Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2478 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitrix Site Manager 4.1.x allows remote attackers to redirect users to other websites via a modified back_url during a HTTP POST request. NOTE: this issue has been referred to as "cross-site scripting," but that is inconsistent with the common use of the term. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26543 - http://www.osvdb.org/25625 - http://secunia.com/advisories/20143 - http://www.securityfocus.c
om/vulnerabilities/26543 - http://www.osvdb.org/25625 - http://secunia.com/advisories/20143 - http://www.securityfocus.com/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://securityreason.com/securityalert/918 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0443.html
CVE ID: CVE-2006-2479 State: PUBLISHED Published: 2006-05-19T17:00:00 Last Updated: 2024-08-07T17:51:04.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Update functionality in Bitrix Site Manager 4.1.x does not verify the authenticity of downloaded updates, which allows remote attackers to obtain sensitive information and ultimately execute arbitrary PHP code via DNS cache poisoning that redirects the user to a malicious site. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26548 - http://www
ange.xforce.ibmcloud.com/vulnerabilities/26542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26548 - http://www.securityfocus.com/archive/1/434367/100/0/threaded - http://securitytracker.com/id?1016121 - http://securityreason.com/securityalert/918
CVE ID: CVE-2006-2480 State: PUBLISHED Published: 2006-05-19T21:00:00 Last Updated: 2024-08-07T17:51:04.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code by triggering errors or warnings, as demonstrated via format string specifiers in a .bmp filename. NOTE: the original exploit was demonstrated through a command line argument, but there are other mechanisms for input that are automatically processed by Dia, such as a crafted .dia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/180
crafted .dia file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18078 - http://www.redhat.com/support/errata/RHSA-2006-0541.html - http://secunia.com/advisories/20513 - http://secunia.com/advisories/20422 - http://secunia.com/advisories/20199 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11224 - http://www.novell.com/linux/security/advisories/2006-06-02.html - http://securitytracker.com/id?1016203 - http://kandangjamur.net/tutorial/dia.txt - http://secunia.com/advisories/20254 - http://www.osvdb.org/25699 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:093 - http://www.vupen.com/engl
http://www.osvdb.org/25699 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:093 - http://www.vupen.com/english/advisories/2006/1908 - http://bugzilla.gnome.org/show_bug.cgi?id=342111 - http://secunia.com/advisories/20339 - http://www.securityfocus.com/archive/82/433313/30/0/threaded - https://usn.ubuntu.com/286-1/ - http://www.gentoo.org/security/en/glsa/glsa-200606-03.xml - http://secunia.com/advisories/20457
CVE ID: CVE-2006-2481 State: PUBLISHED Published: 2006-07-31T19:00:00 Last Updated: 2024-08-07T17:51:04.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies, which allows attackers to gain privileges by obtaining the cookies using attacks such as cross-site scripting (CVE-2005-3619). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441728/100/100/threaded - http://www.corsaire.com/advisories/c060512-001.txt - http://www.securityfocus.com/bid/19249 - http:
8/100/100/threaded - http://www.corsaire.com/advisories/c060512-001.txt - http://www.securityfocus.com/bid/19249 - http://kb.vmware.com/kb/2118366 - http://www.securityfocus.com/archive/1/441825/100/100/threaded - http://www.vupen.com/english/advisories/2006/3075 - http://secunia.com/advisories/21230
CVE ID: CVE-2006-2482 State: PUBLISHED Published: 2006-09-08T21:00:00 Last Updated: 2024-08-07T17:51:04.788Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the TZipTV component in (1) ZipTV for Delphi 7 2006.1.26 and for C++ Builder 2006-1.16, (2) PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221, and possibly other products, allows user-assisted attackers to execute arbitrary code via an ARJ archive with a long header. NOTE: the ACE archive vector is covered by CVE-2005-2856. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19884 - http://www.vupen.com/english/advisories/2007/0235 - http://www.vupen.com
ces: - http://www.securityfocus.com/bid/19884 - http://www.vupen.com/english/advisories/2007/0235 - http://www.vupen.com/english/advisories/2006/3495 - http://secunia.com/secunia_research/2006-50/advisory/ - http://secunia.com/advisories/21458 - http://secunia.com/advisories/20270 - http://secunia.com/secunia_research/2006-72/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/28785
CVE ID: CVE-2006-2483 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cart_isp_root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25523 - http://secunia.com/advisories/20121 - https://www.exploit-db.com/exploits/1790 - http://www.vupen.com/english/advisories/2006/1818 - http://www.ldev.com/forums/showthread.php?p=9976#post9976 - http://www.securityfocus.com/bid/17992 - https://exchan
18 - http://www.ldev.com/forums/showthread.php?p=9976#post9976 - http://www.securityfocus.com/bid/17992 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26443
CVE ID: CVE-2006-2484 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434121/100/0/threaded - http://www.securityfocus.com/bid/17995 - http://securityreason.com/securityalert/925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26680
CVE ID: CVE-2006-2485 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the quezza_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/924 - http://www.securityfocus.com/bid/18011 - http://www.vupen.com/english/advisories/2006/1837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26489 - http://archives.neohapsis.com/archives/fulldisclosu
/1837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26489 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0396.html - http://secunia.com/advisories/20120 - http://www.osvdb.org/25562 - http://www.securityfocus.com/archive/1/434231/100/0/threaded - http://www.nukedx.com/?getxpl=30
CVE ID: CVE-2006-2486 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in find.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary SQL commands via the userID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26456 - http://www.securityfocus.com/archive/1/434039/100/0/threaded - http://securityreason.com/securityalert/923 - http://www.securityfocus.com/bid/17988
CVE ID: CVE-2006-2487 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[main_path] parameter in (1) functions.php, (2) template.php, (3) news.php, (4) help.php, (5) mail.php, (6) Admin/admin_cats.php, (8) Admin/admin_edit.php, (9) Admin/admin_import.php, and (10) Admin/admin_templates.php. NOTE: this might be resultant from a variable overwrite issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.co
a variable overwrite issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18027 - http://secunia.com/advisories/20156 - https://www.exploit-db.com/exploits/1800 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26520 - http://securitytracker.com/id?1016491 - http://www.vupen.com/english/advisories/2006/1847 - http://www.securityfocus.com/archive/1/439969/100/0/threaded - http://www.osvdb.org/25616
CVE ID: CVE-2006-2488 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Spymac WebOS (WOS) 5.0 allow remote attackers to inject arbitrary web script or HTML via the (1) del_folder, (2) nick, or (3) action parameters to (a) notes/index.php, (4) curr parameter to (b) ipod/get_ipod.php, and in (c) login.php. Additional Analyst Notes: - CVE Program Container: References: - http://lostmon.blogspot.com/2006/05/multiple-cross-site-scripting-in.html - http://securitytracker.com/id?1016116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26522 -
cripting-in.html - http://securitytracker.com/id?1016116 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26522 - http://www.vupen.com/english/advisories/2006/1852
CVE ID: CVE-2006-2489 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a content length (Content-Length) HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/26454 - http://www.debian.org/security/2006/dsa-1072 - http://www.
https://exchange.xforce.ibmcloud.com/vulnerabilities/26454 - http://www.debian.org/security/2006/dsa-1072 - http://www.nagios.org/development/changelog.php - https://usn.ubuntu.com/287-1/ - http://secunia.com/advisories/20313 - http://www.securityfocus.com/bid/18059 - http://secunia.com/advisories/20123 - http://secunia.com/advisories/20247 - http://www.vupen.com/english/advisories/2006/1822
CVE ID: CVE-2006-2490 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other versions before 2.2.3.18 for M10/D10 and 3.0.3.31 for M22, allow remote attackers to inject arbitrary web script or HTML via URL-encoded values in (1) the query string to help/help, (2) the get_image_info_abspath parameter to control/eventplayer, and (3) the source_ip parameter to events.tar. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444018/100/0/t
. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444018/100/0/threaded - http://www.securityfocus.com/bid/18022 - http://secunia.com/advisories/20151 - http://www.securityfocus.com/archive/1/434289/100/0/threaded - http://www.osvdb.org/25621 - http://www.eazel.es/media/advisory001.html - http://securitytracker.com/id?1016128 - http://www.osvdb.org/25622 - http://securityreason.com/securityalert/929 - http://www.vupen.com/english/advisories/2006/1857 - http://www.attrition.org/pipermail/vim/2006-August/000980.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26538 - http://www.osvdb.org/25623
CVE ID: CVE-2006-2491 State: PUBLISHED Published: 2006-05-19T23:00:00 Last Updated: 2024-08-07T17:51:04.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly filtered when it is accessed using the $_SERVER["PHP_SELF"] variable. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/725 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26518 - http://www.vupen.com/english/advisories/2006/1853 - http://s
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/26518 - http://www.vupen.com/english/advisories/2006/1853 - http://securityreason.com/securityalert/927 - http://www.securityfocus.com/archive/1/434294/100/0/threaded - http://www.osvdb.org/25618 - http://secunia.com/advisories/20149 - http://www.osvdb.org/25617 - http://www.securityfocus.com/bid/18012
CVE ID: CVE-2006-2492 State: PUBLISHED Published: 2006-05-20T00:00:00.000Z Last Updated: 2025-10-22T00:05:56.729Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to execute arbitrary code via a malformed object pointer, as originally reported by ISC on 20060519 for a zero-day attack. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-027 - https://oval.cisecurity.org/repository/search/definition/oval%3A
n-us/security-updates/securitybulletins/2006/ms06-027 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2068 - http://isc.sans.org/diary.php?storyid=1345 - http://www.osvdb.org/25635 - http://www.microsoft.com/technet/security/advisory/919637.mspx - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1738 - http://isc.sans.org/diary.php?storyid=1346 - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - http://www.vupen.com/english/advisories/2006/1872 - http://www.securityfocus.com/bid/18037 - http://secunia.com/advisories/20153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26556 - http://www.kb.cert.org/vu
://secunia.com/advisories/20153 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26556 - http://www.kb.cert.org/vuls/id/446012 - http://securitytracker.com/id?1016130 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1418 - http://www.us-cert.gov/cas/techalerts/TA06-139A.html - http://blogs.technet.com/msrc/archive/2006/05/19/429353.aspx
CVE ID: CVE-2006-2493 State: REJECTED Published: 2006-05-20T02:59:00 Last Updated: 2006-06-05T09:00:00 Description: No description available.
CVE ID: CVE-2006-2494 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in IntelliTamper 2.07 allows remote attackers to execute arbitrary code via a crafted .map file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1860 - http://www.securityfocus.com/bid/18039 - http://www.vupen.com/english/advisories/2008/2120 - http://securitytracker.com/id?1016117 - http://secunia.com/advisories/20172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26551 - https://www.exploit-db.com/exploits/1806
CVE ID: CVE-2006-2495 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=414920&group_id=75065 - http://secunia.com/advisories/20155 - http://www.vupen.com/english/advisories/2006/1855
CVE ID: CVE-2006-2496 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in iMonitor 2.4 in Novell eDirectory 8.8 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18026 - http://www.vupen.com/english/advisories/2006/1850 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2973759.htm - http://www.securityfocus.com/archive/1/434723/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabil
759.htm - http://www.securityfocus.com/archive/1/434723/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26524 - http://www.zerodayinitiative.com/advisories/ZDI-06-016.html - http://secunia.com/advisories/20139 - http://www.osvdb.org/25781 - http://securitytracker.com/id?1016120
CVE ID: CVE-2006-2497 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AspBB 0.5.2 allow remote attackers to inject arbitrary web script or HTML via the (1) action parameter to default.asp or (2) get parameter to profile.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25650 - http://securityreason.com/securityalert/926 - http://www.securityfocus.com/bid/18025 - http://www.securityfocus.com/archive/1/434370/100/0/threaded - http://www.osvdb.org/25651 - http://secunia.com/advisories/20175 - https://exc
cus.com/archive/1/434370/100/0/threaded - http://www.osvdb.org/25651 - http://secunia.com/advisories/20175 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26530
CVE ID: CVE-2006-2498 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving (1) the post_icon variable in classes/post/class_post.php and (2) the df value in action_public/moderate.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25668 - http://forums.invisionpower.com/index.php?showtopic=215527 - http://attrition.org/pipermail/vim/2006-May/000776.html - http://www.securityfocus.com/bid/18040 - http://www.vupen.com/english/advisories/200
ipermail/vim/2006-May/000776.html - http://www.securityfocus.com/bid/18040 - http://www.vupen.com/english/advisories/2006/1859 - http://secunia.com/advisories/20158 - http://www.osvdb.org/25667 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26541 - http://forums.invisionpower.com/index.php?act=Attach&type=post&id=10026
CVE ID: CVE-2006-2499 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to execute arbitrary SQL commands via the password field. Additional Analyst Notes: - CVE Program Container: References: - http://colander.altervista.org/advisory/CANews.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26586 - http://www.vupen.com/english/advisories/2006/1870 - http://www.osvdb.org/25652 - http://www.securityfocus.com/bid/18031 - http://www.securityfocus.com/archive/1/434730/100/0/threaded - http://s
25652 - http://www.securityfocus.com/bid/18031 - http://www.securityfocus.com/archive/1/434730/100/0/threaded - http://secunia.com/advisories/20171
CVE ID: CVE-2006-2500 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_news.asp in CodeAvalanche News (CANews) 1.2 allows remote attackers to inject arbitrary web script or HTML via the Headline field. NOTE: if this issue is limited to administrators, and if it is expected behavior for administrators to be able to generate HTML, then this is not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25653 - http://colander.altervista.org/advisory/CANews.txt - http://www.securityfocus.com/bid/18032 - ht
//www.osvdb.org/25653 - http://colander.altervista.org/advisory/CANews.txt - http://www.securityfocus.com/bid/18032 - http://www.vupen.com/english/advisories/2006/1870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26587 - http://www.securityfocus.com/archive/1/434730/100/0/threaded - http://secunia.com/advisories/20171
CVE ID: CVE-2006-2501 State: PUBLISHED Published: 2006-05-20T02:59:00 Last Updated: 2024-08-07T17:51:04.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/1
ving error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18035 - http://securitytracker.com/id?1016125 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26550 - http://secunia.com/advisories/20147 - http://securitytracker.com/id?1016126 - http://jvn.jp/jp/JVN%2303D5EAA8/index.html - http://www.vupen.com/english/advisories/2006/1866 - http://www.kb.cert.org/vuls/id/114956