Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1410 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25434 - http://www.osvdb.org/24131 - http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html - http://www.securityfocus.com/bid/17258 - http://secunia.com/advisories/19415 -
lute-live-support-xe-v20-xss-vuln.html - http://www.securityfocus.com/bid/17258 - http://secunia.com/advisories/19415 - http://www.vupen.com/english/advisories/2006/1099
CVE ID: CVE-2006-1411 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.275Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25466 - http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html - http://www.osvdb.org/24214 - http://www.vup
//pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html - http://www.osvdb.org/24214 - http://www.vupen.com/english/advisories/2006/1103
CVE ID: CVE-2006-1412 State: PUBLISHED Published: 2006-03-28T11:00:00 Last Updated: 2024-08-07T17:12:21.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453471/100/0/threaded - https://www.exploit-db.com/exploits/1611 - http://www.securityfocus.com/bid/17250 - http://secunia.com/advisories/19411 - http://www.securityfocus.com/archive/1/453485/100/0/
securityfocus.com/bid/17250 - http://secunia.com/advisories/19411 - http://www.securityfocus.com/archive/1/453485/100/0/threaded - http://www.vupen.com/english/advisories/2006/1115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25465
CVE ID: CVE-2006-1413 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vul
rs_search.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25468 - http://www.securityfocus.com/bid/17236 - http://www.osvdb.org/24134 - http://www.osvdb.org/24135 - http://www.osvdb.org/24133 - http://www.vupen.com/english/advisories/2006/1094 - http://secunia.com/advisories/19386 - http://www.osvdb.org/24136 - http://pridels0.blogspot.com/2006/03/ezhomepagepro-multiple-xss-vuln.html - http://www.osvdb.org/24132
CVE ID: CVE-2006-1414 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, (3) message, or (4) dayprune parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24119 - http://secunia.com/advisories/19401 - http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html - http://www.vupen.com/english/advisories/2006/1092 - https://exchange.xforce.ibmcloud.com/vulnerabilit
t-forums-16.html - http://www.vupen.com/english/advisories/2006/1092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25440 - http://www.securityfocus.com/bid/17249
CVE ID: CVE-2006-1415 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25462 - http://www.securityfocus.com/bid/17246 - http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html - http://www.osvdb.org/24122 - http://secunia.com/advisories/19398 - http://www.vupen.com/english/advisories/2006/1098
CVE ID: CVE-2006-1416 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25463 - http://www.osvdb.org/24127 - http://www.securityfocus.com/bid/17242 - http://secunia.c
cloud.com/vulnerabilities/25463 - http://www.osvdb.org/24127 - http://www.securityfocus.com/bid/17242 - http://secunia.com/advisories/19396 - http://www.vupen.com/english/advisories/2006/1096
CVE ID: CVE-2006-1417 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1091 - http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html - http://secunia.com/advisories/19416 - http://www.securityfocus.com/bid/17255 - http
2006/03/web-quiz-pro-xss-vuln.html - http://secunia.com/advisories/19416 - http://www.securityfocus.com/bid/17255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25431 - http://www.osvdb.org/24129 - http://www.osvdb.org/24130
CVE ID: CVE-2006-1418 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25469 - http://www.osvdb.org/24128 - http://www.securityfocus.com/bid/17257 - http://www.vupen.com/english/advisories/2006/1095 - http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html -
vupen.com/english/advisories/2006/1095 - http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html - http://secunia.com/advisories/19381
CVE ID: CVE-2006-1419 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1134 - http://securityreason.com/securityalert/632 - http://secunia.com/advisories/19382 - http://www.securityfocus.com/archive/1/428895/100/0/threaded - http://www.osvdb.org/24204 - http://www.securityfocus.com/bid/17233 - https://exchange.xforce
/1/428895/100/0/threaded - http://www.osvdb.org/24204 - http://www.securityfocus.com/bid/17233 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25446
CVE ID: CVE-2006-1420 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.194Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24254 - http://www.securityfocus.com/bid/17239 - http://www.securityfocus.com/archive/1/428891/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25453 - http://securityreason.com/securityalert/629
CVE ID: CVE-2006-1421 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.292Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acname or (2) contentid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25451 - http://www.securityfocus.com/archive/1/428893/100/0/threaded - http://securityreason.com/securityalert/631 - http://www.securityfocus.com/b
focus.com/archive/1/428893/100/0/threaded - http://securityreason.com/securityalert/631 - http://www.securityfocus.com/bid/17241 - http://www.osvdb.org/24209 - http://www.vupen.com/english/advisories/2006/1136
CVE ID: CVE-2006-1422 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17230 - https://www.exploit-db.com/exploits/1610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25580
CVE ID: CVE-2006-1423 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428833/100/0/threaded - http://securityreason.com/securityalert/628
CVE ID: CVE-2006-1424 State: REJECTED Published: 2006-03-28T20:00:00 Last Updated: 2006-04-04T09:00:00 Description: No description available.
CVE ID: CVE-2006-1425 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428901/100/0/threaded - http://www.securityfocus.com/bid/17278 - http://www.osvdb.org/24166 - http://marc.info/?l=full-disclosure&m=114344921211241&w=2 - http://securityreason.com/securityalert/636 - http://secunia.com/advisories/19409 - http://www.vupen.com/english
1&w=2 - http://securityreason.com/securityalert/636 - http://secunia.com/advisories/19409 - http://www.vupen.com/english/advisories/2006/1130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25476
CVE ID: CVE-2006-1426 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/428964/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25478 - http://www.osvdb.org/24169 - http://www.securityfocus.com/bid/17260 - https://exchange.xforce.ibmcloud.com/vul
s/25478 - http://www.osvdb.org/24169 - http://www.securityfocus.com/bid/17260 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25481 - http://secunia.com/advisories/19421 - http://www.vupen.com/english/advisories/2006/1135 - http://www.osvdb.org/24168
CVE ID: CVE-2006-1427 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1102 - http://www.osvdb.org/24279 - http://www.securityfocus.com/bid/17359 - http://s
.vupen.com/english/advisories/2006/1102 - http://www.osvdb.org/24279 - http://www.securityfocus.com/bid/17359 - http://secunia.com/advisories/19506 - http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25435 - http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1 - http://www.osvdb.org/24278 - http://pridels0.blogspot.com/2006/03/webapp-multiple-xss-vuln.html
CVE ID: CVE-2006-1428 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:22.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html - http://www.osvdb.org/24188 - http://www.vupen.com/english/advisories/2006/1129 - http://www.osvdb.org/24189 - http://www.securityfocus.com/bid/17279 - http://secunia.com/advisories/19419 - https://exc
http://www.osvdb.org/24189 - http://www.securityfocus.com/bid/17279 - http://secunia.com/advisories/19419 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25492
CVE ID: CVE-2006-1429 State: PUBLISHED Published: 2006-03-28T20:00:00 Last Updated: 2024-08-07T17:12:21.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rtn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24187 - http://secunia.com/advisories/19427 - http://www.securityfocus.com/bid/17273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25494 - http://pridels0.blogspot.com/2006/03/classifiedzone-v12-xss-vuln.html - http://www.vupen.com/english/advisories/2006/
- http://pridels0.blogspot.com/2006/03/classifiedzone-v12-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1132
CVE ID: CVE-2006-1430 State: PUBLISHED Published: 2006-03-28T21:00:00 Last Updated: 2024-08-07T17:12:22.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24176 - http://www.osvdb.org/24174 - http://secunia.com/advisor
VE Program Container: References: - http://www.osvdb.org/24176 - http://www.osvdb.org/24174 - http://secunia.com/advisories/19432 - http://www.securityfocus.com/bid/17282 - http://www.vupen.com/english/advisories/2006/1131 - http://www.osvdb.org/24175 - http://www.osvdb.org/24173 - http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25491
CVE ID: CVE-2006-1431 State: PUBLISHED Published: 2006-03-28T22:00:00 Last Updated: 2024-08-07T17:12:21.679Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded (1) srchfor and (2) srchby parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1127 - http://www.securityfocus.com/bid/17272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25484 - http://www.osvdb.org/24180 - http://secunia.com/advisories/19430 - http://pridels0.blogspot.com/2006/03/couponzo
25484 - http://www.osvdb.org/24180 - http://secunia.com/advisories/19430 - http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html
CVE ID: CVE-2006-1432 State: PUBLISHED Published: 2006-03-28T22:00:00 Last Updated: 2024-08-07T17:12:22.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25486 - http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html
CVE ID: CVE-2006-1433 State: PUBLISHED Published: 2006-04-03T14:00:00 Last Updated: 2024-08-07T17:12:21.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-en.php, which reveals the full installation path. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25668 - http://osvdb.org/ref/24/24302-annuaire_directory.txt - http://secunia.com/advisories/19548
CVE ID: CVE-2006-1434 State: PUBLISHED Published: 2006-04-03T14:00:00 Last Updated: 2024-08-07T17:12:21.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field (COMMENTAIRE parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24303 - http://osvdb.org/ref/24/24302-annuaire_directory.txt - http://secunia.com/advisories/19548 - http://www.securityfocus.com/bid/17393 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25669
CVE ID: CVE-2006-1435 State: PUBLISHED Published: 2006-04-03T14:00:00 Last Updated: 2024-08-07T17:12:21.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19551 - http://osvdb.org/ref/24/24255-aria.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25688 - http://www.osvdb.org/24255 - http://www.securityfocus.com/bid/17411
CVE ID: CVE-2006-1436 State: PUBLISHED Published: 2006-04-15T23:00:00 Last Updated: 2024-08-07T17:12:22.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19727 - http://www.osvdb.org/24236 - http://osvdb.org/ref/24/24236-upoint.txt - http://www.securityfocus.com/bid/17646 - http://www.os
/www.osvdb.org/24236 - http://osvdb.org/ref/24/24236-upoint.txt - http://www.securityfocus.com/bid/17646 - http://www.osvdb.org/24235
CVE ID: CVE-2006-1437 State: PUBLISHED Published: 2006-04-15T23:00:00 Last Updated: 2024-08-07T17:12:22.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17647 - http://secunia.com/advisories/19727 - http://osvdb.org/ref/24/24236-upoint.txt - http://www.osvdb.org/24237
CVE ID: CVE-2006-1438 State: PUBLISHED Published: 2006-04-03T14:00:00 Last Updated: 2024-08-07T17:12:21.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title, (3) article, (4) author, and (5) keywords parameters to (b) submit_article.php; and (6) Question, (7) Name, and (8) Email parameters to (c) submit_question.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24312 - http://www.osvdb.org/24311 - http://secunia.com/advisorie
Program Container: References: - http://www.osvdb.org/24312 - http://www.osvdb.org/24311 - http://secunia.com/advisories/19554 - http://osvdb.org/ref/24/24310-aphpkb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25666 - http://www.securityfocus.com/bid/17377 - http://www.osvdb.org/24310
CVE ID: CVE-2006-1439 State: PUBLISHED Published: 2006-05-12T21:00:00 Last Updated: 2024-08-07T17:12:22.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1779 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26404 - http://lists.apple.com/archive
/techalerts/TA06-132A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26404 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - http://secunia.com/advisories/20077 - http://www.osvdb.org/25583