Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4828 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28948 - http://securityreason.com/securityalert/1581 - http://www.securityfocus.com/archive/1/446031/100/0/threaded
CVE ID: CVE-2006-4829 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name parameter in a blog post. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/425861 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.
p://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://secunia.com/advisories/21935 - http://www.vupen.com/english/advisories/2006/3633 - http://docs.info.apple.com/article.html?artnum=305214 - http://securityreason.com/securityalert/1594 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28951 - http://www.vupen.com/english/advisories/2007/0930 - http://www.securityfocus.com/bid/20026 - http://www.securityfocus.com/archive/1/446009/100/0/threaded - http://secunia.com/advisories/24479
CVE ID: CVE-2006-4830 State: PUBLISHED Published: 2006-09-15T22:00:00Z Last Updated: 2024-09-17T02:16:46.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate. Additional Analyst Notes: - CVE Program Container: References: - http://jira.blojsom.com/jira/browse/BLOJSOM-130
CVE ID: CVE-2006-4831 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20017 - http://www.vupen.com/english/advisories/2006/3612 - http://secunia.com/advisories/21872 - http://code.kryo.se/iodine/CHANGELOG.txt
CVE ID: CVE-2006-4832 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via a long username. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21876 - http://securityreason.com/securityalert/1583 - http://www.securityfocus.com/archive/1/445883/100/0/threaded - http://www.vupen.com/english/
on.com/securityalert/1583 - http://www.securityfocus.com/archive/1/445883/100/0/threaded - http://www.vupen.com/english/advisories/2006/3605 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28908 - http://www.securityfocus.com/bid/19989
CVE ID: CVE-2006-4833 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allow remote attackers to cause a denial of service (hang or reboot) via an ICMP packet with the same destination and source address and port, aka the "Land" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21876 - http://securityreason.com/securityalert/1583 - http://www.securityfocus.com/archive/1/445883/100/0/threaded - http://www.vupen
/securityreason.com/securityalert/1583 - http://www.securityfocus.com/archive/1/445883/100/0/threaded - http://www.vupen.com/english/advisories/2006/3605 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049434.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28909 - http://www.securityfocus.com/bid/19990
CVE ID: CVE-2006-4834 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1587 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28947 - http://www.nyubicrew.org/adv/solpot-adv-07.txt - http://www.vupen.com/english/advisories/2006/3611 - http://www.securityfocus.com/archive/1/446039/100/0/threaded - http://www.securityf
n.com/english/advisories/2006/3611 - http://www.securityfocus.com/archive/1/446039/100/0/threaded - http://www.securityfocus.com/bid/20019
CVE ID: CVE-2006-4835 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluview Blue Magic Board (BMB) (aka BMForum) 5.5 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) db_mysql_error.php, (4) langlist.php, (5) sendmail.php, or (6) style.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446037/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28949 - http://securityreason.com/securityalert/1586
CVE ID: CVE-2006-4836 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445996/100/0/threaded - http://www.securityfocus.com/bid/20024 - http://securityreason.com/securityalert/1585
CVE ID: CVE-2006-4837 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) library/lib.php and (2) library/editor/editor.php. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445996/100/0/threaded - http://www.securityfocus.com/archive/1/43
: References: - http://www.securityfocus.com/archive/1/445996/100/0/threaded - http://www.securityfocus.com/archive/1/437510/100/200/threaded - http://www.securityfocus.com/bid/20024 - http://securityreason.com/securityalert/1585 - https://www.exploit-db.com/exploits/1905
CVE ID: CVE-2006-4838 State: PUBLISHED Published: 2006-09-15T22:00:00 Last Updated: 2024-08-07T19:23:41.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and (2) dcp_version parameters in (a) admin/inc/footer.inc.php, and the root_url, (3) page_top_name, (4) page_name, and (5) page_options parameters in (b) admin/inc/header.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445996/100/0/threaded - http://www.securityfocus.com/bid/20024 - http://securityreason.com/
.securityfocus.com/archive/1/445996/100/0/threaded - http://www.securityfocus.com/bid/20024 - http://securityreason.com/securityalert/1585
CVE ID: CVE-2006-4839 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:23:41.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contains a large number of sections. Additional Analyst Notes: - CVE Program Container: References: - http://www.sophos.com/support/knowledgebase/article/7609.html - http://securitytracker.com/id?1017132 - http://secunia.com/advisories/22635 - http://www.vupen.com/english/advisories/2006/4239 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=438 - http://www.security
sh/advisories/2006/4239 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=438 - http://www.securityfocus.com/bid/20816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29918
CVE ID: CVE-2006-4840 State: REJECTED Published: 2006-10-12T00:00:00Z Last Updated: 2024-09-16T16:58:32.843Z Description: No description available.
CVE ID: CVE-2006-4842 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:23:41.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20471 - http://www.vupen.com/english/advisories/2006/4016 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418 - http://www.securityfocus.com/archive/1/4
16 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=418 - http://www.securityfocus.com/archive/1/448691/100/0/threaded - https://www.exploit-db.com/exploits/45433/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29489 - http://secunia.com/advisories/22348 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1819 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102658-1 - http://securitytracker.com/id?1017050
CVE ID: CVE-2006-4843 State: PUBLISHED Published: 2007-03-29T21:00:00 Last Updated: 2024-08-07T19:23:41.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33280 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=493 - http://www.securitytracker.com/id?1017824 - http://www.securityf
e.com/intelligence/vulnerabilities/display.php?id=493 - http://www.securitytracker.com/id?1017824 - http://www.securityfocus.com/bid/23173 - http://www-1.ibm.com/support/docview.wss?uid=swg21257026 - http://secunia.com/advisories/24633 - http://www.vupen.com/english/advisories/2007/1133
CVE ID: CVE-2006-4844 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8 - http://www.securityfocus.com/bid/20056 - http://www.vupen.com/english/advisories/2006/3638 - http://www.gu
7_and_1.7.8 - http://www.securityfocus.com/bid/20056 - http://www.vupen.com/english/advisories/2006/3638 - http://www.gulftech.org/?node=research&article_id=00112-09142006& - https://exchange.xforce.ibmcloud.com/vulnerabilities/28943 - http://secunia.com/advisories/21948 - http://secunia.com/advisories/21931 - http://www.vupen.com/english/advisories/2006/3639 - http://www.gulftech.org/?node=research&article_id=00112-09142006
CVE ID: CVE-2006-4845 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tc_config[app_root] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28956 - http://www.vupen.com/english/advisories/2006/3630 - http://www.securityfocus.com/bid/20036 - https://www.exploit-db.com/exploits/2368 - http://secunia.com/advisories/21933 - http://www.securityfocu
com/bid/20036 - https://www.exploit-db.com/exploits/2368 - http://secunia.com/advisories/21933 - http://www.securityfocus.com/bid/20030
CVE ID: CVE-2006-4846 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016874 - http://www.vupen.com/english/advisories/2006/3643 - http://www.kb.cert.org/vuls/id/658620 - http://www.securityfocus.com/bid/20066 - http://support.citrix.com/article/CTX110950 - http://secunia.com/a
/id/658620 - http://www.securityfocus.com/bid/20066 - http://support.citrix.com/article/CTX110950 - http://secunia.com/advisories/21941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28990 - http://www.osvdb.org/28938 - http://support.citrix.com/article/CTX110439
CVE ID: CVE-2006-4847 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21932 - http://ipswitch.com/support/ws_ftp-server/releases/wr505hf1.asp - http://www.vupen.com/english/advisories/2006/3655 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28983 - http://www.osvdb.org/28939 - http://www.securityfocus.com/bid/2007
/exchange.xforce.ibmcloud.com/vulnerabilities/28983 - http://www.osvdb.org/28939 - http://www.securityfocus.com/bid/20076
CVE ID: CVE-2006-4848 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (6) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, or (12) top50.php. NOTE: this issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before b
issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before being used Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446219/100/0/threaded - http://www.securityfocus.com/archive/1/446567/100/200/threaded - http://www.securityfocus.com/bid/20060 - http://securityreason.com/securityalert/1590
CVE ID: CVE-2006-4849 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28969 - http://www.securityfocus.com/bid/20078 - http://www.vupen.com/english/advisories/2006/3656 - http://attrition.org/pipermail/vim/2007-April/001523.html - http://www.osvdb.org/28920 -
english/advisories/2006/3656 - http://attrition.org/pipermail/vim/2007-April/001523.html - http://www.osvdb.org/28920 - https://www.exploit-db.com/exploits/2383
CVE ID: CVE-2006-4850 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20037 - https://www.exploit-db.com/exploits/2372 - http://securityreason.com/securityalert/1593 - http://www.vupen.com/english/advisories/2006/3642 - http://www.securityfocus.com/archive/1/446113/100/0/threaded - http://secunia.com/ad
.com/english/advisories/2006/3642 - http://www.securityfocus.com/archive/1/446113/100/0/threaded - http://secunia.com/advisories/21965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28991
CVE ID: CVE-2006-4851 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84179 - http://www.vupen.com/english/advisories/2006/3642 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28991
CVE ID: CVE-2006-4852 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20075 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28970 - http://www.vupen.com/english/advisories/2006/3665 - http://www.securityfocus.com/archive/1/446231/100/0/threaded - http://www.osvdb.org/28917 - http://securityreason.com/securityalert/1589 - https://www.exploit-db.c
31/100/0/threaded - http://www.osvdb.org/28917 - http://securityreason.com/securityalert/1589 - https://www.exploit-db.com/exploits/2384 - http://secunia.com/advisories/21929
CVE ID: CVE-2006-4853 State: PUBLISHED Published: 2006-09-19T01:00:00 Last Updated: 2024-08-07T19:23:41.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28988 - http://www.securityfocus.com/bid/20038 - http://secunia.com/advisories/21960 - https://www.exploit-db.com/exploits/2371 - http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt - http://www.vupen.com/english/advisories/2006/3
ts/2371 - http://packetstorm.linuxsecurity.com/0609-exploits/haberx.txt - http://www.vupen.com/english/advisories/2006/3661
CVE ID: CVE-2006-4854 State: REJECTED Published: 2006-09-19T18:00:00 Last Updated: 2017-07-19T15:57:01 Description: No description available.
CVE ID: CVE-2006-4855 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data. Additional Analyst Notes: - CVE Program Contain
valid data, as demonstrated by calling DeviceIoControl to send the data. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016892 - http://secunia.com/advisories/21938 - http://securitytracker.com/id?1016893 - http://securitytracker.com/id?1016895 - http://securitytracker.com/id?1016889 - http://www.securityfocus.com/archive/1/446111/100/0/threaded - http://securitytracker.com/id?1016897 - http://securityreason.com/securityalert/1591 - http://securitytracker.com/id?1016896 - http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php - http://www.securityfocus.com/bid/20051 - http://securityresponse.
cient-validation-of-SymEvent-driver-input-buffer.php - http://www.securityfocus.com/bid/20051 - http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html - http://www.vupen.com/english/advisories/2006/3636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28960 - http://securitytracker.com/id?1016894 - http://securitytracker.com/id?1016898
CVE ID: CVE-2006-4856 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446133/100/0/threaded - http://www.vupen.com/english/advisories/2006/3667 - http://www.securityfocus.com/bid/20045 - http://securityreason.
ed - http://www.vupen.com/english/advisories/2006/3667 - http://www.securityfocus.com/bid/20045 - http://securityreason.com/securityalert/1597 - http://secunia.com/advisories/21964 - http://www.kb.cert.org/vuls/id/366900 - http://opensource.atlassian.com/projects/roller/browse/ROL-1196 - http://people.apache.org/~snoopdave/roller-2.3.1-rc1/apache-roller-src-2.3.1-rc1-incubating.tar.gz