Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2032 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) icon_id and (2) userid parameters in preview.php. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25977 - http://www.nukedx.com/?getxpl=24 - http://securityreason.com/securityalert/797 - http://www.securityfocus.com/archive/1/431761/100/0/thre
.com/?getxpl=24 - http://securityreason.com/securityalert/797 - http://www.securityfocus.com/archive/1/431761/100/0/threaded - http://www.securityfocus.com/bid/17655
CVE ID: CVE-2006-2033 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Core CoreNews 2.0.1 and earlier allows remote authenticated users to execute arbitrary commands via the show parameter. NOTE: this is a different vector than CVE-2006-1212, although it might be the same primary issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25979 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045372.html - http://www.nukedx.com/?getxpl=24 - http://securityreason.com/security
pipermail/full-disclosure/2006-April/045372.html - http://www.nukedx.com/?getxpl=24 - http://securityreason.com/securityalert/797 - http://www.securityfocus.com/archive/1/431761/100/0/threaded - http://www.securityfocus.com/bid/17655
CVE ID: CVE-2006-2034 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in function/showprofile.php in FlexBB 0.5.5 allows remote attackers to execute arbitrary SQL commands, and view all usernames and passwords, via the id parameter to the showprofile page in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431793/100/0/threaded - http://www.securityfocus.com/bid/17574 - http://www.osvdb.org/24867
CVE ID: CVE-2006-2035 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.279Z Vendors: n/a Products: n/a Problem Types: n/a Description: Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended blocking of the Uncategorized category by appending a "/?" sequence to a URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431600/100/0/threaded - http://www.securityfocus.com/archive/1/431685/100/0/threaded - http://www.osvdb.org/25211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25980
CVE ID: CVE-2006-2036 State: PUBLISHED Published: 2006-04-26T00:00:00 Last Updated: 2024-08-07T17:35:31.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: iOpus Secure Email Attachments (SEA), probably 1.0, does not properly handle passwords that consist of repetitions of a substring, which allows attackers to decrypt files by entering only the substring. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431989/100/0/threaded - http://secunia.com/advisories/19771 - http://securitytracker.com/id?1015980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26266 - http://www.securityfocus.com/archive/1/431904/100/0/threaded -
ps://exchange.xforce.ibmcloud.com/vulnerabilities/26266 - http://www.securityfocus.com/archive/1/431904/100/0/threaded - http://www.securityfocus.com/bid/17656
CVE ID: CVE-2006-2037 State: PUBLISHED Published: 2006-04-26T18:00:00 Last Updated: 2024-08-07T17:35:31.255Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the navpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25953 - http://www.securityfocus.com/archive/1/431509/100/0/threaded
CVE ID: CVE-2006-2038 State: PUBLISHED Published: 2006-04-26T18:00:00 Last Updated: 2024-08-07T17:35:31.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) RecordID parameter in (a) Customeraddresses_RecordAction.cfm and (b) youraccount.cfm; (2) solus parameter in (c) detail.cfm; and (3) cat parameter in (d) category.cfm. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26064 - http://secunia.com/advisories/19806 - http://www.
06/1512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26064 - http://secunia.com/advisories/19806 - http://www.osvdb.org/24934 - http://www.osvdb.org/24937 - http://www.osvdb.org/24935 - http://pridels0.blogspot.com/2006/04/ampleshop-ecommerce-software-vuln.html - http://www.osvdb.org/24936
CVE ID: CVE-2006-2039 State: PUBLISHED Published: 2006-04-26T18:00:00 Last Updated: 2024-08-07T17:35:31.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19776 - http://www.vupen.com/english/advisories/2006/1492 - http://www.securityfocus.com/bid/17676 - http://sourceforge.net/project/shownotes.php?release_id=411859 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26040
CVE ID: CVE-2006-2040 State: PUBLISHED Published: 2006-04-26T18:00:00 Last Updated: 2024-08-07T17:35:31.169Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL commands via the (1) cat, (2) pic and (3) page parameter in index.php; (4) id parameter in postcard.php; and (5) cat parameter in print.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19836 - http://www.osvdb.org/24982 - http://www.securityfocus.com/archive/1/431982/100/0/threaded - http://www.osvdb.org/24983 - http://www.vupen.com/english/advisories/2006/1525 -
.com/archive/1/431982/100/0/threaded - http://www.osvdb.org/24983 - http://www.vupen.com/english/advisories/2006/1525 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26066 - http://www.osvdb.org/24981 - http://www.securityfocus.com/bid/17683 - http://securityreason.com/securityalert/789
CVE ID: CVE-2006-2041 State: PUBLISHED Published: 2006-04-26T18:00:00 Last Updated: 2024-08-07T17:35:31.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without specifying the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19801 - http://www.vupen.com/english/advisories/2006/1515 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26079
CVE ID: CVE-2006-2042 State: PUBLISHED Published: 2006-05-09T19:00:00 Last Updated: 2024-08-07T17:35:31.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Dreamweaver 8 before 8.0.2 and MX 2004 can generate code that allows SQL injection attacks in the (1) ColdFusion, (2) PHP mySQL, (3) ASP, (4) ASP.NET, and (5) JSP server models. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-05/0194.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26339 - http://secunia.com/advisories/20054 - http://www.securityfocus.com/bid/17928 - http://www.adobe.com/support/security/bulletins/apsb06-07.html - http://www.
- http://www.securityfocus.com/bid/17928 - http://www.adobe.com/support/security/bulletins/apsb06-07.html - http://www.vupen.com/english/advisories/2006/1753 - http://www.osvdb.org/25361 - http://securitytracker.com/id?1016050
CVE ID: CVE-2006-2043 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) characters in the appliance's command line interface (CLI). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1540 - http://securityreason.com/securityalert/793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26108 - http://www.securityfocus.com/archive/1/432007/100/0/threaded - http://www.securityfocus.com/bid/17698 - http://secunia.com/advisor
.securityfocus.com/archive/1/432007/100/0/threaded - http://www.securityfocus.com/bid/17698 - http://secunia.com/advisories/19818
CVE ID: CVE-2006-2044 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a default password of admin. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26112 - http://securityreason.com/securityalert/793 - http://www.securityfocus.com/archive/1/432007/100/0/threaded - http://www.securityfocus.com/bid/17698 - http://secunia.com/advisories/19818
CVE ID: CVE-2006-2045 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, which allows local users to view encrypted passwords; and the (2) NetAccess database file has world readable and writable permissions, which allows local users to view sensitive information and modify data. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26110 - http://www.securityfocus.com/
nglish/advisories/2006/1540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26110 - http://www.securityfocus.com/archive/1/432007/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26109 - http://www.securityfocus.com/bid/17698 - http://secunia.com/advisories/19818
CVE ID: CVE-2006-2046 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) keywords parameters in (a) Results.cfm, and the (3) ProdID parameter in (b) Details.cfm. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26060 - http://www.vupen.com/english/advisories/2006/1513 - http://www.securityfocus.com/bid/25210 - http://www.osvdb.org/24962 - http
/www.vupen.com/english/advisories/2006/1513 - http://www.securityfocus.com/bid/25210 - http://www.osvdb.org/24962 - https://www.exploit-db.com/exploits/4264 - http://secunia.com/advisories/19812 - http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html - http://www.securityfocus.com/bid/17941 - http://www.techfeed.net/blog/index.cfm/2006/4/26/cartweaver-holes - http://www.osvdb.org/24961
CVE ID: CVE-2006-2047 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.286Z Vendors: n/a Products: n/a Problem Types: n/a Description: Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information via an invalid (1) secondary, (2) PageNum_Results, (3) category, or (4) keywords parameter in (a) Results.cfm; or an invalid (5) ProdID parameter in (b) Details.cfm; which reveal the path in various error messages. NOTE: the behavior for the category, keywords, and ProdID parameters might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.i
resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26061 - http://www.vupen.com/english/advisories/2006/1513 - http://www.osvdb.org/24963 - http://secunia.com/advisories/19812 - http://pridels0.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html - http://www.osvdb.org/24964
CVE ID: CVE-2006-2048 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) port, (2) server, and (3) user parameters. NOTE: it is possible that the affected version is actually 3.2. Additional Analyst Notes: - CVE Program Container: References: - http://www.subjectzero.net/research/phpwebftpxss.htm - http://www.vupen.com/english/advisories/2006/1530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26067 - http://www.osvdb.org/
en.com/english/advisories/2006/1530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26067 - http://www.osvdb.org/24975 - http://www.securityfocus.com/archive/1/431985/100/0/threaded - http://securityreason.com/securityalert/786 - http://www.securityfocus.com/bid/17688 - http://secunia.com/advisories/19827
CVE ID: CVE-2006-2049 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject arbitrary web script or HTML via the az parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19815 - http://www.securityfocus.com/bid/17697 - http://www.osvdb.org/24988 - http://securityreason.com/securityalert/792 - http://www.vupen.com/english/advisories/2006/1532 - http://www.securityfocus.com/archive/1/432010/100/0/threaded - https://exchange.xforce.ibmc
glish/advisories/2006/1532 - http://www.securityfocus.com/archive/1/432010/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26083
CVE ID: CVE-2006-2050 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQL commands via the az parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26084 - http://www.osvdb.org/24989 - http://www.securityfocus.com/bid/17697 - http://securityreason.com/securityalert/792 - http://www.securityfocus.com/archive/1/432010/100/0/threaded
CVE ID: CVE-2006-2051 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26065 - http://www.securityfocus.com/archive/1/431983/100/0/threaded - http://www.securityfocus.com/bid/17685 - http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt - http://securityreaso
curityfocus.com/bid/17685 - http://www.aria-security.net/advisory/nextage/nextageshoppingcart.txt - http://securityreason.com/securityalert/791
CVE ID: CVE-2006-2052 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbitrary web script or HTML via the member parameter in a viewpro action in member.php. NOTE: the original report may be inaccurate, since the "viewpro" string does not appear in the source code for version 1.0.2 of the product. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432022/100/0/threaded - http://www.securityfocus.com/bid/17696 - http://www.osvdb.or
p://www.securityfocus.com/archive/1/432022/100/0/threaded - http://www.securityfocus.com/bid/17696 - http://www.osvdb.org/24984 - http://www.securityfocus.com/archive/1/432241/100/0/threaded - http://securityreason.com/securityalert/790
CVE ID: CVE-2006-2053 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the OrderID parameter in (a) shipping.cfm and (b) checkout.cfm, (2) ItemID parameter in (c) proddetail.cfm, (3) SubCatID parameter in (d) index.cfm, the (4) CategoryID parameter in (e) prodpage.cfm, and (5) ProdID parameter in (f) Details.cfm. NOTE: these issues can also be exploited for path disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24977
ploited for path disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26045 - http://www.vupen.com/english/advisories/2006/1514 - http://secunia.com/advisories/19817 - http://pridels0.blogspot.com/2006/04/quickestore-79-vuln.html - http://www.osvdb.org/24980 - http://www.osvdb.org/24978 - http://www.osvdb.org/24979 - http://www.osvdb.org/24976
CVE ID: CVE-2006-2054 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denial of service (unstable operation) via long DHCP packets. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26076 - http://www.securityfocus.com/bid/17686 - http://support.3com.com/infodeli/tools/switches/baseline/3C16486_V1_0_2_0_readme.pdf - http://www.osvdb.org/24942 - http://securitytracke
om.com/infodeli/tools/switches/baseline/3C16486_V1_0_2_0_readme.pdf - http://www.osvdb.org/24942 - http://securitytracker.com/id?1015997 - http://secunia.com/advisories/19756
CVE ID: CVE-2006-2055 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 -
PI. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 - http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html - http://www.securityfocus.com/archive/1/432009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26118 - http://secunia.com/advisories/19819 - http://www.osvdb.org/25003
CVE ID: CVE-2006-2056 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories
Microsoft API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 - http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html - http://www.securityfocus.com/archive/1/432009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26118
CVE ID: CVE-2006-2057 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 - http
dditional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 - http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html - http://www.securityfocus.com/archive/1/432009/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26118
CVE ID: CVE-2006-2058 State: PUBLISHED Published: 2006-04-26T20:00:00 Last Updated: 2024-08-07T17:35:31.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538
API. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1538 - http://ingehenriksen.blogspot.com/2006/04/office-2003-file-attachment-exploit.html - http://www.securityfocus.com/archive/1/432009/100/0/threaded - http://securityreason.com/securityalert/785 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26118