Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
1&w=2 - http://secunia.com/advisories/18636 - http://securitytracker.com/id?1015548 - http://www.vupen.com/english/advisories/2006/0372 - http://securityreason.com/securityalert/381 - http://www.osvdb.org/22790
CVE ID: CVE-2006-0491 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.evuln.com/vulns/53/summary.html - http://securityreason.com/securityalert/396 - http://www.securityfocus.com/bid/16454 - http://www.vupen.com/english/advisories/2006/0366 - http://securitytracker.com/id?1015569 - http://www.osvdb.org/22809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24339
securitytracker.com/id?1015569 - http://www.osvdb.org/22809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24339 - http://www.securityfocus.com/archive/1/423658/100/0/threaded - http://secunia.com/advisories/18666
CVE ID: CVE-2006-0492 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.893Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Calendarix allow remote attackers to execute arbitrary SQL commands via (1) the catview parameter in cal_functions.inc.php and (2) the login parameter in cal_login.php. NOTE: the catview vector might overlap CVE-2005-1865. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22811 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24332 - http://securityreason.com/securityalert/394 - http://www.evuln.com/vulns/52/summary.html - http://securitytracke
24332 - http://securityreason.com/securityalert/394 - http://www.evuln.com/vulns/52/summary.html - http://securitytracker.com/id?1015560 - http://www.securityfocus.com/archive/1/423656/100/0/threaded - http://secunia.com/advisories/18667 - http://www.securityfocus.com/bid/16456 - http://www.vupen.com/english/advisories/2006/0365 - http://www.osvdb.org/22810
CVE ID: CVE-2006-0493 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.916Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MG2 (formerly known as Minigal) 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/389 - http://www.securityfocus.com/bid/16428 - http://secunia.com/advisories/17374 - http://www.securityfocus.com/archive/1/423477/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24378
CVE ID: CVE-2006-0494 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in MyBB (aka MyBulletinBoard) 1.02 allows local users with MyBB administrative privileges to include and possibly execute arbitrary local files via directory traversal sequences and a nul (%00) character in the plugin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423465/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24461
CVE ID: CVE-2006-0495 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Add Thread to Favorites feature in usercp2.php in MyBB (aka MyBulletinBoard) 1.02 allows remote attackers to inject arbitrary web script or HTML via an HTTP Referer header ($url variable). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24392 - http://www.securityfocus.com/bid/16419 - http://www.securityfocus.com/archive/1/423443/100/0/threaded
CVE ID: CVE-2006-0496 State: PUBLISHED Published: 2006-02-01T02:00:00 Last Updated: 2024-08-07T16:34:14.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidpashl
e number of LiveJournal accounts. Additional Analyst Notes: - CVE Program Container: References: - http://www.davidpashley.com/cgi/pyblosxom.cgi/computing/livejournal-mozilla-bug.html - https://bugzilla.mozilla.org/show_bug.cgi?id=324253 - http://securitytracker.com/id?1015563 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24427 - http://www.vupen.com/english/advisories/2006/0403 - http://www.securityfocus.com/bid/16427 - http://community.livejournal.com/lj_dev/708069.html - http://securitytracker.com/id?1015553 - http://marc.info/?l=full-disclosure&m=113847912709062&w=2 - http://www.osvdb.org/22924
CVE ID: CVE-2006-0497 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T16:34:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.eyce.be/php_gen/NEWS - http://secunia.com/advisories/18715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24441 - http://www.osvdb.org/22885 - http://www.vupen.com/english/advisories/2006/0408 - http://www.securityfocus.com/bid/15458
CVE ID: CVE-2006-0498 State: PUBLISHED Published: 2006-02-01T20:00:00 Last Updated: 2024-08-07T16:34:14.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PHP GEN before 1.4 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.eyce.be/php_gen/NEWS - http://secunia.com/advisories/18715 - http://www.osvdb.org/22884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24443 - http://www.vupen.com/english/advisories/2006/0408
CVE ID: CVE-2006-0499 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:34:14.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rlink.php in Rlink 1.0.0 module for phpBB allows remote attackers to inject arbitrary web script or HTML via the url parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18620 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24410 - http://www.securityfocus.com/bid/16448 - http://www.osvdb.org/22818 - http://www.
e.ibmcloud.com/vulnerabilities/24410 - http://www.securityfocus.com/bid/16448 - http://www.osvdb.org/22818 - http://www.vupen.com/english/advisories/2006/0390
CVE ID: CVE-2006-0500 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:34:14.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyCO Guestbook 1.0 stores the admin directory under the web document root with insufficient access control, which allows remote attackers to perform unspecified privileged actions by directly accessing files via a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423565/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24438
CVE ID: CVE-2006-0501 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:34:14.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyCO Guestbook 1.0 allows remote attackers to inject arbitrary web script or HTML via the Name field, when registering a user. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16444 - http://www.securityfocus.com/archive/1/423565/100/0/threaded - http://www.securityfocus.com/archive/1/423696/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24439
CVE ID: CVE-2006-0502 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:34:14.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enabled, allows remote attackers to include arbitrary files via a URL in the cutepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hamid.ir/security/farsinews.txt - http://securitytracker.com/id?1015554 - http://www.vupen.com/english/advisories/2006/0411 - http://secunia.com/advisories/18637 - http://securityreason.com/securityalert/390 - http://www.securityfocus.com/archi
- http://secunia.com/advisories/18637 - http://securityreason.com/securityalert/390 - http://www.securityfocus.com/archive/1/423568/100/0/threaded - http://www.osvdb.org/22878 - http://www.securityfocus.com/bid/16440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24419
CVE ID: CVE-2006-0503 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:41:28.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service (service crash) via unspecified vectors involving the EXAMINE command. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - https://exchange.xforce.ibmcloud.com/vulnerabilities/24424 - http://www.vupen.com/english/advisories/2006/0397 - http://www.securityfocus.com/bid/16457 - http://secunia.com/advisories/18668 - http://securitytracker.com/id?1015558
CVE ID: CVE-2006-0504 State: PUBLISHED Published: 2006-02-01T22:00:00 Last Updated: 2024-08-07T16:41:27.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service (CPU utilization) by viewing "formatted quoted-printable emails" via webmail. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/enterprisehistory.asp - http://secunia.com/advisories/18716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24517
CVE ID: CVE-2006-0505 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: zbattle.net Zbattle client 1.09 SR-1 beta allows remote attackers to cause an unspecified denial of service by rapidly creating and closing a game. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423431/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24369
CVE ID: CVE-2006-0506 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:28.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via the letter parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22805 - http://www.vupen.com/english/advisories/2006/0387 - http://securityreason.com/securityalert/385 - http://www.securityfocus.com/bid/16424 - http://secunia.com/advisories/18670 - http://www.securityfocus.com/archive/1/423454/100/0/threaded - https://exchange.xforce.ibmcloud.com/
/advisories/18670 - http://www.securityfocus.com/archive/1/423454/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24387
CVE ID: CVE-2006-0507 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Easy CMS allow remote attackers to inject arbitrary web script or HTML via (1) unknown attack vectors in the administrative interface and (2) input fields of the contact form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423442/100/0/threaded - http://www.vupen.com/english/advisories/2006/0385 - http://www.securityfocus.com/archive/1/424431/100/0/threaded - http://www.securityfocus.com/bid/16430 - http://www.securi
ttp://www.securityfocus.com/archive/1/424431/100/0/threaded - http://www.securityfocus.com/bid/16430 - http://www.securityfocus.com/archive/1/423563/100/0/threaded - http://secunia.com/advisories/18673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24371
CVE ID: CVE-2006-0508 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423442/100/0/threaded - http://www.securityfocus.com/archive/1/424431/100/0/threaded - http://secunia.com/advisories/18673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24373
CVE ID: CVE-2006-0509 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote attackers to inject arbitrary web script or HTML via (1) the contact_search parameter and (2) unspecified url fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423547/30/0/threaded - http://securityreason.com/securityalert/391 - http://www.osvdb.org/22843 - http://www.securityfocus.com/bid/16439 - http://www.vupen.com/english/advisories/2006/0395 - htt
//www.osvdb.org/22843 - http://www.securityfocus.com/bid/16439 - http://www.vupen.com/english/advisories/2006/0395 - http://secunia.com/advisories/18657 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24388
CVE ID: CVE-2006-0510 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified parameters in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0412 - http://www.securityfocus.com/archive/1/423718/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24450 - http://secunia.com/advisories/18685 - http://www.securityfocus.com/bid/16433 - http://www.osvdb.org/22879
CVE ID: CVE-2006-0511 State: PUBLISHED Published: 2006-02-01T23:00:00 Last Updated: 2024-08-07T16:41:27.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackboard Academic Suite 6.0 and earlier does not properly clear session information when de-authenticating a user who is idle, which allows subsequent users to log in as the previous user and gain privileges. NOTE: the vendor has disputed this issue, saying that "This is a customer specific issue related to their Kerberos authentication single sign-on application and not a vulnerability in the Blackboard product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16438 - http://
oduct. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16438 - http://www.securityfocus.com/archive/1/423778/100/0/threaded - http://www.securityfocus.com/archive/1/423686/100/0/threaded - http://www.securityfocus.com/archive/1/423654/100/0/threaded - http://www.osvdb.org/28023
CVE ID: CVE-2006-0512 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: PADL MigrationTools 46 creates temporary files insecurely, which allows local users to overwrite arbitrary files via a symlink attack on the temporary files, which are not properly created by (1) migrate_all_online.sh, (2) migrate_all_offline.sh, (3) migrate_all_netinfo_online.sh, (4) migrate_all_netinfo_offline.sh, (5) migrate_all_nis_online.sh, (6) migrate_all_nis_offline.sh, (7) migrate_all_nisplus_online.sh, and (8) migrate_all_nisplus_offline.sh. Additional Analyst Notes: - CVE Program Container: References: - http://secu
sh, and (8) migrate_all_nisplus_offline.sh. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22243 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338920 - https://www.debian.org/security/2006/dsa-1187 - http://www.vupen.com/english/advisories/2005/2427
CVE ID: CVE-2006-0513 State: PUBLISHED Published: 2006-02-06T23:00:00 Last Updated: 2024-08-07T16:41:27.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/041930.html - http://www-1.ibm.com/support/docview.wss?uid=swg24011562 - http://www.vupen.com/english/advisories/2006/0442 - http://securitytracker.com/id?1015582 - https://exchange.xforc
562 - http://www.vupen.com/english/advisories/2006/0442 - http://securitytracker.com/id?1015582 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24485 - http://www.securityfocus.com/archive/1/423946/100/0/threaded - http://securityreason.com/securityalert/412 - http://www.vsecurity.com/bulletins/advisories/2006/tam-file-retrieval.txt - http://secunia.com/advisories/18725 - http://www.securityfocus.com/bid/16494
CVE ID: CVE-2006-0515 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T16:41:28.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco PIX/ASA 7.1.x before 7.1(2) and 7.0.x before 7.0(5), PIX 6.3.x before 6.3.5(112), and FWSM 2.3.x before 2.3(4) and 3.x before 3.1(7), when used with Websense/N2H2, allows remote attackers to bypass HTTP access restrictions by splitting the GET method of an HTTP request into multiple packets, which prevents the request from being sent to Websense for inspection, aka bugs CSCsc67612, CSCsc68472, and CSCsd81734. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosu
81734. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045899.html - http://www.osvdb.org/25453 - http://www.vsecurity.com/bulletins/advisories/2006/cisco-websense-bypass.txt - http://secunia.com/advisories/20044 - http://www.securityfocus.com/bid/17883 - http://www.vupen.com/english/advisories/2006/1738 - http://www.cisco.com/en/US/products/sw/netmgtsw/ps2032/tsd_products_security_response09186a00806824ec.html - http://securitytracker.com/id?1016040 - http://securitytracker.com/id?1016039 - http://www.securityfocus.com/archive/1/433270/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26308
CVE ID: CVE-2006-0516 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102149-1 - http://secunia.com/advisories/18671 - http://www.vupen.com/english/advisories/2006/0394 - http://www.securityfocus.com/bid/16460 - http://securitytracker.com/id?1015557 - https://exchange.xforce.ib
/2006/0394 - http://www.securityfocus.com/bid/16460 - http://securitytracker.com/id?1015557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24395 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1163 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A219
CVE ID: CVE-2006-0517 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:27.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to "session handling"; and (5) when posting "petitions". Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html - http://www.securityfocus
tainer: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html - http://www.securityfocus.com/bid/16458 - http://www.osvdb.org/22845 - http://www.osvdb.org/22848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24397 - http://www.zone-h.org/en/advisories/read/id=8650/ - http://www.osvdb.org/22844 - http://securitytracker.com/id?1015556 - http://www.securityfocus.com/bid/24397 - http://secunia.com/advisories/18676 - http://www.securityfocus.com/archive/1/423655/100/0/threaded - http://www.vupen.com/english/advisories/2006/0398 - http://securityreason.com/securityalert/395
CVE ID: CVE-2006-0518 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24401 - http://www.osvdb.org/22849 - http://www.zone-h.org/en/advisories/read/id=8650/ - http://secunia.com/advisories/18676 - http://www.vupen.com/english/advisories/2006/0398 - http://www.securityfocus.com/b
http://secunia.com/advisories/18676 - http://www.vupen.com/english/advisories/2006/0398 - http://www.securityfocus.com/bid/16461
CVE ID: CVE-2006-0519 State: PUBLISHED Published: 2006-02-02T11:00:00 Last Updated: 2024-08-07T16:41:28.417Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.zone-h.org/en/advisories/read/id=8650/ - http://secunia.com/advisories/18676 - http://www.vupen.com/english/advisories/2006/0398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24399