Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
0060920-ips.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/29058 - http://securitytracker.com/id?1016891 - http://www.kb.cert.org/vuls/id/658884 - http://secunia.com/advisories/22022 - http://www.vupen.com/english/advisories/2006/3721
CVE ID: CVE-2006-4912 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3641 - http://www.securityfocus.com/bid/20041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28989 - https://www.exploit-db.com/exploits/2373
CVE ID: CVE-2006-4913 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated by injecting PHP code into a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20088 - http://www.vupen.com/english/advisories/2006/3684 - https://www.exploit-db.com/exploits/2389 - http://secun
/bid/20088 - http://www.vupen.com/english/advisories/2006/3684 - https://www.exploit-db.com/exploits/2389 - http://secunia.com/advisories/21961 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29006
CVE ID: CVE-2006-4914 State: PUBLISHED Published: 2006-09-21T00:00:00 Last Updated: 2024-08-07T19:32:22.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the ze_langue_02 cookie, as demonstrated by using the choix_lng parameter to choix_langue.php to indirectly set the cookie, then accessing livre_dor.php to trigger the inclusion from inc/change_lang_ck.php, possibly related to livre_livre.php. NOTE: the livre_livre.php relationship has been reported by some third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://seclist
en reported by some third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2006/Sep/0341.html - http://secunia.com/advisories/22038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29050 - http://www.vupen.com/english/advisories/2006/3707 - http://www.securityfocus.com/bid/20120 - http://www.osvdb.org/29014
CVE ID: CVE-2006-4915 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1621 - http://www.securityfocus.com/bid/20104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29041 - http://www.securityfocus.com/archive/1/446422/100/0/threaded
CVE ID: CVE-2006-4916 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:21.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL commands via the uye_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2395 - http://www.vupen.com/english/advisories/2006/3717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29028 - http://www.securityfocus.com/bid/20102 - http://secunia.com/advisories/22008
CVE ID: CVE-2006-4917 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.460Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web script or HTML via the pgname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1612 - http://www.securityfocus.com/archive/1/446417/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29043 - http://www.vupen.com/english/advisories/2006/3713 - http://secunia.com/advisories/22028 - http://www.securityfocus.com/bid/20090
CVE ID: CVE-2006-4918 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20103 - http://www.vupen.com/english/advisories/2006/3735 - http://secunia.com/advisories/21990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29025
advisories/2006/3735 - http://secunia.com/advisories/21990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29025 - https://www.exploit-db.com/exploits/2396 - http://www.osvdb.org/29041
CVE ID: CVE-2006-4919 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - https://www.exploit-db.com/exploits/2374 - http://www.vupen.com/english/advisories/2006/3664 - http://secunia.com/advisories/21975 - http://securitytracker.com/id?1016887 - http://www.securityfocus.com/bid/
6/3664 - http://secunia.com/advisories/21975 - http://securitytracker.com/id?1016887 - http://www.securityfocus.com/bid/20053
CVE ID: CVE-2006-4920 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28942 - https://www.exploit-db.com/exploits/2374 - http://www.vupen.com/english/advisories/2006/3664 - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - http://secunia.com/
p://www.vupen.com/english/advisories/2006/3664 - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - http://secunia.com/advisories/21975 - http://www.osvdb.org/28940 - http://securitytracker.com/id?1016887 - http://www.securityfocus.com/bid/20053
CVE ID: CVE-2006-4921 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28941 - http://www.vupen.com/english/advisories/2006/3664 - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - http://secunia.com/advisories/21975 - http://securitytr
/2006/3664 - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - http://secunia.com/advisories/21975 - http://securitytracker.com/id?1016887
CVE ID: CVE-2006-4922 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=115869368313367&w=2 - https://www.exploit-db.com/exploits/2374 - http://securitytracker.com/id?1016887 - http://www.securityfocus.com/bid/20053
CVE ID: CVE-2006-4923 State: PUBLISHED Published: 2006-09-21T01:00:00 Last Updated: 2024-08-07T19:32:22.842Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3710 - http://secunia.com/advisories/21979 - http://www.securityfocus.com/bid/20106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29026 - http://securityreason.com/securityalert/1618 - http://www.securityfocus.com/archive/1/446377/100/0/threade
ities/29026 - http://securityreason.com/securityalert/1618 - http://www.securityfocus.com/archive/1/446377/100/0/threaded
CVE ID: CVE-2006-4924 State: PUBLISHED Published: 2006-09-27T01:00:00 Last Updated: 2024-08-07T19:32:22.366Z Vendors: n/a Products: n/a Problem Types: n/a Description: sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector. Additional Analyst Notes: - CVE Program Container: References: - http://security.freebsd.org/advisories/FreeBSD-SA-06%3A22.openssh.asc - http://sourceforge.net/forum/forum.php?forum_id=681763 - http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability - h
ge.net/forum/forum.php?forum_id=681763 - http://blogs.sun.com/security/entry/sun_alert_102962_security_vulnerability - http://secunia.com/advisories/22270 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112 - http://secunia.com/advisories/23038 - http://www.ubuntu.com/usn/usn-355-1 - http://www.trustix.org/errata/2006/0054 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://www.vupen.com/english/advisories/2009/0740 - http://secunia.com/advisories/22116 - http://secunia.com/advisories/21923 - http://secunia.com/advisories/24805 - h
40 - http://secunia.com/advisories/22116 - http://secunia.com/advisories/21923 - http://secunia.com/advisories/24805 - http://secunia.com/advisories/23340 - http://www.openbsd.org/errata.html#ssh - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22487 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://security.gentoo.org/glsa/glsa-200611-06.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-262.htm - http://bugs.gentoo.org/show_bug.cgi?id=148228 - http://secunia.com/advisories/22164 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102962-1 - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - ht
om/search/document.do?assetkey=1-26-102962-1 - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - http://secunia.com/advisories/22362 - http://secunia.com/advisories/23680 - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://secunia.com/advisories/34274 - http://www.kb.cert.org/vuls/id/787448 - http://docs.info.apple.com/article.html?artnum=305214 - http://securitytracker.com/id?1016931 - http://www.vupen.com/english/advisories/2006/4869 - http://secunia.com/advisories/22298 - http://secunia.com/advisories/22352 - http://secunia.com/advisories/22236 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193
cunia.com/advisories/22236 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1193 - http://secunia.com/advisories/24799 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=207955 - http://secunia.com/advisories/22091 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00815112 - http://secunia.com/advisories/22495 - http://www.vupen.com/english/advisories/2007/1332 - http://www.securityfocus.com/bid/20216 - http://www.securityfocus.com/archive/1/447153/100/0/threaded - http://security.gentoo.org/glsa/glsa-200609-17.xml - http://secunia.com/advisories/22823 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc - http://sla
cunia.com/advisories/22823 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:22.openssh.asc - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.592566 - http://www.redhat.com/support/errata/RHSA-2006-0697.html - https://hypersonic.bluecoat.com/support/securityadvisories/ssh_server_on_sg - http://www.vupen.com/english/advisories/2006/3777 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html - http://secunia.com/advisories/22183 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29158 - http://marc.info/?l=openssh-unix-dev&m=115939141729160&w=2 - http://secunia.com/advisories/23241 - http://www.vupen.com/engli
//marc.info/?l=openssh-unix-dev&m=115939141729160&w=2 - http://secunia.com/advisories/23241 - http://www.vupen.com/english/advisories/2007/2119 - http://www.vupen.com/english/advisories/2007/0930 - http://www-unix.globus.org/mail_archive/security-announce/2007/04/msg00000.html - http://secunia.com/advisories/22926 - http://secunia.com/advisories/29371 - http://secunia.com/advisories/22208 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - http://secunia.com/advisories/22245 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - https://issues.rpath.com/browse/RPL-661 - http://secunia.com/advisories/22196 - http://www.debian.org/security/2006/dsa-1212 - htt
sues.rpath.com/browse/RPL-661 - http://secunia.com/advisories/22196 - http://www.debian.org/security/2006/dsa-1212 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10462 - http://www.redhat.com/support/errata/RHSA-2006-0698.html - http://www.osvdb.org/29152 - http://secunia.com/advisories/25608 - http://secunia.com/advisories/22158 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:179 - http://www.debian.org/security/2006/dsa-1189 - http://support.avaya.com/elmodocs2/security/ASA-2006-216.htm - ftp://ftp.sco.com/pub/unixware7/714/security/p534336/p534336.txt - http://secunia.com/advisories/24479
CVE ID: CVE-2006-4925 State: PUBLISHED Published: 2006-09-29T00:00:00 Last Updated: 2024-08-07T19:32:22.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23038 - http://www.securityfocus.com/archive/1/447861/100/200/threaded - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - https://issues.rpath.c
visories/2006_24_sr.html - http://www.novell.com/linux/security/advisories/2006_62_openssh.html - https://issues.rpath.com/browse/RPL-681 - http://secunia.com/advisories/22298 - http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/packet.c.diff?r1=1.144&r2=1.145&f=h - http://secunia.com/advisories/22495 - http://www.securityfocus.com/archive/1/447153/100/0/threaded - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.022-openssh.html - http://secunia.com/advisories/22245 - https://issues.rpath.com/browse/RPL-661 - http://bugs.gentoo.org/show_bug.cgi?id=148228 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:179
CVE ID: CVE-2006-4926 State: PUBLISHED Published: 2006-10-20T22:00:00 Last Updated: 2024-08-07T19:32:22.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449289/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29677 - http://www.os
tyfocus.com/archive/1/449289/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29677 - http://www.osvdb.org/29891 - http://www.securityfocus.com/archive/1/449301/100/0/threaded - http://www.kaspersky.com/technews?id=203038678 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=425 - http://secunia.com/advisories/22478 - http://www.securityfocus.com/bid/20635 - http://securitytracker.com/id?1017093 - http://www.vupen.com/english/advisories/2006/4117
CVE ID: CVE-2006-4927 State: PUBLISHED Published: 2006-10-05T21:00:00 Last Updated: 2024-08-07T19:32:22.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016996 - http://www.securityfocus.com/archive/1/447849/100/0/threaded - http://securitytracker.com/id?1017001 - http://
1016996 - http://www.securityfocus.com/archive/1/447849/100/0/threaded - http://securitytracker.com/id?1017001 - http://www.symantec.com/avcenter/security/Content/2006.10.05a.html - http://securitytracker.com/id?1017000 - http://securitytracker.com/id?1016997 - http://securitytracker.com/id?1016995 - http://www.vupen.com/english/advisories/2006/3928 - http://securitytracker.com/id?1016998 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=417 - http://securitytracker.com/id?1016994 - http://secunia.com/advisories/22288 - http://www.securityfocus.com/bid/20360 - http://securitytracker.com/id?1016999 - http://securitytracker.com/id?1017002 - http://securityreason.com/securit
0360 - http://securitytracker.com/id?1016999 - http://securitytracker.com/id?1017002 - http://securityreason.com/securityalert/1690 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29360 - http://www.kb.cert.org/vuls/id/946820
CVE ID: CVE-2006-4935 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T17:28:37.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4936 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T20:21:33.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4937 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T23:31:05.261Z Vendors: n/a Products: n/a Problem Types: n/a Description: lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4938 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T19:46:02.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4939 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T17:38:07.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4940 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-17T04:24:17.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4941 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-17T03:33:03.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4942 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-17T02:46:59.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via (a) filter/algebra/pix.php or (b) filter/tex/pix.php. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4943 State: PUBLISHED Published: 2006-09-23T00:00:00Z Last Updated: 2024-09-16T19:36:26.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter. Additional Analyst Notes: - CVE Program Container: References: - http://docs.moodle.org/en/Release_notes#Moodle_1.6.2
CVE ID: CVE-2006-4944 State: PUBLISHED Published: 2006-09-23T00:00:00 Last Updated: 2024-08-07T19:32:22.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29078 - http://www.securityfocus.com/bid/20141 - https://www.exploit-db.com/exploits/2411