Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ath.php, (k) WYPopupWindowLink.php, (l) WYSelectMenu.php, and (m) WYTextArea.php; (2) files in the programm/elements/ directory including (n) WYGalleryElement.php, (o) WYGuestbookElement.php, (p) WYImageElement.php, (q) WYLogonButtonElement.php, (r) WYLongTextElement.php, (s) WYLoopElement.php, (t) WYMenuElement.php, and (u) WYShortTextElement.php; and (3) programm/webyep.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1702 - https://www.exploit-db.com/exploits/2496 - http://www.osvdb.org/29654 - http://www.osvdb.org/29648 - http://www.osvdb.org/29660 - http://advisories.echo.or.id/adv/adv48-theday-2006.txt - http://www.osvdb.org/
.org/29648 - http://www.osvdb.org/29660 - http://advisories.echo.or.id/adv/adv48-theday-2006.txt - http://www.osvdb.org/29645 - http://www.securityfocus.com/bid/20406 - http://www.osvdb.org/29644 - http://www.securityfocus.com/archive/1/448009/100/0/threaded - http://www.osvdb.org/29649 - http://www.osvdb.org/29656 - http://www.osvdb.org/29659 - http://www.vupen.com/english/advisories/2006/3972 - http://www.osvdb.org/29652 - http://www.osvdb.org/29650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29397 - http://secunia.com/advisories/22336 - http://www.obdev.at/products/webyep/release-notes.html - http://www.osvdb.org/29658 - http://securitytracker.com/id?1017023 - http://www.osvdb.
ducts/webyep/release-notes.html - http://www.osvdb.org/29658 - http://securitytracker.com/id?1017023 - http://www.osvdb.org/29653 - http://www.osvdb.org/29657 - http://www.osvdb.org/29662 - http://www.osvdb.org/29663 - http://www.osvdb.org/29661 - http://www.osvdb.org/29647 - http://www.osvdb.org/29646 - http://www.osvdb.org/29643 - http://www.osvdb.org/29651 - http://www.osvdb.org/29655
CVE ID: CVE-2006-5221 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cahier de texte 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) matiere_ID parameter in lire.php or the (2) classe_ID parameter in lire_a_faire.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1701 - http://www.securityfocus.com/bid/20389 - https://www.exploit-db.com/exploits/2485 - http://www.vupen.com/english/advisories/2006/3949 - http://www.securityfocus.com/archive/1/447933/100/0/threaded - https
http://www.vupen.com/english/advisories/2006/3949 - http://www.securityfocus.com/archive/1/447933/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29388 - http://secunia.com/advisories/22319
CVE ID: CVE-2006-5222 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dimension of phpBB 0.2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) includes/themen_portal_mitte.php or (2) includes/logger_engine.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22287 - http://www.vupen.com/english/advisories/2006/3923 - http://www.securityfocus.com/bid/20367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29361 - https://www.e
23 - http://www.securityfocus.com/bid/20367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29361 - https://www.exploit-db.com/exploits/2481
CVE ID: CVE-2006-5223 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_user_viewed_posts.php in the Nivisec User Viewed Posts Tracker module 1.0 and earlier for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1705 - http://www.securityfocus.com/archive/1/447932/100/0/threaded - http://www.vupen.com/english/advisories/2006/3947 - http://www.securityfocus.com/bid/20385 - http://w
2/100/0/threaded - http://www.vupen.com/english/advisories/2006/3947 - http://www.securityfocus.com/bid/20385 - http://www.nivisec.com/article.php?l=vi&ar=19 - http://www.securityfocus.com/archive/1/448445/100/0/threaded - http://secunia.com/advisories/22305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29383 - https://www.exploit-db.com/exploits/2483
CVE ID: CVE-2006-5224 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.072Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/logger_engine.php in Dimitri Seitz Security Suite IP Logger 1.0.0 in dwingmods for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29321 - https://www.exploit-db.com/exploits/2480 - http://www.securityfocus.com/bid/20370 - http://www.vupen.com/english/advisories/2006/3926 - http://secunia.com/advisories/2
://www.securityfocus.com/bid/20370 - http://www.vupen.com/english/advisories/2006/3926 - http://secunia.com/advisories/22290
CVE ID: CVE-2006-5225 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AAIportal before 1.4.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29557 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29406 - http://secunia.com/advisories/22150 - http://sourceforge.net/project/shownotes.php?release_id=451458 - http://www.securityfocus.com/bid/20414 - http://www.vupen.com/english/advisories/2006/3952 - http://aai-portal.sourceforge.net/
CVE ID: CVE-2006-5226 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in moteur/moteur.php in Prologin.fr Freenews 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2490 - http://securityreason.com/securityalert/1704 - http://www.securityfocus.com/bid/20405 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29395 - http://www.securityfocus.com/archive/1/448019/100/0/threaded
CVE ID: CVE-2006-5227 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in TorrentFlux 2.1 allows remote attackers to inject arbitrary web script or HTML via (1) the $user_agent variable, probably obtained from the User-Agent HTTP header, and possibly (2) the $ip_resolved variable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017007 - http://secunia.com/advisories/22293 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29374 - http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agen
s://exchange.xforce.ibmcloud.com/vulnerabilities/29374 - http://www.stevenroddis.com.au/2006/10/06/torrentflux-user-agent-xss-vulnerability/ - http://www.securityfocus.com/archive/1/447836/100/0/threaded - http://securityreason.com/securityalert/1706 - http://www.securityfocus.com/bid/20371
CVE ID: CVE-2006-5228 State: PUBLISHED Published: 2006-10-10T21:00:00 Last Updated: 2024-08-07T19:41:05.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) up_login, (2) up_pass, or (3) up_num_tasks parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447846/100/0/threaded - http://securityreason.com/securityalert/1703 - http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?view=log - http://secunia
rityalert/1703 - http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?view=log - http://secunia.com/advisories/22254 - http://www.securityfocus.com/bid/20372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29375 - http://www.osvdb.org/29552 - http://www.vupen.com/english/advisories/2006/3951 - http://securitytracker.com/id?1017008 - http://ackertodo.cvs.sourceforge.net/ackertodo/ackertodo/src/gadget/login.php?r1=1.3&r2=1.4
CVE ID: CVE-2006-5229 State: PUBLISHED Published: 2006-10-10T23:00:00 Last Updated: 2024-08-07T19:41:05.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime. NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds. Additional Analyst Notes: - CVE Program Container:
ays when processing /etc/shadow due to an increased number of rounds. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/25979 - http://www.securityfocus.com/archive/1/448702/100/0/threaded - http://www.securityfocus.com/archive/1/448025/100/0/threaded - http://www.securityfocus.com/archive/1/448156/100/0/threaded - http://www.vupen.com/english/advisories/2007/2545 - http://www.securityfocus.com/bid/20418 - http://www.securityfocus.com/archive/1/448108/100/0/threaded - http://www.osvdb.org/32721 - http://www.sybsecurity.com/hack-proventia-1.pdf
CVE ID: CVE-2006-5230 State: PUBLISHED Published: 2006-10-11T00:00:00 Last Updated: 2024-08-07T19:41:05.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in forum.php in FreeForum 0.9.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29391 - http://www.securityfocus.com/bid/20388 - https://www.exploit-db.com/exploits/2484 - http://secunia.com/advisories/22320 - http://securityreason.com/securityalert/1710 - http://www.se
b.com/exploits/2484 - http://secunia.com/advisories/22320 - http://securityreason.com/securityalert/1710 - http://www.securityfocus.com/archive/1/447931/100/0/threaded
CVE ID: CVE-2006-5231 State: PUBLISHED Published: 2006-10-11T00:00:00 Last Updated: 2024-08-07T19:41:05.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grandstream GXP-2000 VoIP Desktop Phone, firmware version 1.1.0.5, allows remote attackers to cause a denial of service (hang or reboot) via a large amount of ASCII data sent to port (1) 5060/UDP, (2) 5062/UDP, (3) 5064/UDP, (4) 5066/UDP, (5) 9876/UDP, or (6) 26789/UDP. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20356 - http://securityreason.com/securityalert/1718 - http://secunia.com/advisories/22265 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049876
lert/1718 - http://secunia.com/advisories/22265 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049876.html - http://www.vupen.com/english/advisories/2006/3941 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29356 - http://www.grandstream.com/BETATEST/GXP2000_BT200/Release_Note_GXP2000-BT200_1.1.1.14.pdf
CVE ID: CVE-2006-5232 State: PUBLISHED Published: 2006-10-11T00:00:00 Last Updated: 2024-08-07T19:41:05.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in iSearch 2.16 allow remote attackers to execute arbitrary PHP code via a URL in the isearch_path parameter in (1) index.php, (2) viewcache.php, (3) sitemap.php, (4) isearch.inc.php, (5) google_sitemap.php, (6) stats.php, or (7) auto_spider_img.php. NOTE: this issue has been disputed by a third party who shows that $isearch_path is set to a constant value. CVE analysis as of 20061010 is inconclusive, although the original researcher is known to make mistakes Additional Analys
VE analysis as of 20061010 is inconclusive, although the original researcher is known to make mistakes Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29402 - http://www.securityfocus.com/archive/1/448225/100/100/threaded - http://www.securityfocus.com/archive/1/448099/100/0/threaded - http://www.securityfocus.com/archive/1/448006/100/0/threaded - http://www.securityfocus.com/bid/20401
CVE ID: CVE-2006-5233 State: PUBLISHED Published: 2006-10-11T01:00:00 Last Updated: 2024-08-07T19:41:05.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Polycom SoundPoint IP 301 VoIP Desktop Phone, firmware version 1.4.1.0040, allows remote attackers to cause a denial of service (reboot) via (1) a long URL sent to the HTTP daemon and (2) unspecified manipulations as demonstrated by the Nessus http_fingerprinting_hmap.nasl script. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0090.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29350 - http://www.securityfocus.com/bid/20351 - http://se
0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29350 - http://www.securityfocus.com/bid/20351 - http://secunia.com/advisories/22266
CVE ID: CVE-2006-5234 State: PUBLISHED Published: 2006-10-11T01:00:00 Last Updated: 2024-08-07T19:41:05.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpWebSite 0.10.2 allow remote attackers to execute arbitrary PHP code via a URL in the PHPWS_SOURCE_DIR parameter in (1) init.php, (2) users.php, (3) Cookie.php, (4) forms.php, (5) Groups.php, (6) ModSetting.php, (7) Calendar.php, (8) DateTime.php, (9) core.php, (10) ImgLibrary.php, (11) Manager.php, and (12) Template.php, and (13) EZform.php. NOTE: CVE disputes this report, since "PHPWS_SOURCE_DIR" is defined as a constant, not accessed as a variable Additional Analyst No
isputes this report, since "PHPWS_SOURCE_DIR" is defined as a constant, not accessed as a variable Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1716 - http://www.securityfocus.com/archive/1/448098/100/0/threaded - http://www.securityfocus.com/bid/20412 - http://www.attrition.org/pipermail/vim/2006-October/001079.html - http://www.securityfocus.com/archive/1/448307/100/100/threaded
CVE ID: CVE-2006-5235 State: PUBLISHED Published: 2006-10-11T01:00:00 Last Updated: 2024-08-07T19:41:05.159Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_kb.php in Dimension of phpBB 0.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3923
CVE ID: CVE-2006-5236 State: PUBLISHED Published: 2006-10-11T01:00:00 Last Updated: 2024-08-07T19:41:05.075Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in 4images 1.7.x allows remote authenticated users to execute arbitrary SQL commands via the search_user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20394 - http://w4ck1ng.com/board/showthread.php?t=1037 - http://www.securityfocus.com/archive/1/448022/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29389 - http://securitytracker.com/id?1017074 - http://secunia.com/advisories/22349 - http://securityre
/vulnerabilities/29389 - http://securitytracker.com/id?1017074 - http://secunia.com/advisories/22349 - http://securityreason.com/securityalert/1711 - https://www.exploit-db.com/exploits/2487 - http://www.vupen.com/english/advisories/2006/3974
CVE ID: CVE-2006-5237 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.bookmark-manager.com/CHANGES - http://www.securityfocus.com/bid/20417 - http://secunia.com/advisories/22310 - http://www.vupen.com/english/advisories/2006/3958
CVE ID: CVE-2006-5238 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29542 - http://www.bookmark-manager.com/CHANGES - http://www.vupen.com/english/advisories/2006/3958
CVE ID: CVE-2006-5239 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eXpBlog 0.3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the query string (PHP_SELF) in kalender.php or (2) the captcha_session_code parameter in pre_details.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017028 - http://secunia.com/advisories/22328 - http://www.securityfocus.com/archive/1/448102/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29409 - http://w
ecurityfocus.com/archive/1/448102/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29409 - http://www.expblog.de/board/viewtopic.php?t=317 - http://www.vupen.com/english/advisories/2006/3973 - http://marc.info/?l=full-disclosure&m=116042862409660&w=2 - http://www.securityfocus.com/bid/20420
CVE ID: CVE-2006-5240 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENV[BASE_ENGINE_LOC] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017026 - http://securityreason.com/securityalert/1709 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29390 - http://advisories.echo.or.id/adv/adv51-K-159-2006.txt - http://www.securityfocus.com/bid/
ud.com/vulnerabilities/29390 - http://advisories.echo.or.id/adv/adv51-K-159-2006.txt - http://www.securityfocus.com/bid/20409 - http://www.securityfocus.com/archive/1/448013/100/0/threaded - http://secunia.com/advisories/22343 - http://www.docmint.net/index.php?id=54 - https://www.exploit-db.com/exploits/2493 - http://www.vupen.com/english/advisories/2006/3968
CVE ID: CVE-2006-5241 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Gallery 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) file.php; (2) find_user.php, (3) lib_user.php, (4) lib_form_user.php, and (5) user.php in sw/lib_user/; (6) find_session.php and (7) session.php in sw/lib_session/; (8) comment.php and (9) lib_comment.php in sw/lib_comment/; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Cont
(9) lib_comment.php in sw/lib_comment/; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1708 - http://securitytracker.com/id?1017021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29417 - https://www.exploit-db.com/exploits/2497 - http://www.securityfocus.com/bid/20411 - http://www.securityfocus.com/archive/1/448027/100/0/threaded - http://advisories.echo.or.id/adv/adv52-theday-2006.txt - http://secunia.com/advisories/22337 - http://www.vupen.com/english/advisories/2006/3969
CVE ID: CVE-2006-5242 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Etomite Content Management System (CMS) before 0.6.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22217 - http://www.vupen.com/english/advisories/2006/3975 - http://www.etomite.org/forums/index.php?showtopic=6095 - http://www.securityfocus.com/bid/20449
CVE ID: CVE-2006-5243 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Doc 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_file.php, and (5) lib_form_file.php in sw/lib_up_file/; (6) find_comment.php, (7) comment.php, and (8) lib_comment.php in sw/lib_comment/; (9) sw/lib_find/find.php; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: R
ment/; (9) sw/lib_find/find.php; and other unspecified PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29404 - http://securityreason.com/securityalert/1715 - http://www.vupen.com/english/advisories/2006/3971 - http://securitytracker.com/id?1017022 - http://advisories.echo.or.id/adv/adv49-theday-2006.txt - http://www.securityfocus.com/bid/20407 - http://secunia.com/advisories/22334 - http://www.securityfocus.com/archive/1/448010/100/0/threaded
CVE ID: CVE-2006-5244 State: PUBLISHED Published: 2006-10-12T00:00:00 Last Updated: 2024-08-07T19:41:05.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenDock Easy Blog 1.4 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) down_stat.php, (2) file.php, (3) find_file.php, (4) lib_read_file.php, and (5) lib_form_file.php in sw/lib_up_file; (6) find_comment.php, (7) comment.php, and (8) lib_comment.php in sw/lib_comment/; (9) sw/lib_find/find.php; and other unspecified vectors. Additional Analyst Notes: - CVE Program Container:
b_comment/; (9) sw/lib_find/find.php; and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20408 - http://securitytracker.com/id?1017027 - http://secunia.com/advisories/22335 - https://www.exploit-db.com/exploits/2495 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29399 - http://www.securityfocus.com/archive/1/448012/100/0/threaded - http://advisories.echo.or.id/adv/adv50-theday-2006.txt - http://www.vupen.com/english/advisories/2006/3970