Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0110 State: PUBLISHED Published: 2006-01-07T00:00:00 Last Updated: 2024-08-07T16:25:32.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary web script via the email parameter. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/16/summary.html - http://www.osvdb.org/22263 - http://www.securityfocus.com/archive/1/421056/100/0/threaded - http://secunia.com/advisories/18327 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24020 - http://www.vupen.com/english/advisories/2006/0073 - http://www.securityfocus.co
rce.ibmcloud.com/vulnerabilities/24020 - http://www.vupen.com/english/advisories/2006/0073 - http://www.securityfocus.com/bid/16154
CVE ID: CVE-2006-0111 State: PUBLISHED Published: 2006-01-07T00:00:00 Last Updated: 2024-08-07T16:25:33.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in index.php in Boxcar Media Shopping Cart allows remote attackers to inject arbitrary web script or HTML via the (1) parent or (2) pg parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24019 - http://osvdb.org/ref/22/22360-boxcar.txt - http://www.vupen.com/english/advisories/2006/0080 - http://www.osvdb.org/22360
CVE ID: CVE-2006-0112 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T16:25:33.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18310 - http://www.vupen.com/english/advisories/2006/0036 - http://osvdb.org/ref/22/22201-espg.txt - http://www.osvdb.org/22201
CVE ID: CVE-2006-0113 State: PUBLISHED Published: 2006-01-07T01:00:00 Last Updated: 2024-08-07T16:25:33.384Z Vendors: n/a Products: n/a Problem Types: n/a Description: Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18310 - http://www.osvdb.org/22417 - http://osvdb.org/ref/22/22201-espg.txt
CVE ID: CVE-2006-0114 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vCard functions in Joomla! 1.0.5 use predictable sequential IDs for vcards and do not restrict access to them, which allows remote attackers to obtain valid e-mail addresses to conduct spam attacks by modifying the contact_id parameter to index2.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18361 - http://www.securityfocus.com/bid/16185 - http://forge.joomla.org/sf/go/artf2950 - http://www.vupen.com/english/advisories/2006/0097 - http://www.listerit.com/content/view/116
joomla.org/sf/go/artf2950 - http://www.vupen.com/english/advisories/2006/0097 - http://www.listerit.com/content/view/116/84/ - http://forum.joomla.org/index.php/topic%2C29031.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24042
CVE ID: CVE-2006-0115 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the (1) Press_Release_ID parameter in press/details.asp, (2) Service_ID parameter in services/details.asp, and (3) Product_ID parameter in products/details.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16155 - http://www.vupen.com/english/advisories/2006/0079 - http://www.osvdb.org/22249 - http://www.osvdb.org/22250 - http://osvdb.org/ref/2
upen.com/english/advisories/2006/0079 - http://www.osvdb.org/22249 - http://www.osvdb.org/22250 - http://osvdb.org/ref/22/22248-oneplug.txt - http://secunia.com/advisories/18325 - http://www.osvdb.org/22248
CVE ID: CVE-2006-0116 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability search.inetstore in iNETstore Ebusiness Software 2.0 allows remote attackers to inject arbitrary web script or HTML via the searchterm parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0075 - http://osvdb.org/ref/22/22251-inetstore.txt - http://www.osvdb.org/22251 - http://www.securityfocus.com/archive/1/423137/100/0/threaded - http://secunia.com/advisories/18322 - http://www.securityfocus.com/bid/16156 - http://www.attrit
423137/100/0/threaded - http://secunia.com/advisories/18322 - http://www.securityfocus.com/bid/16156 - http://www.attrition.org/pipermail/vim/2006-January/000515.html
CVE ID: CVE-2006-0117 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in IBM Lotus Notes and Domino Server before 6.5.5 allows attackers to cause a denial of service (router crash or hang) via unspecified vectors involving "CD to MIME Conversion". Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - http://www.securityfocus.com/bid/16158 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391
ocview.wss?uid=swg27007054 - http://www.securityfocus.com/bid/16158 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument - https://exchange.xforce.ibmcloud.com/vulnerabilities/24205 - http://secunia.com/advisories/18328 - http://www.vupen.com/english/advisories/2006/0081
CVE ID: CVE-2006-0118 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service (deep recursion leading to stack overflow and crash) via long formulas. Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/21d8fd7989fdf78d852570e4001bae68?OpenDocument - https://exchange.xforce.ibmcloud.com/vulnerabilities/24206 - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - http://w
exchange.xforce.ibmcloud.com/vulnerabilities/24206 - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - http://www.securityfocus.com/bid/16158 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/50c634bfe193efa5852570e4001baace?OpenDocument - http://secunia.com/advisories/18328 - http://www.vupen.com/english/advisories/2006/0081
CVE ID: CVE-2006-0119 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:32.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 have unknown impact and attack vectors, due to "potential security issues" as identified by SPR numbers (1) GPKS6C9J67 in Agents, (2) JGAN6B6TZ3 and (3) KSPR699NBP in the Router, (4) GPKS5YQGPT in Security, or (5) HSAO6BNL6Y in the Web Server. NOTE: vector 3 is related to an issue in NROUTER in IBM Lotus Notes and Domino Server before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via
rver before 6.5.4 FP1, 6.5.5, and 7.0, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted vCal meeting request sent via SMTP (aka SPR# KSPR699NBP). Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/d1150fc9c5dec8b18525709200001da6?OpenDocument&Highlight=0%2CGPKS6C9J67 - http://www.securityfocus.com/bid/16158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27413 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%2CKSP
s.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/de2ab57a5b9547848525701b00420c2c?OpenDocument&Highlight=0%2CKSPR699NBP - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/f97fe7cfd9a8113b8525709200001db4?OpenDocument&Highlight=0%2CGPKS6C9J67 - http://secunia.com/advisories/18328 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/94a77eb898843aca8525709200001de1?OpenDocument&Highlight=0%2CJGAN6B6TZ3 - http://www.vupen.com/english/advisories/2006/2564 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24207 - http://secunia.com/advisories/20855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24211 - http://www-10.lotus.com/
p://secunia.com/advisories/20855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24211 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/e4deb1cbb011c747852570e4001ba9bb?OpenDocument&Highlight=0%2CGPKS5YQGPT - http://securitytracker.com/id?1016390 - http://www.securityfocus.com/bid/18020 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/9a1650d1a771f3078525702a00420def?OpenDocument&Highlight=0%2CHSAO6BNL6Y - http://www.securityfocus.com/archive/1/438461/100/0/threaded - http://www.vupen.com/english/advisories/2006/0081
CVE ID: CVE-2006-0120 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (application crash) via multiple vectors, involving (1) a malformed message sent to an "Out Of Office" agent (SPR LPEE6DMQWJ), (2) the compact command (RTIN5U2SAJ), (3) malformed bitmap images (MYAA6FH5HW), (4) the "Delete Attachment" action (YPHG6844LD), (5) parsing certificates from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NS
from a remote Certificate Table (AELE6DZFJW), and (6) creating a SSL key ring with the Domino Administration client (NSUA4FQPTN). Additional Analyst Notes: - CVE Program Container: References: - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/4118a1f266afb26c852570e4001baf5e?OpenDocument - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ad0dd14aa109f96b852570e4001bb08c?OpenDocument - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/5f166a44ee743b2c852570e4001baf31?OpenDocument - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/040482aeb1416bb7852570e4001badd6?OpenDocument - http://www-1
otus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/040482aeb1416bb7852570e4001badd6?OpenDocument - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24214 - http://www.securityfocus.com/bid/16158 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24213 - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/2bb4f466a9e986ae852570e4001babbb?OpenDocument - https://exchange.xforce.ibmcloud.com/vulnerabilities/24215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24217 - htt
://exchange.xforce.ibmcloud.com/vulnerabilities/24216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24217 - http://secunia.com/advisories/18328 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/258394eaa824f2c08525708a004209d3?OpenDocument - http://www-10.lotus.com/ldd/r5fixlist.nsf/e7dbb5aee9a94c56852570c90056a95d/ced5f873baea4e8b852570e4001baa6d?OpenDocument - http://www.vupen.com/english/advisories/2006/0081
CVE ID: CVE-2006-0121 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in IBM Lotus Notes and Domino Server before 6.5.5 allow attackers to cause a denial of service (memory consumption and crash) via unknown vectors related to (1) unspecified vectors during the SSL handshake (SPR# MKIN67MQVW), (2) the stash file during the SSL handshake (SPR# MKIN693QUT), and possibly other vectors. NOTE: due to insufficient information in the original vendor advisory, it is not clear whether there is an attacker role in other memory leaks that are specified in the advisory. Additional Anal
is not clear whether there is an attacker role in other memory leaks that are specified in the advisory. Additional Analyst Notes: - CVE Program Container: References: - http://www-1.ibm.com/support/docview.wss?uid=swg27007054 - http://www.securityfocus.com/bid/16158 - http://secunia.com/advisories/18328 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/2221243535d88a2b8525701b00420cd6?OpenDocument&Highlight=0%2CMKIN693QUT - https://exchange.xforce.ibmcloud.com/vulnerabilities/24223 - http://www-10.lotus.com/ldd/r5fixlist.nsf/5c087391999d06e7852569280062619d/20f66e356a76c90f8525702a00420e08?OpenDocument&Highlight=0%2CMKIN67MQVW - http://www.vupen.com/english/adviso
9280062619d/20f66e356a76c90f8525702a00420e08?OpenDocument&Highlight=0%2CMKIN67MQVW - http://www.vupen.com/english/advisories/2006/0081
CVE ID: CVE-2006-0122 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Public/Index.asp in Aquifer CMS allows remote attackers to inject arbitrary web script or HTML via the Keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-January/000509.html - http://secunia.com/advisories/18326 - http://www.vupen.com/english/advisories/2006/0074 - http://osvdb.org/ref/22/22247-aquifer.txt - http://www.securityfocus.com/bid/16162 - http://www.osvdb.org/22247
CVE ID: CVE-2006-0123 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via the (1) fid parameter in index.php and (2) pagid parameter in verpag.php, and possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015445 - http://www.osvdb.org/22240 - http://evuln.com/vulns/15/summary.html - http://www.osvdb.org/22241 - http://www.vupen.com/english/advisories/2006/0077 - http://secunia.com/advisories/18300 - http://www.securit
org/22241 - http://www.vupen.com/english/advisories/2006/0077 - http://secunia.com/advisories/18300 - http://www.securityfocus.com/bid/16157 - http://www.securityfocus.com/archive/1/420990/100/0/threaded
CVE ID: CVE-2006-0124 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in crear.php in ADN Forum 1.0b allows remote attackers to inject arbitrary web script or HTML via the titulo parameter, which is used by the "Topic name" field. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015445 - http://evuln.com/vulns/15/summary.html - http://www.vupen.com/english/advisories/2006/0077 - http://secunia.com/advisories/18300 - http://www.securityfocus.com/bid/16157 - http://www.osvdb.org/22242 - http://www.securityfocus
ia.com/advisories/18300 - http://www.securityfocus.com/bid/16157 - http://www.osvdb.org/22242 - http://www.securityfocus.com/archive/1/420990/100/0/threaded
CVE ID: CVE-2006-0125 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via the appserv_root parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. There is not enough detail from these third party sources to know whether this is directory traversal, remote file include, or another issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18163 - http://www.vupen.com/engli
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18163 - http://www.vupen.com/english/advisories/2006/0053 - http://www.securityfocus.com/bid/16166 - http://www.osvdb.org/22228
CVE ID: CVE-2006-0126 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: rxvt-unicode before 6.3, on certain platforms that use openpty and non-Unix pty devices such as Linux and most BSD platforms, does not maintain the intended permissions of tty devices, which allows local users to gain read and write access to the devices. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22223 - http://secunia.com/advisories/18301 - http://dist.schmorp.de/rxvt-unicode/Changes - http://www.vupen.com/english/advisories/2006/0052
CVE ID: CVE-2006-0127 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote authenticated users to rename the folders of other users via a .. (dot dot) in the RENAME command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html - http://www.osvdb.org/22229 - http://www.vupen.com/english/advisories/2006/0055 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html - http://secunia.com/adviso
ries/2006/0055 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041039.html - http://secunia.com/advisories/18318 - http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt
CVE ID: CVE-2006-0128 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service of Rockliffe MailSite before 6.1.22.1 allows remote attackers to have an unknown impact via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040969.html - http://zur.homelinux.com/Advisories/RockliffeMailsiteDirTransveral.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/39991
CVE ID: CVE-2006-0129 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:34.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames via user requests to TCP port 106. Additional Analyst Notes: - CVE Program Container: References: - http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt - http://www.vupen.com/english/advisories/2006/0055 - http://secunia.com/advisories/18318 - http://www.osvdb.org/22230 - http:
://www.vupen.com/english/advisories/2006/0055 - http://secunia.com/advisories/18318 - http://www.osvdb.org/22230 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html
CVE ID: CVE-2006-0130 State: PUBLISHED Published: 2006-01-09T11:00:00Z Last Updated: 2024-09-17T01:06:52.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names and passwords without denying connections, limiting the rate of connections, or locking out an account. Additional Analyst Notes: - CVE Program Container: References: - http://zur.homelinux.com/Advisories/RockliffeMailsiteUserEnum.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/040970.html
CVE ID: CVE-2006-0131 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php and (2) side_menu.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://echo.or.id/adv/adv26-K-159-2006.txt - http://www.securityfocus.com/archive/1/420969/100/0/threaded
CVE ID: CVE-2006-0132 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:34.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in webftp.php in SysCP WebFTP 1.2.6 and possibly earlier allows remote attackers to include and execute arbitrary local PHP scripts, and possibly read other types of files, via a .. (dot dot) and a trailing null in the webftp_language parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24018 - http://www.securityfocus.com/archive/1/420973/100/0/threaded - http://secunia.com/advisories/18355 - http://www.securityfocus.
/www.securityfocus.com/archive/1/420973/100/0/threaded - http://secunia.com/advisories/18355 - http://www.securityfocus.com/bid/16175 - http://www.vupen.com/english/advisories/2006/0090
CVE ID: CVE-2006-0133 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and read partial contents of certain files via a .. (dot dot) in the argument to (1) getCommand.new (aka getCommand) and (2) getShell, a different vulnerability than CVE-2005-4273. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015429 - http://www.securityfocus.com/bid/16102 - http://www.securityfocus.com/bid/16103 - http://www.securityfocus.com/archive/1/420589/100
securityfocus.com/bid/16102 - http://www.securityfocus.com/bid/16103 - http://www.securityfocus.com/archive/1/420589/100/0/threaded
CVE ID: CVE-2006-0134 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in register.php in TheWebForum (twf) 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the www parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015450 - http://www.securityfocus.com/archive/1/421039/100/0/threaded - http://evuln.com/vulns/17/exploit.html - http://www.vupen.com/english/advisories/2006/0093 - http://secunia.com/advisories/18392 - http://www.securityfocus.com/bid/16161 - http://evuln.com/vulns
sories/2006/0093 - http://secunia.com/advisories/18392 - http://www.securityfocus.com/bid/16161 - http://evuln.com/vulns/17/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24007 - http://www.osvdb.org/22295