Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5171 State: PUBLISHED Published: 2007-01-16T20:00:00 Last Updated: 2024-08-07T19:41:04.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe Overflow," a different vulnerability than CVE-2006-5172. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - http://osvdb.org/31319 - http://securitytr
http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - http://osvdb.org/31319 - http://securitytracker.com/id?1017506 - http://www.securityfocus.com/archive/1/456711 - http://www.vupen.com/english/advisories/2007/0154 - http://www.iss.net/threats/252.html - http://www.securityfocus.com/bid/22015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29343 - http://secunia.com/advisories/23648
CVE ID: CVE-2006-5172 State: PUBLISHED Published: 2007-01-16T20:00:00 Last Updated: 2024-08-07T19:41:05.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA) Brightstor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Protection Suites r2 allows remote attackers to execute arbitrary code via crafted SUNRPC packets, aka the "Mediasvr.exe String Handling Overflow," a different vulnerability than CVE-2006-5171. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - http://securitytracker.com
r: References: - http://supportconnectw.ca.com/public/storage/infodocs/babimpsec-notice.asp - http://securitytracker.com/id?1017506 - http://www.securityfocus.com/archive/1/456711 - http://www.securityfocus.com/bid/22016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29344 - http://www.vupen.com/english/advisories/2007/0154 - http://www.iss.net/threats/253.html - http://secunia.com/advisories/23648 - http://osvdb.org/31320
CVE ID: CVE-2006-5173 State: PUBLISHED Published: 2006-10-17T22:00:00 Last Updated: 2024-08-07T19:41:05.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel does not properly save or restore EFLAGS during a context switch, or reset the flags when creating new threads, which allows local users to cause a denial of service (process crash), as demonstrated using a process that sets the Alignment Check flag (EFLAGS 0x40000), which triggers a SIGBUS in other processes that have an unaligned access. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/23361 - http
nces: - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://secunia.com/advisories/23361 - http://secunia.com/advisories/23593 - http://secunia.com/advisories/23384 - http://www.securityfocus.com/bid/21851 - http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=47a5c6fa0e204a2b63309c648bb2fde36836c826 - http://secunia.com/advisories/23474 - http://www.securityfocus.com/archive/1/471457 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:002 - http://www.ubuntu.com/usn/usn-395-1 - http://secunia.com/advisories/25691
CVE ID: CVE-2006-5174 State: PUBLISHED Published: 2006-10-05T21:00:00 Last Updated: 2024-08-07T19:41:05.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: The copy_from_user function in the uaccess code in Linux kernel 2.6 before 2.6.19-rc1, when running on s390, does not properly clear a kernel buffer, which allows local user space programs to read portions of kernel memory by "appending to a file from a bad address," which triggers a fault that prevents the unused memory from being cleared in the kernel buffer. Additional Analyst Notes: - CVE Program Container: References: - http://lkml.org/lkml/2006/11/5/46 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
r: References: - http://lkml.org/lkml/2006/11/5/46 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9885 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29378 - http://www.securityfocus.com/bid/20379 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://www.vupen.com/english/advisories/2006/3938 - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://www.us.debian.org/security/2006/dsa-1237 - http://secunia.com/advisories/24206 - http://securitytracker.com/id?1017090 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/23064 - http://www.
securitytracker.com/id?1017090 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/23064 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://secunia.com/advisories/23997 - http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=52149ba6b0ddf3e9d965257cc0513193650b3ea8 - http://secunia.com/advisories/22497 - http://www.redhat.com/support/errata/RHSA-2006-0710.html - http://secunia.com/advisories/23395 - http://secunia.com/advisories/22289
CVE ID: CVE-2006-5175 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:04.249Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in the administrative interface for the TeraStation HD-HTGL firmware 2.05 beta 1 and earlier allows remote attackers to modify configurations or delete arbitrary data via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22248 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29338 - http://jvn.jp/jp/JVN%2393484133/index.html - http://www.vupen.com/english/advisories/2006/3891
CVE ID: CVE-2006-5176 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:05.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22179 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29284 - http://www.mailenable.com/hotfix/ - http://www.securityfocus.com/bid/20290 - http://www.vupen.com/english/advisories/2006/3862 - http://labs.musecurity.com/advisories/MU-200609-0
us.com/bid/20290 - http://www.vupen.com/english/advisories/2006/3862 - http://labs.musecurity.com/advisories/MU-200609-01.txt
CVE ID: CVE-2006-5177 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:05.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or (2) cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigger a buffer over-read. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29287 - http://secunia.com/advisories/22179 - http://www.mailenable.com/hotfix/ - https://e
ibmcloud.com/vulnerabilities/29287 - http://secunia.com/advisories/22179 - http://www.mailenable.com/hotfix/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29286 - http://www.securityfocus.com/bid/20290 - http://www.vupen.com/english/advisories/2006/3862 - http://labs.musecurity.com/advisories/MU-200609-01.txt
CVE ID: CVE-2006-5178 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:04.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restriction by using a combination of symlink, mkdir, and unlink functions to change the file path after the open_basedir check and before the file is opened by the underlying system, as demonstrated by symlinking a symlink into a subdirectory, to point to a parent directory via .. (dot dot) sequences, and then unlinking the resulting symlink. Additional Analyst Notes: - CVE Program Container: References: - http://list
, and then unlinking the resulting symlink. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049850.html - http://www.securityfocus.com/archive/1/448953/100/0/threaded - http://www.securityfocus.com/archive/1/447649/100/0/threaded - http://www.turbolinux.com/security/2006/TLSA-2006-38.txt - http://www.securityfocus.com/bid/20326 - http://securityreason.com/securityalert/1692 - http://www.neosecurityteam.net/index.php?action=advisories&id=26 - http://secunia.com/advisories/22235 - http://www.securityfocus.com/archive/1/448020/100/0/threaded - http://www.vupen.com/english/advisories/2006/3901 - https://exchange.xfo
rityfocus.com/archive/1/448020/100/0/threaded - http://www.vupen.com/english/advisories/2006/3901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29340 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:185 - http://www.hardened-php.net/advisory_082006.132.html - http://securitytracker.com/id?1016977 - http://secunia.com/advisories/22424
CVE ID: CVE-2006-5179 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:05.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service (CPU consumption) via parasitic public keys with large (1) "public exponent" or (2) "public modulus" values in X.509 certificates that require extra time to process when using RSA signature verification, a related issue to CVE-2006-2940. Additional Analyst Notes: - CVE Program Container: References: - http://www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en - http://www.vupen.com/english/advisories/2006/3859 - http:
//www.uniras.gov.uk/niscc/docs/re-20060928-00661.pdf?lang=en - http://www.vupen.com/english/advisories/2006/3859 - http://secunia.com/advisories/22206
CVE ID: CVE-2006-5180 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:04.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter, a different vector than CVE-2006-5102. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1695 - http://www.securityfocus.com/archive/1/447253/100/0/threaded - https://www.exploit-db.com/exploits/2443
CVE ID: CVE-2006-5181 State: PUBLISHED Published: 2006-10-06T00:00:00 Last Updated: 2024-08-07T19:41:04.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the target parameter in (1) change_preferences2.php, (2) create_file.php, (3) upload_local.php, and (4) upload_multi.php, different vectors than CVE-2006-5124. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447489/100/0/threaded - http://secunia.com/advisories/22178 - https://www.exploit-db.com/exploits/2462 - http://securi
1/447489/100/0/threaded - http://secunia.com/advisories/22178 - https://www.exploit-db.com/exploits/2462 - http://securityreason.com/securityalert/1693 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29285
CVE ID: CVE-2006-5182 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in frontpage.php in Dan Jensen Travelsized CMS 0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29337 - http://www.securityfocus.com/bid/20321 - https://www.exploit-db.com/exploits/2471 - http://www.vupen.com/english/advisories/2006/3897
CVE ID: CVE-2006-5183 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:04.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Dayfox Designs Dayfox Blog 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the slogin parameter in the (1) adminlog.php, (2) postblog.php, (3) index.php, or (4) index2.php script in /edit. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29310 - http://www.securityfocus.com/archive/1/447500/100/0/threaded - http://securityreason.com/securityalert/1694
CVE ID: CVE-2006-5184 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PKR Internet Taskjitsu before 2.0.6 allows remote attackers to execute arbitrary SQL commands via the key parameter, when the limit query parameter is set to customerid. Additional Analyst Notes: - CVE Program Container: References: - https://www.pkrinternet.com/taskjitsu/task/3517 - http://securitytracker.com/id?1016978 - http://www.securityfocus.com/bid/20332 - http://secunia.com/advisories/22257 - https://www.pkrinternet.com/download/RELEASE-NOTES.txt - http://www.vupen.com/english/advisories/
com/advisories/22257 - https://www.pkrinternet.com/download/RELEASE-NOTES.txt - http://www.vupen.com/english/advisories/2006/3903
CVE ID: CVE-2006-5185 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in Template.php in HAMweather 3.9.8.4 and earlier allows remote attackers to execute arbitrary code via a modified query string, which is supplied to an eval function call within the do_parse_code function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22242 - http://www.gulftech.org/?node=research&article_id=00115-09302006 - http://www.vupen.com/english/advisories/2006/3881 - http://www.securityfocus.com/bid/20311 - http://support.hamweather.com/vie
/www.vupen.com/english/advisories/2006/3881 - http://www.securityfocus.com/bid/20311 - http://support.hamweather.com/viewtopic.php?t=6548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29304
CVE ID: CVE-2006-5186 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:04.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in phpMyProfiler 0.9.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pmp_rel_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://forum.phpmyprofiler.de/viewtopic.php?p=2745#2745 - http://www.securityfocus.com/archive/1/447646/100/0/threaded - http://www.vupen.com/english/advisories/2006/3896 - http://secunia.com/advisories/22144 - http://securityreason.com/security
://www.vupen.com/english/advisories/2006/3896 - http://secunia.com/advisories/22144 - http://securityreason.com/securityalert/1696 - http://www.phpmyprofiler.de/index.php?page=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29335 - http://www.securityfocus.com/bid/20324 - http://securitytracker.com/id?1016980 - https://www.exploit-db.com/exploits/2470
CVE ID: CVE-2006-5187 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:04.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions.php in Bulletin Board Ace (BBaCE) 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3887 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29315 - http://www.securityfocus.com/bid/20302 - http://secunia.com/advisories/22137 - https://www.exploit-db.com/exploits/2468
CVE ID: CVE-2006-5188 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in download.php in webGENEius GOOP Gallery 2.0.2 allows remote attackers to read or list data from certain files or directories via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.armorize.com/resources/vulnerability.php?Keyword=Armorize-ADV-2006-0004 - http://securitytracker.com/id?1016983 - http://www.securityfocus.com/archive/1/448258/100/100/threaded - http://www.securityfocus.com/archive/1/447647/100/0/threaded - https://exchange.xforce.ibm
e/1/448258/100/100/threaded - http://www.securityfocus.com/archive/1/447647/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29339 - http://secunia.com/advisories/22258 - http://securityreason.com/securityalert/1698 - http://www.securityfocus.com/archive/1/448946/100/0/threaded - http://www.securityfocus.com/bid/20331
CVE ID: CVE-2006-5189 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in funzioni/lib/show_hlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appl[APPL] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2472 - http://www.securityfocus.com/bid/20323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29336
CVE ID: CVE-2006-5190 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in osCommerce 2.2 Milestone 2 Update 060817 allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in the (a) banner_manager.php, (b) banner_statistics.php, (c) countries.php, (d) currencies.php, (e) languages.php, (f) manufacturers.php, (g) newsletters.php, (h) orders_status.php, (i) products_attributes.php, (j) products_expected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_
pected.php, (k) reviews.php, (l) specials.php, (m) stats_products_purchased.php, (n) stats_products_viewed.php, (o) tax_classes.php, (p) tax_rates.php, or (q) zones.php scripts in /admin, and the (2) zpage parameter in (r) admin/geo_zones.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/28750/ - http://www.osvdb.org/29801 - https://www.exploit-db.com/exploits/28746/ - http://www.osvdb.org/29803 - http://www.vupen.com/english/advisories/2006/3917 - http://www.osvdb.org/29798 - http://www.osvdb.org/29808 - http://www.osvdb.org/29807 - http://secunia.com/advisories/22275 - http://www.osvdb.org/29802 - http://www.osvdb.org/29795 - https://
vdb.org/29807 - http://secunia.com/advisories/22275 - http://www.osvdb.org/29802 - http://www.osvdb.org/29795 - https://www.exploit-db.com/exploits/28759/ - https://www.exploit-db.com/exploits/28755/ - http://lostmon.blogspot.com/2006/10/oscommerce-multiple-scripts-page-param.html - https://www.exploit-db.com/exploits/28747/ - https://www.exploit-db.com/exploits/28744/ - http://securitytracker.com/id?1016979 - http://www.osvdb.org/29809 - http://www.osvdb.org/29799 - https://www.exploit-db.com/exploits/28757/ - https://www.exploit-db.com/exploits/28748/ - http://www.osvdb.org/29810 - http://www.osvdb.org/29811 - https://www.exploit-db.com/exploits/28758/ - https://www.exploit-db.com/exploits
rg/29810 - http://www.osvdb.org/29811 - https://www.exploit-db.com/exploits/28758/ - https://www.exploit-db.com/exploits/28753/ - http://www.osvdb.org/29797 - http://www.osvdb.org/29806 - https://www.exploit-db.com/exploits/28749/ - http://www.osvdb.org/29800 - http://www.securityfocus.com/bid/20343 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29355 - http://www.osvdb.org/29796 - https://www.exploit-db.com/exploits/28743/ - https://www.exploit-db.com/exploits/28754/ - https://www.exploit-db.com/exploits/28745/ - http://www.osvdb.org/29804 - https://www.exploit-db.com/exploits/28756/ - http://www.osvdb.org/29805 - https://www.exploit-db.com/exploits/28752/
CVE ID: CVE-2006-5191 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_static_topics.php in the Nivisec Static Topics module for phpBB 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29506 - https://www.exploit-db.com/exploits/2477/ - http://www.nivisec.com/article.php?l=vi&ar=20 - http://www.securityfocus.com/bid/20353 - http://www.vupen.com/english/advisories/2006/3916 - http://secuni
?l=vi&ar=20 - http://www.securityfocus.com/bid/20353 - http://www.vupen.com/english/advisories/2006/3916 - http://secunia.com/advisories/22269 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29347
CVE ID: CVE-2006-5192 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/footer.php in phpGreetz 0.99 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPGREETZ_INCLUDE_DIR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20352 - http://www.vupen.com/english/advisories/2006/3915 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29346 - https://www.exploit-db.com/exploits/2476/
CVE ID: CVE-2006-5193 State: PUBLISHED Published: 2006-10-06T19:00:00 Last Updated: 2024-08-07T19:41:05.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447896/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29331 - http://www.securityfocus.com/bid/20350 - http://www.securityfocus.com/archive/1/447735/100/0/threaded
CVE ID: CVE-2006-5194 State: PUBLISHED Published: 2006-10-06T21:00:00 Last Updated: 2024-08-07T19:41:04.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in net2ftp 0.93 allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447535/100/0/threaded - http://www.vupen.com/english/advisories/2006/3890 - http://secunia.com/advisories/22255 - http://www.securityfocus.com/bid/20313