Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1083 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the (1) option[language] and (2) option[template] parameters, and (3) possibly other parameters, to (a) admin.php and (b) other unspecified scripts. NOTE: the admin.php/option[language] vector can be used by remote unauthenticated attackers to include arbitrary files in conjunction with CVE-2006-1085. Additional Analyst Notes: - CVE Program Container: References
include arbitrary files in conjunction with CVE-2006-1085. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0822 - http://www.securityfocus.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/threaded - http://secunia.com/advisories/19116 - http://www.securityfocus.com/bid/16963 - http://www.phpstats.net/forum/viewtopic.php?t=140
CVE ID: CVE-2006-1084 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0822 - http://www.securityfocus.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com
/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/threaded - http://secunia.com/advisories/19116 - http://www.securityfocus.com/bid/16963 - http://www.phpstats.net/forum/viewtopic.php?t=140
CVE ID: CVE-2006-1085 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the option[admin_pass] parameter and setting the pass_cookie to the MD5 hash of the specified password. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0822 - http://www.securityfocus.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocu
s.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/threaded - http://secunia.com/advisories/19116 - http://www.securityfocus.com/bid/16963 - http://www.phpstats.net/forum/viewtopic.php?t=140
CVE ID: CVE-2006-1086 State: REJECTED Published: 2006-03-09T00:00:00Z Last Updated: 2024-09-17T02:36:10.044Z Description: No description available.
CVE ID: CVE-2006-1087 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the option_new[compatibility_mode] parameter, which is not filtered before being stored in config.php. NOTE: this vulnerability can be exploited by remote unauthenticated attackers in conjunction with the option[admin_pass] authentication bypass vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.
_pass] authentication bypass vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0822 - http://www.securityfocus.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/threaded - http://secunia.com/advisories/19116 - http://www.securityfocus.com/bid/16963 - http://www.phpstats.net/forum/viewtopic.php?t=140
CVE ID: CVE-2006-1088 State: PUBLISHED Published: 2006-03-09T00:00:00 Last Updated: 2024-08-07T16:56:15.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request to checktables.php, which lists the database table_prefix. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0822 - http://www.securityfocus.com/archive/1/428614/100/0/threaded - http://retrogod.altervista.org/php_stats_0191_adv.html - http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/th
- http://www.securityfocus.com/archive/1/426762/100/0/threaded - http://www.securityfocus.com/archive/1/429145/100/0/threaded - http://secunia.com/advisories/19116 - http://www.securityfocus.com/bid/16963 - http://www.phpstats.net/forum/viewtopic.php?t=140
CVE ID: CVE-2006-1089 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHP_SELF variable is used to handle a pun_page tag. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24982 - http://www.securityfocus.com/bid/16891 - http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt - http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch - http:
www.punbb.org/changelogs/1.2.10_to_1.2.11.txt - http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch - http://www.vupen.com/english/advisories/2006/0773 - http://secunia.com/advisories/19039
CVE ID: CVE-2006-1090 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations. Additional Analyst Notes: - CVE Program Container: References: - http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt - http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch - http://www.vupen.com/english/advisories/2006/0773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24837
CVE ID: CVE-2006-1091 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426699 - http://www.securityfocus.com/bid/16942 - http://securityreason.com/securityalert/535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25221
CVE ID: CVE-2006-1092 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or panic) via unknown attack vectors that cause cause the kmem_oversize arena to allocate a large amount of system memory that does not get freed. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0829 - http://www.securityfocus.com/bid/16966 - http://support.avaya.com/elmodocs2/security/ASA-2006-08
/advisories/2006/0829 - http://www.securityfocus.com/bid/16966 - http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/25152 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102159-1 - http://securitytracker.com/id?1015723 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1618 - http://secunia.com/advisories/19128 - http://secunia.com/advisories/19716
CVE ID: CVE-2006-1093 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015716 - http://www.securityfocus.com/bid/16908 - http://www.vupen.com/english/advisories/2006/0788 - http://www-1.ibm.com/support/docview.wss?uid=swg21231377
CVE ID: CVE-2006-1094 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426583 - http://www.osvdb.org/23810 - http://www.securityfocus.com/bid/16914 - http://www.osvdb.org/23808 - http://www.nukedx.com/?viewdoc=17
CVE ID: CVE-2006-1095 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.modpython.org/fs_sec_warn.html - http://www.securityfocus.com/bid/16916 - http://www.cgisecurity.com/2006/02/07 - http://www.vupen.com/english/advisories/2006/0768 - http://secunia.com/advisories/19239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24965 - http://securitytra
- http://secunia.com/advisories/19239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24965 - http://securitytracker.com/id?1015764 - http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945
CVE ID: CVE-2006-1096 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html - http://www.osvdb.org/23600 - http://www.securityfocus.com/bid/16931 - http://secunia.com/a
-ecommerce-sqlxss-vuln.html - http://www.osvdb.org/23600 - http://www.securityfocus.com/bid/16931 - http://secunia.com/advisories/19088 - http://www.vupen.com/english/advisories/2006/0803
CVE ID: CVE-2006-1097 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426583 - http://www.osvdb.org/23811 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25004 - http://www.osvdb.
chives/fulldisclosure/2006-03/0033.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25004 - http://www.osvdb.org/23809 - http://www.nukedx.com/?viewdoc=17
CVE ID: CVE-2006-1098 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html - http://www.securityfocus.com/bid/16931 - http://www.osvdb.org/236
0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html - http://www.securityfocus.com/bid/16931 - http://www.osvdb.org/23601 - http://secunia.com/advisories/19088 - http://www.vupen.com/english/advisories/2006/0803
CVE ID: CVE-2006-1099 State: PUBLISHED Published: 2006-03-09T11:00:00Z Last Updated: 2024-09-17T00:46:02.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16932
CVE ID: CVE-2006-1100 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25083 - http://www.securityfocus.com/archive/1/426867/100/0/threaded - http://secunia.com/advisories/19199 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/t
ia.com/advisories/19199 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/threaded - http://secunia.com/advisories/19110 - http://www.vupen.com/english/advisories/2006/0847 - http://aluigi.altervista.org/adv/evilcube-adv.txt - http://cvs.sourceforge.net/viewcvs.py/sauerbraten/sauerbraten/src/shared/cube.h?r1=1.7&r2=1.8 - http://secunia.com/advisories/19111 - http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml - http://www.vupen.com/english/advisories/2006/0848
CVE ID: CVE-2006-1101 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426867/100/0/threaded - http://secunia.com/advisories/19199 - http://www.securityfocus.c
www.securityfocus.com/archive/1/426867/100/0/threaded - http://secunia.com/advisories/19199 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/threaded - http://secunia.com/advisories/19110 - http://www.vupen.com/english/advisories/2006/0847 - http://aluigi.altervista.org/adv/evilcube-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25085 - http://secunia.com/advisories/19111 - http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml - http://www.vupen.com/english/advisories/2006/0848
CVE ID: CVE-2006-1102 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426867/100/0/threaded - http://secunia.com/advisories/19199 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/
d - http://secunia.com/advisories/19199 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/threaded - http://securityreason.com/securityalert/548 - http://secunia.com/advisories/19110 - http://www.vupen.com/english/advisories/2006/0847 - http://aluigi.altervista.org/adv/evilcube-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25086 - http://secunia.com/advisories/19111 - http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml - http://www.vupen.com/english/advisories/2006/0848
CVE ID: CVE-2006-1103 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25087 - http://www.securityfocus.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/threaded - http://securityreason.com/securityaler
us.com/bid/16986 - http://www.securityfocus.com/archive/1/426865/100/0/threaded - http://securityreason.com/securityalert/550 - http://www.vupen.com/english/advisories/2006/0848
CVE ID: CVE-2006-1104 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage parameter in index.php; and the (2) USER_AGENT, (3) HTTP_REFERER, and (4) HTTP_HOST HTTP header fields as used in the book_vistor function in includes/functions.php. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue. Additional Analyst Notes: -
ness of the dispute, it is not clear whether the vendor is disputing this particular issue. Additional Analyst Notes: - CVE Program Container: References: - http://forum.pixelpost.org/showthread.php?t=3535 - http://www.neosecurityteam.net/index.php?action=advisories&id=19 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25046 - http://www.securityfocus.com/archive/1/426764/100/0/threaded - http://www.securityfocus.com/bid/16964 - http://www.vupen.com/english/advisories/2006/0823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25044
CVE ID: CVE-2006-1105 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue. Additional Analyst Notes: - CVE Program Container: References: - http://forum.pixelpost.org/showthread.php?t=3535 - http://www.neosecurityteam.net/index.php?action=advisories&
rences: - http://forum.pixelpost.org/showthread.php?t=3535 - http://www.neosecurityteam.net/index.php?action=advisories&id=19 - http://www.securityfocus.com/archive/1/426764/100/0/threaded - http://www.securityfocus.com/bid/16964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25048 - http://www.vupen.com/english/advisories/2006/0823
CVE ID: CVE-2006-1106 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message, (2) name, (3) url, and (4) email parameters when commenting on a post. NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25047 - http://forum.pixelpost.org/showthread.php?t=3535 - http://www.neosecurityteam.net/index.php?action=advisories&id=19 - http://www.securityfocus.com/archive/1/426764/100/0/threaded - http://www.securityfocus.com/bid/16964 - http://www.vupen.com/english/advisories/2006/0823
CVE ID: CVE-2006-1107 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0860 - http://www.securityfocus.com/bid/17017 - http://securityreason.com/securityalert/595 - http://evuln.com/vulns/93/summary.html - http://nmdeluxe.com/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25069 - http://secunia.com/advisories
tp://nmdeluxe.com/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25069 - http://secunia.com/advisories/19117 - http://www.securityfocus.com/archive/1/428002/100/0/threaded
CVE ID: CVE-2006-1108 State: PUBLISHED Published: 2006-03-09T11:00:00 Last Updated: 2024-08-07T16:56:15.659Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0860 - http://www.securityfocus.com/bid/17017 - http://securityreason.com/securityalert/595 - http://evuln.com/vulns/93/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25070 - http://nmdeluxe.com/index.php - http://secunia.com/advisories/19117 - http://www.
e.ibmcloud.com/vulnerabilities/25070 - http://nmdeluxe.com/index.php - http://secunia.com/advisories/19117 - http://www.securityfocus.com/archive/1/428002/100/0/threaded