Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
eferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30798 - http://www.vupen.com/english/advisories/2006/4903 - http://secunia.com/advisories/23160 - http://www.securityfocus.com/bid/21491
CVE ID: CVE-2006-6420 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allow remote attackers to inject arbitrary web script or HTML via the (1) img, (2) title, (3) w, or (4) h parameter, different vectors than CVE-2006-6166. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.
solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30799 - http://www.vupen.com/english/advisories/2006/4903 - http://secunia.com/advisories/23160 - http://www.securityfocus.com/bid/21496
CVE ID: CVE-2006-6421 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the private message box implementation (privmsg.php) in phpBB 2.0.x allows remote authenticated users to inject arbitrary web script or HTML via the "Message body" field in a message to a non-existent user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30776 - http://www.securityfocus.com/archive/1/456579/100/0/threaded - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://www.securityfocus.com/archiv
e/1/456579/100/0/threaded - http://www.phpbb.com/phpBB/viewtopic.php?f=14&t=489624 - http://www.securityfocus.com/archive/1/456728/100/100/threaded - http://www.securityfocus.com/bid/22001 - http://www.securityfocus.com/bid/21806 - http://www.securityfocus.com/archive/1/456784/100/100/threaded - http://www.securityfocus.com/archive/1/453774/100/0/threaded - http://secunia.com/advisories/23283 - http://securityreason.com/securityalert/2005
CVE ID: CVE-2006-6422 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Agileco AgileBill 1.4.x and AgileVoice 1.4.x do not properly handle certain proxy requests, which allows remote attackers to disable the application by entering invalid license data on a form, possibly involving modules/core/license.inc.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30751 - http://s
rences: - http://www.securityfocus.com/bid/21459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30751 - http://secunia.com/advisories/23223
CVE ID: CVE-2006-6423 State: PUBLISHED Published: 2006-12-12T02:00:00 Last Updated: 2024-08-07T20:26:46.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-73/advisory/ - http://securityreason.com/securityalert/2022
iner: References: - http://secunia.com/secunia_research/2006-73/advisory/ - http://securityreason.com/securityalert/2022 - http://www.securityfocus.com/bid/21492 - http://www.mailenable.com/hotfix/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/30796 - http://secunia.com/advisories/23201 - http://www.securityfocus.com/archive/1/454075/100/0/threaded
CVE ID: CVE-2006-6424 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:26:46.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute arbitrary code (1) by appending literals to certain IMAP verbs when specifying command continuation requests to IMAPD, resulting in a heap overflow; and (2) via crafted arguments to the STOR command to the Network Messaging Application Protocol (NMAP) daemon, resulting in a stack overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/381161 - https://secure-support.novell.com/Kanisa
- CVE Program Container: References: - http://www.kb.cert.org/vuls/id/381161 - https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html - http://securityreason.com/securityalert/2081 - http://www.securityfocus.com/bid/21725 - http://www.securityfocus.com/archive/1/455201/100/0/threaded - http://www.vupen.com/english/advisories/2006/5134 - http://www.cirt.dk/advisories/cirt-48-advisory.txt - http://securitytracker.com/id?1017437 - http://www.zerodayinitiative.com/advisories/ZDI-06-053.html - http://www.zerodayinitiative.com/advisories/ZDI-06-052.html - http://www.securityfocus.com/bid/21724 - http://www.kb.cert.org/vuls/id/912505 - http://secunia.com/advisori
-052.html - http://www.securityfocus.com/bid/21724 - http://www.kb.cert.org/vuls/id/912505 - http://secunia.com/advisories/23437 - http://www.securityfocus.com/archive/1/455202/100/0/threaded
CVE ID: CVE-2006-6425 State: PUBLISHED Published: 2006-12-27T01:00:00 Last Updated: 2024-08-07T20:26:46.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to execute arbitrary code via unspecified vectors involving the APPEND command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/455200/100/0/threaded - http://www.securityfocus.com/bid/21723 - https://secure-support.novell.com/KanisaPlatform/Publishing/134/3096026_f.SAL_Public.html - http://www.vupen.com/english/advisories/2006/5134 - http://securit
saPlatform/Publishing/134/3096026_f.SAL_Public.html - http://www.vupen.com/english/advisories/2006/5134 - http://securitytracker.com/id?1017437 - http://www.kb.cert.org/vuls/id/258753 - http://securityreason.com/securityalert/2080 - http://www.zerodayinitiative.com/advisories/ZDI-06-054.html - http://secunia.com/advisories/23437
CVE ID: CVE-2006-6426 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the template_file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://svn.berlios.de/viewcvs/thinkedit/trunk/design/thinkedit/render.php?rev=321&r1=230&r2=321 - http://www.vupen.com/english/advisories/2006/4906 - http://secunia.com/advisories/23279 - http://securitytracker.com/id?1017359 - https:
.com/english/advisories/2006/4906 - http://secunia.com/advisories/23279 - http://securitytracker.com/id?1017359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30772 - https://www.exploit-db.com/exploits/2898
CVE ID: CVE-2006-6427 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to execute arbitrary commands via unspecified vectors involving "command injection" in (1) the TCP/IP hostname, (2) Scan-to-mailbox folder names, and (3) certain parameters in the Microsoft Networking configuration. NOTE: vector 1 might be the same as CVE-2006-5290. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/
e as CVE-2006-5290. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_007_v1.pdf - http://securitytracker.com/id?1017337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30674 - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6428 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allow remote attackers to gain access via unspecified vectors related to "browser permissions." Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30675 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6429 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify certain configuration settings via unspecified vectors involving the "TFTP/BOOTP auto configuration option." Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http://www.vupen.com/english/advisories/2006/4791 - https://exchange.xfo
3265 - http://www.securityfocus.com/bid/21365 - http://www.vupen.com/english/advisories/2006/4791 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30676
CVE ID: CVE-2006-6430 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Web services in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 do not require HTTPS, which allows remote attackers to obtain sensitive information by sniffing the unencrypted HTTP traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/30679 - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http:
bmcloud.com/vulnerabilities/30679 - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6431 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows attackers to modify signatures of e-mail messages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - http://secunia.com/advisories/23265 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6432 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Scan-to-mailbox feature in Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 allows remote attackers to download certain files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/30678 - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http://www.v
.com/vulnerabilities/30678 - http://secunia.com/advisories/23265 - http://www.securityfocus.com/bid/21365 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6433 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_006_v1b.pdf - http://secunia.com/advisories/23265 - http://www.vupen.com/english/advisories/2006/4791
CVE ID: CVE-2006-6434 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Web User Interface in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to bypass authentication controls via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6435 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP implementation in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 does not generate authentication failure traps, which allows remote attackers to more easily gain system access and obtain sensitive information via a brute force attack. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6436 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Network controller in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to inject arbitrary web script or HTML via HTTP TRACE messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6437 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows attackers to cause a denial of service (application crash and core dump) via a certain PS file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6438 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 leaves sensitive user data in http.log after an Immediate Image Overwrite (IIO), which allows local users to obtain the data by reading the http.log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6439 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows remote attackers to download the audit log and obtain potentially sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6440 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allow remote attackers to have an unspecified impact via unspecified vectors relating to "HTTP Security issues." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6441 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows local users to bypass security controls and boot Alchemy via certain alternate boot media, as demonstrated by a USB thumb drive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6442 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control (cddbcontrol.dll), as used in America Online (AOL) 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary code via a long ClientId argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4904 - http://www.securityfocus.com/bid/21488 - http://www.securityfocus.com/archive/1/4
pen.com/english/advisories/2006/4904 - http://www.securityfocus.com/bid/21488 - http://www.securityfocus.com/archive/1/454105/100/0/threaded - http://securitytracker.com/id?1017357 - http://secunia.com/advisories/23043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30790 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051230.html - http://secunia.com/secunia_research/2006-69/advisory/ - http://attrition.org/pipermail/vim/2006-December/001173.html
CVE ID: CVE-2006-6443 State: PUBLISHED Published: 2006-12-10T20:00:00 Last Updated: 2024-08-07T20:26:46.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Novell Distributed Print Services (NDPS) Print Provider for Windows component (NDPPNT.DLL) in Novell Client 4.91 has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21479 - http://secunia.com/advisories/23271 - http://www.vupen.com/english/advisories/2006/4862 - http://support.novell.com/docs/Readmes/InfoDocument/2974843.html
CVE ID: CVE-2006-6444 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Nostra DivX Player 2.1, 2.2.00.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long string in an M3U file. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23272 - http://www.securityfocus.com/bid/21480 - http://www.vupen.com/english/advisories/2006/4892 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
s.com/bid/21480 - http://www.vupen.com/english/advisories/2006/4892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30773
CVE ID: CVE-2006-6445 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in error.php in Envolution 1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30700 - http://www.securityfocus.com/bi
lish/advisories/2006/4836 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30700 - http://www.securityfocus.com/bid/21413 - https://www.exploit-db.com/exploits/2888
CVE ID: CVE-2006-6446 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in iWare Professional 5.0.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the D parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23076 - http://www.securityfocus.com/bid/21467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30743
CVE ID: CVE-2006-6447 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vt-Forum Lite 1.3 and 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the StrMes parameter in vf_info.asp and possibly (2) a URL in the SRC attribute of an IFRAME element that is submitted to vf_newtopic.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21428 - http://www.securityfocus.com/archive/1/453452/100/0/threaded - http://securityreason.com/securityalert/2011 - https://exchange.xforce.ib
ityfocus.com/archive/1/453452/100/0/threaded - http://securityreason.com/securityalert/2011 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30725 - http://secunia.com/advisories/23226 - http://www.vupen.com/english/advisories/2006/4850
CVE ID: CVE-2006-6448 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Vt-Forum Lite 1.3 and earlier allow remote attackers to execute arbitrary SQL commands via the user parameter to vf_memberdetail.asp, and other unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30726 - http://www.vupen.com/english/advisories/2006/4850