Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6209 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:34.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) id2006quant parameter to (a) item_show.asp, or the (2) maingroup or (3) secondgroup parameter to (b) item_list.asp. NOTE: the code_no parameter to Item_Show.asp is covered by CVE-2005-2601. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=42 - http://securityreason.com/securityalert/1947 - http://w
nces: - http://www.aria-security.com/forum/showthread.php?t=42 - http://securityreason.com/securityalert/1947 - http://www.securityfocus.com/archive/1/452557/100/0/threaded - http://www.securityfocus.com/archive/1/452573/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30506 - http://www.securityfocus.com/bid/21273
CVE ID: CVE-2006-6210 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=41 - http://www.securityfocus.com/bid/21279 - http://www.securityfocus.com/archive/1/452569/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30511 - http://securityreason.com/securityalert/1946
CVE ID: CVE-2006-6211 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.095Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to (a) admin/admincore.php, the (2) month parameter to (b) admin/comments.php or (c) admin/entries.php, or the (3) page parameter to (d) admin/logs.php, different vectors than CVE-2006-5064. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452084/100/200/threaded - http://securityreason.com/securityalert/1945 - http:/
- http://www.securityfocus.com/archive/1/452084/100/200/threaded - http://securityreason.com/securityalert/1945 - http://www.securityfocus.com/bid/21184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30428
CVE ID: CVE-2006-6212 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.123Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4685 - http://secunia.com/advisories/23082 - http://www.securityfocus.com/bid/21269
CVE ID: CVE-2006-6213 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:34.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file inclusion attacks via the abs_url parameter, which is later extracted to overwrite a previously uncontrolled value. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30517 - https://www.exploit-db.com/exploits/2840 - http://www.attrition.org/pipermail/vim/2006-November/001153.html - http://www.securityfocus.com/bid/21266
CVE ID: CVE-2006-6214 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote attackers to execute arbitrary SQL commands via the wallpaperid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2835 - http://www.securityfocus.com/bid/21274 - http://www.vupen.com/english/advisories/2006/4687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30528 - http://secunia.com/advisories/23084
CVE ID: CVE-2006-6215 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameter to (a) process.php, or the (3) wallpaperid parameter to (b) dlwallpaper.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4687
CVE ID: CVE-2006-6216 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remote attackers to execute arbitrary SQL commands via the hack_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2851 - http://www.securityfocus.com/bid/21290 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30533
CVE ID: CVE-2006-6217 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30523 - http://www.securityfocus.com/archive/1/452616/100/0/threaded
CVE ID: CVE-2006-6218 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in dev4u CMS allow remote attackers to execute arbitrary SQL commands via the (1) seite_id, (2) gruppe_id.php, and (3) go_target parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls36 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30395 - http://www.securityfocus.com/archive/1/452008/100/200/threaded - http://www.securityfocus.com/bid/21170
CVE ID: CVE-2006-6219 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in dev4u CMS allow remote attackers to inject arbitrary web script or HTML via the (1) user_name, (2) passwort, and (3) go_target parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/index_2.php?major_rls=major_rls36 - http://www.securityfocus.com/archive/1/452008/100/200/threaded - http://www.securityfocus.com/bid/21170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30393
CVE ID: CVE-2006-6220 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to execute arbitrary SQL commands via the (1) recipeid parameter to recipe.php or the (2) categoryid parameter to list.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21270 - http://secunia.com/advisories/23083 - https://www.exploit-db.com/exploits/2834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30509 - http://www.vupen.com/english/advisories/2006/
ploits/2834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30509 - http://www.vupen.com/english/advisories/2006/4686
CVE ID: CVE-2006-6221 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:19:35.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: 2X ThinClientServer Enterprise Edition before 4.0.2248 allows remote attackers to create multiple privileged accounts via a replay attack using the initial account creation request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4883 - http://www.symantec.com/enterprise/research/SYMSA-2006-012.txt - http://securitytracker.com/id?1017350 - http://secunia.com/advisories/23248 - http://www.securityfocus.com/bid/21300 - http://www.securityfocus.com/archive/1/453656/100
ecunia.com/advisories/23248 - http://www.securityfocus.com/bid/21300 - http://www.securityfocus.com/archive/1/453656/100/0/threaded - http://securityreason.com/securityalert/2012 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30759
CVE ID: CVE-2006-6222 State: PUBLISHED Published: 2006-12-14T20:00:00 Last Updated: 2024-08-07T20:19:35.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-049.html - http://www.kb.cert.org/vuls/id/607312 - http://secunia.com/advisories/23368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30882 - http
vuls/id/607312 - http://secunia.com/advisories/23368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30883 - http://securitytracker.com/id?1017379 - http://www.symantec.com/avcenter/security/Content/2006.12.13a.html - http://www.securityfocus.com/archive/1/454313/100/0/threaded - http://www.securityfocus.com/bid/21565 - http://www.vupen.com/english/advisories/2006/4999 - http://securityreason.com/securityalert/2033
CVE ID: CVE-2006-6223 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Google Search Appliance and Google Mini allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30647 - http://sla.ckers.org/forum/read.php?3%2C3109 - http://secunia.com/advisories/23239 - http://www.kb.cert.org/vuls/id/989144 - http://www.vupen.com/english/advisories/2006/4789 - http://ww
advisories/23239 - http://www.kb.cert.org/vuls/id/989144 - http://www.vupen.com/english/advisories/2006/4789 - http://www.securityfocus.com/bid/21438
CVE ID: CVE-2006-6224 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to execute arbitrary PHP code via the GLOBALS array. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21357 - http://www.puntal.fr/forums/viewtopic.php?id=610 - http://www.vupen.com/english/advisories/2006/4767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30585
CVE ID: CVE-2006-6225 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.087Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the _CONF[path] parameter to (1) links/functions.inc, (2) polls/functions.inc, (3) spamx/BlackList.Examine.class.php, (4) spamx/DeleteComment.Action.class.php, (5) spamx/EditIPofURL.Admin.class.php, (6) spamx/MTBlackList.Examine.class.php, (7) spamx/MassDelete.Admin.class.php, (8) spamx/MailAdmin.Action.class.php, (9) spamx/MassDelTrackback.Admin.class.php, (10) spamx/EditHeader.Admin.class.php, (11)
amx/MailAdmin.Action.class.php, (9) spamx/MassDelTrackback.Admin.class.php, (10) spamx/EditHeader.Admin.class.php, (11) spamx/EditIP.Admin.class.php, (12) spamx/IPofUrl.Examine.class.php, (13) spamx/Import.Admin.class.php, (14) spamx/LogView.Admin.class.php, and (15) staticpages/functions.inc, in the plugins/ directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27469 - http://www.securityfocus.com/bid/18740 - https://www.exploit-db.com/exploits/1963
CVE ID: CVE-2006-6226 State: PUBLISHED Published: 2006-12-02T02:00:00Z Last Updated: 2024-09-17T02:42:22.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Console::Render in neoengine/console.cpp and (2) TextArea::Render in neowtk/textarea.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/neoenginex-adv.txt - http://www.securityfocus.com/bid/18696 - http://www.osvdb.org/27926 - http://www.securiteam.com/securitynews/5MP0N2AIUC.html
CVE ID: CVE-2006-6227 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:34.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Core::Receive function in neonet/core.cpp for NeoEngine 0.8.2 and earlier, and CVS 3422, allow remote attackers to cause a denial of service (engine crash) via a message with a large uiMessageLength that produces a failed memory allocation and a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/neoenginex-adv.txt - http://www.securityfocus.com/bid/18696 - http://www.securiteam.com/securitynews/5MP0N2AIUC.html - http://www.osvdb.org/27927 - https://ex
tyfocus.com/bid/18696 - http://www.securiteam.com/securitynews/5MP0N2AIUC.html - http://www.osvdb.org/27927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27529
CVE ID: CVE-2006-6228 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://ltwcalendar.sourceforge.net/changelog.php
CVE ID: CVE-2006-6229 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Codewalkers ltwCalendar (aka PHP Event Calendar) before 4.2.1 logs failed passwords, which might allow attackers to infer correct passwords from the log file. Additional Analyst Notes: - CVE Program Container: References: - http://ltwcalendar.sourceforge.net/changelog.php
CVE ID: CVE-2006-6230 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vuBB 0.2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a register action to index.php, a different vulnerability than CVE-2006-0962. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1948 - http://www.securityfocus.com/archive/1/437657/100/200/threaded - http://www.acid-root.new.fr/advisories/vubb021b.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27297 - http://www.vupen.com/eng
t.new.fr/advisories/vubb021b.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27297 - http://www.vupen.com/english/advisories/2006/2458
CVE ID: CVE-2006-6231 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: vuBB 0.2.1 and earlier allows remote attackers to obtain sensitive information via a direct request to includes/vubb.php, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1948 - http://www.securityfocus.com/archive/1/437657/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27299 - http://www.acid-root.new.fr/advisories/vubb021b.txt - http://www.vupen.com/english/advisories/2006/2458
CVE ID: CVE-2006-6232 State: PUBLISHED Published: 2006-12-02T02:00:00 Last Updated: 2024-08-07T20:19:35.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27597 - http://www.securityfocus.com/archive/1/438169/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27402 - http://secunia.com/advisories/20468 - http://www.securityfocus.com/bid/18579 - http://securityreason.com/securityalert/1949
CVE ID: CVE-2006-6233 State: PUBLISHED Published: 2006-12-02T11:00:00 Last Updated: 2024-08-07T20:19:35.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php, but PostNuke 0.764 does not appear to have this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437832/100/200/threaded - http://securityreason.com/securityalert/1952 - htt
s: - http://www.securityfocus.com/archive/1/437832/100/200/threaded - http://securityreason.com/securityalert/1952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27501
CVE ID: CVE-2006-6234 State: PUBLISHED Published: 2006-12-02T11:00:00 Last Updated: 2024-08-07T20:19:35.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a list_pages_categories action or (2) the pid parameter in a showpage action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437835/100/200/threaded - http://securityreason.com/securityalert/1953 - http://www.attrition.org/pipermail/vim/2006-December/001157.html - https://exchange.
rityreason.com/securityalert/1953 - http://www.attrition.org/pipermail/vim/2006-December/001157.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27501
CVE ID: CVE-2006-6235 State: PUBLISHED Published: 2006-12-07T11:00:00 Last Updated: 2024-08-07T20:19:35.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows attackers to execute arbitrary code via crafted OpenPGP packets that cause GnuPG to dereference a function pointer from deallocated stack memory. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017349 - http://secunia.com/advisories/23269 - http://secunia.com/advisories/23303 - http://www.securityfocus.com/archive/1/453723/100/0/threaded - http://secunia.com/adviso
/secunia.com/advisories/23303 - http://www.securityfocus.com/archive/1/453723/100/0/threaded - http://secunia.com/advisories/23255 - http://www.ubuntu.com/usn/usn-393-1 - http://secunia.com/advisories/23513 - http://secunia.com/advisories/23284 - http://www.ubuntu.com/usn/usn-393-2 - http://secunia.com/advisories/23245 - http://lists.gnupg.org/pipermail/gnupg-announce/2006q4/000491.html - http://www.kb.cert.org/vuls/id/427009 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://www.redhat.com/support/errata/RHSA-2006-0754.html - http://www.debian.org/security/2006/dsa-1231 - http://www.securityfocus.com/archive/1/453664/100/0/threaded - http://secunia.com/advisories/233
ecurity/2006/dsa-1231 - http://www.securityfocus.com/archive/1/453664/100/0/threaded - http://secunia.com/advisories/23335 - http://secunia.com/advisories/23299 - http://www.securityfocus.com/bid/21462 - http://www.trustix.org/errata/2006/0070 - http://secunia.com/advisories/23329 - http://security.gentoo.org/glsa/glsa-200612-03.xml - http://secunia.com/advisories/23259 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:228 - http://secunia.com/advisories/23290 - https://issues.rpath.com/browse/RPL-835 - http://lists.suse.com/archive/suse-security-announce/2006-Dec/0004.html - http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm - http://www.vupen.com/english/advisories/20
ec/0004.html - http://support.avaya.com/elmodocs2/security/ASA-2007-047.htm - http://www.vupen.com/english/advisories/2006/4881 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11245 - http://secunia.com/advisories/23250 - ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/30711 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.037.html - http://secunia.com/advisories/24047
CVE ID: CVE-2006-6236 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the (1) src, (2) setPageMode, (3) setLayoutMode, and (4) setNamedDest methods in an AcroPDF ActiveX control, a different set of vectors than CVE-2006-6027. Additional Analyst Notes: - CVE Program Container: References: - http://research.eeye.com/html/alerts/zeroday/20061128.html - http://www.securityfocus.com/bid/21338 - http://www.vupen.com/english/advisor
ye.com/html/alerts/zeroday/20061128.html - http://www.securityfocus.com/bid/21338 - http://www.vupen.com/english/advisories/2006/4751 - http://secunia.com/advisories/23138 - http://www.kb.cert.org/vuls/id/198908 - http://www.securityfocus.com/bid/21813 - http://www.adobe.com/support/security/advisories/apsa06-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31167 - https://www.exploit-db.com/exploits/3040 - http://www.securityfocus.com/archive/1/453579/100/0/threaded
CVE ID: CVE-2006-6237 State: PUBLISHED Published: 2006-12-03T18:00:00 Last Updated: 2024-08-07T20:19:35.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remote attackers to execute arbitrary SQL commands via the threadvisit Cookie parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30561 - http://retrogod.altervista.org/wbblite_102_sql_mqg_bypass.html - https://www.exploit-db.com/exploits/2841 - http://securityreason.com/securityalert/19
/wbblite_102_sql_mqg_bypass.html - https://www.exploit-db.com/exploits/2841 - http://securityreason.com/securityalert/1955 - http://secunia.com/advisories/23077 - http://www.securityfocus.com/archive/1/452561/100/0/threaded