Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2960 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436707/100/0/threaded - http://securityreason.com/securityalert/1074 - http://securitytracker.com/id?1016269 - http://www.securityfocus.com/bid/18363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27135
CVE ID: CVE-2006-2961 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MKD command. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27071 - http://www.securityfocus.com/bid/18586 - http://www.osvdb.org/26364 - http://secunia.com/advisories/20574 -
ties/27071 - http://www.securityfocus.com/bid/18586 - http://www.osvdb.org/26364 - http://secunia.com/advisories/20574 - http://www.vupen.com/english/advisories/2006/2287
CVE ID: CVE-2006-2962 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 20020923 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phormationdir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1895 - http://www.securityfocus.com/bid/18371 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27048
CVE ID: CVE-2006-2963 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote attackers to inject arbitrary web script or HTML via the suchtext parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27063 - http://www.vupen.com/english/advisories/2006/2277 - http://securitytracker.com/id?1016276 - http://www.securityfocus.com/archive/1/436704/100/200/threaded - http://secunia.com/advisories/20583 - http://www.majorse
ttp://www.securityfocus.com/archive/1/436704/100/200/threaded - http://secunia.com/advisories/20583 - http://www.majorsecurity.de/advisory/major_rls13.txt
CVE ID: CVE-2006-2964 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Xtreme Scripts Download Manager (aka Xtreme Downloads) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) download.php, (2) manager.php, (3) admin/scripts/category.php, (4) includes/add_allow.php, (5) admin/index.php, and (6) admin/admin/login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26647 - http://www.osvdb.org/26645 - http://www.osvdb.org/26643 - http://www.osvdb.org/26646 - htt
http://www.osvdb.org/26647 - http://www.osvdb.org/26645 - http://www.osvdb.org/26643 - http://www.osvdb.org/26646 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26961 - http://www.securityfocus.com/archive/1/436107/100/0/threaded - http://securityreason.com/securityalert/1072 - http://www.securityfocus.com/archive/1/436104/100/0/threaded - http://www.osvdb.org/26644 - http://www.osvdb.org/26648
CVE ID: CVE-2006-2965 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Particle Soft Particle Whois 1.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the target parameter in index.php and (2) the "input box." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436113/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26954 - http://securityreason.com/securityalert/1071 - http://www.vupen.com/english/advisories/2006/2168 - http://secunia.com/adviso
://securityreason.com/securityalert/1071 - http://www.vupen.com/english/advisories/2006/2168 - http://secunia.com/advisories/20490
CVE ID: CVE-2006-2966 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Particle Soft Particle Wiki 1.0.2 allows remote attackers to inject arbitrary web script or HTML via a BR element with an extraneous IMG tag and a STYLE attribute that contains "/**/" comment sequences, which bypasses the XSS protection scheme. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1070 - http://www.vupen.com/english/advisories/2006/2170 - http://www.securityfocus.com/archive/1/436121/100/0/threaded - https://exchange
vupen.com/english/advisories/2006/2170 - http://www.securityfocus.com/archive/1/436121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26952
CVE ID: CVE-2006-2967 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Syworks SafeNET allows local users to bypass restrictions on network resource consumption by editing the policy.dat file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436000/100/0/threaded - http://securityreason.com/securityalert/1077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27083 - http://securitytracker.com/id?1016231
CVE ID: CVE-2006-2968 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHP Labware LabWiki 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input box (query parameter). Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-June/000845.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26988 - http://www.osvdb.org/26597 - http://securitytracker.com/id?1016227 - http://www.securityfocus.com/archive/1/435981/100/0/threaded - http://www.securityfoc
//securitytracker.com/id?1016227 - http://www.securityfocus.com/archive/1/435981/100/0/threaded - http://www.securityfocus.com/bid/18288 - http://securityreason.com/securityalert/1092
CVE ID: CVE-2006-2969 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script or HTML via a javascript URI in the SRC attribute of an IMG element in the input box in quickchat.php, and possibly other manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436640/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27154 - http://www.vupen.com/english/advisories/2006/2310 - http://securityreason.com/securityal
oud.com/vulnerabilities/27154 - http://www.vupen.com/english/advisories/2006/2310 - http://securityreason.com/securityalert/1091 - http://www.securityfocus.com/bid/18483 - http://secunia.com/advisories/20607
CVE ID: CVE-2006-2970 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: videoPage.php in L0j1k tinyMuw 0.1.0 allows remote attackers to obtain sensitive information via a certain id parameter, probably with an invalid value, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436640/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27155 - http://www.vupen.com/english/advisories/2006/2310 - http://securityreason.com/securityalert/1091
CVE ID: CVE-2006-2971 State: PUBLISHED Published: 2006-06-12T20:00:00 Last Updated: 2024-08-07T18:06:27.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daemon crash) via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18353 - http://www.osvdb.org/26029 - http://securityreason.com/securityalert/1090 - http://www.securityfocus.com/archive/1/436659/100/0/threaded - http://www.vupen.com/english/advisories/2006/2245 - ht
- http://www.securityfocus.com/archive/1/436659/100/0/threaded - http://www.vupen.com/english/advisories/2006/2245 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27028 - http://secunia.com/advisories/20551
CVE ID: CVE-2006-2972 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vs_resource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26985 - http://secunia.com/advisories/20512 - http://www.attrition.org/pipermail/vim/2006-June/000848.html - http://securityreason.com/securityalert/1073 - http://www.securityfocus.com/archive/1/436290/100/0/threaded - http://www.securityfocus.com/bid
com/securityalert/1073 - http://www.securityfocus.com/archive/1/436290/100/0/threaded - http://www.securityfocus.com/bid/18317 - http://www.arantius.com/topic/vice+stats
CVE ID: CVE-2006-2973 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the (1) catid and (2) cid parameter. NOTE: this might be a duplicate of CVE-2005-4009.c. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1089 - http://www.vupen.com/english/advisories/2006/2220 - http://www.securityfocus.com/archive/1/436334/100/0/threaded - http://www.securityfocus.com/bid/18314
CVE ID: CVE-2006-2974 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid parameter in (a) default.asp and (3) dname parameter in (b) /admin/dns.asp and (c) /additional/regdomain_done.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2213 - http://securitytracker.com/id?1016237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27005 - ht
ries/2006/2213 - http://securitytracker.com/id?1016237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27005 - http://secunia.com/advisories/20516
CVE ID: CVE-2006-2975 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of IMG tags in the (1) name, (2) email, and (3) website parameter, which bypasses XSS protection mechanisms that check for SCRIPT tags but not IMG. NOTE: portions of this description's details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20526 - h
ty information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20526 - http://www.vupen.com/english/advisories/2006/2221 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27006 - http://www.securityfocus.com/archive/1/436408/100/0/threaded - http://securityreason.com/securityalert/1088
CVE ID: CVE-2006-2976 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2185 - http://sourceforge.net/project/shownotes.php?release_id=423104&group_id=89658 - http://secunia.com/advisories/20465 - http://coppermine-gallery.net/forum/index.php?topic=32333.0 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
20465 - http://coppermine-gallery.net/forum/index.php?topic=32333.0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26983
CVE ID: CVE-2006-2977 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary SQL commands via the img parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436410/100/0/threaded - http://securityreason.com/securityalert/1078 - http://www.vupen.com/english/advisories/2006/2249 - http://www.securityfocus.com/bid/18352 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27000 - http://secunia.com/advisories/20529
CVE ID: CVE-2006-2978 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct request to (1) big.php and (2) upgrade.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436410/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26999 - http://securityreason.com/securityalert/1078 - http://www.vupen.com/english/advisories/2006/2249 - http://secunia.com/advisories/20529
CVE ID: CVE-2006-2979 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, allow remote attackers to inject arbitrary web script or HTML via the (1) forum_id parameter in forum.php, which is not properly handled in block_forum_topics.php, and (2) item_id parameter in reviews.php, which is not properly handled in block_reviews.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18369 - http://www.att
Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18369 - http://www.attrition.org/pipermail/vim/2006-June/000846.html - http://www.securityfocus.com/archive/1/436415/100/0/threaded - http://www.codetosell.com/downloads/xss_fix.zip - http://www.vupen.com/english/advisories/2006/2253 - http://securityreason.com/securityalert/1087 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27112 - http://secunia.com/advisories/20538
CVE ID: CVE-2006-2980 State: PUBLISHED Published: 2006-06-12T22:00:00 Last Updated: 2024-08-07T18:06:27.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions including Light, Standard, and Enterprise, might allow remote attackers to execute arbitrary SQL commands via unknown vectors, probably involving the forum_id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27684 - http://www.attrition.org/pipermail/vim/2006-June/000846.html - http://www.codetosell.com/downloads/xss_fix.zip
CVE ID: CVE-2006-2981 State: PUBLISHED Published: 2006-06-12T23:00:00 Last Updated: 2024-08-07T18:06:27.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vs_search.php in Arantius Vice Stats before 1.0.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors, a different issue than CVE-2006-2972. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-June/000848.html - http://www.arantius.com/topic/vice+stats
CVE ID: CVE-2006-2982 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:06:27.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in (1) footer.php and (2) admin/footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18364 - http://securitytracker.com/id?1016258 - http://secunia.com/advisories/20522 - http://www.osvdb.org/26266 - http://www.vupen.com/english/advisories/2006/2219 - https://excha
ia.com/advisories/20522 - http://www.osvdb.org/26266 - http://www.vupen.com/english/advisories/2006/2219 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27024 - https://www.exploit-db.com/exploits/1891
CVE ID: CVE-2006-2983 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:06:27.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter in cal.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26418 - http://www.vupen.com/english/advisories/2006/2219
CVE ID: CVE-2006-2984 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the STYLE_URL parameter. NOTE: it is possible that this issue is resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436457/100/0/threaded - http://securityreason.com/securityalert/1085 - http://secunia.com/advisories/20528 - http://www.vupen.com/english/advisories/2006/2236 - https://exchange.xf
ert/1085 - http://secunia.com/advisories/20528 - http://www.vupen.com/english/advisories/2006/2236 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27092 - http://www.securityfocus.com/bid/18464
CVE ID: CVE-2006-2985 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded "'" characters in the STYLE_URL parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-June/000847.html - http://www.securityfocus.com/archive/1/436457/100/0/threaded - http://securityreason.com/securityalert/1085 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27097
CVE ID: CVE-2006-2986 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2238 - http://secunia.com/advisories/20533 - http://www.securityfocus.com/bid/18350 - http://securityreason.com/sec
2006/2238 - http://secunia.com/advisories/20533 - http://www.securityfocus.com/bid/18350 - http://securityreason.com/securityalert/1084 - http://www.securityfocus.com/archive/1/436411/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27095
CVE ID: CVE-2006-2987 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) voteid, and (3) vfiel parameters to (a) index.php, and via the (4) nick, (5) email, (6) city, (7) messen, and (8) message form field parameters to (b) add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/adv
ird party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2118 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27017 - http://secunia.com/advisories/20414/
CVE ID: CVE-2006-2988 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a browse action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436412/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27025 - http://www.securityfocus.com/bid/18337 - http://www.vupen.com/english/advisories/2006/2235 - http://secunia.com/advisories/20540 - http://securityreason
/18337 - http://www.vupen.com/english/advisories/2006/2235 - http://secunia.com/advisories/20540 - http://securityreason.com/securityalert/1083
CVE ID: CVE-2006-2989 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2250 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27068 - http://www.securityfocus.com/bid/18438 - http://pridels0.blogspot.com/2006/06/asp-listpics-43-xss-vuln.html - http://secunia.com/advisories/20517