Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26053 - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1875 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Database Server 9.0.1.5, 9.2.0.7, and 10.1.0.5 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB11. NOTE: Oracle has not disputed reliable researcher claims that this issue is SQL injection in MDSYS.SDO_LRS_TRIG_INS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26055 - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/se
http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1876 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.4 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB12. NOTE: details are unavailable from Oracle, but as of 20060421, they have not publicly disputed a claim by a reliable independent researcher that states that the problem is SQL injection in the (1) GEN_RID_RANGE_BY_AREA and (2) GEN_RID_RANGE functions in the MDSYS.SDO_PRIDX package. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advis
n the MDSYS.SDO_PRIDX package. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26051 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.kb.cert.org/vuls/id/240249 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.red-database-security.com/advisory/oracle_cpu_apr_2006.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://s
p://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1877 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln# DB13. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/th
h/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26068 - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.osvdb.org/24861 - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1878 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015945 - http://securityreason.com/securityalert/760 - http://securityreason.com/securityalert/719 - http://secunia.com/advisories/19652 - http://www.vupen.com/english/advisories/2006/1394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25804 - http://www.securityfoc
n.com/english/advisories/2006/1394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25804 - http://www.securityfocus.com/bid/17542 - http://www.securityfocus.com/archive/1/431073/100/0/threaded
CVE ID: CVE-2006-1879 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Email Server component in Oracle Collaboration Suite 9.0.4.2, 10.1.1, 10.1.2.0, and 10.1.2.1 have unknown impact and attack vectors, aka Vuln# (1) OCS01, (2) OCS02, (3) OCS03, and (4) OCS04. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26057 - http://www.kb.cert.org/vuls/id/549146 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuap
.cert.org/vuls/id/549146 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.kb.cert.org/vuls/id/879041 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-109A.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1880 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.399Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors, as identified by Vuln# (1) APPS01 in the (a) Application Install component; (2) APPS09 in the (b) Oracle Diagnostics Interfaces component; (3) APPS10 in the (c) Oracle General Ledger component; (4) APPS12 and (5) APPS13 in the (d) Oracle Receivables component. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com
Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.kb.cert.org/vuls/id/940729 - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1881 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Financials for Asia/Pacific component in Oracle E-Business Suite and Applications 11.5.9 has unknown impact and attack vectors. component, aka Vuln# APPS02. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.se
m/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1882 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln# (1) APPS03 in (a) iProcurement; (2) APPS04 in (b) Oracle Application Object Library; (3) APPS06, (4) APPS07, and (5) APPS08 in (c) Oracle Applications Technology Stack; and (6) APPS11 in (d) Oracle Order Capture. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - htt
er: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.kb.cert.org/vuls/id/824833 - http://www.kb.cert.org/vuls/id/619194 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1883 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln# APPS05. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.sec
/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1884 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26058 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.secu
technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1885 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the Reporting Framework component in Oracle Enterprise Manager 9.0.1.5 and 9.2.0.7 have unknown impact and attack vectors, aka Vuln# (1) EM01 and (2) EM02. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.co
http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.kb.cert.org/vuls/id/443265 - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26056 - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1886 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown impact and attack vectors, aka Vuln# PSE01. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26059 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 -
com/vulnerabilities/26059 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-109A.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1887 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln# JDE01. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19712 - http://secunia.com/advisories/19859 - http://www.oracle.com/technetwork/topics/security/cpuapr2006-090826.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26069 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfo
069 - http://www.vupen.com/english/advisories/2006/1571 - http://www.securityfocus.com/bid/17590 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-109A.html - http://www.vupen.com/english/advisories/2006/1397 - http://www.securityfocus.com/archive/1/432267/100/0/threaded - http://securitytracker.com/id?1015961
CVE ID: CVE-2006-1888 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpGraphy 0.9.11 and earlier allows remote attackers to bypass authentication and gain administrator privileges via a direct request to index.php with the editwelcome parameter set to 1, which can then be used to modify the main page to inject arbitrary HTML and web script. NOTE: XSS attacks are resultant from this issue, since normal functionality allows the admin to modify pages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/733 - http://securitytracker.com/id?101597
CVE Program Container: References: - http://securityreason.com/securityalert/733 - http://securitytracker.com/id?1015971 - http://www.securityfocus.com/bid/17567 - http://www.securityfocus.com/archive/1/431268/100/0/threaded - http://www.securityfocus.com/archive/1/431128/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25892 - http://www.vupen.com/english/advisories/2006/1379 - http://retrogod.altervista.org/phpgraphy_0911_adv.html - http://secunia.com/advisories/19705
CVE ID: CVE-2006-1889 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search action handler in index.php in Nils Asmussen (aka SCRIPTSOLUTION) Boardsolution 1.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the "Search for" item (keyword parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17549 - http://www.securityfocus.com/archive/1/431072/100/0/threaded - http://secunia.com/advisories/19654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25805 - ht
2/100/0/threaded - http://secunia.com/advisories/19654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25805 - http://securitytracker.com/id?1015948 - http://www.vupen.com/english/advisories/2006/1413 - http://securityreason.com/securityalert/766 - http://securityreason.com/securityalert/718
CVE ID: CVE-2006-1890 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter in (1) event.php and (2) initialize.php. NOTE: vector 2 was later reported to affect 1.4 as well. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17575 - http://secunia.com/advisories/19680 - http://securityreason.com/securityalert/767 - http://securitytracker.com/id?1016616 - http://securityreason.com/securitya
ttp://securityreason.com/securityalert/767 - http://securitytracker.com/id?1016616 - http://securityreason.com/securityalert/726 - http://www.securityfocus.com/archive/1/431125/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28347 - http://www.osvdb.org/24722 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25882 - http://www.vupen.com/english/advisories/2006/1384 - http://www.osvdb.org/24723
CVE ID: CVE-2006-1891 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Martin Scheffler betaboard 0.1 allows remote attackers to inject arbitrary web script or HTML via a user's profile, possibly using the FormVal_profile parameter. NOTE: it is not clear whether this is a distributable product or a site-specific vulnerability. If it is site-specific, then it should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1377 - http://www.securityfocus.com/bid/17556 - http://se
er: References: - http://www.vupen.com/english/advisories/2006/1377 - http://www.securityfocus.com/bid/17556 - http://securityreason.com/securityalert/765 - http://securityreason.com/securityalert/724 - http://securitytracker.com/id?1015955 - http://secunia.com/advisories/19700 - http://www.securityfocus.com/archive/1/431116/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045194.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25838
CVE ID: CVE-2006-1892 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: avast! 4 Linux Home Edition 1.0.5 allows local users to modify permissions of arbitrary files via a symlink attack on the /tmp/_avast4_ temporary directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431019/100/0/threaded - http://www.vupen.com/english/advisories/2006/1387 - http://securityreason.com/securityalert/712 - http://www.securityfocus.com/bid/17535 - http://secunia.com/advisories/19683 - http://securityreason.com/securityalert/764
CVE ID: CVE-2006-1893 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/763 - http://www.securityfocus.com/archive/1/431030/100/0/threaded - http://www.securityfocus.com/bid/17522 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25834
CVE ID: CVE-2006-1894 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in RevoBoard 1.8, as derived from PunBB, allows remote attackers to inject arbitrary web script or HTML via a substitution cipher of the email tag, which is transformed when the application's e-mail address obfuscator reverses the transformation. NOTE: it is not clear whether this is a site-specific issue; however, the claimed codebase relationship with PunBB might be relevant. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/768 -
relevant. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/768 - http://www.securityfocus.com/archive/1/430886/100/0/threaded
CVE ID: CVE-2006-1895 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute arbitrary PHP code by modifying a template in a way that (1) bypasses a loose ".*" regular expression to match BEGIN and END statements in overall_header.tpl, or (2) is used in an eval statement by includes/bbcode.php for bbcode.tpl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431017/100/0/threaded - http://www.securityfocus.com/b
m Container: References: - http://www.securityfocus.com/archive/1/431017/100/0/threaded - http://www.securityfocus.com/bid/17573 - http://securityreason.com/securityalert/769 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25888
CVE ID: CVE-2006-1896 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in phpBB allows remote authenticated users with Administration Panel access to execute arbitrary PHP code via crafted Font Colour 3 ($theme[fontcolor3] variable) and/or signature values, possibly involving the highlight functionality. NOTE: the original report does not clarify whether this issue is static code injection, eval injection, or another type of vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431015/100/0/threaded - http: