Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ct Packager Dialogue Spoofing Vulnerability." Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.osvdb.org/29424 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/703936 - http://www.securityfocus.com/bid/20318 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-065 - http://www.vupen.com/english/advisories/2006/3984 - http://secunia.com/secunia_research/2006-54/advisory/ - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/archive/1/448696/100/0/threaded - http://secunia.com/advisories/20717 - https://oval.cisecurity.org/reposit
ityfocus.com/archive/1/448696/100/0/threaded - http://secunia.com/advisories/20717 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A496 - http://www.securityfocus.com/archive/1/448273/100/0/threaded - http://securitytracker.com/id?1017037
CVE ID: CVE-2006-4693 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T19:23:41.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2004 for Mac and v.X for Mac allows remote user-assisted attackers to execute arbitrary code via a crafted string in a Word file, a different issue than CVE-2006-3647 and CVE-2006-3651. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017032 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3979 - http://www.osvdb.org/29442 - https://docs.microsoft.com/en-us/security-updates/sec
en.com/english/advisories/2006/3979 - http://www.osvdb.org/29442 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060 - http://www.securityfocus.com/bid/20387 - http://www.securityfocus.com/archive/1/449179/100/0/threaded
CVE ID: CVE-2006-4694 State: PUBLISHED Published: 2006-09-27T19:00:00 Last Updated: 2024-08-07T19:23:41.084Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in PowerPoint in Microsoft Office 2000, Office XP and Office 2003 allows user-assisted attackers to execute arbitrary code via a crafted record in a PPT file, as exploited by malware such as Exploit:Win32/Controlppt.W, Exploit:Win32/Controlppt.X, and Exploit-PPT.d/Trojan.PPDropper.F. NOTE: it has been reported that the attack vector involves SlideShowWindows.View.GotoNamedShow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29259 - http://www.vupen.com/english/ad
ional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29259 - http://www.vupen.com/english/advisories/2006/3794 - http://www.us-cert.gov/cas/techalerts/TA06-283A.html - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A269 - http://www.securityfocus.com/archive/1/447831/100/0/threaded - http://www.kb.cert.org/vuls/id/231204 - http://www.avertlabs.com/research/blog/?p=95 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://secunia.com/advisories/22127 - http://www.microsoft.com/technet/security/advisory/925984.mspx - http://www.securityfocus.com/bid
com/advisories/22127 - http://www.microsoft.com/technet/security/advisory/925984.mspx - http://www.securityfocus.com/bid/20226 - http://securitytracker.com/id?1016937 - http://vil.nai.com/vil/content/v_140666.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/29225 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-058
CVE ID: CVE-2006-4695 State: PUBLISHED Published: 2008-03-11T23:00:00 Last Updated: 2024-08-07T19:23:40.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute arbitrary code via a crafted URL, aka "Office Web Components URL Parsing Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-017 - http://www.vupen.com/english/advisories/2008/0849/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14227
ies/2008/0849/references - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14227 - http://www.kb.cert.org/vuls/id/654577 - http://www.us-cert.gov/cas/techalerts/TA08-071A.html - http://www.securitytracker.com/id?1019580 - http://marc.info/?l=bugtraq&m=120585858807305&w=2 - http://marc.info/?l=bugtraq&m=120585858807305&w=2 - http://www.securityfocus.com/bid/28135 - http://secunia.com/advisories/29328
CVE ID: CVE-2006-4696 State: PUBLISHED Published: 2006-10-10T22:00:00 Last Updated: 2024-08-07T19:23:40.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Server service in Microsoft Windows 2000 SP4, Server 2003 SP1 and earlier, and XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted packet, aka "SMB Rename Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20373 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.kb.cert.org/vuls/id/820628 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063 - http
ww.kb.cert.org/vuls/id/820628 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8 - http://securitytracker.com/id?1017035 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.vupen.com/english/advisories/2006/3982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29373
CVE ID: CVE-2006-4697 State: PUBLISHED Published: 2007-02-13T22:00:00 Last Updated: 2024-08-07T19:23:40.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: this issue might be related to CVE-2006-4193. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/753924 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://www.vupen.com/english/advisories/2007/0584 - http://secunia.com/advisories/24156 - https://oval.cisecurity.org/repository/se
vupen.com/english/advisories/2007/0584 - http://secunia.com/advisories/24156 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1120 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 - http://www.osvdb.org/31891 - http://www.securityfocus.com/bid/22486
CVE ID: CVE-2006-4698 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4699 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4700 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4701 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4702 State: PUBLISHED Published: 2006-12-13T01:00:00 Last Updated: 2024-08-07T19:23:40.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Windows Media Format Runtime in Microsoft Windows Media Player (WMP) 6.4 and Windows XP SP2, Server 2003, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted Advanced Systems Format (ASF) file. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-274.htm - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-078 - http://www.securityfocus.com/bid/21505 - http://www.us-cert.gov/cas/tec
curity-updates/securitybulletins/2006/ms06-078 - http://www.securityfocus.com/bid/21505 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A536 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://securitytracker.com/id?1017372
CVE ID: CVE-2006-4703 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-4704 State: PUBLISHED Published: 2006-11-01T15:00:00 Last Updated: 2024-08-07T19:23:41.174Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-zone scripting vulnerability in the WMI Object Broker (WMIScriptUtils.WMIObjectBroker2) ActiveX control (WmiScriptUtils.dll) in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI Object Broker Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20843 - http://www.securityfocus.com/archive/1/454201/100/0/threaded - http://research.eeye.com/html/alerts/
cus.com/bid/20843 - http://www.securityfocus.com/archive/1/454201/100/0/threaded - http://research.eeye.com/html/alerts/zeroday/20061031.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-073 - http://www.microsoft.com/technet/security/advisory/927709.mspx - http://www.securityfocus.com/bid/20797 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://secunia.com/advisories/22603 - http://www.vupen.com/english/advisories/2006/4282 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A288 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://securitytracker.com/id?1017142 - http://www.securityfocu
ww.securityfocus.com/archive/1/454969/100/200/threaded - http://securitytracker.com/id?1017142 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.kb.cert.org/vuls/id/854856 - http://www.securityfocus.com/data/vulnerabilities/exploits/0day_ie.pdf - http://www.zerodayinitiative.com/advisories/ZDI-06-047.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29915 - http://blogs.technet.com/msrc/archive/2006/11/01/microsoft-security-advisory-927709-posted.aspx
CVE ID: CVE-2006-4705 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in dwayner79 and Dominic Gamble Timesheet (aka Timesheet.php) 1.2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3547 - http://www.securityfocus.com/archive/1/445603/100/0/threaded - http://securityreason.com/securityalert/1542 - http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html - http://secunia.com/advisories/21
rt/1542 - http://secaware.blogspot.com/2006/09/timesheet-121-blind-sql-injection.html - http://secunia.com/advisories/21831 - http://www.securityfocus.com/bid/19856
CVE ID: CVE-2006-4706 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:41.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via a url BBCode tag that contains a javascript URI with an SGML numeric character reference and an embedded space, as demonstrated using "java& #115;cript," a different vulnerability than CVE-2006-3761. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21697 - http://securityreason.com/securityalert/1541 - http://www.v
ntainer: References: - http://secunia.com/advisories/21697 - http://securityreason.com/securityalert/1541 - http://www.vupen.com/english/advisories/2006/3418 - http://www.securityfocus.com/archive/1/444807/100/100/threaded - http://myimei.com/security/2006-08-15/mybb-117-htmlspeacialchar_uni-fixjavascript-functions_postphp-urlxss-attack.html - http://www.mybboard.com/archive.php?nid=18
CVE ID: CVE-2006-4707 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:41.006Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard) 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the query string ($_SERVER[PHP_SELF]). Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1540 - http://secunia.com/advisories/21697 - http://www.vupen.com/english/advisories/2006/3418 - http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html - http://www.securi
advisories/2006/3418 - http://myimei.com/security/2006-08-17/mybb-117-adminglobalphp-xss-attack.html - http://www.securityfocus.com/archive/1/444782/100/100/threaded - http://www.mybboard.com/archive.php?nid=18
CVE ID: CVE-2006-4708 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web script or HTML via the (1) act parameter in (a) help.php and (b) search.php, and the (2) p parameter in report.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19916 - http://www.securityfocus.com/archive/1/445719/100/0/threaded - http://securityreason.com/securityalert/1539
CVE ID: CVE-2006-4709 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445719/100/0/threaded - http://www.securityfocus.com/bid/19919 - http://securityreason.com/securityalert/1539
CVE ID: CVE-2006-4710 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in NewsGator FeedDemon before 2.0.0.25 allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite. Additional Analyst Notes: - CVE Program Container: References: - http://nick.typepad.com/blog/2006/08/feed_security_a_1.html - http://www.vupen.com/english/advisories/2006/3686 - http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html - http://www.cgisecurity.co
com/english/advisories/2006/3686 - http://nick.typepad.com/blog/2006/08/ann_feeddemon_2.html - http://www.cgisecurity.com/papers/RSS-Security.ppt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29047 - http://www.snellspace.com/wp/?p=426 - http://secunia.com/advisories/21995 - http://www.snellspace.com/wp/?p=448 - http://www.securityfocus.com/bid/20114
CVE ID: CVE-2006-4711 State: PUBLISHED Published: 2006-09-12T16:00:00Z Last Updated: 2024-09-16T17:17:49.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.snellspace.com/wp/?p=410 - http://mozdev.org/bugs/show_bug.cgi?id=15101 - http://www.snellspace.com/wp/?p=448
CVE ID: CVE-2006-4712 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Sage 1.3.6 allow remote attackers to inject arbitrary web script or HTML via JavaScript in a content:encoded element within an item element in an RSS feed, as demonstrated by four example content:encoded elements that use XMLHttpRequest to read arbitrary local files, aka "Cross Context Scripting." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19928 - http://www.securityfocus.com/archive/1/445648/100/0/threaded - http://ww
ces: - http://www.securityfocus.com/bid/19928 - http://www.securityfocus.com/archive/1/445648/100/0/threaded - http://www.snellspace.com/wp/?p=410 - http://downloads.securityfocus.com/vulnerabilities/exploits/sage-inputvalidation.xml - http://www.vupen.com/english/advisories/2006/3553 - http://www.intertwingly.net/blog/2006/08/09/Attack-Delivery-TestSuite - https://exchange.xforce.ibmcloud.com/vulnerabilities/28855 - http://www.gnucitizen.org/blog/cross-context-scripting-with-sage - http://www.snellspace.com/wp/?p=448 - http://securityreason.com/securityalert/1558 - http://secunia.com/advisories/21839
CVE ID: CVE-2006-4713 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA_1.0_RC_2_%28config.php%29_R%20FI.htm - http://www.securityfocus.com/bid/19940 - http://securityreason.com/securityalert/1557 - https://www.exploit-db.com/exploits/2340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28837 - http://www.vupen
https://www.exploit-db.com/exploits/2340 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28837 - http://www.vupen.com/english/advisories/2006/3545 - http://www.securityfocus.com/archive/1/445723/100/0/threaded
CVE ID: CVE-2006-4714 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the classified_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/84147 - http://secunia.com/advisories/21855 - http://www.vupen.com/english/advisories/2006/3548 - https://www.exploit-db.com/exploits/2339 - http://securitydot.net/xpl/exp
//www.vupen.com/english/advisories/2006/3548 - https://www.exploit-db.com/exploits/2339 - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1467/exploit.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28834
CVE ID: CVE-2006-4715 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19934 - http://secunia.com/advisories/21855 - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1464/exploit.html - https://www.exploit-db.com/exploits/2337 - http://www.vupen.com/english/advisories/2006/3548 - https://
4/exploit.html - https://www.exploit-db.com/exploits/2337 - http://www.vupen.com/english/advisories/2006/3548 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28833
CVE ID: CVE-2006-4716 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the racine parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1446/exploit.html - http://www.securityfocus.com/bid/19899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28804 - https://www.exploit-db.com/exploits/2319
CVE ID: CVE-2006-4717 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19920 - http://www.vupen.com/english/advisories/2006/3530 - http://secunia.com/advisories/21811 - http://drupal.org/node/83064 - http://www.osvdb.org/28
lish/advisories/2006/3530 - http://secunia.com/advisories/21811 - http://drupal.org/node/83064 - http://www.osvdb.org/28623
CVE ID: CVE-2006-4718 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:41.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in livre_or.php in KorviBlog 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) prenom, (2) emailFrom, or (3) body parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19943 - http://secunia.com/advisories/21853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28852 - http://marc.info/?l=full-disclosure&m=115796637230932&w=2
CVE ID: CVE-2006-4719 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:41.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the base parameter to (1) index.php or (2) pop.php. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-September/001027.html - http://www.vupen.com/english/advisories/2006/3544 - https://www.exploit-db.com/exploits/2335 - http://www.securityfocus.com/bid/19944 - http://secunia.com/advisories/21817 - ht
s://www.exploit-db.com/exploits/2335 - http://www.securityfocus.com/bid/19944 - http://secunia.com/advisories/21817 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28851
CVE ID: CVE-2006-4720 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19936 - https://www.exploit-db.com/exploits/2342 - http://www.securityfocus.com/archive/1/445783/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28848 - http://www.nyubicrew.org/adv/solpot-adv-06.txt - http://secunia.com/advisories/21850 -
cloud.com/vulnerabilities/28848 - http://www.nyubicrew.org/adv/solpot-adv-06.txt - http://secunia.com/advisories/21850 - http://securityreason.com/securityalert/1556 - http://www.vupen.com/english/advisories/2006/3543