Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
bugs.debian.org/cgi-bin/bugreport.cgi?bug=376824 - http://secunia.com/advisories/24525 - http://www.vupen.com/english/advisories/2006/2797 - http://secunia.com/advisories/21349 - http://security.gentoo.org/glsa/glsa-200608-05.xml - http://security.gentoo.org/glsa/glsa-200703-19.xml - http://sourceforge.net/project/shownotes.php?release_id=431724&group_id=32584 - http://secunia.com/advisories/20940 - http://secunia.com/advisories/21393 - http://security.gentoo.org/glsa/glsa-200608-12.xml - http://secunia.com/advisories/21405 - http://www.securityfocus.com/bid/18977 - http://libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u - http://se
libvncserver.cvs.sourceforge.net/libvncserver/libvncserver/libvncserver/auth.c?r1=1.11&r2=1.14&diff_format=u - http://secunia.com/advisories/21179 - http://www.securityfocus.com/archive/1/442986/100/0/threaded - http://seclists.org/fulldisclosure/2022/May/29
CVE ID: CVE-2006-2451 State: PUBLISHED Published: 2006-07-07T18:00:00 Last Updated: 2024-08-07T17:51:04.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The suid_dumpable support in Linux kernel 2.6.13 up to versions before 2.6.17.4, and 2.6.16 before 2.6.16.24, allows a local user to cause a denial of service (disk consumption) and possibly gain privileges via the PR_SET_DUMPABLE argument of the prctl function and a program that causes a core dump file to be created in a directory for which the user does not have permissions. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0574.html - http://www.securityfocus.com
Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0574.html - http://www.securityfocus.com/archive/1/440117/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_17_sr.html - http://www.novell.com/linux/security/advisories/2006_42_kernel.html - http://www.vupen.com/english/advisories/2006/2699 - http://www.securityfocus.com/archive/1/439483/100/100/threaded - http://www.securityfocus.com/archive/1/440379/100/0/threaded - http://www.securityfocus.com/archive/1/440057/100/0/threaded - http://www.securityfocus.com/archive/1/439610/100/100/threaded - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.kernel.org/git/?p=li
100/100/threaded - http://www.novell.com/linux/security/advisories/2006_47_kernel.html - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=0af184bb9f80edfbb94de46cb52e9592e5a547b0 - http://securitytracker.com/id?1016451 - http://secunia.com/advisories/20965 - http://www.securityfocus.com/bid/18874 - http://www.ubuntu.com/usn/usn-311-1 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.24 - http://www.osvdb.org/27030 - http://secunia.com/advisories/21966 - http://www.novell.com/linux/security/advisories/2006_16_sr.html - http://secunia.com/advisories/20953 - http://secunia.com/advisories/21498 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?
//secunia.com/advisories/20953 - http://secunia.com/advisories/21498 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=195902 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.4 - http://www.novell.com/linux/security/advisories/2006_49_kernel.html - http://secunia.com/advisories/20986 - http://secunia.com/advisories/20991 - http://support.avaya.com/elmodocs2/security/ASA-2006-162.htm - http://secunia.com/advisories/20960 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11336 - http://www.securityfocus.com/archive/1/439869/100/0/threaded - https://issues.rpath.com/browse/RPL-488 - http://www.securityfocus.com/archive/1/440118/100/0/thre
9869/100/0/threaded - https://issues.rpath.com/browse/RPL-488 - http://www.securityfocus.com/archive/1/440118/100/0/threaded - http://secunia.com/advisories/21179
CVE ID: CVE-2006-2452 State: PUBLISHED Published: 2006-06-09T10:00:00 Last Updated: 2024-08-07T17:51:04.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNOME GDM 2.8, 2.12, 2.14, and 2.15, when the "face browser" feature is enabled, allows local users to access the "Configure Login Manager" functionality using their own password instead of the root password, which can be leveraged to gain additional privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20532 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0003.html - http://secunia.com/advisories/20627 - http://www.vupen.com/english/advisories/2006/2239 - ht
nounce/2006-Jun/0003.html - http://secunia.com/advisories/20627 - http://www.vupen.com/english/advisories/2006/2239 - https://usn.ubuntu.com/293-1/ - http://www.securityfocus.com/archive/1/436428 - http://bugzilla.gnome.org/show_bug.cgi?id=343476 - http://www.gentoo.org/security/en/glsa/glsa-200606-14.xml - http://www.securityfocus.com/bid/18332 - http://secunia.com/advisories/20636 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27018 - http://secunia.com/advisories/20587 - http://secunia.com/advisories/20552 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:100
CVE ID: CVE-2006-2453 State: PUBLISHED Published: 2006-05-28T10:00:00 Last Updated: 2024-08-07T17:51:04.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified format string vulnerabilities in Dia have unspecified impact and attack vectors, a different set of issues than CVE-2006-2480. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/archives/fedora-package-announce/2006-May/msg00119.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=192830 - http://www.redhat.com/support/errata/RHSA-2006-0541.html - http://secunia.com/advisories/20513 - http://secunia.com/advisories/20422 - http://www.redhat.com/archives/fedora-secu
- http://secunia.com/advisories/20513 - http://secunia.com/advisories/20422 - http://www.redhat.com/archives/fedora-security-list/2006-May/msg00099.html - http://www.novell.com/linux/security/advisories/2006-06-02.html - http://securitytracker.com/id?1016203 - http://secunia.com/advisories/20254 - http://www.securityfocus.com/bid/18166 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:093 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11600 - http://secunia.com/advisories/20339 - https://usn.ubuntu.com/286-1/ - http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml - http://secunia.com/advisories/20457
CVE ID: CVE-2006-2458 State: PUBLISHED Published: 2006-05-18T23:00:00 Last Updated: 2024-08-07T17:51:04.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Libextractor 0.5.13 and earlier allow remote attackers to execute arbitrary code via (1) the asf_read_header function in the ASF plugin (plugins/asfextractor.c), and (2) the parse_trak_atom function in the QT plugin (plugins/qtextractor.c). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434288/100/0/threaded - http://securitytracker.com/id?1016118 - http://www.securityfocus.com/bid/18021 - http://www.novell.com/linux/security/advis
p://securitytracker.com/id?1016118 - http://www.securityfocus.com/bid/18021 - http://www.novell.com/linux/security/advisories/2006-06-02.html - http://securityreason.com/securityalert/916 - http://secunia.com/advisories/20160 - http://secunia.com/advisories/20326 - http://secunia.com/advisories/20150 - http://www.debian.org/security/2006/dsa-1081 - http://gnunet.org/libextractor/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/26531 - http://www.gentoo.org/security/en/glsa/glsa-200605-14.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/26532 - http://secunia.com/advisories/20457 - http://www.vupen.com/english/advisories/2006/1848
CVE ID: CVE-2006-2459 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to execute arbitrary SQL commands via the srch_where parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26491 - http://www.securityfocus.com/bid/18009 - http://securityreason.com/securityalert/922 - http://www.securityfocus.com/archive/1/434162/100/0/threaded - http://www.osvdb.org/25542 - http://secunia.com/advisories/20129 - http://retro
us.com/archive/1/434162/100/0/threaded - http://www.osvdb.org/25542 - http://secunia.com/advisories/20129 - http://retrogod.altervista.org/phpfusion_600306_sql.html - http://securitytracker.com/id?1016111 - http://www.vupen.com/english/advisories/2006/1839
CVE ID: CVE-2006-2460 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS and $_SESSION from modification, which allows remote attackers to conduct attacks such as directory traversal or PHP remote file inclusion, as demonstrated by modifying the GLOBALS[sugarEntry] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/sugar_suite_42_incl_xpl.html - http://www.vupen.com/english/advisories/2006/1791 - http://se
p://retrogod.altervista.org/sugar_suite_42_incl_xpl.html - http://www.vupen.com/english/advisories/2006/1791 - http://secunia.com/advisories/20072 - http://www.securityfocus.com/archive/1/434009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26451 - http://www.securityfocus.com/bid/17987 - http://securitytracker.com/id?1016087 - http://www.osvdb.org/25532 - https://www.exploit-db.com/exploits/1785 - http://securityreason.com/securityalert/921
CVE ID: CVE-2006-2461 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server before 8.1 Service Pack 4 does not properly set the Quality of Service in certain circumstances, which prevents some transmissions from being encrypted via SSL, and allows remote attackers to more easily read potentially sensitive network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20130 - http://securitytracker.com/id?1016102 - http://www.vupen.com/english/advisories/2006/1828 - http://dev2dev.bea.com/pub/advisory/194 - https://exchange.xforce.ibm
ttp://www.vupen.com/english/advisories/2006/1828 - http://dev2dev.bea.com/pub/advisory/194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26459
CVE ID: CVE-2006-2462 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6, may send sensitive data over non-secure channels when using JTA transactions, which allows remote attackers to read potentially sensitive network traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20130 - http://dev2dev.bea.com/pub/advisory/195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26458 - http://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016103
CVE ID: CVE-2006-2463 State: PUBLISHED Published: 2006-05-19T10:00:00Z Last Updated: 2024-09-16T18:54:16.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: view_album.php in SelectaPix 1.31 and earlier allows remote attackers to obtain the installation path via a certain request, which displays the path in an error message, possibly due to an invalid or missing parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016085
CVE ID: CVE-2006-2464 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: stopWebLogic.sh in BEA WebLogic Server 8.1 before Service Pack 4 and 7.0 before Service Pack 6 displays the administrator password to stdout when executed, which allows local users to obtain the password by viewing a local display. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20130 - http://dev2dev.bea.com/pub/advisory/181 - http://www.vupen.com/english/advisories/2006/1828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26467 - http://securitytracker.com/id?1016094
CVE ID: CVE-2006-2465 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if mp3info is not installed setuid or setgid in any reasonable context, then this issue might not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/30945 - http://www.exploit-db.com/exploits/32358 - http://www.securityfocus.com/bid/18016 - http://securitytracker.com/id?1016108 - http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Over
8016 - http://securitytracker.com/id?1016108 - http://packetstormsecurity.com/files/125786/MP3Info-0.8.5-SEH-Buffer-Overflow.html - http://packetstormsecurity.com/files/124955/Mp3info-Stack-Buffer-Overflow.html - http://www.securiteam.com/exploits/5GP0E15IKO.html
CVE ID: CVE-2006-2466 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 allows remote attackers to obtain the source code of JSP pages during certain circumstances related to a "timing window" when a compilation error occurs, aka the "JSP showcode vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/192 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26461 - http://secunia.com/advisories/20130 - http://securitytracker.com/id?1016100 - http://www.vupen.com/english/advisories/20
http://secunia.com/advisories/20130 - http://securitytracker.com/id?1016100 - http://www.vupen.com/english/advisories/2006/1828
CVE ID: CVE-2006-2467 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: BEA WebLogic Server 8.1 up to SP4, 7.0 up to SP6, and 6.1 up to SP7 displays the internal IP address of the WebLogic server in the WebLogic Server Administration Console, which allows remote authenticated administrators to determine the address. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26462 - http://secunia.com/advisories/20130 - http://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016099 - http://securitytracker.com/id?
tp://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016099 - http://securitytracker.com/id?1016097 - http://dev2dev.bea.com/pub/advisory/191
CVE ID: CVE-2006-2468 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26468 - http://dev2dev.bea.com/pub/advisory/190 - http://secunia.com/advisories/20130 - http://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016099 - http://securitytracke
0130 - http://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016099 - http://securitytracker.com/id?1016097
CVE ID: CVE-2006-2469 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HTTP handlers in BEA WebLogic Server 9.0, 8.1 up to SP5, 7.0 up to SP6, and 6.1 up to SP7 stores the username and password in cleartext in the WebLogic Server log when access to a web application or protected JWS fails, which allows attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/189 - http://secunia.com/advisories/20130 - http://securitytracker.com/id?1016098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26463 - http://www.vupen.co
http://securitytracker.com/id?1016098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26463 - http://www.vupen.com/english/advisories/2006/1828
CVE ID: CVE-2006-2470 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20130 - http://www.vupen.com/english/advisories/2006/1828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26464 - http://dev2dev.bea.com/pub/advisory/188
CVE ID: CVE-2006-2471 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in BEA WebLogic Server 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 leak sensitive information to remote attackers, including (1) DNS and IP addresses to address to T3 clients, (2) internal sensitive information using GetIORServlet, (3) certain "server details" in exceptions when invalid XML is provided, and (4) a stack trace in a SOAP fault. Additional Analyst Notes: - CVE Program Container: References: - http://dev2dev.bea.com/pub/advisory/187 - http://secunia.com/advisories/20130 - http://w
rogram Container: References: - http://dev2dev.bea.com/pub/advisory/187 - http://secunia.com/advisories/20130 - http://www.vupen.com/english/advisories/2006/1828 - http://securitytracker.com/id?1016096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26465
CVE ID: CVE-2006-2472 State: PUBLISHED Published: 2006-05-19T10:00:00 Last Updated: 2024-08-07T17:51:04.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BEA WebLogic Server 9.1 and 9.0, 8.1 through SP5, 7.0 through SP6, and 6.1 through SP7 allows untrusted applications to obtain private server keys. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20130 - http://dev2dev.bea.com/pub/advisory/186 - http://securitytracker.com/id?1016095 - http://www.vupen.com/english/advisories/2006/1828 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26466
CVE ID: CVE-2006-2473 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: this issue has been disputed by the vendor and a third party who is affiliated with the product. The vendor states "You cannot insert code in a wikipage or via URL parameters as they are all escaped before usage, so nothing can be compromised at other sites. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434295/100/
tes. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434295/100/0/threaded - http://www.openwiki.com/ow.asp?XssVulnerability - http://securityreason.com/securityalert/920 - http://www.securityfocus.com/bid/18013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26517 - http://www.securityfocus.com/archive/1/496294/100/0/threaded - http://www.openwiki.com/ow.asp?OpenWikiVulnerability
CVE ID: CVE-2006-2474 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary SQL commands via the artnum parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20177 - http://www.osvdb.org/25649 - http://securityreason.com/securityalert/919 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26534 - http://www.securityfocus.com/bid/18024 - http://www.securityfocus.com/archive/1/434368/100/0/threaded
CVE ID: CVE-2006-2475 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in (1) edit_mailtexte.cgi and (2) bestmail.cgi in Cosmoshop 8.11.106 and earlier allows remote administrators to read arbitrary files via ".." sequences in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20177 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26533 - http://www.osvdb.org/25648 - http://securityreason.com/securityalert/919 - http://www.securityfocus.com/archive/1/434368/100/0/threaded - http://www.osvdb.org
curityreason.com/securityalert/919 - http://www.securityfocus.com/archive/1/434368/100/0/threaded - http://www.osvdb.org/25647
CVE ID: CVE-2006-2476 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitrix Site Manager 4.1.x stores updater.log under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26542 - http://secunia.com/advisories/20143 - http://www.securityfocus.com/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://www.osvdb.org/25624 - http://securit
om/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://www.osvdb.org/25624 - http://securityreason.com/securityalert/918 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html
CVE ID: CVE-2006-2477 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the administrative interface Bitrix Site Manager 4.1.x allows remote attackers to inject arbitrary web script or HTML via unspecified inputs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26544 - http://www.vupen.com/english/advisories/2006/1858 - http://secunia.com/advisories/20143 - http://www.securityfocus.com/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://securityreason.com/s
.securityfocus.com/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://securityreason.com/securityalert/918