Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4083 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:46.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28347 - http://www.vupen.com/english/advisories/2006
sories/19680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28347 - http://www.vupen.com/english/advisories/2006/1384
CVE ID: CVE-2006-4084 State: PUBLISHED Published: 2006-08-11T10:00:00Z Last Updated: 2024-09-17T02:06:32.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpAutoMembersArea (phpAMA) before 3.2.4 has unknown impact and attack vectors, related to "a potential security exploit which is critical." Additional Analyst Notes: - CVE Program Container: References: - http://dwalker.co.uk/forum/viewtopic.php?t=516
CVE ID: CVE-2006-4085 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:46.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to pagenavigation.php, a different vector than CVE-2006-4055. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28107 - http://secunia.com/advisor
Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28107 - http://secunia.com/advisories/21291
CVE ID: CVE-2006-4086 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3142 - http://secunia.com/advisories/21311
CVE ID: CVE-2006-4087 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21438 - http://www.vupen.com/english/advisories/2006/3220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28293
CVE ID: CVE-2006-4088 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject, (2) Comment, and (3) Add new comment sections. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19438 - http://securityreason.com/securityalert/1357 - http://www.securityfocus.com/archive/1/442704/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28303
CVE ID: CVE-2006-4089 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB s
s overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19450 - http://www.osvdb.org/27883 - http://securityreason.com/securityalert/1356 - http://www.osvdb.org/27885 - http://www.osvdb.org/27884 - http://secunia.com/advisories/21749 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28306 - http://secunia.com/advisories/22018 - http://www.securityfocus.com/archive/1/442725/100/0/threaded - http://aluigi.altervista.org/adv/alsapbof-adv.txt - http://sec
//www.securityfocus.com/archive/1/442725/100/0/threaded - http://aluigi.altervista.org/adv/alsapbof-adv.txt - http://secunia.com/advisories/21422 - http://security.gentoo.org/glsa/glsa-200608-24.xml - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://www.debian.org/security/2006/dsa-1179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28308 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28307 - http://www.vupen.com/english/advisories/2006/3235 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0249.html - http://secunia.com/advisories/21639
CVE ID: CVE-2006-4090 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19457 - http://securityreason.com/securityalert/1359 - http://www.osvdb.org/27886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28304 - http://www.securityfocus.com/archive/1/442706/100/0/
7886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28304 - http://www.securityfocus.com/archive/1/442706/100/0/threaded - http://www.vupen.com/english/advisories/2006/3236 - http://secunia.com/advisories/21420
CVE ID: CVE-2006-4091 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442580/100/0/threaded - http://securitytracker.com/id?1016670 - http://www.securityfocus.com/bid/19432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28287 - http://securityreason.com/securityalert/1360
CVE ID: CVE-2006-4092 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:57:45.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444026/100/100/threaded - http://secunia.com/advisories/21321 - http://www.secur
http://www.securityfocus.com/archive/1/444026/100/100/threaded - http://secunia.com/advisories/21321 - http://www.securityfocus.com/bid/19304 - http://www.securityfocus.com/archive/1/442058/100/100/threaded - http://securityreason.com/securityalert/1365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28224
CVE ID: CVE-2006-4093 State: PUBLISHED Published: 2006-08-21T21:00:00 Last Updated: 2024-08-07T18:57:45.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the "HID0 attention enable on PPC970 at boot time." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21934 - http://www.securityfocus.com/bid/19615 - http://secunia.com/advisories/21847 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10666 - http://secunia.com/advisories/21695 - http://secu
org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10666 - http://secunia.com/advisories/21695 - http://secunia.com/advisories/22292 - http://www.redhat.com/support/errata/RHSA-2006-0689.html - http://www.vupen.com/english/advisories/2006/3331 - http://secunia.com/advisories/21563 - http://secunia.com/advisories/22148 - http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm - http://www.ubuntu.com/usn/usn-346-1 - http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.33.1 - http://www.vupen.com/english/advisories/2006/3330 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://www.novell.com/linux/security/advisories/2006_22_sr.html - http://secunia.com/a
rity/advisories/2006_21_sr.html - http://www.novell.com/linux/security/advisories/2006_22_sr.html - http://secunia.com/advisories/22945 - https://issues.rpath.com/browse/RPL-611 - http://www.debian.org/security/2006/dsa-1237 - http://secunia.com/advisories/22093 - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.9 - http://www.debian.org/security/2006/dsa-1184 - http://www.novell.com/linux/security/advisories/2006_57_kernel.html
CVE ID: CVE-2006-4095 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T18:57:45.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://secunia.com/advisories/21835 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html - http://www.vupen.com/english/advisories/2007/1939 - http://security.freebsd.org/advisories/FreeBSD-SA-
A-2006.019.html - http://www.vupen.com/english/advisories/2007/1939 - http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc - http://www.securityfocus.com/archive/1/445600/100/0/threaded - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28745 - http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/21786 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.mandriva.
apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:163 - https://issues.rpath.com/browse/RPL-626 - http://secunia.com/advisories/21818 - http://www.ubuntu.com/usn/usn-343-1 - http://secunia.com/advisories/21838 - http://secunia.com/advisories/22298 - http://www.securityfocus.com/bid/19859 - http://secunia.com/advisories/21816 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secunia.com/advisories/21912 - http://secunia.com/advisories/21926 - http://www.openbsd.org/errata.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackwar
6 - http://www.openbsd.org/errata.html - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vupen.com/english/advisories/2006/3473 - http://www.us.debian.org/security/2006/dsa-1172 - http://www.vupen.com/english/advisories/2007/1401 - http://secunia.com/advisories/21828 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.kb.cert.org/vuls/id/915404 - http://secunia.com/advisories/21752 - http://securitytracker.com/id?1016794 - http://secunia.com/advisories/24950 - http://security.gentoo.org/glsa/glsa-200609-11.xml
CVE ID: CVE-2006-4096 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T18:57:45.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://secunia.com/advisories/21835 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.019.html - http://www.vupen.com/english/advisories/2007/1939 - http://securi
pkg.com/security/advisories/OpenPKG-SA-2006.019.html - http://www.vupen.com/english/advisories/2007/1939 - http://security.freebsd.org/advisories/FreeBSD-SA-06:20.bind.asc - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://www.securityfocus.com/archive/1/445600/100/0/threaded - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://marc.info/?l=bugtraq&m=141879471518471&w=2 - http://secunia.com/advisories/21786 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178 - http://www.novell.com/linux/security/advisories/2006_23_sr.h
http://www-1.ibm.com/support/docview.wss?uid=isg1IY89178 - http://www.novell.com/linux/security/advisories/2006_23_sr.html - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://secunia.com/advisories/25402 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:163 - https://issues.rpath.com/browse/RPL-626 - http://secunia.com/advisories/21818 - http://www.ubuntu.com/usn/usn-343-1 - http://secunia.com/advisories/21838 - http://secunia.com/advisories/22298 - http://www.securityfocus.com/bid/19859 - http://secunia.com/advisories/21816 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY89169 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967
tp://www-1.ibm.com/support/docview.wss?uid=isg1IY89169 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secunia.com/advisories/21912 - http://secunia.com/advisories/21926 - http://secunia.com/advisories/21790 - http://www.openbsd.org/errata.html - http://www.vupen.com/english/advisories/2006/3511 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9623 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.481241 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vupen.com/english/advisories/2006/3473 - http://www.kb.cert.org/vuls/id/697164 - http://www.us.deb
00967144 - http://www.vupen.com/english/advisories/2006/3473 - http://www.kb.cert.org/vuls/id/697164 - http://www.us.debian.org/security/2006/dsa-1172 - http://www.vupen.com/english/advisories/2007/1401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28744 - http://secunia.com/advisories/21828 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://secunia.com/advisories/21752 - http://securitytracker.com/id?1016794 - http://secunia.com/advisories/24950 - http://security.gentoo.org/glsa/glsa-200609-11.xml
CVE ID: CVE-2006-4097 State: PUBLISHED Published: 2007-01-08T23:00:00 Last Updated: 2024-08-07T18:57:44.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet. NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31334 - http://secunia.
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31334 - http://secunia.com/advisories/23629 - http://www.securityfocus.com/bid/21900 - http://www.kb.cert.org/vuls/id/443108 - http://www.vupen.com/english/advisories/2007/0068 - http://securitytracker.com/id?1017475 - http://osvdb.org/36125 - http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml
CVE ID: CVE-2006-4098 State: PUBLISHED Published: 2007-01-08T23:00:00 Last Updated: 2024-08-07T18:57:46.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23629 - http://www.securityfocus.com/bid/21900 - http://www.kb.cert.org/vuls/id/477164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31327 - http://www.vupen.com/english/adviso
rt.org/vuls/id/477164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31327 - http://www.vupen.com/english/advisories/2007/0068 - http://securitytracker.com/id?1017475 - http://www.cisco.com/warp/public/707/cisco-sa-20070105-csacs.shtml - http://osvdb.org/36126
CVE ID: CVE-2006-4099 State: PUBLISHED Published: 2006-11-29T17:00:00 Last Updated: 2024-08-07T18:57:45.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21350 - http://support.businessobjects.com/communityCS/FilesAndUpdates/ce10win_en.pdf - http://secunia.com/advisories/23137 - http://www.uniras.gov.uk/niscc/docs/re-20061128-00818.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/30568 - http://www
uniras.gov.uk/niscc/docs/re-20061128-00818.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/30568 - http://www.vupen.com/english/advisories/2006/4748 - http://www.mwrinfosecurity.com/advisories/MWR_crystal-reports-weak-sessions-advisory_2006-11-28.pdf
CVE ID: CVE-2006-4102 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:46.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the conf[classpath] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2123 - http://www.vupen.com/english/advisories/2006/3195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28249
CVE ID: CVE-2006-4103 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:45.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1373 - http://secunia.com/advisories/21407 - http://www.securityfocus.com/bid/19423 - http://www.securityfocus.com/archive/1/442582/100/0/threaded - http://www.vupen.com/english/advisories/2006/3223 - https://exchange.xforce.ibm
us.com/archive/1/442582/100/0/threaded - http://www.vupen.com/english/advisories/2006/3223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28271 - https://www.exploit-db.com/exploits/2148 - http://securitytracker.com/id?1016668
CVE ID: CVE-2006-4104 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:46.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19431 - http://secunia.com/advisories/21438 - http://www.securityfocus.com/archive/1/442596 - http://securityreason.com/securityalert/1374 - http://www.vupen.com/english/advisories/2006/3220 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28293
CVE ID: CVE-2006-4105 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:45.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Fill Threads Database (FTD) 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the (1) search field or (2) an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016642 - http://www.securityfocus.com/bid/19391 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28278 - http://securityreason.com/securityalert/1371 - http://www.securityfocus.com/archive/1/442419/100/0/threaded
CVE ID: CVE-2006-4106 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:44.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blursoft blur6ex 0.3 allows remote attackers to inject arbitrary web script or HTML via a comment title. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28275 - http://www.securityfocus.com/bid/19392 - http://www.securityfocus.com/archive/1/442435/100/0/threaded - http://securityreason.com/securityalert/1372
CVE ID: CVE-2006-4107 State: PUBLISHED Published: 2006-08-14T20:00:00 Last Updated: 2024-08-07T18:57:46.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/77537 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28274 - http://www.vupen.com/english/advisories/2006/3187 - http://secunia.com/advisories/21380 - http://www.securityfocus.com/bid/19420