Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4945 State: PUBLISHED Published: 2006-09-23T01:00:00 Last Updated: 2024-08-07T19:32:22.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29037 - https://www.exploit-db.com/exploits/2398 - http://www.vupen.com/english/advisories/2006/3705 - http://secunia.com/advisories/22026 - http://www.security
its/2398 - http://www.vupen.com/english/advisories/2006/3705 - http://secunia.com/advisories/22026 - http://www.securityfocus.com/bid/20107
CVE ID: CVE-2006-4946 State: PUBLISHED Published: 2006-09-23T01:00:00 Last Updated: 2024-08-07T19:32:22.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20116 - http://www.vupen.com/english/advisories/2006/3706 - https://www.exploit-db.com/exploits/2399 - http://secunia.com/advisories/22024 - https://exchange.xforce.ibmcloud.com/vulne
ps://www.exploit-db.com/exploits/2399 - http://secunia.com/advisories/22024 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29039
CVE ID: CVE-2006-4947 State: PUBLISHED Published: 2006-09-23T01:00:00 Last Updated: 2024-08-07T19:32:22.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output." Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/85050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29063 - http://www.vupen.com/english/advisories/2006/3715 - http://secunia.com/advisories/22021 - http://www.securityfocus.com/bid/20126
CVE ID: CVE-2006-4948 State: PUBLISHED Published: 2006-09-23T01:00:00 Last Updated: 2024-08-07T19:32:22.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29075 - http://www.osvdb.org/29032 - http://www.securityfocus.com/bid/20131 - http://www.vupen.com/english/advi
bilities/29075 - http://www.osvdb.org/29032 - http://www.securityfocus.com/bid/20131 - http://www.vupen.com/english/advisories/2006/3731 - http://secunia.com/advisories/21854
CVE ID: CVE-2006-4949 State: PUBLISHED Published: 2006-09-23T01:00:00 Last Updated: 2024-08-07T19:32:22.389Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output," possibly in the name and title parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3714 - http://www.osvdb.org/29029 - http://drupal
Container: References: - http://www.vupen.com/english/advisories/2006/3714 - http://www.osvdb.org/29029 - http://drupal.org/node/85048 - http://secunia.com/advisories/22035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29061
CVE ID: CVE-2006-4950 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016899 - http://www.vupen.com/eng
l Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016899 - http://www.vupen.com/english/advisories/2006/3722 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665 - http://www.kb.cert.org/vuls/id/123140 - http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/29054 - http://secunia.com/advisories/21974 - http://www.osvdb.org/29034 - http://www.securityfocus.com/bid/20125
CVE ID: CVE-2006-4951 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20109 - http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029 - http://www.securityfocus.com/bid/84198 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29086
CVE ID: CVE-2006-4952 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29087 - http://www.securityfocus.com/bid/20109 - http://www.securityfocus.com/bid/84202 - http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029
CVE ID: CVE-2006-4953 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20109 - http://vuln.sg/neonmail506-en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29088 - http://secunia.com/adviso
p://vuln.sg/neonmail506-en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29088 - http://secunia.com/advisories/22029
CVE ID: CVE-2006-4954 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4) creating and (5) deleting users. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20109 - http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029 - https://exchange.xforce.ibmcloud.com/vulnerab
http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29089 - http://www.securityfocus.com/bid/84203
CVE ID: CVE-2006-4955 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29090 - http://www.securityfocus.com/bid/20109 - http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029 - http://www.securityfocus.com/bid/84199
CVE ID: CVE-2006-4956 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20109 - http://vuln.sg/neonmail506-en.html - http://secunia.com/advisories/22029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29091
CVE ID: CVE-2006-4957 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20105 - https://www.exploit-db.com/exploits/2397 - http://secunia.com/advisories/21991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29029 - http://www.vupen.com/english/advisories/2006/3716
CVE ID: CVE-2006-4958 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available. Additional Analyst Notes: - CVE Program Container:
initial disclosure. Details will be updated as they become available. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29070 - http://secunia.com/advisories/22037 - http://www.securityfocus.com/archive/1/446566/100/0/threaded - http://www.securityfocus.com/bid/20276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29303 - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555 - http://support.avaya.com/elmodocs2/security/ASA-2006-235.htm - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102650-1 - http://securityreason.com/securityalert/1623 - http://www.vupen.com/english/
search/document.do?assetkey=1-26-102650-1 - http://securityreason.com/securityalert/1623 - http://www.vupen.com/english/advisories/2006/3739 - http://www.securityfocus.com/bid/20135
CVE ID: CVE-2006-4959 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi. NOTE: This information is based upon a vague initial disclosure. Details will be updated as they become available. Additional Analyst Notes: - CVE Program Container: References:
osure. Details will be updated as they become available. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016900 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29076 - http://secunia.com/advisories/22037 - http://www.securityfocus.com/archive/1/446566/100/0/threaded - http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2555 - http://securityreason.com/securityalert/1623 - http://www.vupen.com/english/advisories/2006/3739 - http://www.securityfocus.com/bid/20135
CVE ID: CVE-2006-4960 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22031 - http://www.vupen.com/english/advisories/2006/3736 - https://www.exploit-db.com/exploits/2402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29051 - http://www.securityfocus.co
.exploit-db.com/exploits/2402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29051 - http://www.securityfocus.com/bid/20123 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29066
CVE ID: CVE-2006-4961 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22031 - http://www.vupen.com/english/advisories/2006/3736 - https://www.exploit-db.com/exploits/2402 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29051 - http://www.securityfocus.com/bid/20123
CVE ID: CVE-2006-4962 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22031 - https://www.exploit-db.com/exploits/4277 - http://www.vupen.com/english/advisories/2006/3736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29067 - https://www
://www.vupen.com/english/advisories/2006/3736 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29067 - https://www.exploit-db.com/exploits/2402 - http://www.securityfocus.com/bid/25264 - http://www.securityfocus.com/bid/20123
CVE ID: CVE-2006-4963 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29024 - https://www.exploit-db.com/exploits/2391 - http://www.vupen.com/english/advisories/2006/3708 - https://exchange.xforce.ibmcloud.com/vulne
it-db.com/exploits/2391 - http://www.vupen.com/english/advisories/2006/3708 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29077 - http://www.securityfocus.com/bid/20111 - http://secunia.com/advisories/22003
CVE ID: CVE-2006-4964 State: PUBLISHED Published: 2006-09-23T10:00:00 Last Updated: 2024-08-07T19:32:22.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20133 - http://www.maxdev.com/Article605.phtml - http://www.vupen.com/english/advisories/2006/3732 - http://jvn.jp/jp/JVN%2346630603/index.h
axdev.com/Article605.phtml - http://www.vupen.com/english/advisories/2006/3732 - http://jvn.jp/jp/JVN%2346630603/index.html - http://www.maxdev.com/Downloads-index-req-dldet-lid-497-ttitle-Security_fix_for_MDPro_1.076.phtml - http://secunia.com/advisories/22050
CVE ID: CVE-2006-4965 State: PUBLISHED Published: 2006-09-25T00:00:00 Last Updated: 2024-08-07T19:32:22.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain. NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer. Additional Analyst No
erfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1631 - http://www.kb.cert.org/vuls/id/751808 - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/479179/100/0/threaded - http://www.securitytracker.com/id?1018687 - http://www.gnucitizen.org/blog/backdooring-mp3-files/ - http://www.securityfocus.com/archive/1/453756/100/0/threaded - http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html - http://www.vupen.com/english/advisories/2007/3155 - http://www.securityfocus.com/bid/20138 - http://www.securi
00.html - http://www.vupen.com/english/advisories/2007/3155 - http://www.securityfocus.com/bid/20138 - http://www.securityfocus.com/archive/1/446750/100/0/threaded - http://docs.info.apple.com/article.html?artnum=305149 - http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox - http://secunia.com/advisories/22048 - http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up
CVE ID: CVE-2006-4966 State: PUBLISHED Published: 2006-09-25T00:00:00 Last Updated: 2024-08-07T19:32:22.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.nyubicrew.org/adv/solpot-adv-08.txt - https://www.exploit-db.com/exploits/2410 - http://secunia.com/advisories/22042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29081 - http://securityreason.com/securityalert/1630 - http://www.securityfoc
change.xforce.ibmcloud.com/vulnerabilities/29081 - http://securityreason.com/securityalert/1630 - http://www.securityfocus.com/archive/1/446748/100/0/threaded - http://www.securityfocus.com/bid/20142
CVE ID: CVE-2006-4967 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446412/100/0/threaded - http://secunia.com/advisories/22030 - http://www.securityfocus.com/bid/20040 - http://securitytracker.com/id?1016888 - http://security
.com/advisories/22030 - http://www.securityfocus.com/bid/20040 - http://securitytracker.com/id?1016888 - http://securityreason.com/securityalert/1625 - http://www.vupen.com/english/advisories/2006/3709
CVE ID: CVE-2006-4968 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20097 - http://www.securityfocus.com/archive/1/446617 - https://www.exploit-db.com/exploits/2390 - http://www.vupen.com/english/advisories/2006/3671 - http://noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gz - https://exchange.xforce.i
advisories/2006/3671 - http://noc.postnuke.com/frs/download.php/1094/patch_1.2g-1.2i.diff.gz - https://exchange.xforce.ibmcloud.com/vulnerabilities/29014 - http://www.securityfocus.com/archive/1/446267/100/0/threaded - http://www.securityfocus.com/archive/1/446568/100/0/threaded - http://securitytracker.com/id?1016912
CVE ID: CVE-2006-4969 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php. Additional Analyst Notes: - CVE Program Container:
) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29198 - http://www.osvdb.org/29211 - http://www.osvdb.org/29210 - http://www.osvdb.org/29206 - http://www.osvdb.org/29199 - https://www.exploit-db.com/exploits/2393 - http://www.osvdb.org/29200 - http://www.osvdb.org/29208 - http://www.osvdb.org/29202 - http://www.osvdb.org/29201 - http://www.osvdb.org/29203 - http://www.vupen.com/english/advisories/2006/3798 - http://www.osvdb.org/29212 - http://www.osvdb.org/29214 - http://www.securityfocus.com/bid/20099 - http://www.osvdb.org/29209 - https://exchange.xforce.ibmcloud.com/vulnerabilities
tp://www.securityfocus.com/bid/20099 - http://www.osvdb.org/29209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29023 - http://www.osvdb.org/29205 - http://www.osvdb.org/29204 - http://www.osvdb.org/29207 - http://www.osvdb.org/29213 - http://secunia.com/advisories/22131