Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0135 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL commands and bypass login authentication via the username parameter (aka the u variable). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24027 - http://www.osvdb.org/22294 - http://securitytracker.com/id?1015450 - http://securityreason.com/securityalert/321 - http://www.securityfocus.com/archive/1/421039/100/0/threaded - http://evuln.com/vuln
urityreason.com/securityalert/321 - http://www.securityfocus.com/archive/1/421039/100/0/threaded - http://evuln.com/vulns/17/exploit.html - http://www.vupen.com/english/advisories/2006/0093 - http://secunia.com/advisories/18392 - http://www.securityfocus.com/bid/16161 - http://evuln.com/vulns/17/summary.html
CVE ID: CVE-2006-0136 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:33.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimera Web Portal System 0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) comment_poster, (2) comment_poster_email, (3) comment_poster_homepage, and (4) comment_text parameters. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/7/exploit.html - http://www.vupen.com/english/advisories/2006/0025 - http://www.securityfocus.com/archive/1/420669/100/0/th
xploit.html - http://www.vupen.com/english/advisories/2006/0025 - http://www.securityfocus.com/archive/1/420669/100/0/threaded - http://www.securityfocus.com/bid/16113 - http://evuln.com/vulns/7/summary.html
CVE ID: CVE-2006-0137 State: PUBLISHED Published: 2006-01-09T11:00:00 Last Updated: 2024-08-07T16:25:34.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22420 - http://evuln.com/vulns/7/exploit.html - http://www.vupen.com/english/advisories/2006/0025 - http://www.securityfocus.com/archive/1/420669/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23963 - http://www.securityfocus.com/bid/16113 - h
100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/23963 - http://www.securityfocus.com/bid/16113 - http://evuln.com/vulns/7/summary.html
CVE ID: CVE-2006-0138 State: PUBLISHED Published: 2006-01-09T11:00:00Z Last Updated: 2024-09-16T19:56:05.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the default file-transfer port (TCP 6891). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22186 - http://www.securiteam.com/exploits/5JP090KHFQ.html
CVE ID: CVE-2006-0139 State: PUBLISHED Published: 2006-01-09T18:00:00 Last Updated: 2024-08-07T16:25:34.019Z Vendors: n/a Products: n/a Problem Types: n/a Description: The send-private-message functionality (send-private-message.asp) in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0095 - http://www.hamid.ir/security/megabbs.txt - http://www.securityfocus.com/bid/16168 - http://securitytracker.com/id?1015452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24050 - http://www.pd9soft.com/megabbs/forums/
ker.com/id?1015452 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24050 - http://www.pd9soft.com/megabbs/forums/thread-view.asp?tid=4924 - http://secunia.com/advisories/18342
CVE ID: CVE-2006-0140 State: PUBLISHED Published: 2006-01-09T19:00:00 Last Updated: 2024-08-07T16:25:33.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in post.php in NavBoard V16 Stable(2.6.0) and V17beta2 allows remote attackers to inject arbitrary web script or HTML via the (1) b, (2) textlarge, and (3) url bbcode tags. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18345 - http://www.osvdb.org/22277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24021 - http://www.securityfocus.com/bid/16165 - http://evuln.com/vulns/19/summary.html - http://www.securityfocus.com/archive/1/4211
//www.securityfocus.com/bid/16165 - http://evuln.com/vulns/19/summary.html - http://www.securityfocus.com/archive/1/421149/100/0/threaded - http://www.vupen.com/english/advisories/2006/0092
CVE ID: CVE-2006-0141 State: PUBLISHED Published: 2006-01-09T19:00:00 Last Updated: 2024-08-07T16:25:33.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLM authentication requests, or a malformed (2) Incoming Mail X or (3) Temporary Mail file. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0099 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24033 - http://www.securityfocus.com/bid/16179 - http://secunia.com/advisories/18356 - http://www.eudora.co.nz/updates.html - https:/
//www.securityfocus.com/bid/16179 - http://secunia.com/advisories/18356 - http://www.eudora.co.nz/updates.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24032
CVE ID: CVE-2006-0142 State: PUBLISHED Published: 2006-01-09T19:00:00 Last Updated: 2024-08-07T16:25:33.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in andromeda.php in Andromeda 1.9.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the s parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16183 - http://secunia.com/advisories/18359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24031 - http://www.vupen.com/english/advisori
om/advisories/18359 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24031 - http://www.vupen.com/english/advisories/2006/0096
CVE ID: CVE-2006-0143 State: PUBLISHED Published: 2006-01-09T20:00:00 Last Updated: 2024-08-07T16:25:33.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of service (crash) via a WMF file containing (1) ExtCreateRegion or (2) ExtEscape function calls with arguments with inconsistent lengths. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015453 - http://lostmon.blogspot.com/2007/08/windows-extended-file-attributes-buffer.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24044 - http://www.securityfocus.com/bid/
-attributes-buffer.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24044 - http://www.securityfocus.com/bid/16167 - http://blogs.technet.com/msrc/archive/2006/01/09/417198.aspx - http://www.securityfocus.com/archive/1/421258/100/0/threaded - http://www.securityfocus.com/archive/1/421257/100/0/threaded - http://www.vupen.com/english/advisories/2006/0115
CVE ID: CVE-2006-0144 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: The proxy server feature in go-pear.php in PHP PEAR 0.2.2, as used in Apache2Triad, allows remote attackers to execute arbitrary PHP code by redirecting go-pear.php to a malicious proxy server that provides a modified version of Tar.php with a malicious extractModify function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0148 - http://www.securityfocus.com/bid/16174 - http://apache2triad.net/forums/viewtopic.php?p=14670 - http://secunia.com/advisories/18390 - htt
tyfocus.com/bid/16174 - http://apache2triad.net/forums/viewtopic.php?p=14670 - http://secunia.com/advisories/18390 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24076 - http://www.securityfocus.com/archive/1/421469/100/0/threaded
CVE ID: CVE-2006-0145 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernfs_xread function in kernfs in NetBSD 1.6 through 2.1, and OpenBSD 3.8, does not properly validate file offsets against negative 32-bit values that occur as a result of truncation, which allows local users to read arbitrary kernel memory and gain privileges via the lseek system call. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18712 - http://www.securitylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html - http://securityreason.com/securityalert/405 - http://w
itylab.net/research/2006/02/advisory_netbsd_openbsd_kernfs.html - http://securityreason.com/securityalert/405 - http://www.securityfocus.com/bid/16173 - http://secunia.com/advisories/18388 - http://www.osvdb.org/22293 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-001.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/24035 - http://www.securityfocus.com/archive/1/423827/100/0/threaded
CVE ID: CVE-2006-0146 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7) MAXdev MD-Pro, and (8) MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via the sql parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19590 - http://secunia.com/advisories/18267 - http://secunia.com/advisories/18254 - http://secunia.com/ad
com/advisories/19590 - http://secunia.com/advisories/18267 - http://secunia.com/advisories/18254 - http://secunia.com/advisories/19555 - http://www.debian.org/security/2006/dsa-1029 - http://www.securityfocus.com/archive/1/430448/100/0/threaded - http://www.maxdev.com/Article550.phtml - http://www.vupen.com/english/advisories/2006/0105 - http://secunia.com/advisories/19699 - http://www.debian.org/security/2006/dsa-1030 - http://www.vupen.com/english/advisories/2006/1305 - http://secunia.com/advisories/24954 - http://secunia.com/advisories/18276 - http://securityreason.com/securityalert/713 - http://www.vupen.com/english/advisories/2006/1304 - http://secunia.com/advisories/19600 - http://www.
ecurityalert/713 - http://www.vupen.com/english/advisories/2006/1304 - http://secunia.com/advisories/19600 - http://www.securityfocus.com/archive/1/466171/100/0/threaded - http://www.vupen.com/english/advisories/2006/0103 - http://secunia.com/secunia_research/2005-64/advisory/ - http://www.securityfocus.com/bid/16187 - http://secunia.com/advisories/18720 - http://www.vupen.com/english/advisories/2006/1419 - http://secunia.com/advisories/19591 - http://www.vupen.com/english/advisories/2006/0447 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24051 - http://secunia.com/advisories/17418 - http://www.xaraya.com/index.php/news/569 - http://secunia.com/advisories/19691 - http://www.vupen.co
/advisories/17418 - http://www.xaraya.com/index.php/news/569 - http://secunia.com/advisories/19691 - http://www.vupen.com/english/advisories/2006/0102 - http://www.vupen.com/english/advisories/2006/0101 - http://secunia.com/advisories/18233 - http://www.osvdb.org/22290 - http://www.vupen.com/english/advisories/2006/0370 - http://www.debian.org/security/2006/dsa-1031 - http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html - http://www.securityfocus.com/archive/1/423784/100/0/threaded - http://www.vupen.com/english/advisories/2006/0104 - http://secunia.com/advisories/18260 - http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml - http://secunia.com/advisories/19563
CVE ID: CVE-2006-0147 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisori
demonstrated using phpinfo. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19590 - http://secunia.com/advisories/18267 - http://secunia.com/advisories/18254 - http://secunia.com/advisories/19555 - http://www.debian.org/security/2006/dsa-1029 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24052 - http://secunia.com/advisories/19628 - http://www.securityfocus.com/archive/1/430448/100/0/threaded - http://www.debian.org/security/2006/dsa-1030 - http://www.vupen.com/english/advisories/2006/1305 - http://secunia.com/advisories/18276 - http://secunia.com/advisories/19600 - https://www.exploit-db.com/exploits/1663 - http://www.vupen.com/english
es/18276 - http://secunia.com/advisories/19600 - https://www.exploit-db.com/exploits/1663 - http://www.vupen.com/english/advisories/2006/0103 - http://secunia.com/secunia_research/2005-64/advisory/ - http://www.securityfocus.com/archive/1/430743/100/0/threaded - http://secunia.com/advisories/19591 - http://secunia.com/advisories/17418 - http://secunia.com/advisories/19691 - http://www.vupen.com/english/advisories/2006/0102 - http://www.vupen.com/english/advisories/2006/0101 - http://secunia.com/advisories/18233 - http://retrogod.altervista.org/simplog_092_incl_xpl.html - http://www.vupen.com/english/advisories/2006/1332 - http://www.osvdb.org/22291 - http://www.debian.org/security/2006/dsa-1
tp://www.vupen.com/english/advisories/2006/1332 - http://www.osvdb.org/22291 - http://www.debian.org/security/2006/dsa-1031 - http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.html - http://www.vupen.com/english/advisories/2006/0104 - http://secunia.com/advisories/18260 - http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml
CVE ID: CVE-2006-0148 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetSarang Xlpd 2.1 allows remote attackers to cause a denial of service (crash) via a large number of connections from the same IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16164 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24041 - http://securitytracker.com/id?1015444 - http://www.ipomonis.com/advisories/xlpd.txt
CVE ID: CVE-2006-0149 State: PUBLISHED Published: 2006-01-09T23:00:00.000Z Last Updated: 2025-04-03T14:56:57.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://securitytracker.com/id?1015451 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-January/041127.html
CVE ID: CVE-2006-0150 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24030 - http://www.vupen.com/english/advisories/2006/0117 - http://securitytracker.com/id?1015456 - http://secunia.com/advisories/18412 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017
m/id?1015456 - http://secunia.com/advisories/18412 - http://wwwnew.mandriva.com/security/advisories?name=MDKSA-2006:017 - http://secunia.com/advisories/18382 - http://www.rudedog.org/auth_ldap/Changes.html - http://www.securityfocus.com/archive/1/421286/100/0/threaded - http://www.securityfocus.com/bid/16177 - http://secunia.com/advisories/18568 - http://www.redhat.com/support/errata/RHSA-2006-0179.html - http://www.digitalarmaments.com/2006090173928420.html - http://www.debian.org/security/2006/dsa-952 - http://secunia.com/advisories/18405
CVE ID: CVE-2006-0151 State: PUBLISHED Published: 2006-01-09T23:00:00 Last Updated: 2024-08-07T16:25:33.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: sudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158. Additional Analyst Notes: - CVE Program Container: References: - http://www.trustix.org/errata/2006/0010 - http://secunia.com/advisories/18549 - http://secunia.com/advisories/18558 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.421822 - http://secunia.com/advisories/18363 - http://www.novell.com/linu
slackware-security&y=2006&m=slackware-security.421822 - http://secunia.com/advisories/18363 - http://www.novell.com/linux/security/advisories/2006_02_sr.html - http://secunia.com/advisories/18358 - http://www.securityfocus.com/bid/16184 - http://secunia.com/advisories/19016 - http://secunia.com/advisories/18906 - http://www.debian.org/security/2006/dsa-946 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:159 - https://usn.ubuntu.com/235-2/ - http://secunia.com/advisories/21692
CVE ID: CVE-2006-0152 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18360 - http://www.securityfocus.com/bid/16180 - http://www.vupen.com/english/advisories/2006/0094 - http://www.osvdb.org/22282 - https://exchange.xforce.i
m/bid/16180 - http://www.vupen.com/english/advisories/2006/0094 - http://www.osvdb.org/22282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24029
CVE ID: CVE-2006-0153 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:34.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: 427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421326/100/0/threaded - http://secunia.com/advisories/18354 - http://www.vupen.com/english/advisories/2006/0091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24038 - http:
- http://www.vupen.com/english/advisories/2006/0091 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24038 - http://evuln.com/vulns/18/summary.html - http://www.osvdb.org/22274 - http://www.securityfocus.com/bid/16178
CVE ID: CVE-2006-0154 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:34.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the ForumID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421326/100/0/threaded - http://secunia.com/advisories/18354 - http://www.vupen.com/english/advisories/2006/0091 - http://www.osvdb.org/22275 - http://evuln.com/vulns/18/summary.html - http://www.securityfocus.com/bid/16169 - https://exchange.xforce.ibmcloud.com/vulnerabilit
n.com/vulns/18/summary.html - http://www.securityfocus.com/bid/16169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24039
CVE ID: CVE-2006-0155 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/421326/100/0/threaded - http://www.osvdb.org/22276 - http://secunia.com/advisories/18354 - http://www.vupen.com/english/advisories/2006/0091 - http://evuln.com/vulns/18/summary.html - https://exchange.xforce.ibmcloud.com/vulner
.com/english/advisories/2006/0091 - http://evuln.com/vulns/18/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24040
CVE ID: CVE-2006-0156 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:34.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Foxrum 4.0.4f allows remote attackers to inject arbitrary Javascript via the javascript URI in bbcode url tags in (1) addpost1.php and (2) addtopic1.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16172 - http://evuln.com/vulns/20 - http://securityreason.com/securityalert/325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24043 - http://www.vupen.com/english/advisories/2006/0121 - http://www.securityfocus.com/archive/1/42
om/vulnerabilities/24043 - http://www.vupen.com/english/advisories/2006/0121 - http://www.securityfocus.com/archive/1/421277/100/0/threaded - http://secunia.com/advisories/18386
CVE ID: CVE-2006-0157 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_password parameters, then declares the new password string in the new_passwd and confirm_passwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18601 - http://www.securityfocus.com/bid/16182 - http://downloads.securityfocus.com/vulnerabilities/exploits/MagicNewsPlus-pw-change.
//www.securityfocus.com/bid/16182 - http://downloads.securityfocus.com/vulnerabilities/exploits/MagicNewsPlus-pw-change.pl
CVE ID: CVE-2006-0158 State: PUBLISHED Published: 2006-01-10T11:00:00 Last Updated: 2024-08-07T16:25:33.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CyberDoc SiteSuite CMS allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0038 - http://www.osvdb.org/22205 - http://osvdb.org/ref/22/22205-sitesuite.txt - http://secunia.com/advisories/18305