID: CVE-2006-2880 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) url and (2) author fields. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=422015 - http://www.securityfocus.com/bid/18292 - http://www.vupen.com/english/advisories/2006/2153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26945 - http://secunia.com/adv
n.com/english/advisories/2006/2153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26945 - http://secunia.com/advisories/20436
CVE ID: CVE-2006-2881 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the da_path parameter in the (1) auth.cookie.inc.php, (2) auth.header.inc.php, or (3) auth.sessions.inc.php scripts. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1062 - https://www.exploit-db.com/exploits/1881 - http://www.majorsecurity.de/advisory/major_rls8.txt - http://www.osvdb.org/2