Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2162 State: PUBLISHED Published: 2006-05-03T21:00:00 Last Updated: 2024-08-07T17:43:27.424Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in CGI scripts in Nagios 1.x before 1.4 and 2.x before 2.3 allows remote attackers to execute arbitrary code via a negative content length (Content-Length) HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200605-07.xml - https://usn.ubuntu.com/282-1/ - http://www.debian.org/security/2006/dsa-1072 - http://www.novell.com/linux/security/advisories/2006_05_19.html - http://www.nagios.org/development/changelog.php - http://www.vupen.com/englis
inux/security/advisories/2006_05_19.html - http://www.nagios.org/development/changelog.php - http://www.vupen.com/english/advisories/2006/1662 - http://secunia.com/advisories/19998 - http://secunia.com/advisories/19991 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26253 - http://secunia.com/advisories/20013 - http://secunia.com/advisories/20215 - https://sourceforge.net/mailarchive/forum.php?thread_id=10297806&forum_id=7890 - http://www.securityfocus.com/bid/17879 - http://secunia.com/advisories/20247
CVE ID: CVE-2006-2163 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.964Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inject arbitrary web script or HTML via the setbackurl parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1609 - http://pridels0.blogspot.com/2006/04/pinnacle-cart-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26162 - http://www.securityfocus.com/bid/17794 - http://secunia.com/advisories/19878
CVE ID: CVE-2006-2164 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php, and (2) prod_id parameter in (c) cart.php and (d) product_info.php. NOTE: this issue also produces resultant full path disclosure from invalid SQL queries. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26178
Program Container: References: - http://www.osvdb.org/25639 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26178 - http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html - http://www.osvdb.org/25638 - http://www.osvdb.org/25637 - http://www.osvdb.org/25640
CVE ID: CVE-2006-2165 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Avactis Shopping Cart 0.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) category_id parameter in (a) store_special_offers.php and (b) store.php and (2) prod_id parameter in (c) product_info.php. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26179 - http://pridels0.blogspot.com/2006/05/avactis-shopping-cart
https://exchange.xforce.ibmcloud.com/vulnerabilities/26179 - http://pridels0.blogspot.com/2006/05/avactis-shopping-cart-vuln.html - http://www.osvdb.org/25641 - http://www.osvdb.org/25642 - http://www.osvdb.org/25643
CVE ID: CVE-2006-2166 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the HTTP management interface in Cisco Unity Express (CUE) 2.2(2) and earlier, when running on any CUE Advanced Integration Module (AIM) or Network Module (NM), allows remote authenticated attackers to reset the password for any user with an expired password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19881 - http://www.vupen.com/english/advisories/2006/1613 - http://www.osvdb.org/25165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26165
/english/advisories/2006/1613 - http://www.osvdb.org/25165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26165 - http://securitytracker.com/id?1016015 - http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml - http://www.securityfocus.com/bid/17775
CVE ID: CVE-2006-2167 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SloughFlash SF-Users 1.0, possibly in register.php, allows remote attackers to inject arbitrary web script or HTML by setting the username field to contain JavaScript in the SRC attribute of an IMG element. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26215 - http://www.securityfocus.com/bid/17783 - http://securityreason.com/securityalert/831 - http://secunia.com/advisories/19932 - http://www.vupen.com/english/a
783 - http://securityreason.com/securityalert/831 - http://secunia.com/advisories/19932 - http://www.vupen.com/english/advisories/2006/1637 - http://www.securityfocus.com/archive/1/432727/100/0/threaded
CVE ID: CVE-2006-2168 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileProtection Express 1.0.1 and earlier allows remote attackers to bypass authentication via a cookie with an Admin value of 1. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/835 - http://www.securityfocus.com/archive/1/432728/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26225 - http://www.securityfocus.com/bid/17786
CVE ID: CVE-2006-2169 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: RT: Request Tracker 3.5.HEAD allows remote attackers to obtain sensitive information via the Rows parameter in Dist/Display.html, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/rt-request-tracker-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26164
CVE ID: CVE-2006-2170 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in ArgoSoft FTP Server 1.4.3.6 allows remote attackers to execute arbitrary code via Unicode in the RNTO command, as demonstrated by the Infigo FTPStress Fuzzer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17789 - http://www.infigo.hr/en/in_focus/tools - http://www.vupen.com/english/advisories/2006/1639 - http://secunia.com/advisories/19934 - http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.osvdb.org/25216 - https://exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.osvdb.org/25216 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26197 - http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
CVE ID: CVE-2006-2171 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WDM.exe in WarFTPD allows remote attackers to execute arbitrary code via unspecified arguments, as demonstrated by the Infigo FTPStress Fuzzer. Additional Analyst Notes: - CVE Program Container: References: - http://www.infigo.hr/en/in_focus/tools - http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.securityfocus.com/bid/17803 - http://www.osvdb.org/25220 - http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26304 - http://archives.
hr/in_focus/advisories/INFIGO-2006-05-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26304 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
CVE ID: CVE-2006-2172 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Gene6 FTP Server 3.1.0 allows remote authenticated attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long argument to (1) MKD or (2) XMKD, as demonstrated by the Infigo FTPStress Fuzzer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17810 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26237 - http://www.infigo.hr/en/in_focus/tools - http://www.securityfocus.com/archive/1/432839/100/0/threaded - http://secunia.c
http://www.infigo.hr/en/in_focus/tools - http://www.securityfocus.com/archive/1/432839/100/0/threaded - http://secunia.com/advisories/19965 - http://www.vupen.com/english/advisories/2006/1658 - http://www.osvdb.org/25238
CVE ID: CVE-2006-2173 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in FileZilla FTP Server 2.2.22 allows remote authenticated attackers to cause a denial of service and possibly execute arbitrary code via a long (1) PORT or (2) PASS followed by the MLSD command, or (2) the remote server interface, as demonstrated by the Infigo FTPStress Fuzzer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17802 - http://www.infigo.hr/en/in_focus/tools - http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.osvdb.org/25221 - http://w
.infigo.hr/en/in_focus/tools - http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.osvdb.org/25221 - http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26303 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
CVE ID: CVE-2006-2174 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VHCS) allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, or (3) year parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19940 - http://www.securityfocus.com/archive/1/432711 - http://www.vupen.com/english/advisories/2006/1634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26209 - http://www.aria-security.net/hm/
ish/advisories/2006/1634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26209 - http://www.aria-security.net/hm/vhcs.txt - http://securityreason.com/securityalert/832 - http://www.securityfocus.com/bid/17790
CVE ID: CVE-2006-2175 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) show.php or (2) top.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17813 - https://www.exploit-db.com/exploits/1740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26235 - http://www.aria-security.net/advisory/fc/fastclick.txt - http://www.osvdb.org/25289 - http://secunia.com/advisories/19923
ttp://www.aria-security.net/advisory/fc/fastclick.txt - http://www.osvdb.org/25289 - http://secunia.com/advisories/19923 - http://www.osvdb.org/25192 - http://www.securityfocus.com/archive/1/432963/100/0/threaded - http://securitytracker.com/id?1016021 - http://www.vupen.com/english/advisories/2006/1631
CVE ID: CVE-2006-2176 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject arbitrary web script or HTML via the (1) new_input, (2) new_url, or (3) new_name parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26229 - http://www.vupen.com/english/advisories/2006/1627 - http://www.securityfocus.com/bid/17828 - http://d4igoro.blogspot.com/2006/05/php-linkliste-10b-xss.html
CVE ID: CVE-2006-2177 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26204 - http://www.securityfocus.com/bid/17784 - http://www.subjectzero.net/research/geoblog.htm - http://www.securityfocus.com/archive/1/432720/100/0/threaded - http://securityreason.com/securityalert/833
CVE ID: CVE-2006-2178 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script or HTML via the (1) SessionID parameter to login.asp, (2) ProductIndex parameter to browse0.htm, (3) rowcolor parameter to result.asp, or (4) heading parameter to result.asp. NOTE: vectors 1 and 2 might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1630 - http://www.osvdb.org/25198 - http://www.osvdb.org/25199 - h
ences: - http://www.vupen.com/english/advisories/2006/1630 - http://www.osvdb.org/25198 - http://www.osvdb.org/25199 - http://www.osvdb.org/25197 - http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html - http://www.securityfocus.com/bid/17829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26202 - http://secunia.com/advisories/19889
CVE ID: CVE-2006-2179 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (1) SessionID parameter to login.asp or (2) ProductIndex parameter to browse0.htm. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1630 - http://www.osvdb.org/25195 - http://www.osvdb.org/25196 - http://pridels0.blogspot.com/2006/05/cyberbuild-vuln.html - http://www.securityfocus.com/bid/17829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26
/cyberbuild-vuln.html - http://www.securityfocus.com/bid/17829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26201 - http://secunia.com/advisories/19889
CVE ID: CVE-2006-2180 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) and execute arbitrary code via a long argument to the (1) NLST or (2) APPE commands, as demonstrated by the Infigo FTPStress Fuzzer. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26195 - http://secunia.com/advisories/19917 - http://www.infigo.hr/en/in_focus/tools - http://www.osvdb.org/25217 - http://marc.info/?l=bugtraq&m=114658586018818&
7 - http://www.infigo.hr/en/in_focus/tools - http://www.osvdb.org/25217 - http://marc.info/?l=bugtraq&m=114658586018818&w=2 - http://www.vupen.com/english/advisories/2006/1640 - http://www.securityfocus.com/bid/17801 - http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
CVE ID: CVE-2006-2181 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.758Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cid parameter to dlisting.php or (2) preloadSlideShow parameter to showpic.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26240 - http://www.osvdb.org/25242 - http://www.vupen.com/english/advisories/2006/1643 - http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html - http://w
/english/advisories/2006/1643 - http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html - http://www.securityfocus.com/bid/17826 - http://www.osvdb.org/25243 - http://secunia.com/advisories/19952
CVE ID: CVE-2006-2182 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25239 - http://www.vupen.com/english/advisories/2006/1643 - http://pridels0.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html - http://www.osvdb.org/25240 - http://www.securityfocus.com/bid/17825 - http://w
lbinator-208-remote-file-inclusion.html - http://www.osvdb.org/25240 - http://www.securityfocus.com/bid/17825 - http://www.osvdb.org/25241 - http://secunia.com/advisories/19952
CVE ID: CVE-2006-2183 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Truecrypt 4.1, when running suid root on Linux, allows local users to execute arbitrary commands and gain privileges via a modified PATH environment variable that references a malicious mount command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26191 - http://lists.immunitysec.com/pipermail/dailydave/2006-April/003152.html - http://www.osvdb.org/25131 - http://www.vupen.com/english/advisories/2006/1591 - http://secu
ve/2006-April/003152.html - http://www.osvdb.org/25131 - http://www.vupen.com/english/advisories/2006/1591 - http://secunia.com/advisories/19903 - http://www.truecrypt.org/history.php
CVE ID: CVE-2006-2184 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHPKB Knowledge Base allows remote attackers to inject arbitrary web script or HTML via the searchkeyword parameter. NOTE: the issue was originally disputed by the vendor, but on 20060519, the vendor notified CVE that "We have fixed all the mentioned issues and now the search section of PHPKB script is free from any XSS issues." Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-May/000753.html - http://www.vupen
s: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-May/000753.html - http://www.vupen.com/english/advisories/2006/1628 - http://www.attrition.org/pipermail/vim/2006-May/000775.html - http://d4igoro.blogspot.com/2006/05/phpkb-knowledge-base-xss.html - http://secunia.com/advisories/19913
CVE ID: CVE-2006-2185 State: PUBLISHED Published: 2006-05-22T17:00:00 Last Updated: 2024-08-07T17:43:27.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: PORTAL.NLM in Novell Netware 6.5 SP5 writes the username and password in cleartext to the abend.log log file when the groupOperationsMethod function fails, which allows context-dependent attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20288 - http://www.osvdb.org/25780 - http://support.novell.com/cgi-bin/search/searchtid.cgi?2973698.htm - http://securitytracker.com/id?1016106 - http://www.vupen.com/english/advisories/2006/1829 - http://www.securityfoc
htm - http://securitytracker.com/id?1016106 - http://www.vupen.com/english/advisories/2006/1829 - http://www.securityfocus.com/bid/18017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26488
CVE ID: CVE-2006-2186 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the (1) /photos/themes/default/ and (2) /photos/themes/testing/ URIs, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432718/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26220 - http://securityreason.com/securityalert/834 - http://zone14.free.fr/advisories/2/ - http://www.securityfocus.com/bid/
- http://securityreason.com/securityalert/834 - http://zone14.free.fr/advisories/2/ - http://www.securityfocus.com/bid/17779
CVE ID: CVE-2006-2187 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) a parameter in i.php, and the (2) album and (3) image parameters in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432718/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26219 - http://zone14.free.fr/advisories/2/ - http://www.securityfocus.com/bid/17779
CVE ID: CVE-2006-2188 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:28.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in CMScout 1.10 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the Body field of a private message (PM), (2) BBCode, or (3) a forum post. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19933 - http://securityreason.com/securityalert/838 - http://www.securityfocus.com/bid/17796 - http://www.osvdb.org/25247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26223 - http://www.osvdb.org/25246
- http://www.osvdb.org/25247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26223 - http://www.osvdb.org/25246 - http://securitytracker.com/id?1016023 - http://www.securityfocus.com/archive/1/432725/100/0/threaded