Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6181 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbitrary SQL commands via the (1) AlphaSort, (2) In, and (3) orderby parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30534 - http://www.aria-security.com/forum/showthread.php?t=51 - http://secunia.com/advisories/23119 - http://www.securityfocus.com/archive/1/452825/100/0/threaded - http://www.
?t=51 - http://secunia.com/advisories/23119 - http://www.securityfocus.com/archive/1/452825/100/0/threaded - http://www.vupen.com/english/advisories/2006/4741
CVE ID: CVE-2006-6182 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIVE%\temp\Gnotebook.txt log file, which allows local users to obtain passwords by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23191 - http://www.securityfocus.com/bid/21307 - http://securitytracker.com/id?1017286
CVE ID: CVE-2006-6183 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.097Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long mode field (aka transporting mode) in a (1) GET or (2) PUT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4738 - http://www.securityfocus.com/bid/21301 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30545 - http://www.securityfocus.com/bid/21322 - http://securityreason.
s://exchange.xforce.ibmcloud.com/vulnerabilities/30545 - http://www.securityfocus.com/bid/21322 - http://securityreason.com/securityalert/1930 - http://secunia.com/advisories/23113 - http://www.securityfocus.com/archive/1/452754/100/0/threaded
CVE ID: CVE-2006-6184 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via a long filename in a (1) GET or (2) PUT command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/11350 - http://secunia.com/advisories/23106 - http://securityreason.com/securityalert/8120 - http://www.securityfocus.com/archive/1/452743/100/0/threaded - http://www.exploit-db.com/exploits/24952 - htt
ert/8120 - http://www.securityfocus.com/archive/1/452743/100/0/threaded - http://www.exploit-db.com/exploits/24952 - http://securityreason.com/securityalert/1929 - http://www.exploit-db.com/exploits/16350 - http://www.vupen.com/english/advisories/2006/4737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30539 - http://www.securityfocus.com/bid/21320
CVE ID: CVE-2006-6185 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22994 - http://www.attrition.org/pipermail/vim/2006-November/001152.html - http://www.securityfocus.com/archive/1/452170/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30429 - http://www.securityfocus.com/bid/21213 - http://securityreas
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/30429 - http://www.securityfocus.com/bid/21213 - http://securityreason.com/securityalert/1939 - http://www.vupen.com/english/advisories/2006/4640
CVE ID: CVE-2006-6186 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in enomphp 4.0 allow remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter to (1) config.php, (2) ranklv_inside.php, (3) rankml_inside.php, and (4) admin/Restore/config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-November/001152.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30437 - http://securityreason.com/securityalert/1940 - http://www.securityfocus.com/archive/1/452123/
om/vulnerabilities/30437 - http://securityreason.com/securityalert/1940 - http://www.securityfocus.com/archive/1/452123/100/100/threaded
CVE ID: CVE-2006-6187 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL commands via the (1) currentpage or (2) gallery_id parameter to (a) view_gallery.asp, the (3) image_id parameter to (b) download_image.asp, the currentpage or (5) orderby parameter to (c) gallery.asp, or the currentpage parameter to (d) view_recent.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=49 - http://secunia.com/advisories/23136 - http
ainer: References: - http://www.aria-security.com/forum/showthread.php?t=49 - http://secunia.com/advisories/23136 - http://securityreason.com/securityalert/1937 - http://www.securityfocus.com/archive/1/452733/100/0/threaded - http://www.securityfocus.com/bid/21311 - http://www.vupen.com/english/advisories/2006/4743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30535
CVE ID: CVE-2006-6188 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to inject arbitrary web script or HTML via the txtKeyWord parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=49 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30536 - http://secunia.com/advisories/23136 - http://securityreason.com/securityalert/1937 - http://www.se
lnerabilities/30536 - http://secunia.com/advisories/23136 - http://securityreason.com/securityalert/1937 - http://www.securityfocus.com/archive/1/452733/100/0/threaded - http://www.securityfocus.com/bid/21311 - http://www.vupen.com/english/advisories/2006/4743
CVE ID: CVE-2006-6189 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary SQL commands via the date parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452730/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30537 - http://securityreason.com/securityalert/1934 - http://www.aria-security.com/forum/showthread.php?t=50 - http://www.securityfocus.com/bid/21310
CVE ID: CVE-2006-6190 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice) allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: it is possible that there are multiple issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21312 - http://www.vupen.com/english/advisories/2006/4708 - http://secunia.com/advisories/23200 - http://anna.svn.sourceforge.net/viewvc/anna/branches/0.30/anna.pl?r1=22&r2=23 - http://sourceforge.net/project/shownot
- http://anna.svn.sourceforge.net/viewvc/anna/branches/0.30/anna.pl?r1=22&r2=23 - http://sourceforge.net/project/shownotes.php?release_id=466517
CVE ID: CVE-2006-6191 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30483 - http://www.vupen.com/english/advisories/2006/4742 - http://secunia.com/advisories/23098 - https://www.exploit-db.com/exploits/2853
CVE ID: CVE-2006-6192 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authentication, which allows remote attackers to add users and perform certain other unauthorized privileged actions. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4742 - http://secunia.com/advisories/23098
CVE ID: CVE-2006-6193 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:35.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23102 - http://www.securityfocus.com/bid/21293 - http://www.vupen.com/english/advisories/2006/4703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30487 - https://www.exploit-db.com/exploits/2848
CVE ID: CVE-2006-6194 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary SQL commands via the (1) cat or (2) did parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452554/100/0/threaded - http://www.aria-security.com/forum/showthread.php?t=38 - http://www.vupen.com/english/advisories/2006/4706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30499 - http://securityreason.com/securityalert/1936
CVE ID: CVE-2006-6195 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) show_id or (2) parentid parameter to (a) filelist.asp, or the (3) fid parameter to (b) showfile.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452567/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30513 - http://www.aria-security.com/forum/showthread.php?t=39 - http://www.securityfocus.com/bid/21282 - http
abilities/30513 - http://www.aria-security.com/forum/showthread.php?t=39 - http://www.securityfocus.com/bid/21282 - http://securitytracker.com/id?1017281
CVE ID: CVE-2006-6196 State: PUBLISHED Published: 2006-12-01T00:00:00 Last Updated: 2024-08-07T20:19:34.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote attackers to inject arbitrary web script or HTML via a search field (txtsearchtext parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452567/100/0/threaded - http://securityreason.com/securityalert/1941 - http://www.aria-security.com/forum/showthread.php?t=39 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30514 - http://www.securityfocus.com/
m/forum/showthread.php?t=39 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30514 - http://www.securityfocus.com/bid/21282 - http://securitytracker.com/id?1017281
CVE ID: CVE-2006-6197 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:34.849Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inject arbitrary web script or HTML via the (1) app_name parameter in (a) _404_not_found.page.php, (b) _410_stats_gone.page.php, and (c) _referer_spam.page.php in inc/VIEW/errors/; the (2) baseurl parameter in (d) inc/VIEW/errors/_404_not_found.page.php; and the (3) ReqURI parameter in (e) inc/VIEW/errors/_referer_spam.page.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityf
IEW/errors/_referer_spam.page.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452895/100/0/threaded - http://secunia.com/advisories/23148 - http://securityreason.com/securityalert/1944 - http://www.securityfocus.com/bid/21334 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30562
CVE ID: CVE-2006-6198 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) email parameter to (a) scripts2/dochangeemail, the (2) supporturl parameter to (b) cgi/addon_configsupport.cgi, the (3) pkg parameter to (c) scripts/editpkg, the (4) domain parameter to (d) scripts2/domts2 and (e) scripts/editzone, the (5) feature parameter to (g) scripts2/dofeaturemanager, and the (6) ndomain parameter to (h) scripts/park. Additional Anal
) feature parameter to (g) scripts2/dofeaturemanager, and the (6) ndomain parameter to (h) scripts/park. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21288 - http://www.aria-security.com/forum/showthread.php?t=44 - http://securityreason.com/securityalert/1938 - http://www.securityfocus.com/archive/1/452618/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30507
CVE ID: CVE-2006-6199 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2880 - http://whitestar.linuxbox.org/pipermail/exploits/2006-December/000065.html - http://www.exploit-db.com/exploits/26889 - http://secunia.com/advisories/23041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30567 - http://www.o
/26889 - http://secunia.com/advisories/23041 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30567 - http://www.osvdb.org/30770 - http://www.exploit-db.com/exploits/23783 - http://www.securityfocus.com/bid/21337 - http://www.vupen.com/english/advisories/2006/4764
CVE ID: CVE-2006-6200 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:34.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21277 - http://www.neosecurityteam.net/index.php?action=advisories&id=30 - http://securityreason.com/securityalert/1935 - https://exch
/www.neosecurityteam.net/index.php?action=advisories&id=30 - http://securityreason.com/securityalert/1935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30525 - http://secunia.com/advisories/23128 - http://www.vupen.com/english/advisories/2006/4739 - http://securitytracker.com/id?1017282 - http://www.securityfocus.com/archive/1/452553/100/0/threaded
CVE ID: CVE-2006-6201 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland Developer Studio 2006; and possibly other versions allows remote attackers to execute arbitrary code via a long SQL statement, related to use of the DbiQExec function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30583 - http://secunia.com/advisories/22570 - http://www.vupen.com/english/advisories/2006/4763 - http://secunia.com/secunia_res
http://secunia.com/advisories/22570 - http://www.vupen.com/english/advisories/2006/4763 - http://secunia.com/secunia_research/2006-70/advisory/ - http://www.securityfocus.com/bid/21342 - http://www.securityfocus.com/archive/1/453003/100/0/threaded
CVE ID: CVE-2006-6202 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21284 - http://www.vupen.com/english/advisories/2006/4702 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30524 - https://www.exploit-db.com/exploits/2843
CVE ID: CVE-2006-6203 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30497 - http://www.vupen.com/english/advisories/2006/4721 - https://www.exploit-db.com/exploits/2852 - http://www.securityfocus.com/bid/21315
CVE ID: CVE-2006-6204 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands via the (1) cid parameter to (a) dircat.asp; the (2) sid parameter to (b) dirSub.asp; the (3) TYPE_ID parameter to (c) types.asp; the (4) AD_ID parameter to (d) homeDetail.asp; the (5) cat parameter to (e) result.asp; the (6) compare, (7) clear, and (8) adID parameters to (f) compareHomes.asp; and the (9) aminprice, (10) amaxprice, and (11) abedrooms parameters to (g) result.asp. Additional Analyst Notes: - CVE
and the (9) aminprice, (10) amaxprice, and (11) abedrooms parameters to (g) result.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4643 - http://www.securityfocus.com/bid/21193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30419 - http://secunia.com/advisories/23016 - http://www.securityfocus.com/archive/1/452107/100/100/threaded - http://securityreason.com/securityalert/1942 - http://s-a-p.ca/index.php?page=OurAdvisories&id=50
CVE ID: CVE-2006-6205 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to inject arbitrary web script or HTML via the (1) city or (2) State parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4643 - http://www.securityfocus.com/bid/21193 - http://secunia.com/advisories/23016 - http://www.securityfocus.com/archive/1/452107/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30420 - http://securityreas
com/archive/1/452107/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30420 - http://securityreason.com/securityalert/1942 - http://s-a-p.ca/index.php?page=OurAdvisories&id=50
CVE ID: CVE-2006-6206 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary SQL commands via the ItemID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452707/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30542 - http://secunia.com/advisories/23140 - http://www.vupen.com/english/advisories/2006/4740 - http://www.securityfocus.com/bid/21324 - http://securityreason.com/securityalert/1932 - http://
h/advisories/2006/4740 - http://www.securityfocus.com/bid/21324 - http://securityreason.com/securityalert/1932 - http://www.aria-security.com/forum/showthread.php?t=48
CVE ID: CVE-2006-6207 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to execute arbitrary SQL commands via the partno parameter. NOTE: the vendor disputes this issue, stating that it is a forced SQL error Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452706/100/0/threaded - http://www.securityfocus.com/archive/1/453549/100/0/threaded - http://www.securityfocus.com/bid/21323 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
ve/1/453549/100/0/threaded - http://www.securityfocus.com/bid/21323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30540 - http://securityreason.com/securityalert/1933
CVE ID: CVE-2006-6208 State: PUBLISHED Published: 2006-12-01T01:00:00 Last Updated: 2024-08-07T20:19:35.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL commands via the (1) AD_ID, (2) cat_id, (3) sub_id, and (4) ad_id parameters to (a) ad.asp, the (5) cid parameter to (b) dircat.asp, and the (6) sid parameter to (c) dirSub.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23050 - http://www.securityfocus.com/bid/21192 - http://www.securityfocus.com/archive/1/452102/100/100/threaded - http://s-a-p.ca/index.php?page
ityfocus.com/bid/21192 - http://www.securityfocus.com/archive/1/452102/100/100/threaded - http://s-a-p.ca/index.php?page=OurAdvisories&id=46 - http://securityreason.com/securityalert/1943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30423 - http://www.vupen.com/english/advisories/2006/4642