Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/www.osvdb.org/25802 - http://secunia.com/advisories/20366 - http://www.securityfocus.com/bid/18156 - http://securityreason.com/securityalert/981
CVE ID: CVE-2006-2653 State: PUBLISHED Published: 2006-05-30T10:00:00 Last Updated: 2024-08-07T17:58:51.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435212/100/0/threaded - http://www.securityfocus.com/bid/18168 - http://www.eazel.es/media/advisory003-D-Link-DSA-3100-Cross-Site-Scripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26759 - http://www.vupen.com/english/advisories/200
cripting.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26759 - http://www.vupen.com/english/advisories/2006/2028 - http://secunia.com/advisories/20343 - http://securitytracker.com/id?1016173 - http://securityreason.com/securityalert/980
CVE ID: CVE-2006-2654 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences. NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25851 - http://secunia.com/advisories/20390 - http://www.securityfocus.com/bid/18202 - http://security.freebsd.org/advisories/FreeBSD-SA-06:16.
com/advisories/20390 - http://www.securityfocus.com/bid/18202 - http://security.freebsd.org/advisories/FreeBSD-SA-06:16.smbfs.asc - http://securitytracker.com/id?1016194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26860
CVE ID: CVE-2006-2655 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25852 - http://secunia.com/advisories/20389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26792 - http://security.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc - http://www.securityfocus.com/bid/18204 - http://securitytracker.
ty.freebsd.org/advisories/FreeBSD-SA-06:15.ypserv.asc - http://www.securityfocus.com/bid/18204 - http://securitytracker.com/id?1016193
CVE ID: CVE-2006-2656 State: PUBLISHED Published: 2006-05-30T18:00:00 Last Updated: 2024-08-07T17:58:51.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename. NOTE: tiffsplit is not setuid. If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - https://www.redhat.com/archives/fedora-package-announce/2006-May/msg00127.html - http://secunia.com/advisorie
erences: - https://www.redhat.com/archives/fedora-package-announce/2006-May/msg00127.html - http://secunia.com/advisories/20520 - http://secunia.com/advisories/20766 - http://security.gentoo.org/glsa/glsa-200607-03.xml - http://secunia.com/advisories/20501 - http://www.debian.org/security/2006/dsa-1091 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:095 - http://secunia.com/advisories/21002 - http://marc.info/?l=vuln-dev&m=114857412916909&w=2 - https://usn.ubuntu.com/289-1/
CVE ID: CVE-2006-2657 State: REJECTED Published: 2006-06-29T23:00:00Z Last Updated: 2024-09-17T01:51:43.179Z Description: No description available.
CVE ID: CVE-2006-2658 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T17:58:51.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21847 - http://www.vupen.com/english/advisories/2006/3552 - http://securitytracker.com/id?1016821 - http://lists.suse.com/archive/suse-security-announce/2006-Sep/0005.html - htt
- http://securitytracker.com/id?1016821 - http://lists.suse.com/archive/suse-security-announce/2006-Sep/0005.html - http://www.securityfocus.com/bid/19929 - http://secunia.com/advisories/21840
CVE ID: CVE-2006-2659 State: PUBLISHED Published: 2006-05-30T19:00:00 Last Updated: 2024-08-07T17:58:51.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=368834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26998 - http://security.gentoo.org/glsa/glsa-200608-06.xml - http://www.securityfocus.com/bid/18345 - http://secunia.com
26998 - http://security.gentoo.org/glsa/glsa-200608-06.xml - http://www.securityfocus.com/bid/18345 - http://secunia.com/advisories/20548 - http://secunia.com/advisories/20519 - http://www.courier-mta.org/beta/patches/verp-fix/README.txt - http://secunia.com/advisories/21350 - http://www.debian.org/security/2006/dsa-1101 - http://www.vupen.com/english/advisories/2006/2214 - https://usn.ubuntu.com/294-1/ - http://secunia.com/advisories/20792 - http://securitytracker.com/id?1016248
CVE ID: CVE-2006-2660 State: PUBLISHED Published: 2006-06-13T18:00:00 Last Updated: 2024-08-07T17:58:51.792Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27049 - http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134 - http://www.securi
lnerabilities/27049 - http://cvs.php.net/viewcvs.cgi/php-src/NEWS?view=markup&rev=1.1247.2.920.2.134 - http://www.securityfocus.com/archive/1/436785/100/0/threaded - http://securitytracker.com/id?1016271 - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0209.html - http://www.ubuntu.com/usn/usn-320-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/21125 - http://securityreason.com/securityalert/1069
CVE ID: CVE-2006-2661 State: PUBLISHED Published: 2006-05-30T19:00:00 Last Updated: 2024-08-07T17:58:51.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=183676 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0012.html - http://secunia.com/advisories/20791 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692 - http://sunsolve.sun.com/search/document.do?asse
y.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11692 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102705-1 - http://www.securityfocus.com/bid/18329 - http://secunia.com/advisories/20525 - http://secunia.com/advisories/21701 - https://usn.ubuntu.com/291-1/ - http://secunia.com/advisories/21385 - http://www.securityfocus.com/archive/1/436836/100/0/threaded - http://secunia.com/advisories/21135 - http://www.redhat.com/support/errata/RHSA-2006-0500.html - http://secunia.com/advisories/23939 - http://support.avaya.com/elmodocs2/security/ASA-2006-176.htm - http://secunia.com/advisories/20591 - http://secunia.com/advisories/20638 - http://securitytracker.com/id?10165
76.htm - http://secunia.com/advisories/20591 - http://secunia.com/advisories/20638 - http://securitytracker.com/id?1016520 - http://www.vupen.com/english/advisories/2007/0381 - https://issues.rpath.com/browse/RPL-429 - ftp://patches.sgi.com/support/free/security/advisories/20060701-01-U - http://secunia.com/advisories/21062 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:099 - http://www.debian.org/security/2006/dsa-1095
CVE ID: CVE-2006-2662 State: PUBLISHED Published: 2006-06-02T10:00:00 Last Updated: 2024-08-07T17:58:52.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435709/100/0/threaded - http://www.vupen.com/english/advisories/2006/2104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26879 - http://www.vmware.com/support/kb/enduser/std_adp.php?p_faqid=2124 - http://www.securityfocus.com/bid/18236 - http://securitytracker.
mware.com/support/kb/enduser/std_adp.php?p_faqid=2124 - http://www.securityfocus.com/bid/18236 - http://securitytracker.com/id?1016200
CVE ID: CVE-2006-2663 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to (1) acc_verify.php or (2) project.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26696 - http://www.osvdb.org/26044 - http://www.vupen.com/english/advisories/2006/1988 - http://www.securityfocus.com/archive/1/435036/100/0/threaded - http://secunia.com/advisor
english/advisories/2006/1988 - http://www.securityfocus.com/archive/1/435036/100/0/threaded - http://secunia.com/advisories/20282 - http://www.osvdb.org/26043
CVE ID: CVE-2006-2664 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20287 - http://www.osvdb.org/25778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26678 - http://securityreason.com/securityalert/991 - http://www.securityfocus.com/archive/1/435010/100/0/threaded - http://www.vupen.com/english/advis
om/securityalert/991 - http://www.securityfocus.com/archive/1/435010/100/0/threaded - http://www.vupen.com/english/advisories/2006/1987 - http://www.securityfocus.com/bid/18102
CVE ID: CVE-2006-2665 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:52.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20297 - http://www.securityfocus.com/bid/30164 - https://www.exploit-db.com/exploits/1827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26694 - http://www.vupen.com/english/advisories/2006/1989 - http://securitytracker.com/id?1016160
CVE ID: CVE-2006-2666 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:52.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20297 - http://www.securityfocus.com/bid/30164 - https://www.exploit-db.com/exploits/1827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26694 - http://www.vupen.com/english/advisories/2006/1989 - http://securitytracker.com/id?
.ibmcloud.com/vulnerabilities/26694 - http://www.vupen.com/english/advisories/2006/1989 - http://securitytracker.com/id?1016160
CVE ID: CVE-2006-2667 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in (1) wp-content/cache/userlogins/ (2) wp-content/cache/users/ which are later included by cache.php, as demonstrated using the displayname argument. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20271 - http://www.osvdb.or
ditional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20271 - http://www.osvdb.org/25777 - http://www.vupen.com/english/advisories/2006/1992 - http://secunia.com/advisories/20608 - http://www.gentoo.org/security/en/glsa/glsa-200606-08.xml - http://www.securityfocus.com/bid/18372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26687 - http://retrogod.altervista.org/wordpress_202_xpl.html - http://www.securityfocus.com/archive/1/435039/100/0/threaded
CVE ID: CVE-2006-2668 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) modules/credits/business.php, (2) modules/credits/credits.php, or (3) modules/credits/help.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1828 - http://secunia.com/advisories/20298 - http://www.securityfocus.com/archive/1/435110/30/4710/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26685 - ht
ww.securityfocus.com/archive/1/435110/30/4710/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26685 - http://www.vupen.com/english/advisories/2006/1978 - http://www.securityfocus.com/bid/18110 - http://securitytracker.com/id?1016159
CVE ID: CVE-2006-2669 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.776Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435018/100/0/threaded - http://www.osvdb.org/26082 - http://secunia.com/advisories/20295 - http://securityreason.com/securityalert/990 - https:
http://www.osvdb.org/26082 - http://secunia.com/advisories/20295 - http://securityreason.com/securityalert/990 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26690 - http://www.securityfocus.com/bid/18706 - http://www.vupen.com/english/advisories/2006/1991 - http://www.osvdb.org/26080 - http://www.osvdb.org/26081
CVE ID: CVE-2006-2670 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1) fastchat.php and (2) fastshow.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20290 - http://www.securityfocus.com/archive/1/435006/100/0/threaded - http://securityreason.com/securityalert/989 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26682 - http://www.vupen.com/english/advisories/2006/1986
CVE ID: CVE-2006-2671 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20290 - http://www.securityfocus.com/archive/1/435006/100/0/threaded - http://securityreason.com/securityalert/989 - http://www.vupen.com/english/advisories/2006/1986
CVE ID: CVE-2006-2672 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the (1) listingid parameter to (a) images.php, (b) index_other.php, or (c) request_info.php; (2) propertyid parameter to (d) searchlookup.php, (3) id parameter to (e) images.php, or (4) agentid parameter to (f) request_info.php. NOTE: some of these issues might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25772 - http://
rom SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25772 - http://www.securityfocus.com/archive/1/435012/100/0/threaded - http://www.osvdb.org/25775 - http://www.osvdb.org/25773 - http://securityreason.com/securityalert/988 - http://www.vupen.com/english/advisories/2006/1985 - http://www.osvdb.org/25774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26677 - http://secunia.com/advisories/20286
CVE ID: CVE-2006-2673 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.268Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18103 - http://www.securityfocus.com/archive/1/435013/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26675 - http://securityreason.com/securityalert/987 - http://secunia.com/advisories/20289 - http://www.vupen.com/english/adviso
http://securityreason.com/securityalert/987 - http://secunia.com/advisories/20289 - http://www.vupen.com/english/advisories/2006/1980
CVE ID: CVE-2006-2674 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) frm_id parameter to (a) show_forum.asp, (2) a search field to (b) forum_search.asp, (3) Email address or (4) Password to (c) admin/index.asp, (5) frm_cat_id parameter to (d) browse_forum_cat.asp, or (6) Message Subject or (7) Message Text field to (e) post_message.asp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26797 - http://www.osvdb.org/26565 - http://www.securityfocus.com/archive/1/435125/100/0/threaded - http://www.osvdb.org/26564 - http://securityreason.com/securityalert/986 - http://www.osvdb.org/26566 - http://www.osvdb.org/26567 - http://www.osvdb.org/26568
CVE ID: CVE-2006-2675 State: PUBLISHED Published: 2006-05-30T21:00:00 Last Updated: 2024-08-07T17:58:51.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26866 - http://www.securityfocus.com/archive/1/435288/100/0/threaded
CVE ID: CVE-2006-2676 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-07T17:58:51.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en - http://secunia.com/advisories/20266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26672
CVE ID: CVE-2006-2677 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-07T17:58:51.915Z Vendors: n/a Products: n/a Problem Types: n/a Description: SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information. Additional Analyst Notes: - CVE Program Container: References: - http://www.uniras.gov.uk/niscc/docs/br-20060525-00374.html?lang=en - http://secunia.com/advisories/20266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26671
CVE ID: CVE-2006-2678 State: PUBLISHED Published: 2006-05-31T10:00:00 Last Updated: 2024-08-07T17:58:51.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26692 - http://www.securityfocus.com/archi
://www.osvdb.org/26068 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26692 - http://www.securityfocus.com/archive/1/435020/100/0/threaded - http://securityreason.com/securityalert/996 - http://www.vupen.com/english/advisories/2006/1990 - http://www.osvdb.org/26070 - http://secunia.com/advisories/20284 - http://www.osvdb.org/26069 - http://www.osvdb.org/26071 - http://www.osvdb.org/26072 - http://www.securityfocus.com/bid/18333 - http://www.osvdb.org/26066 - http://www.osvdb.org/26067