Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1781 State: PUBLISHED Published: 2006-04-13T10:00:00 Last Updated: 2024-08-07T17:27:29.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. NOTE: It was later reported that 1.4.2 and earlier are affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3530 - http://secunia.com/advisories/19688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25774 - http://www.vupen.com/english/advisories/2006/1350 - http://www.securityf
nge.xforce.ibmcloud.com/vulnerabilities/25774 - http://www.vupen.com/english/advisories/2006/1350 - http://www.securityfocus.com/bid/17546 - http://pridels0.blogspot.com/2006/04/monstertoplist.html - http://www.securityfocus.com/bid/23074 - http://www.osvdb.org/24650
CVE ID: CVE-2006-1782 State: PUBLISHED Published: 2006-04-13T10:00:00 Last Updated: 2024-08-07T17:27:28.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24565 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1 - http://secunia.com/advisories/19638 -
b.org/24565 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102113-1 - http://secunia.com/advisories/19638 - http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm - http://www.osvdb.org/24563 - http://www.osvdb.org/24568 - http://www.osvdb.org/24567 - http://www.vupen.com/english/advisories/2006/1334 - http://www.securityfocus.com/bid/17479 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1840 - http://securitytracker.com/id?1015903 - http://secunia.com/advisories/21493 - http://www.osvdb.org/24566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25747 - http://www.osvdb.org/24564
CVE ID: CVE-2006-1783 State: PUBLISHED Published: 2006-04-13T10:00:00 Last Updated: 2024-08-07T17:27:28.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML via the URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430868/100/0/threaded - http://www.securityfocus.com/bid/17495
CVE ID: CVE-2006-1784 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:28.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1341 - http://www.securityfocus.com/bid/17514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25780 - https://www.exploit-db.com/exploits/1665 - http://secunia.com/advisories/19642
CVE ID: CVE-2006-1785 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:28.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Document Server for Reader Extensions 6.0 allows remote authenticated users to inject arbitrary web script via a leading (1) ftp or (2) http URI in the ReaderURL variable in the "Update Download Site" section of ads-readerext. NOTE: it is not clear whether the vendor advisory addresses this issue. In addition, since the issue requires administrative privileges to exploit, it is not clear whether this crosses security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com
osses security boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430869/100/0/threaded - http://www.osvdb.org/24588 - http://www.adobe.com/support/techdocs/322699.html - http://secunia.com/advisories/15924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25770 - http://secunia.com/secunia_research/2005-68/advisory/ - http://www.vupen.com/english/advisories/2006/1342 - http://www.securityfocus.com/bid/17500
CVE ID: CVE-2006-1786 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:28.746Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe Document Server for Reader Extensions 6.0 allows remote attackers to inject arbitrary web script or HTML via (1) the actionID parameter in ads-readerext and (2) the op parameter in AlterCast. NOTE: it is not clear whether the vendor advisory addresses this issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430869/100/0/threaded - http://www.osvdb.org/24589 - http://www.adobe.com/support/techdocs/322699.html - http://ww
ive/1/430869/100/0/threaded - http://www.osvdb.org/24589 - http://www.adobe.com/support/techdocs/322699.html - http://www.osvdb.org/24590 - http://secunia.com/advisories/15924 - http://secunia.com/secunia_research/2005-68/advisory/ - http://www.vupen.com/english/advisories/2006/1342 - http://www.securityfocus.com/bid/17500 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25771
CVE ID: CVE-2006-1787 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:28.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Document Server for Reader Extensions 6.0 includes a user's session (jsession) ID in the HTTP Referer header, which allows remote attackers to gain access to PDF files that are being processed within that session. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430869/100/0/threaded - http://www.adobe.com/support/techdocs/331915.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25773 - http://www.adobe.com/support/techdocs/322699.html - http://secunia.com/
ange.xforce.ibmcloud.com/vulnerabilities/25773 - http://www.adobe.com/support/techdocs/322699.html - http://secunia.com/advisories/15924 - http://secunia.com/secunia_research/2005-68/advisory/ - http://www.vupen.com/english/advisories/2006/1342 - http://www.securityfocus.com/bid/17500
CVE ID: CVE-2006-1788 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:29.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Document Server for Reader Extensions 6.0, during log on, provides different error messages depending on whether the user ID is valid or invalid, which allows remote attackers to more easily identify valid user IDs via brute force attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/430869/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25772 - http://www.adobe.com/support/techdocs/331917.html - http://secunia.com/advisories/15924 - http://
ulnerabilities/25772 - http://www.adobe.com/support/techdocs/331917.html - http://secunia.com/advisories/15924 - http://secunia.com/secunia_research/2005-68/advisory/ - http://www.vupen.com/english/advisories/2006/1342 - http://www.securityfocus.com/bid/17500
CVE ID: CVE-2006-1789 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:27:29.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to read arbitrary files via the $className variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25860 - http://www.securityfocus.com/bid/17519 - http://www.securityfocus.com/archive/1/431029/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html - http://www.osvdb.org/24
31029/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html - http://www.osvdb.org/24862 - http://www.vupen.com/english/advisories/2006/1353 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php
CVE ID: CVE-2006-1790 State: PUBLISHED Published: 2006-04-14T19:00:00 Last Updated: 2024-08-07T17:27:29.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression fix in Mozilla Firefox 1.0.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the InstallTrigger.install method, which leads to memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/275-1/ - http://www.redhat.com/support/errata/RHSA-2006-0330.html - http://secunia.com/advisories/19902 - ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc - https://usn.ubuntu.com/276-1/ - http://www.security
patches.sgi.com/support/free/security/advisories/20060404-01-U.asc - https://usn.ubuntu.com/276-1/ - http://www.securityfocus.com/archive/1/438730/100/0/threaded - http://secunia.com/advisories/19941 - http://secunia.com/advisories/19780 - http://www.redhat.com/support/errata/RHSA-2006-0328.html - http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml - http://secunia.com/advisories/21622 - http://secunia.com/advisories/19862 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.debian.org/security/2006/dsa-1051 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html - https://us
n.org/security/2006/dsa-1051 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html - https://usn.ubuntu.com/271-1/ - http://secunia.com/advisories/19714 - http://www.redhat.com/support/errata/RHSA-2006-0329.html - http://www.mozilla.org/security/announce/2006/mfsa2006-11.html - http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml - http://secunia.com/advisories/19811 - http://secunia.com/advisories/19794 - http://secunia.com/advisories/19746 - http://secunia.com/advisories/21033 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 - http://secunia.com/advisories/19759 - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html - http
1 - http://secunia.com/advisories/19759 - http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html - http://www.securityfocus.com/archive/1/436338/100/0/threaded - http://www.vupen.com/english/advisories/2006/1356 - http://www.securityfocus.com/archive/1/438730/100/0/threaded - http://secunia.com/advisories/19729 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11202 - http://secunia.com/advisories/20051 - http://secunia.com/advisories/19863 - ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt - http://www.securityfocus.com/archive/1/436296/100/0/threaded - http://www.securityfocus.com/bid/17516 - http://sunsolve.sun.
://www.securityfocus.com/archive/1/436296/100/0/threaded - http://www.securityfocus.com/bid/17516 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html - http://secunia.com/advisories/19852 - http://secunia.com/advisories/19721 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25809 - http://www.gentoo.org/security/en/glsa/glsa-200605-09.xml - http://secunia.com/advisories/19631 - http://secunia.com/advisories/19950 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1266 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 - http://www.debian.or
l%3Aorg.mitre.oval%3Adef%3A1266 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 - http://www.debian.org/security/2006/dsa-1046 - http://www.debian.org/security/2006/dsa-1044
CVE ID: CVE-2006-1791 State: PUBLISHED Published: 2006-04-14T23:00:00 Last Updated: 2024-08-07T17:27:28.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in acc.php in QuickBlogger 1.4 allows remote attackers to read or include arbitrary local files via the request parameter. NOTE: this issue can also produce resultant XSS when the associated include statement fails. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25795 - http://www.securityfocus.com/archive/1/431059/100/0/threaded - http://secunia.com/advisories/15942 - http://www.securityfocus.com/archive/1/430878/100/0/thr
/1/431059/100/0/threaded - http://secunia.com/advisories/15942 - http://www.securityfocus.com/archive/1/430878/100/0/threaded
CVE ID: CVE-2006-1792 State: PUBLISHED Published: 2006-04-15T10:00:00Z Last Updated: 2024-09-17T00:56:41.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probably a different vulnerability than CVE-2006-1337. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - http://www.mailenable.com/enterprisehistory.asp - http://www.mailenab
ttp://www.mailenable.com/professionalhistory.asp - http://www.mailenable.com/enterprisehistory.asp - http://www.mailenable.com/standardhistory.asp
CVE ID: CVE-2006-1793 State: PUBLISHED Published: 2006-04-17T10:00:00 Last Updated: 2024-08-07T17:27:29.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in runCMS 1.2 and earlier allows remote attackers to read arbitrary files via the bbPath[path] parameter to (1) class.forumposts.php and (2) forumpollrenderer.php. NOTE: this issue is closely related to CVE-2006-0659. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16578 - http://www.securityfocus.com/archive/1/424708 - http://retrogod.altervista.org/runcms_13a_xpl.html
CVE ID: CVE-2006-1794 State: PUBLISHED Published: 2006-04-17T10:00:00 Last Updated: 2024-08-07T17:27:28.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via (1) the $username variable in the mosGetParam function and (2) the $task parameter in the mosMenuCheck function in (a) includes/mambo.php; and (3) the $filter variable to the showCategory function in the com_content component (content.php). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18935 - http://www.osvdb.org/23402 - http://www.vupe
CVE Program Container: References: - http://secunia.com/advisories/18935 - http://www.osvdb.org/23402 - http://www.vupen.com/english/advisories/2006/0719 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html - http://www.securityfocus.com/bid/16775 - http://www.gulftech.org/?node=research&article_id=00104-02242006 - http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24951 - http://www.osvdb.org/23503
CVE ID: CVE-2006-1795 State: PUBLISHED Published: 2006-04-17T10:00:00 Last Updated: 2024-08-07T17:27:28.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in tablepublisher.cgi in UPDI Network Enterprise @1 Table Publisher 2006-03-23 allows remote attackers to inject arbitrary web script or HTML via the Title of Table field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17642 - http://secunia.com/advisories/19723 - http://www.osvdb.org/24238
CVE ID: CVE-2006-1796 State: PUBLISHED Published: 2006-04-17T20:00:00 Last Updated: 2024-08-07T17:27:28.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the paging links functionality in template-functions-links.php in Wordpress 1.5.2, and possibly other versions before 2.0.1, allows remote attackers to inject arbitrary web script or HTML to Internet Explorer users via the request URI ($_SERVER['REQUEST_URI']). Additional Analyst Notes: - CVE Program Container: References: - http://trac.wordpress.org/ticket/1686 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=328909
CVE ID: CVE-2006-1797 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in NetBSD-current before September 28, 2005 allows local users to cause a denial of service (system crash) by using the SIOCGIFALIAS ioctl to gather information on a non-existent alias of a network interface, which causes a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17497 - http://archives.neohapsis.com/archives/netbsd/2006-q2/0014.html - http://www.osvdb.org/24578 - http://securitytracker.com/id?1015908 - https://exchange.xforce.ibmclo
/2006-q2/0014.html - http://www.osvdb.org/24578 - http://securitytracker.com/id?1015908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25766 - http://secunia.com/advisories/19615
CVE ID: CVE-2006-1798 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rateit.php in RateIt 2.2 allows remote attackers to execute arbitrary SQL commands via the rateit_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25801 - http://www.securityfocus.com/archive/1/431859/100/0/threaded - http://evuln.com/vulns/124/summary.html - http://www.securityfocus.com/bid/17518 - http://securitytracker.com/id?1015983 - http://www.vupen.com/english/advisories/2006/1358 - http://www.osvdb.org/2462
- http://securitytracker.com/id?1015983 - http://www.vupen.com/english/advisories/2006/1358 - http://www.osvdb.org/24622 - http://secunia.com/advisories/19637
CVE ID: CVE-2006-1799 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: censtore.cgi in Censtore 7.3.002 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1669 - http://secunia.com/advisories/19666 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25905 - http://www.securityfocus.com/bid/17515 - http://www.vupen.com/english/advisories/2006/1352
CVE ID: CVE-2006-1800 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/25788 - http://www.securityfo
exploits/SimpleBBS-RCE-posts.php.pl - https://exchange.xforce.ibmcloud.com/vulnerabilities/25788 - http://www.securityfocus.com/archive/1/430872 - http://www.securityfocus.com/bid/17501 - http://www.worlddefacers.de/Public/WD-SMPL.txt
CVE ID: CVE-2006-1801 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in planetsearchplus.php in planetSearch+ allows remote attackers to inject arbitrary web script or HTML via the search_exp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19681 - http://www.securityfocus.com/bid/17527 - http://www.vupen.com/english/advisories/2006/1368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25832 - http://www.securityfocus.com/archive/1/431033/100/0/threaded - http://d4igoro.blogspot.com/2006/04/p
erabilities/25832 - http://www.securityfocus.com/archive/1/431033/100/0/threaded - http://d4igoro.blogspot.com/2006/04/planetsearch-xss-vulnerabilities.html
CVE ID: CVE-2006-1802 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in TinyWebGallery 1.3 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the twg_album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1369 - http://securityreason.com/securityalert/717 - http://www.securityfocus.com/archive/1/431069/100/0/threaded - http://secunia.com/advisories/19660 - http://www.securityfocus.com/bid/17536 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
unia.com/advisories/19660 - http://www.securityfocus.com/bid/17536 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25831 - http://www.securityfocus.com/archive/1/436451/30/4560/threaded
CVE ID: CVE-2006-1803 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to inject arbitrary web script or HTML via the sql_query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1372 - http://secunia.com/advisories/19659 - http://www.securityfocus.com/archive/1/430902/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25796 - http://www.securityfocus.com/archive/1/431013/100/0/threaded - http://secunia.com/adv
mcloud.com/vulnerabilities/25796 - http://www.securityfocus.com/archive/1/431013/100/0/threaded - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html - http://www.securityfocus.com/bid/17487
CVE ID: CVE-2006-1804 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:29.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sql.php in phpMyAdmin 2.7.0-pl1 allows remote attackers to execute arbitrary SQL commands via the sql_query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1372 - http://secunia.com/advisories/19659 - http://www.securityfocus.com/archive/1/431013/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25858 - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html
CVE ID: CVE-2006-1805 State: PUBLISHED Published: 2006-04-18T10:00:00 Last Updated: 2024-08-07T17:27:28.853Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in PowerClan 1.14 allows remote attackers to execute arbitrary SQL commands via the memberid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://d4igoro.blogspot.com/2006/04/powerclan-114-sql-injection.html - http://secunia.com/advisories/19689 - http://www.vupen.com/english/advisories/2006/1371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25876 - http://www.securityfocus.com/bid/17528 - http://www.securityfocus.com/archive/1/431005/100/0/thread