Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4509 State: PUBLISHED Published: 2006-10-24T19:00:00 Last Updated: 2024-08-07T19:14:47.022Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request. Additional Analyst Notes: - CVE Program Container: References: - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=427 - http://www.securityfocus.com/bid/20663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29764 - http://secunia.com/advisories/22506 - http://securitytracker.com/id?1017104 - http://www.vupe
om/vulnerabilities/29764 - http://secunia.com/advisories/22506 - http://securitytracker.com/id?1017104 - http://www.vupen.com/english/advisories/2006/4142
CVE ID: CVE-2006-4510 State: PUBLISHED Published: 2006-10-24T19:00:00 Last Updated: 2024-08-07T19:14:47.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: The evtFilteredMonitorEventsRequest function in the LDAP service in Novell eDirectory before 8.8.1 FTF1 allows remote attackers to execute arbitrary code via a crafted request containing a value that is larger than the number of objects transmitted, which triggers an invalid free of unallocated memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20663 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29752 - http://labs.idefense.com/intelligence/vulnerabilities/display
tps://exchange.xforce.ibmcloud.com/vulnerabilities/29752 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=428 - http://secunia.com/advisories/22506 - http://securitytracker.com/id?1017104 - http://www.vupen.com/english/advisories/2006/4142
CVE ID: CVE-2006-4511 State: PUBLISHED Published: 2006-10-04T01:00:00 Last Updated: 2024-08-07T19:14:47.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: Messenger Agents (nmma.exe) in Novell GroupWise 2.0.2 and 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted HTTP POST request to TCP port 8300 with a modified val parameter, which triggers a null dereference related to "zero-size strings in blowfish routines." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3893 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=416 - http://securitytracker.com/id?1016974 - http://ww
p://www.idefense.com/intelligence/vulnerabilities/display.php?id=416 - http://securitytracker.com/id?1016974 - http://www.securityfocus.com/bid/20316 - http://secunia.com/advisories/22244 - http://www.kb.cert.org/vuls/id/796956 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974452.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/29319
CVE ID: CVE-2006-4513 State: PUBLISHED Published: 2006-10-28T00:00:00 Last Updated: 2024-08-07T19:14:47.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the WV library in wvWare (formerly mswordview) before 1.2.3, as used by AbiWord, KWord, and possibly other products, allow user-assisted remote attackers to execute arbitrary code via a crafted Microsoft Word (DOC) file that produces (1) large LFO clfolvl values in the wvGetLFO_records function or (2) a large LFO nolfo value in the wvGetFLO_PLF function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4221 - http://securitytracker.com/i
- CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4221 - http://securitytracker.com/id?1017126 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=434 - http://secunia.com/advisories/22705 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://security.gentoo.org/glsa/glsa-200612-01.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:202 - http://secunia.com/advisories/23335 - http://secunia.com/advisories/22680 - http://secunia.com/advisories/23273 - http://secunia.com/advisories/22595 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=433 - http://www.securityfocus.com/bid/20761 - ht
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=433 - http://www.securityfocus.com/bid/20761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29833 - http://www.ubuntu.com/usn/usn-374-1
CVE ID: CVE-2006-4514 State: PUBLISHED Published: 2006-11-30T23:00:00 Last Updated: 2024-08-07T19:14:47.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the ole_info_read_metabat function in Gnome Structured File library (libgsf) 1.14.0, and other versions before 1.14.2, allows context-dependent attackers to execute arbitrary code via a large num_metabat value in an OLE document, which causes the ole_init_info function to allocate insufficient memory. Additional Analyst Notes: - CVE Program Container: References: - https://issues.rpath.com/browse/RPL-857 - http://rhn.redhat.com/errata/RHSA-2007-0011.html - http://secunia.com/advisories/23167 - htt
.rpath.com/browse/RPL-857 - http://rhn.redhat.com/errata/RHSA-2007-0011.html - http://secunia.com/advisories/23167 - http://secunia.com/advisories/23920 - http://secunia.com/advisories/23352 - http://security.gentoo.org/glsa/glsa-200612-13.xml - http://www.ubuntu.com/usn/usn-391-1 - http://secunia.com/advisories/23227 - http://www.securityfocus.com/bid/21358 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:220 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30611 - http://www.vupen.com/english/advisories/2006/4784 - http://lists.suse.com/archive/suse-security-announce/2006-Dec/0005.html - http://ww
n.com/english/advisories/2006/4784 - http://lists.suse.com/archive/suse-security-announce/2006-Dec/0005.html - http://www.securityfocus.com/archive/1/454389/30/9210/threaded - http://secunia.com/advisories/23166 - http://secunia.com/advisories/23337 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9413 - http://secunia.com/advisories/23355 - http://www.debian.org/security/2006/dsa-1221 - http://secunia.com/advisories/23164 - http://secunia.com/advisories/23686 - ftp://patches.sgi.com/support/free/security/advisories/20070101-01-P.asc - http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
CVE ID: CVE-2006-4516 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:14:47.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in FreeBSD 6.0-RELEASE allows local users to cause a denial of service (memory corruption and kernel panic) via a PT_LWPINFO ptrace command with a large negative data value that satisfies a signed maximum value check but is used in an unsigned copyout function call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22367 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=419 - http://www.securityfocus.com/bid/20440 - https://exchange.xfor
nse.com/intelligence/vulnerabilities/display.php?id=419 - http://www.securityfocus.com/bid/20440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29476
CVE ID: CVE-2006-4517 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:14:47.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell iManager 2.5 and 2.0.2 allows remote attackers to cause a denial of service (crash) in the Tomcat server via a long TREE parameter in an HTTP POST, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4292 - http://securitytracker.com/id?1017139 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29961 - http://www.novell.com/support/search.do?c
play.php?id=436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29961 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3885713&sliceId=SAL_Public&dialogID=17090866&stateId=0%200%2017098735 - http://www.securityfocus.com/bid/20841 - http://secunia.com/advisories/22657
CVE ID: CVE-2006-4518 State: PUBLISHED Published: 2006-11-28T23:00:00 Last Updated: 2024-08-07T19:14:47.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21295 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=444 - http://securitytracker.com/id?1017284 - http://forums.qbik.com/viewtopic.php?t=4215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30491 - ht
?1017284 - http://forums.qbik.com/viewtopic.php?t=4215 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30491 - http://www.vupen.com/english/advisories/2006/4711 - http://secunia.com/advisories/23029
CVE ID: CVE-2006-4519 State: PUBLISHED Published: 2007-07-10T18:00:00 Last Updated: 2024-08-07T19:14:47.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code via crafted length values in (1) DICOM, (2) PNM, (3) PSD, (4) PSP, (5) Sun RAS, (6) XBM, and (7) XWD files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26132 - http://www.vupen.com/english/advisories/2007/2471 - http://www.securityfocus.com/archive/1/475257/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35308 - http
ww.securityfocus.com/archive/1/475257/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/35308 - http://osvdb.org/42139 - http://security.gentoo.org/glsa/glsa-200707-09.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10842 - http://secunia.com/advisories/26240 - http://secunia.com/advisories/26575 - http://osvdb.org/42140 - http://www.ubuntu.com/usn/usn-494-1 - http://bugzilla.gnome.org/show_bug.cgi?id=451379 - http://developer.gimp.org/NEWS-2.2 - http://www.redhat.com/support/errata/RHSA-2007-0513.html - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=551 - http://osvdb.org/42143 - http://osvdb.org/42145 -
//labs.idefense.com/intelligence/vulnerabilities/display.php?id=551 - http://osvdb.org/42143 - http://osvdb.org/42145 - http://www.securityfocus.com/bid/24835 - http://secunia.com/advisories/26215 - http://www.securitytracker.com/id?1018349 - http://osvdb.org/42144 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:170 - http://osvdb.org/42141 - http://www.debian.org/security/2007/dsa-1335 - http://secunia.com/advisories/26939 - http://osvdb.org/42142 - http://issues.foresightlinux.org/browse/FL-457
CVE ID: CVE-2006-4520 State: PUBLISHED Published: 2007-04-30T22:00:00 Last Updated: 2024-08-07T19:14:47.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle NCP fragments with a negative length, which allows remote attackers to cause a denial of service (daemon crash) when the heap is written to a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1550 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=518 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3924657&sliceId
ilities/display.php?id=518 - http://www.novell.com/support/search.do?cmd=displayKC&docType=kc&externalId=3924657&sliceId=SAL_Public - http://www.securitytracker.com/id?1017972 - http://www.securityfocus.com/bid/23685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/33921
CVE ID: CVE-2006-4521 State: PUBLISHED Published: 2006-11-04T00:00:00 Last Updated: 2024-08-07T19:14:47.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The BerDecodeLoginDataRequest function in the libnmasldap.so NMAS module in Novell eDirectory 8.8 and 8.8.1 before the Security Services 2.0.3 patch does not properly increment a pointer when handling certain input, which allows remote attackers to cause a denial of service (invalid memory access) via a crafted login request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22660 - http://www.vupen.com/english/advisories/2006/4293 - http://www.securityfocus.com/bid/20842 - https://
advisories/22660 - http://www.vupen.com/english/advisories/2006/4293 - http://www.securityfocus.com/bid/20842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29963 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=437 - http://securitytracker.com/id?1017140
CVE ID: CVE-2006-4522 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in dtterm in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code with root privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21673 - http://www.osvdb.org/28275 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY89052 - http://www.securityfocus.com/bid/19786 - http://www.vupen.com/english/advisories/2006/3422 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY89045
CVE ID: CVE-2006-4523 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service (crash) via a CRLF sequence in a GET request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28578 - http://secunia.com/advisories/21583 - http://www.securityfocus.com/archive/1/443906/100/100/threaded - https://www.exploit-db.com/exploits/2246 - http://securityreason.com/securityalert/1489 - http://www
/100/100/threaded - https://www.exploit-db.com/exploits/2246 - http://securityreason.com/securityalert/1489 - http://www.mexhackteam.org/prethoonker/DoS_ADV_2Wire.txt - http://www.securityfocus.com/bid/19634
CVE ID: CVE-2006-4524 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login_verif.asp in Digiappz Freekot 1.01 allow remote attackers to execute arbitrary SQL commands via the (1) login or (2) password parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444752/100/0/threaded - http://www.kapda.ir/attach-1996-xpl_freekot.htm - http://secunia.com/advisories/21669 - http://www.kapda.ir/advisory-410.html - https://exchange.xf
1996-xpl_freekot.htm - http://secunia.com/advisories/21669 - http://www.kapda.ir/advisory-410.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28672 - http://securityreason.com/securityalert/1488 - http://www.securityfocus.com/bid/19768
CVE ID: CVE-2006-4525 State: PUBLISHED Published: 2006-09-01T23:00:00Z Last Updated: 2024-09-17T01:30:35.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the links array. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21659 - http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697 - http://www.securityfocus.com/bid/19782 - http://cubecart.com/site/forums/index.php?showtopic=21540 - http://www.gulftech.org/?
/www.securityfocus.com/bid/19782 - http://cubecart.com/site/forums/index.php?showtopic=21540 - http://www.gulftech.org/?node=research&article_id=00111-08282006&
CVE ID: CVE-2006-4526 State: PUBLISHED Published: 2006-09-01T23:00:00Z Last Updated: 2024-09-17T01:51:40.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/content/viewCat.inc.php in CubeCart 3.0.12 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the searchArray[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21659 - http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697 - http://www.securityfocus.com/bid/19782 - http://cubecart.com/site/forums/index.php?showtopic=215
tach&type=post&id=697 - http://www.securityfocus.com/bid/19782 - http://cubecart.com/site/forums/index.php?showtopic=21540 - http://www.gulftech.org/?node=research&article_id=00111-08282006&
CVE ID: CVE-2006-4527 State: PUBLISHED Published: 2006-09-01T23:00:00Z Last Updated: 2024-09-16T21:03:44.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: includes/content/gateway.inc.php in CubeCart 3.0.12 and earlier, when magic_quotes_gpc is disabled, uses an insufficiently restrictive regular expression to validate the gateway parameter, which allows remote attackers to conduct PHP remote file inclusion attacks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21659 - http://www.cubecart.com/site/forums/index.php?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697 - http://www.securityfocus.com/bid/19782 - http://cube
hp?s=5e34938dc670782af211587b8a450c90&act=Attach&type=post&id=697 - http://www.securityfocus.com/bid/19782 - http://cubecart.com/site/forums/index.php?showtopic=21540 - http://www.gulftech.org/?node=research&article_id=00111-08282006&
CVE ID: CVE-2006-4528 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in membrepass 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) recherche parameter in recherchemembre.php and the (2) email parameter in test.php. Additional Analyst Notes: - CVE Program Container: References: - http://acid-root.new.fr/advisories/09290806.txt - http://www.securityfocus.com/archive/1/444845/100/0/threaded - http://www.vupen.com/english/advisories/2006/3427 - http://www.securityfocus.com/bid/19789 - http://secunia.com/advisories/217
/www.vupen.com/english/advisories/2006/3427 - http://www.securityfocus.com/bid/19789 - http://secunia.com/advisories/21715 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28691 - http://securityreason.com/securityalert/1487
CVE ID: CVE-2006-4529 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in recherchemembre.php in membrepass 1.5. allows remote attackers to execute arbitrary SQL commands via the recherche parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28690 - http://acid-root.new.fr/advisories/09290806.txt - http://www.securityfocus.com/archive/1/444845/100/0/threaded - http://www.vupen.com/english/advisories/2006/3427 - http://www.securityfocus.com/bid/19791 - http://secunia.com/advisories/21715 - http:
.com/english/advisories/2006/3427 - http://www.securityfocus.com/bid/19791 - http://secunia.com/advisories/21715 - http://securityreason.com/securityalert/1487
CVE ID: CVE-2006-4530 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in include/change.php in membrepass 1.5 allows remote attackers to execute arbitrary PHP code via the aifon parameter, which is injected into include/variable.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19790 - http://www.securityfocus.com/archive/1/444845/100/0/threaded - http://www.vupen.com/english/advisories/2006/3427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28692 - http://secunia.com/advisories/21715 - http:
ies/2006/3427 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28692 - http://secunia.com/advisories/21715 - http://securityreason.com/securityalert/1487
CVE ID: CVE-2006-4531 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/config.php in Pheap CMS 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lpref parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pheap.barekoncept.com/ - http://www.securityfocus.com/bid/19775 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28684 - http://www.vupen.com/english/advisories/2006/3426 - https://www.exploit-db.com/exploits/2281 - http://securitytracker.com/id?1016774 - http://secunia.com/advi
s/2006/3426 - https://www.exploit-db.com/exploits/2281 - http://securitytracker.com/id?1016774 - http://secunia.com/advisories/21678 - http://www.securityfocus.com/archive/1/444882/100/0/threaded - http://www.osvdb.org/28302
CVE ID: CVE-2006-4532 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in articles/article.php in Yet Another Community System (YACS) CMS 6.6.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the context[path_to_root] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28682 - http://www.yetanothercommunitysystem.com/yacs/articles/view.php/1664 - http://www.vupen.com/english/advisories/2006/3425 - http://securitytracker.com/id?1016775 - http://secunia
ew.php/1664 - http://www.vupen.com/english/advisories/2006/3425 - http://securitytracker.com/id?1016775 - http://secunia.com/advisories/21680 - https://www.exploit-db.com/exploits/2282
CVE ID: CVE-2006-4533 State: PUBLISHED Published: 2006-09-01T23:00:00 Last Updated: 2024-08-07T19:14:47.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Plume CMS 1.0.6 and earlier allow remote attackers to execute arbitrary PHP code via the _PX_config[manager_path] parameter to (1) articles.php, (2) categories.php, (3) news.php, (4) prefs.php, (5) sites.php, (6) subtypes.php, (7) users.php, (8) xmedia.php, (9) frontinc/class.template.php, (10) inc/lib.text.php, (11) install/index.php, (12) install/upgrade.php, and (13) tools/htaccess/index.php. NOTE: other vectors are covered by CVE-2006-3562, CVE-2006-2645, and CVE-2006-0
.php, and (13) tools/htaccess/index.php. NOTE: other vectors are covered by CVE-2006-3562, CVE-2006-2645, and CVE-2006-0725. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31179 - http://www.osvdb.org/31172 - http://www.osvdb.org/31177 - http://www.osvdb.org/31180 - http://www.osvdb.org/31171 - http://www.osvdb.org/31183 - http://www.osvdb.org/31175 - http://www.osvdb.org/31181 - http://www.securityfocus.com/bid/19629 - http://www.osvdb.org/31176 - http://www.osvdb.org/31178 - http://www.osvdb.org/31174 - http://packetstormsecurity.org/0608-exploits/plume-1.0.6.txt - http://www.osvdb.org/31173 - http://www.osvdb.org/31182