Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
_avatar.php, (12) admin_db_utilities.php, (13) admin_forum_prune.php, (14) admin_forums.php, (15) admin_mass_email.php, (16) admin_smilies.php, (17) admin_ug_auth.php, and (18) admin_users.php, which overwrites $phpbb_root_path when the import_request_variables function is executed after $phpbb_root_path has been initialized to a static value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435705/100/0/threaded - http://www.securityfocus.com/archive/1/435407/100/0/threaded - http://www.securityfocus.com/archive/1/435611/100/0/threaded - http://securityreason.com/securityalert/1040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
11/100/0/threaded - http://securityreason.com/securityalert/1040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27368
CVE ID: CVE-2006-2829 State: PUBLISHED Published: 2006-06-05T20:00:00 Last Updated: 2024-08-07T18:06:26.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for tibhawkhma. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18300 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26938 - http://secunia.com/advisories/20431 - http://www.tibco.com/resources/mk/hawk_security_advisory.txt - http://www.kb.cert.org/vuls/id/620516 - http://securitytr
http://www.tibco.com/resources/mk/hawk_security_advisory.txt - http://www.kb.cert.org/vuls/id/620516 - http://securitytracker.com/id?1016223 - http://www.vupen.com/english/advisories/2006/2156
CVE ID: CVE-2006-2830 State: PUBLISHED Published: 2006-06-05T20:00:00 Last Updated: 2024-08-07T18:06:26.952Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/999884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26939 - http://securitytracker.com/id?1016145 - http://www.tibco.com/resources/mk/rendezvous_security_advisory.txt - http://secunia.com/
ecuritytracker.com/id?1016145 - http://www.tibco.com/resources/mk/rendezvous_security_advisory.txt - http://secunia.com/advisories/20452 - http://www.securityfocus.com/bid/18301 - http://www.vupen.com/english/advisories/2006/2155
CVE ID: CVE-2006-2831 State: PUBLISHED Published: 2006-06-06T00:00:00 Last Updated: 2024-08-07T18:06:26.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disabled within .htaccess, allows remote attackers to execute arbitrary code by uploading a file with multiple extensions, a variant of CVE-2006-2743. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18245 - http://www.securityfocus.com/archive/1/435792/100/0/threaded - http://www.debian.org/security/2006/dsa-1125 - http://secunia.com/advisories/
ocus.com/archive/1/435792/100/0/threaded - http://www.debian.org/security/2006/dsa-1125 - http://secunia.com/advisories/21244 - http://drupal.org/node/66763 - http://securityreason.com/securityalert/1042 - http://drupal.org/files/sa-2006-007/advisory.txt
CVE ID: CVE-2006-2832 State: PUBLISHED Published: 2006-06-06T00:00:00 Last Updated: 2024-08-07T18:06:27.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows remote attackers to inject arbitrary web script or HTML via the uploaded filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18245 - http://www.securityfocus.com/archive/1/435792/100/0/threaded - http://www.debian.org/security/2006/dsa-1125 - http://secunia.com/advisories/21244 - http://drupal.org/node/66763 - http://securityreason.com/s
ecurity/2006/dsa-1125 - http://secunia.com/advisories/21244 - http://drupal.org/node/66763 - http://securityreason.com/securityalert/1042 - http://drupal.org/files/sa-2006-007/advisory.txt
CVE ID: CVE-2006-2833 State: PUBLISHED Published: 2006-06-06T00:00:00 Last Updated: 2024-08-07T18:06:26.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web script or HTML via inputs that are not properly validated when the page title is output, possibly involving the $names variable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20412 - http://securityreason.com/securityalert/1041 - http://drupal.org/node/66767 - http://www.securityfocus.com/bid/18245 - https://exchange.xforce.ibmcloud.com/vulner
41 - http://drupal.org/node/66767 - http://www.securityfocus.com/bid/18245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26893 - http://www.debian.org/security/2006/dsa-1125 - http://www.vupen.com/english/advisories/2006/2112 - http://secunia.com/advisories/21244 - http://www.securityfocus.com/archive/1/435793/100/0/threaded - http://drupal.org/files/sa-2006-008/4.6.7.patch
CVE ID: CVE-2006-2834 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26744 - http://sourceforge.net/project/shownotes.php?release_id=421183&group_id=166450 - https://www.exploit-db.com/exploits/1851 - http://www.vupen.com/english/advisories/2006/2078 - http://securitytracker.com/id?1016189 - http:
db.com/exploits/1851 - http://www.vupen.com/english/advisories/2006/2078 - http://securitytracker.com/id?1016189 - http://sourceforge.net/forum/forum.php?forum_id=576672 - http://www.securityfocus.com/bid/18180
CVE ID: CVE-2006-2835 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in add.php and (2) lessid parameter in show.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26757 - http://securityreason.com/securityalert/1047 - http://www.securityfocus.com/archive/1/472798/100/0/threaded - http://www.securityfocus.com/bid/18117 - http://www.securityfocus.com/bid/18934 - http://www.securityfocus.com/a
eaded - http://www.securityfocus.com/bid/18117 - http://www.securityfocus.com/bid/18934 - http://www.securityfocus.com/archive/1/440120 - http://www.securityfocus.com/archive/1/435202/100/0/threaded
CVE ID: CVE-2006-2836 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL commands via the article_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20385 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26801 - http://www.securityfocus.com/bid/18206 - http://pridels0.blogspot.com/2006/06/lore-156-sql-injection-vuln.html - http://www.vupen.com/english/advisories/2006/2083
CVE ID: CVE-2006-2837 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via certain comment fields in the "Sign Our GuestBook" page, probably the x_Comments parameter to guestbookadd.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2079 - http://www.securityfocus.com/bid/18210 - http://colander.altervista.org/advisory/TDGuestBook.txt - http://secunia.com/advisories/20403
CVE ID: CVE-2006-2838 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections are only allowed from the local host. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016197 - http://securitytracker.com/id?1016196 - http://www.vupen.com/english/advisories/2006/2076 -
itytracker.com/id?1016197 - http://securitytracker.com/id?1016196 - http://www.vupen.com/english/advisories/2006/2076 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26799 - http://secunia.com/advisories/20407 - http://www.f-secure.com/security/fsc-2006-3.shtml
CVE ID: CVE-2006-2839 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside of the templates directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2086 - http://secunia.com/advisories/20405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26975 - http://sourceforge.net/project/shownotes.php?release_id=421453 - http://devel.webwork.ro
oud.com/vulnerabilities/26975 - http://sourceforge.net/project/shownotes.php?release_id=421453 - http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt2pt1 - http://sourceforge.net/mailarchive/forum.php?thread_id=10201693&forum_id=43257
CVE ID: CVE-2006-2840 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.pmwiki.org/wiki/PmWiki/ChangeLog - http://www.vupen.com/english/advisories/2006/2084 - http://secunia.com/advisories/20386 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26827
CVE ID: CVE-2006-2841 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) menu.php, (2) profile.php, (3) users.php, (4) cache_mngt.php, and (5) gallery_functions.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26148 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26931 - http://secunia.com/advisories/20426 - https://www.exploit-db.com/exploits/1858 - http://sourceforge.n
rabilities/26931 - http://secunia.com/advisories/20426 - https://www.exploit-db.com/exploits/1858 - http://sourceforge.net/forum/forum.php?forum_id=577084 - http://www.osvdb.org/26147 - http://www.osvdb.org/26146 - http://www.osvdb.org/26149 - http://www.vupen.com/english/advisories/2006/2107 - http://www.securityfocus.com/bid/18220 - http://www.osvdb.org/26150
CVE ID: CVE-2006-2842 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plugins array parameter. NOTE: this issue has been disputed by third parties, who state that Squirrelmail provides prominent warnings to the administrator when register_globals is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be in
is enabled. Since the varieties of administrator negligence are uncountable, perhaps this type of issue should not be included in CVE. However, the original developer has posted a security advisory, so there might be relevant real-world environments under which this vulnerability is applicable Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_17_sr.html - http://www.vupen.com/english/advisories/2007/2732 - http://www.securityfocus.com/bid/18231 - http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html - http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.16&r2=1.
sg00004.html - http://squirrelmail.cvs.sourceforge.net/squirrelmail/squirrelmail/functions/global.php?r1=1.27.2.16&r2=1.27.2.17&view=patch&pathrev=SM-1_4-STABLE - http://www.securityfocus.com/archive/1/435605/100/0/threaded - http://secunia.com/advisories/21262 - http://www.redhat.com/support/errata/RHSA-2006-0547.html - http://secunia.com/advisories/20406 - http://securitytracker.com/id?1016209 - http://www.squirrelmail.org/security/issue/2006-06-01 - http://www.vupen.com/english/advisories/2006/2101 - http://docs.info.apple.com/article.html?artnum=306172 - http://secunia.com/advisories/21159 - http://www.securityfocus.com/bid/25159 - http://www.mandriva.com/security/advisories?name=MDKSA-2
com/advisories/21159 - http://www.securityfocus.com/bid/25159 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:101 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11670 - http://secunia.com/advisories/26235 - http://secunia.com/advisories/20931
CVE ID: CVE-2006-2843 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1) REX[INCLUDE_PATH] parameter in (a) addons/import_export/pages/index.inc.php and (b) pages/community.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016213 - http://www.vupen.com/english/advisories/2006/2109 - http://secunia.com/advisories/20408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26887 - http://www.securityfocus.com/bid/182
com/advisories/20408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26887 - http://www.securityfocus.com/bid/18229 - https://www.exploit-db.com/exploits/1861 - http://www.securityfocus.com/archive/1/435733/100/0/threaded - http://securityreason.com/securityalert/1043
CVE ID: CVE-2006-2844 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to (1) simple_user/pages/index.inc.php and (2) stats/pages/index.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016213 - http://www.vupen.com/english/advisories/2006/2109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26887 - http://www.securityfocus.com/bid/18229 - http://secunia.com/advisories/20395
force.ibmcloud.com/vulnerabilities/26887 - http://www.securityfocus.com/bid/18229 - http://secunia.com/advisories/20395 - https://www.exploit-db.com/exploits/1861 - http://www.securityfocus.com/archive/1/435733/100/0/threaded - http://securityreason.com/securityalert/1043
CVE ID: CVE-2006-2845 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016213 - http://www.vupen.com/english/advisories/2006/2109 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26887 - http://www.securityfocus.com/bid/18229 - http://secunia.com/advisories/20395 - https://www.exploit-db.com/exploits
887 - http://www.securityfocus.com/bid/18229 - http://secunia.com/advisories/20395 - https://www.exploit-db.com/exploits/1861 - http://www.securityfocus.com/archive/1/435733/100/0/threaded - http://securityreason.com/securityalert/1043
CVE ID: CVE-2006-2846 State: PUBLISHED Published: 2006-06-06T20:03:00Z Last Updated: 2024-09-16T22:57:03.898Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18217
CVE ID: CVE-2006-2847 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26937 - http://www.securityfocus.com/archive/1/435735/100/0/threaded - https://www.exploit-db.com/exploits/1859 - http://secunia.com/advisories/20419 - http://www.vupen.com/english/advisories/2006/2114 - http://www.securityfocus.com/bid/18235
CVE ID: CVE-2006-2848 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.877Z Vendors: n/a Products: n/a Problem Types: n/a Description: links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified txtAdministrativePassword field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435735/100/0/threaded - https://www.exploit-db.com/exploits/1859
CVE ID: CVE-2006-2849 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote attackers to execute arbitrary PHP code via a URL in the bhconfig[bhfilepath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2110 - http://www.securityfocus.com/bid/18234 - http://secunia.com/advisories/20400 - http://www.securityfocus.com/archive/1/435728/100/0/threaded - http://www.osvdb.org/25948 - http://securitytracker.com/id?1016207 -
ecurityfocus.com/archive/1/435728/100/0/threaded - http://www.osvdb.org/25948 - http://securitytracker.com/id?1016207 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26936 - https://www.exploit-db.com/exploits/1860
CVE ID: CVE-2006-2850 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18267 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26902 - http://pridels0.blogspot.com/2006/06/labwiki-xss-vuln.html - http://www.vupen.com/english/advisories/2006/2123 - http://secunia.com/advisories/20417 - http://www.osvdb.org/25963
CVE ID: CVE-2006-2851 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly handled when the client is using Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26904 - http://jvn.jp/jp/JVN%2397636431/index.html - http://sourceforge.net/project/shownotes.php?release_id=422371 - htt
6904 - http://jvn.jp/jp/JVN%2397636431/index.html - http://sourceforge.net/project/shownotes.php?release_id=422371 - http://secunia.com/advisories/20418 - http://www.vupen.com/english/advisories/2006/2124
CVE ID: CVE-2006-2852 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:26.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter in (1) index.php, (2) feedback.php, and (3) printfriendly.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/advisory/major_rls7.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26918 - http://www.osvdb.org/displayvuln.php?osvdb_id=25982 - http://securitytracker.com/id?1016
oud.com/vulnerabilities/26918 - http://www.osvdb.org/displayvuln.php?osvdb_id=25982 - http://securitytracker.com/id?1016220 - http://securityreason.com/securityalert/1045 - http://www.vupen.com/english/advisories/2006/2141 - http://www.osvdb.org/25981 - http://secunia.com/advisories/20463 - http://www.osvdb.org/25983 - http://www.securityfocus.com/archive/1/435870/100/0/threaded - http://www.securityfocus.com/bid/18258
CVE ID: CVE-2006-2853 State: PUBLISHED Published: 2006-06-06T20:03:00 Last Updated: 2024-08-07T18:06:27.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.security.nnov.ru/Mdocument929.html - http://downloads.securityfocus.com/vulnerabilities/exploits/abarcar_sql_poc.txt - http://www.vupen.com/english/advisories/2006/2194 - http://www.osvdb.org/26226 - http://www.securityfocus.com/bid/18218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26993 -
.osvdb.org/26226 - http://www.securityfocus.com/bid/18218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26993 - http://secunia.com/advisories/20504