Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3161 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016342 - http://securityreason.com/securityalert/1123 - http://www.securityfocus.com/archive/1/437659/100/0/threaded - http://www.securityfocus.com/bid/18501 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27304
CVE ID: CVE-2006-3162 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27425 - http://www.securityfocus.com/bid/18628 - http://secunia.com/advisories/20769 - https://www.exploit-db.com/exploits/1936 - http://www.vupen.com/english/advisories/2006/2478
CVE ID: CVE-2006-3163 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) start or (2) sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/imgallery-vuln.html - http://secunia.com/advisories/20763 - http://www.attrition.org/pipermail/vim/2006-June/000909.html - http://securitytracker.com/id?1016349 - http://www.vupen.com/english/advisories/2006/2471 - https://exchange.xforce.ibmcloud.
//securitytracker.com/id?1016349 - http://www.vupen.com/english/advisories/2006/2471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27277 - http://www.osvdb.org/26695 - http://www.securityfocus.com/bid/18566
CVE ID: CVE-2006-3164 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the first_row parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27200 - http://www.securityfocus.com/bid/18524 - http://pridels0.blogspot.com/2006/06/tplshop-v-20-vuln.html - http://www.osvdb.org/26631 - http://www.vupen.com/english/advisories/2006/2418 - http://secunia.com/advisories/20738
CVE ID: CVE-2006-3165 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2432 - http://pridels0.blogspot.com/2006/06/free-realty-vuln.html - http://secunia.com/advisories/20705 - http://www.osvdb.org/26667 - http://www.securityfocus.com/bid/18531 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27252
CVE ID: CVE-2006-3166 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27253 - http://pridels0.blogspot.com/2006/06/free-realty-vuln.html
CVE ID: CVE-2006-3167 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27254 - http://pridels0.blogspot.com/2006/06/free-realty-vuln.html
CVE ID: CVE-2006-3168 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:05.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (1) id and (2) debut parameters in (a) read.php, and the (3) search and (4) debut parameters in (b) index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.comscripts.com/scripts/php.cs-forum.643.html - http://secunia.com/advisories/20534 - http://www.vupen.com/english/advisories/2006/2314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27176 - http://www.securityfocus.com/
nglish/advisories/2006/2314 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27176 - http://www.securityfocus.com/archive/1/436789/100/0/threaded - http://www.acid-root.new.fr/advisories/csforum081.txt - http://securityreason.com/securityalert/1124 - http://www.osvdb.org/26383 - http://www.osvdb.org/26382
CVE ID: CVE-2006-3169 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:05.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) msg_result and (2) rep_titre parameters in (a) read.php; and the (3) id and (4) parent parameters and (5) CSForum_nom, (6) CSForum_mail, and (7) CSForum_url cookie parameters in (b) ajouter.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.comscripts.com/scripts/php.cs-forum.643.html - http://secunia.com/advisories/20534 - http://www.osvdb.org/
- http://www.comscripts.com/scripts/php.cs-forum.643.html - http://secunia.com/advisories/20534 - http://www.osvdb.org/26380 - http://www.vupen.com/english/advisories/2006/2314 - http://www.securityfocus.com/archive/1/436789/100/0/threaded - http://www.osvdb.org/26379 - http://www.acid-root.new.fr/advisories/csforum081.txt - http://securityreason.com/securityalert/1124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27175
CVE ID: CVE-2006-3170 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly involving an empty collapse[] or readall parameter to index.php, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.comscripts.com/scripts/php.cs-forum.643.html - http://secunia.com/advisories/20534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27178 - http://www.osvdb.org/26385 - http://www.vupen.com/english/advisories/20
ange.xforce.ibmcloud.com/vulnerabilities/27178 - http://www.osvdb.org/26385 - http://www.vupen.com/english/advisories/2006/2314 - http://www.securityfocus.com/archive/1/436789/100/0/threaded - http://www.acid-root.new.fr/advisories/csforum081.txt - http://securityreason.com/securityalert/1124
CVE ID: CVE-2006-3171 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:05.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26384 - http://www.comscripts.com/scripts/php.cs-forum.643.html - http://secunia.com/advisories/20534 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27177 - http://www.vupen.com/english/advisories/2006/2314 - http://www.acid-root.new.fr/advisories/csforum081.txt
CVE ID: CVE-2006-3172 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL with a trailing slash (/) character in the (1) lang_path parameter to (a) cms/plugins/col_man/column.inc.php, (b) cms/plugins/poll/poll.inc.php, (c) cms/plugins/user_managment/usrPortrait.inc.php, (d) cms/plugins/user_managment/user.inc.php, (e) cms/plugins/media_manager/media.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/pl
edia.inc.php, (f) cms/plugins/events/permanent.eventMonth.inc.php, (g) cms/plugins/events/events.inc.php, and (h) cms/plugins/newsletter2/newsletter.inc.php; (2) path[cb] parameter to (i) modules/guestbook/guestbook.inc.php, (j) modules/shoutbox/shoutBox.php, and (k) modules/sitemap/sitemap.inc.php; and the (3) rel parameter to (l) modules/download/overview.inc.php, (m) modules/download/detailView.inc.php, (n) modules/article/fullarticle.inc.php, (o) modules/article/comments.inc.php, (p) modules/article2/overview.inc.php, (q) modules/article2/fullarticle.inc.php, (r) modules/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php. Additi
s/article2/comments.inc.php, (s) modules/headline/headlineBox.php, and (t) modules/headline/showHeadline.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26354 - http://www.osvdb.org/26351 - http://www.osvdb.org/26353 - http://www.osvdb.org/26362 - http://www.osvdb.org/26344 - http://www.osvdb.org/26360 - http://www.osvdb.org/26363 - http://www.osvdb.org/26348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27044 - http://www.osvdb.org/26352 - http://www.osvdb.org/26357 - http://www.osvdb.org/26356 - http://www.osvdb.org/26350 - http://marc.info/?l=bugtraq&m=115016951316696&w=2 - http://www.osvdb.org/26355 - http://www.osvdb.org/26345 - ht
26350 - http://marc.info/?l=bugtraq&m=115016951316696&w=2 - http://www.osvdb.org/26355 - http://www.osvdb.org/26345 - http://www.osvdb.org/26358 - http://www.securityfocus.com/bid/18404 - http://secunia.com/advisories/20557 - http://www.osvdb.org/26361 - http://www.osvdb.org/26359 - http://www.osvdb.org/26347 - http://www.vupen.com/english/advisories/2006/2300 - http://www.osvdb.org/26349 - http://www.osvdb.org/26346
CVE ID: CVE-2006-3173 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path[cb] parameter to (a) libraries/comment/postComment.php and (b) modules/poll/poll.php, (2) rel parameter to (c) modules/archive/overview.inc.php, and the (3) actualModuleDir parameter to (d) modules/forum/showThread.inc.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Conta
rmation is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27044 - http://www.securityfocus.com/bid/25914 - http://www.securityfocus.com/archive/1/481435/100/0/threaded - http://secunia.com/advisories/20557
CVE ID: CVE-2006-3174 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/2732 - http://www.securityfocus.com/bid/18700 - http://pridels0.blogspot.com/2006/06/squirrelmail-151-xss-vuln.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/a
xss-vuln.html - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://docs.info.apple.com/article.html?artnum=306172 - http://www.securityfocus.com/bid/25159 - http://www.osvdb.org/26610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26941 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:147 - http://secunia.com/advisories/26235
CVE ID: CVE-2006-3175 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php, (2) ecrire.php, and (3) lire.php. NOTE: it was later reported that the ecrire.php vector also affects 1.2. NOTE: this issue might be limited to a race condition during installation or an improper installation, since a completed installation creates an include file that prevents external control of the $lang variable. Additional Analyst Notes: - CVE Program
n creates an include file that prevents external control of the $lang variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27114 - http://www.osvdb.org/27460 - http://www.securityfocus.com/bid/18476 - http://www.securityfocus.com/archive/1/437448/100/0/threaded - http://www.osvdb.org/27461 - http://securityreason.com/securityalert/1125 - http://www.osvdb.org/27462 - http://www.securityfocus.com/archive/1/437028/100/200/threaded
CVE ID: CVE-2006-3176 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27198 - http://www.securityfocus.com/bid/18520 - http://secunia.com/advisories/20739 - http://www.osvdb.org/26632 - http://www.vupen.com/english/advisories/2006/2420 - http://pridels0.blogspot.com/2006/06/xarancms-v20-vuln.html
CVE ID: CVE-2006-3177 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the destination parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27088 - http://secunia.com/advisories/20680 - https://www.exploit-db.com/exploits/1912 - http://www.vupen.com/english/advisories/2006/2404 - http://www.osvdb.org/26598 - http://www.securityfocus.com/bid/18494
CVE ID: CVE-2006-3178 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attackers to overwrite arbitrary files via a CHM archive containing files with a .. (dot dot) in their filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27278 - http://www.securityfocus.com/bid/18511 - http://securitytracker.com/id?1016343 - http://www.osvdb.org/26636 - http://www.vupen.com/english/advisories/2006/2430 - http://secunia.co
cker.com/id?1016343 - http://www.osvdb.org/26636 - http://www.vupen.com/english/advisories/2006/2430 - http://secunia.com/advisories/20734 - http://www.debian.org/security/2006/dsa-1144 - http://morte.jedrea.com/~jedwin/projects/chmlib/ - http://secunia.com/advisories/21406
CVE ID: CVE-2006-3179 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the account parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27222 - http://www.securityfocus.com/archive/1/437550/100/0/threaded - http://securityreason.com/securityalert/1126 - http://www.vupen.com/english/advisories/2006/2429 - http://www.osvdb.org/26628 - http://www.securityfocus.c
alert/1126 - http://www.vupen.com/english/advisories/2006/2429 - http://www.osvdb.org/26628 - http://www.securityfocus.com/bid/18523 - http://secunia.com/advisories/20728
CVE ID: CVE-2006-3180 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27222 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0383.html - http://www.vupen.com/english/advisories/2006/2429 - http://www.securityfocus.com/bid/18426 - http://secunia.com/advisories/20728 - http://www.osvdb.org/26629
CVE ID: CVE-2006-3181 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute arbitrary SQL commands via the browse parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html - http://www.vupen.com/english/advisories/2006/2312 - http://securityreason.com/securityalert/1128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27518 - http://www.osvdb.org/26420 - http://secunia.com/advisories/20611
CVE ID: CVE-2006-3182 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the uid parameter in the rss page. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27519 - http://www.vupen.com/english/advisories/2006/2312 - http://securityreason.com/securityalert/1128 - http://www.osvdb.org/26421 - http://secunia.co
ish/advisories/2006/2312 - http://securityreason.com/securityalert/1128 - http://www.osvdb.org/26421 - http://secunia.com/advisories/20611
CVE ID: CVE-2006-3183 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) browse parameter, which is not filtered in the resulting error message, and multiple unspecified input fields, including those involved when (2) updating a profile, (3) posting comments or entries in a blog, (4) uploading files, (5) picture captions, and (6) sending a private message (PM). Additional Analyst Notes: - CVE Program Container: Referen
(5) picture captions, and (6) sending a private message (PM). Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-06/0115.html - http://www.osvdb.org/26419 - http://www.vupen.com/english/advisories/2006/2312 - http://securityreason.com/securityalert/1128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27151 - http://secunia.com/advisories/20611
CVE ID: CVE-2006-3184 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to execute arbitrary ASP code via the strAsgSknPageBgColour parameter to settings_skin.asp, which is stored in inc_skin_file.asp. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27284 - http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/ - http://www.vupen.com/english/advisories/2
4 - http://blog.asp-stats.com/index.php/2006/06/18/asp-stats-generator-v212/ - http://www.vupen.com/english/advisories/2006/2414 - http://www.hamid.ir/security/aspstats.txt - http://secunia.com/advisories/20721
CVE ID: CVE-2006-3185 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://advisories.echo.or.id/adv/adv33-K-159-2006.txt - http://secunia.com/advisories/20713 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27330 - http://securityreason.com/securityalert/1127 - http://www.securityfocus.com/archive/1/437492/100/0/threaded - http://www.securityfocus.com/bi
.com/securityalert/1127 - http://www.securityfocus.com/archive/1/437492/100/0/threaded - http://www.securityfocus.com/bid/18489 - http://www.vupen.com/english/advisories/2006/2409
CVE ID: CVE-2006-3186 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web script or HTML via the mainpath parameter to (1) data/footer.php and (2) admin/header.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27329 - http://www.osvdb.org/26630 - http://secunia.com/advisories
https://exchange.xforce.ibmcloud.com/vulnerabilities/27329 - http://www.osvdb.org/26630 - http://secunia.com/advisories/20713 - http://www.vupen.com/english/advisories/2006/2409
CVE ID: CVE-2006-3187 State: PUBLISHED Published: 2006-06-23T00:00:00 Last Updated: 2024-08-07T18:16:06.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) maingroup and (2) secondgroup parameters to (a) search_prod_list.asp, and the (3) maingroup parameter to (b) meny2.asp. NOTE: it is possible that this is resultant from SQL injection or a forced SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18532 - http://www.securityfocus.com/bid/18530 - https://exchange.xf