Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3503 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malformed GIF image. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.osvdb.org/
- http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.osvdb.org/27742 - http://www.kb.cert.org/vuls/id/605908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28145
CVE ID: CVE-2006-3504 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Download Validation in LaunchServices for Apple Mac OS X 10.4.7 can identify certain HTML as "safe", which could allow attackers to execute Javascript code in local context when the "Open 'safe' files after downloading" option is enabled in Safari. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - https://exchange.xforce.ibmcloud.com/vulnerabili
om/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28146 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.osvdb.org/27743
CVE ID: CVE-2006-3505 State: PUBLISHED Published: 2006-08-03T01:00:00 Last Updated: 2024-08-07T18:30:34.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Mac OS X 10.3.9 and 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted HTML document that causes WebKit to access an object that has already been deallocated. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert
advisories/2006/3101 - http://secunia.com/advisories/21253 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://www.osvdb.org/27744 - http://www.kb.cert.org/vuls/id/566132 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28149
CVE ID: CVE-2006-3506 State: PUBLISHED Published: 2006-08-21T19:00:00 Last Updated: 2024-08-07T18:30:34.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Xsan Filesystem driver on Mac OS X 10.4.7 and OS X Server 10.4.7 allows local users with Xsan write access, to execute arbitrary code via unspecified vectors related to "processing a path name." Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=304188 - http://www.vupen.com/english/advisories/2006/3315 - http://www.osvdb.org/27994 - http://www.securityfocus.com/bid/19579 - http://secunia.com/advisories/21551 - http://www.kb.cert.org/vuls/id/73
27994 - http://www.securityfocus.com/bid/19579 - http://secunia.com/advisories/21551 - http://www.kb.cert.org/vuls/id/737204 - http://securitytracker.com/id?1016711
CVE ID: CVE-2006-3507 State: PUBLISHED Published: 2006-09-21T21:00:00 Last Updated: 2024-08-07T18:30:34.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physically proximate attackers to execute arbitrary code by injecting crafted frames into a wireless network. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22068 - http://www.vupen.com/english/advisories/2006/3737 - http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/vuls/id/867796 - http://securitytracker.com/id?1016903 - h
rity-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/vuls/id/867796 - http://securitytracker.com/id?1016903 - http://www.securityfocus.com/bid/20144
CVE ID: CVE-2006-3508 State: PUBLISHED Published: 2006-09-21T21:00:00 Last Updated: 2024-08-07T18:30:34.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attackers to cause a denial of service (crash), gain privileges, and execute arbitrary code via a crafted frame that is not properly handled during scan cache updates. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22068 - http://www.vupen.com/english/advisories/2006/3737 - http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/
dvisories/2006/3737 - http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/vuls/id/589540 - http://securitytracker.com/id?1016903 - http://www.securityfocus.com/bid/20144
CVE ID: CVE-2006-3509 State: PUBLISHED Published: 2006-09-21T21:00:00 Last Updated: 2024-08-07T18:30:34.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate attackers to cause a denial of service (crash) or execute arbitrary code in third-party wireless software that uses the API via crafted frames. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22068 - http://www.vupen.com/english/advisories/2006/3737 - http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/vuls/id/563492 -
37 - http://lists.apple.com/archives/Security-announce/2006/Sep/msg00001.html - http://www.kb.cert.org/vuls/id/563492 - http://securitytracker.com/id?1016903 - http://www.securityfocus.com/bid/20144
CVE ID: CVE-2006-3510 State: PUBLISHED Published: 2006-07-11T22:00:00 Last Updated: 2024-08-07T18:30:34.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Data Service Object (RDS.DataControl) in Microsoft Internet Explorer 6 on Windows 2000 allows remote attackers to cause a denial of service (crash) via a series of operations that result in an invalid length calculation when using SysAllocStringLen, then triggers a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26955 - http://www.vupen.com/english/advisories/2006/2718 - http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html - https://exchange.xf
glish/advisories/2006/2718 - http://browserfun.blogspot.com/2006/07/mobb-8-rdsdatacontrol-url.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27621 - http://www.securityfocus.com/bid/18900
CVE ID: CVE-2006-3511 State: PUBLISHED Published: 2006-07-11T22:00:00 Last Updated: 2024-08-07T18:30:34.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the fonts property of the HtmlDlgSafeHelper object, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27649 - http://www.securityfocus.com/bid/18929 - http://browserfun.blogspot.com/2006/07/mobb-11-htmldlgsafehelper-fonts.html - http://www.vupen.com/english/advisories/2006/2743
CVE ID: CVE-2006-3512 State: PUBLISHED Published: 2006-07-11T22:00:00 Last Updated: 2024-08-07T18:30:34.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 on Windows XP allows remote attackers to cause a denial of service (crash) by setting the Enabled property of a DXTFilter ActiveX object to true, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27623 - http://www.securityfocus.com/bid/18903 - http://www.vupen.com/english/advisories/2006/2732 - http://www.osvdb.org/27014
CVE ID: CVE-2006-3513 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: danim.dll in Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the Data property of a DirectAnimation DAUserData object before it is initialized, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27622 - http://www.vupen.com/english/advisories/2006/2719 - http://browserfun.blogspot.com/2006/07/mobb-9-directanimationdauserdata-data.html - http://www.secu
visories/2006/2719 - http://browserfun.blogspot.com/2006/07/mobb-9-directanimationdauserdata-data.html - http://www.securityfocus.com/bid/18902 - http://www.osvdb.org/27013
CVE ID: CVE-2006-3514 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/actions.php in PHP-Blogger 2.2.5, and possibly earlier versions, allow remote attackers to execute arbitrary web script or HTML via the (1) name, (2) title, (3) news, (4) description, and (5) sitename parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27630 - http://www.vupen.com/english/advisories/2006/2710 - http://www.securityfocus.com/archive/1/439440/100/0/threaded - http://secunia.co
upen.com/english/advisories/2006/2710 - http://www.securityfocus.com/archive/1/439440/100/0/threaded - http://secunia.com/advisories/20989 - http://securityreason.com/securityalert/1202 - http://www.securityfocus.com/bid/18909
CVE ID: CVE-2006-3515 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the loginADP function in ajaxp.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439521/100/0/threaded - http://www.osvdb.org/27067 - http://www.securityfocus.com/archive/1/439614/100/0/threaded - http://secunia.com/advisories/20985 - http://www.securityfocus.com/bid/18897 - http://www.kapda
/439614/100/0/threaded - http://secunia.com/advisories/20985 - http://www.securityfocus.com/bid/18897 - http://www.kapda.ir/advisory-355.html - http://www.vupen.com/english/advisories/2006/2714 - http://securityreason.com/securityalert/1206
CVE ID: CVE-2006-3516 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FreeHost allow remote attackers to execute arbitrary SQL commands via (1) readme parameter to FreeHost/misc.php or (2) index parameter to FreeHost/news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438813/100/100/threaded - http://securityreason.com/securityalert/1208
CVE ID: CVE-2006-3517 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.312Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in stats.php in RW::Download, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1207 - http://www.securityfocus.com/bid/18901 - http://www.securityfocus.com/archive/1/439524/100/0/threaded
CVE ID: CVE-2006-3518 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SayfalaAltList.asp in Webvizyon Portal 2006 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/439599/100/0/threaded - http://www.vupen.com/english/advisories/2006/2737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27637 - http://www.securityfocus.com/bid/18899 - http://securityreason.com/securityalert/1203 - http://www.osvdb.org/28192 - http://securitytrac
ityfocus.com/bid/18899 - http://securityreason.com/securityalert/1203 - http://www.osvdb.org/28192 - http://securitytracker.com/id?1016463
CVE ID: CVE-2006-3519 State: PUBLISHED Published: 2006-07-11T23:00:00 Last Updated: 2024-08-07T18:30:34.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in The Banner Engine (tbe) 4.0 allow remote attackers to execute arbitrary web script or HTML via the (1) text parameter in a search action to (a) top.php, and the (2) adminpass or (3) adminlogin parameter to (b) signup.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18793 - http://secunia.com/advisories/20916 - http://securityreason.com/securityalert/1204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27549 - htt
/20916 - http://securityreason.com/securityalert/1204 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27549 - http://www.securityfocus.com/archive/1/438972/100/0/threaded - http://www.vupen.com/english/advisories/2006/2656 - http://securitytracker.com/id?1016432
CVE ID: CVE-2006-3520 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.259Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in skins/advanced/advanced1.php in Sabdrimer Pro 2.2.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pluginpath[0] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18907 - http://www.vupen.com/english/advisories/2006/2717 - https://www.exploit-db.com/exploits/1996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27627
CVE ID: CVE-2006-3521 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index/siteforge-bugs-action/proj.siteforge in SiteForge Collaborative Development Platform 1.0.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) _status, (2) _extra1, (3) _extra2, or (4) _extra3 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/siteforge-collaborative-development_15.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27223
CVE ID: CVE-2006-3522 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in an error message when trying to access a blocked web site. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016454 - http://marc.info/?l=full-disclosure&m=115253320721404&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27642 - http://marc.info/?l=full-disclosure&m=1152492982
1404&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27642 - http://marc.info/?l=full-disclosure&m=115249298204354&w=2 - http://secunia.com/advisories/20998 - http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm - http://www.securityfocus.com/archive/1/440140/100/0/threaded - http://www.vupen.com/english/advisories/2006/2731 - http://www.securityfocus.com/bid/18916 - http://www.securityfocus.com/archive/1/439641/100/0/threaded - http://marc.info/?l=full-disclosure&m=115253898206225&w=2
CVE ID: CVE-2006-3523 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clearswift MIMEsweeper for Web before 5.1.15 Hotfix allows remote attackers to cause a denial of service (crash) via an encrypted archived .RAR file, which triggers a scan error and causes the Web Policy Engine service to terminate. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27643 - http://secunia.com/advisories/20998 - http://download.mimesweeper.com/www/TechnicalDocumentation/WebReadMeHotfix5115.htm - http://www.vupen.com/english/advisories/2006/2731
CVE ID: CVE-2006-3524 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SIPfoundry sipXtapi released before 20060324 allows remote attackers to execute arbitrary code via a long CSeq field value in an INVITE message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2735 - http://www.osvdb.org/27122 - http://secunia.com/advisories/20997 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27681 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047794.html - http://lists.grok.org.uk/pipermail/full-disclosu
p://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047794.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047757.html - http://www.securityfocus.com/bid/18906 - http://www.securityfocus.com/archive/1/440135/100/0/threaded - http://securitytracker.com/id?1016455 - http://www.securityfocus.com/archive/1/439617/100/0/threaded
CVE ID: CVE-2006-3525 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in PHCDownload 1.0.0 Final and 1.0.0 Release Candidate 6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/phcdownload-sql-injection-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27238
CVE ID: CVE-2006-3526 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in guestbook.php in Sport-slo Advanced Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) name and (2) form parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27629 - http://securityreason.com/securityalert/1211 - http://www.vupen.com/english/advisories/2006/2712 - http://secunia.com/advisories/20977 - http://www.securityfocus.com/archiv
//www.vupen.com/english/advisories/2006/2712 - http://secunia.com/advisories/20977 - http://www.securityfocus.com/archive/1/439491/100/0/threaded
CVE ID: CVE-2006-3527 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, or (5) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27315 - http://www.osvdb.org/27314 - http://www.osvdb.org/27317 - http://www.osvdb.org/27316 - http://www.vupen.com/english/advisories/2006/2807 - http://securitytracker.com/id?1016447
- http://www.osvdb.org/27316 - http://www.vupen.com/english/advisories/2006/2807 - http://securitytracker.com/id?1016447 - http://www.jaascois.com/exploits/18602018/ - http://www.osvdb.org/27318 - http://www.securityfocus.com/bid/18883 - http://secunia.com/advisories/21056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27662
CVE ID: CVE-2006-3528 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Simpleboard Mambo module 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) image_upload.php and (2) file_upload.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445716/100/0/threaded - http://www.securityfocus.com/bid/18917 - http://marc.info/?l=bugtraq&m=115876919804966&w=2 - http://www.osvdb.org/28531 - http://securitytracker.com/id?1016824 - http://www.v
nfo/?l=bugtraq&m=115876919804966&w=2 - http://www.osvdb.org/28531 - http://securitytracker.com/id?1016824 - http://www.vupen.com/english/advisories/2006/2716 - https://www.exploit-db.com/exploits/1994 - http://www.osvdb.org/27421 - http://secunia.com/advisories/20981
CVE ID: CVE-2006-3529 State: PUBLISHED Published: 2006-07-12T00:00:00 Last Updated: 2024-08-07T18:30:34.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in Juniper JUNOS 6.4 through 8.0, built before May 10, 2006, allows remote attackers to cause a denial of service (kernel packet memory consumption and crash) via crafted IPv6 packets whose buffers are not released after they are processed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27654 - http://www.osvdb.org/27132 - http://www.vupen.com/english/advisories/2006/2742 - http://www.juniper.net/support/sec
54 - http://www.osvdb.org/27132 - http://www.vupen.com/english/advisories/2006/2742 - http://www.juniper.net/support/security/alerts/EXT-PSN-2006-06-017.txt - http://www.securityfocus.com/bid/18930 - http://www.juniper.net/support/security/alerts/IPv6_bug.txt - http://securitytracker.com/id?1016460 - http://www.kb.cert.org/vuls/id/294036
CVE ID: CVE-2006-3530 State: PUBLISHED Published: 2006-07-12T21:00:00 Last Updated: 2024-08-07T18:30:34.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in com_pccookbook/pccookbook.php in the PccookBook Component for Mambo and Joomla 0.3 and possibly up to 1.3.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2739 - http://securityreason.com/securityalert/1215 - http://secunia.com/advisories/21015 - https://exchange.xforce.ibmcloud.com/vulnerabil
ityreason.com/securityalert/1215 - http://secunia.com/advisories/21015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27641 - http://www.securityfocus.com/bid/18919 - http://advisories.echo.or.id/adv/adv37-matdhule-2006.txt - http://www.securityfocus.com/archive/1/439618/100/0/threaded - https://www.exploit-db.com/exploits/2024