Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3016 State: PUBLISHED Published: 2006-06-14T23:00:00 Last Updated: 2024-08-07T18:16:04.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting (XSS), and HTTP response splitting vulnerabilities. NOTE: while the nature of the vulnerability is unspecified, it is likely that this is related to a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual
o a violation of an expectation by PHP applications that the session name is alphanumeric, as implied in the PHP manual for session_name(). Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-683 - http://www.redhat.com/support/errata/RHSA-2006-0669.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10597 - http://secunia.com/advisories/22487 - http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://secunia.com/advisories/21050 - http://secunia.com/advisories/23247 - http://secunia.com/advisories/22004 - http://support.avaya.com/
advisories/21050 - http://secunia.com/advisories/23247 - http://secunia.com/advisories/22004 - http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm - http://www.redhat.com/support/errata/RHSA-2006-0682.html - http://www.ubuntu.com/usn/usn-320-1 - http://www.php.net/release_5_1_3.php - http://secunia.com/advisories/22440 - http://www.securityfocus.com/archive/1/447866/100/0/threaded - http://secunia.com/advisories/22069 - http://secunia.com/advisories/22225 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://www.osvdb.org/25253 - http://secunia.com/advisories/19927 - http://securitytracker.com/id?1016306 - ftp://patches.sgi.com/support/free/security/advisories/2
.com/advisories/19927 - http://securitytracker.com/id?1016306 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://www.securityfocus.com/bid/17843 - http://rhn.redhat.com/errata/RHSA-2006-0736.html
CVE ID: CVE-2006-3017 State: PUBLISHED Published: 2006-06-14T23:00:00 Last Updated: 2024-08-07T18:16:05.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: zend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause zend_hash_del to delete the wrong element, which prevents a variable from being unset even when the PHP unset function is called, which might cause the variable's value to be used in security-relevant operations. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21723 - https://issues.rpath.com/browse/RPL-683 - http://secunia.com/advisories/21252 - http://secunia.com/advisories/21202 - http:
ps://issues.rpath.com/browse/RPL-683 - http://secunia.com/advisories/21252 - http://secunia.com/advisories/21202 - http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&view=log - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://cvs.php.net/viewcvs.cgi/Zend/zend_hash.c?hideattic=0&r1=1.87.4.8.2.1&r2=1.87.4.8.2.2 - http://www.debian.org/security/2006/dsa-1206 - http://secunia.com/advisories/21050 - http://www.novell.com/linux/security/advisories/2006_31_php.html - http://www.securityfocus.com/archive/1/442437/100/0/threaded - http://www.osvdb.org/26466 - http://secunia.com/advisories/22713 - http://www.redhat.com/support/errata/RHSA-2006-0568.html - http://secunia.com/a
- http://secunia.com/advisories/22713 - http://www.redhat.com/support/errata/RHSA-2006-0568.html - http://secunia.com/advisories/21135 - http://www.php.net/release_5_1_3.php - http://www.securityfocus.com/archive/1/447866/100/0/threaded - http://securitytracker.com/id?1016649 - http://rhn.redhat.com/errata/RHSA-2006-0549.html - http://secunia.com/advisories/22225 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/21125 - http://secunia.com/advisories/19927 - http://www.osvdb.org/25255 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27396 - http://securitytracker.com/id?1016306 - http://secunia.com/advisories/21031 - http://www.redhat.com
nerabilities/27396 - http://securitytracker.com/id?1016306 - http://secunia.com/advisories/21031 - http://www.redhat.com/support/errata/RHSA-2006-0567.html - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10118 - http://www.hardened-php.net/hphp/zend_hash_del_key_or_index_vulnerability.html - http://support.avaya.com/elmodocs2/security/ASA-2006-175.htm - https://usn.ubuntu.com/320-1/ - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0166.html - http://www.novell.com/linux/security/advisories/2006_34_php4.html - http://www.securityfocus.com/bid/17843
CVE ID: CVE-2006-3018 State: PUBLISHED Published: 2006-06-14T23:00:00 Last Updated: 2024-08-07T18:16:04.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the session extension functionality in PHP before 5.1.3 has unknown impact and attack vectors related to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25254 - http://secunia.com/advisories/21050 - http://www.ubuntu.com/usn/usn-320-1 - http://www.php.net/release_5_1_3.php - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/21125 - http://secunia.com/advisories/19927 - http://securitytracker.com/id?
SA-2006:122 - http://secunia.com/advisories/21125 - http://secunia.com/advisories/19927 - http://securitytracker.com/id?1016306 - http://www.securityfocus.com/bid/17843
CVE ID: CVE-2006-3019 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPCMS_INCLUDEPATH parameter to files in parser/include/ including (1) class.parser_phpcms.php, (2) class.session_phpcms.php, (3) class.edit_phpcms.php, (4) class.http_indexer_phpcms.php, (5) class.cache_phpcms.php, (6) class.search_phpcms.php, (7) class.lib_indexer_universal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the cl
rsal_phpcms.php, and (8) class.layout_phpcms.php, (9) parser/plugs/counter.php, and (10) parser/parser.php. NOTE: the class.cache_phpcms.php vector was also reported to affect 1.1.7. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20573 - http://securityreason.com/securityalert/1106 - http://www.osvdb.org/26394 - http://www.osvdb.org/26396 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27067 - http://www.osvdb.org/26395 - http://www.osvdb.org/26397 - http://www.vupen.com/english/advisories/2006/2302 - http://www.securityfocus.com/archive/1/455302/100/0/threaded - http://www.securityfocus.com/archive/1/436893/100/0/threaded - http://www.o
yfocus.com/archive/1/455302/100/0/threaded - http://www.securityfocus.com/archive/1/436893/100/0/threaded - http://www.osvdb.org/26391 - http://www.osvdb.org/26390 - http://www.securityfocus.com/bid/21768 - http://www.osvdb.org/26389 - http://www.osvdb.org/26392 - http://www.osvdb.org/26388 - http://www.osvdb.org/26393
CVE ID: CVE-2006-3020 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) image and (2) PublisedDate parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20537 - http://www.vupen.com/english/advisories/2006/2299 - http://pridels0.blogspot.com/2006/06/ws-album-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27056 - http://www.attrition.org/pipermail/vim/2006-
ss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27056 - http://www.attrition.org/pipermail/vim/2006-June/000860.html
CVE ID: CVE-2006-3021 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 4.1 PLUS and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) n and (2) d parameters in (a) login.asp and the d parameter in (b) igallery.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27036 - http://www.vupen.com/english/advisories/2006/2306 - http://pridels0.blogspot.com/2006/06/i-gallery-xss-vuln.html - http://secunia.com/advisories/20610
CVE ID: CVE-2006-3022 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in zoom.php in fipsGallery 1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2294 - http://pridels0.blogspot.com/2006/06/fipsgallery-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27077 - http://secunia.com/advisories/20559
CVE ID: CVE-2006-3023 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in thumbnails.asp in Uapplication Uphotogallery 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) s and (2) block parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27034 - http://www.vupen.com/english/advisories/2006/2307 - http://pridels0.blogspot.com/2006/06/uphotogallery-xss-vuln.html
CVE ID: CVE-2006-3024 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EvGenius Counter 3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the page parameter in (1) monthly.php and (2) daily.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26423 - http://pridels0.blogspot.com/2006/06/evgenius-counter-xss-vuln.html - http://secunia.com/advisories/20546 - http://securitytracker.com/id?1016281 - http://www.vupen.com/english/advisories/2006/2309 - http://www.osvdb.org/26424
http://securitytracker.com/id?1016281 - http://www.vupen.com/english/advisories/2006/2309 - http://www.osvdb.org/26424 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27078
CVE ID: CVE-2006-3025 State: PUBLISHED Published: 2006-06-15T10:00:00Z Last Updated: 2024-09-16T21:58:01.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cal.PHP3 in Chris Lea Lucid Calendar 0.22 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18351
CVE ID: CVE-2006-3026 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ClickGallery 5.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gallery_id parameter in gallery.asp and (2) parentcurrentpage parameter in view_gallery.asp. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/clickgallery-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27037 - http://www.vupen.com/english/advisories/2006/2315 - http://secunia.com/advisories/20614
CVE ID: CVE-2006-3027 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) CAT_ID parameter in (a) subphotos.asp and (b) subLevel2.asp, the (2) AL_ID parameter in (c) photo.asp, and the (3) SUB_ID parameter in (d) subLevel2.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2316 - http://www.securityfocus.com/bid/21742 - http://www.vupen.com/english/advisories/2006/5160 - https://exchange.xfo
2316 - http://www.securityfocus.com/bid/21742 - http://www.vupen.com/english/advisories/2006/5160 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27035 - http://pridels0.blogspot.com/2006/06/ephotos-vuln.html - http://secunia.com/advisories/23525 - http://www.osvdb.org/26366 - https://www.exploit-db.com/exploits/2986 - http://www.osvdb.org/26365 - http://www.osvdb.org/26367 - http://secunia.com/advisories/20609
CVE ID: CVE-2006-3028 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-June/000863.html - http://www.osvdb.org/26428 - http://secunia.com/advisories/20536 - http://www.vupen.com/english/advisories/2006/2313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27060 - https://w
tp://www.vupen.com/english/advisories/2006/2313 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27060 - https://www.exploit-db.com/exploits/1908
CVE ID: CVE-2006-3029 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in ClickTech Clickcart 6.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20527 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27057 - http://www.vupen.com/english/advisories/2006/2297 - http://pridels0.blogspot.com/2006/06/clickcart-60-xss.html - http://www.osvdb.org/26342
CVE ID: CVE-2006-3030 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.291Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in DwZone Shopping Cart 1.1.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ToCategory and (2) FromCategory parameters to (a) ProductDetailsForm.asp and (3) UserName and (4) Password parameters to (b) LogIn/VerifyUserLog.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20603 - http://www.osvdb.org/26402 - http://www.osvdb.org/26401 - http://www.vupen.com/english/advisories/2006/2291 - h
/20603 - http://www.osvdb.org/26402 - http://www.osvdb.org/26401 - http://www.vupen.com/english/advisories/2006/2291 - http://pridels0.blogspot.com/2006/06/dwzone-shopping-cart-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27032
CVE ID: CVE-2006-3031 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.asp in fipsCMS 4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) w, (2) phcat, (3) dayid, and (4) calw parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/fipscms-v45-xss-vuln.html - http://secunia.com/advisories/20617 - http://www.vupen.com/english/advisories/2006/2293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27076
CVE ID: CVE-2006-3032 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:04.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 (trial), allow remote attackers to inject arbitrary web script or HTML via the (1) catname and (2) total parameters in (a) displaypic.asp, and the (3) catname parameter in (b) displaythumbs.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26398 - http://secunia.com/advisories/20604 - http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html - http://www.o
ecunia.com/advisories/20604 - http://pridels0.blogspot.com/2006/06/xtreme-asp-photo-gallery-xss-vuln.html - http://www.osvdb.org/26399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27033 - http://www.vupen.com/english/advisories/2006/2292
CVE ID: CVE-2006-3033 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.697Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyScrapbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input box in singlepage.php when submitting scrapbook pages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18398 - http://www.securityfocus.com/archive/1/436792/100/0/threaded - http://secunia.com/advisories/20599 - http://www.osvdb.org/26413
CVE ID: CVE-2006-3034 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyScrapbook 3.1 allows remote attackers to obtain sensitive information via a direct request to files in the txt-db-api directory such as txt-db-api/sql.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436792/100/0/threaded - http://www.vupen.com/english/advisories/2006/2311 - http://secunia.com/advisories/20599 - http://www.osvdb.org/26414 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27165
CVE ID: CVE-2006-3035 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in addwords.php in MyScrapbook 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) comment parameters. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2311
CVE ID: CVE-2006-3036 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:06.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) imgdir parameter in (a) index.php, and the (2) w, (3) h, and (4) t parameters in (b) popup.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27127 - http://www.osvdb.org/26508 - http://www.securityfocus.com/bid/18414 - http://securityreason.com/securityalert/1100 - http://secunia.com/advisories/20652 - http:
securityfocus.com/bid/18414 - http://securityreason.com/securityalert/1100 - http://secunia.com/advisories/20652 - http://www.securityfocus.com/archive/1/436959/100/0/threaded - http://www.osvdb.org/26507
CVE ID: CVE-2006-3037 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in publish.php in ST AdManager Lite allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) description, (3) article, (4) bio, and (5) name parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27161 - http://www.vupen.com/english/advisories/2006/2303 - http://secunia.com/advisories/20598 - http://www.securityfocus.com/archive/1/436657/30/0/threaded
CVE ID: CVE-2006-3038 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been addressed and fixed." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20586 - http://www.vupen.com/english/advisories/2006/2344 - http://www.attrition.org/pipermail/vim/2006-August/000983.ht
20586 - http://www.vupen.com/english/advisories/2006/2344 - http://www.attrition.org/pipermail/vim/2006-August/000983.html - http://www.securityfocus.com/archive/1/444136/100/0/threaded - http://www.securityfocus.com/archive/1/436805
CVE ID: CVE-2006-3039 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Cescripts Realty Home Rent allows remote attackers to inject arbitrary web script or HTML via the sel_menu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been addressed and fixed." Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-August/000983.html - http://secunia.com/advisories/20584 - http://www.securityfocus.com/archive/1/444136/1
mail/vim/2006-August/000983.html - http://secunia.com/advisories/20584 - http://www.securityfocus.com/archive/1/444136/100/0/threaded - http://www.vupen.com/english/advisories/2006/2343 - http://www.securityfocus.com/archive/1/436805
CVE ID: CVE-2006-3040 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T18:16:05.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436993/100/0/threaded - http://www.securityfocus.com/archive/1/437266/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/
d - http://www.securityfocus.com/archive/1/437266/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27122 - http://www.osvdb.org/27455 - http://securityreason.com/securityalert/1105