Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6387 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in LINK Content Management Server (CMS) allow remote attackers to execute arbitrary SQL commands via the (1) IDMeniGlavni parameter to navigacija.php, and the (2) IDStranicaPodaci parameter to prikazInformacije.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21464 - http://secunia.com/advisories/23107 - https://exchange.x
ntainer: References: - http://www.securityfocus.com/bid/21464 - http://secunia.com/advisories/23107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30744
CVE ID: CVE-2006-6388 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:45.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in naprednaPretraga.php in LINK Content Management Server (CMS) allows remote attackers to inject arbitrary web script or HTML via the txtPretraga parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21464 - http://secunia.com/advisories/23107 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30745
CVE ID: CVE-2006-6389 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:45.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via the (1) Taaa parameter to (a) up.php, or the (2) pollhtml and (3) Bloks parameters to (b) polls.php, different vectors than CVE-2006-5770. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/37048 - http://www.securityfocus.com/bid/21427 - http://www.securityfocus.com/archive/1/453428/100/0/threaded - http://securityreason.com/securityalert/2018 - http://www.osvd
//www.securityfocus.com/archive/1/453428/100/0/threaded - http://securityreason.com/securityalert/2018 - http://www.osvdb.org/37047
CVE ID: CVE-2006-6390 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.350Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the config[db_type] parameter to (1) categories.php, (2) couriers.php, (3) orders.php, and (4) products.php in actions_admin/; and (5) orders.php and (6) products.php in actions_client/; as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by one
_client/; as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by one of these PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4835 - https://www.exploit-db.com/exploits/2889 - http://www.securityfocus.com/bid/21411 - http://secunia.com/advisories/23168 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30698
CVE ID: CVE-2006-6391 State: PUBLISHED Published: 2006-12-08T01:00:00Z Last Updated: 2024-09-17T00:02:13.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include arbitrary files via a .. (dot dot) in the config[db_type] parameter to (1) actions_admin/other.php and (2) actions_client/gallery.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23168
CVE ID: CVE-2006-6392 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in plx Web Studio (aka plxWebDev) plx Pay 3.2 and earlier allows remote attackers to include and execute arbitrary local files, or obtain user credentials and other sensitive information, via a .. (dot dot) in the read parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23190 - http://www.securityfocus.com/bid/2137
otes: - CVE Program Container: References: - http://secunia.com/advisories/23190 - http://www.securityfocus.com/bid/21379 - http://www.vupen.com/english/advisories/2006/4809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30619
CVE ID: CVE-2006-6393 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Jonas Gauffin Publicera 1.0-rc2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the InputFilter::getString function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30770 - http://sourceforge.net/forum/forum.php?forum_id=641350 - http://www.securityfocus.com/bid/21457 - http://www.vupen.com/english/advisories/2006/4880
CVE ID: CVE-2006-6394 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in certain database classes in Jonas Gauffin Publicera 1.0-rc2 and earlier might allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=641350 - http://www.securityfocus.com/bid/21457 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30769 - http://www.vupen.com/english/advisories/2006/4880
CVE ID: CVE-2006-6395 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in Ulrik Petersen Emdros Database Engine before 1.2.0.pre231 allow local users to cause a denial of service (memory consumption) via unspecified vectors, a different issue than CVE-2005-0415. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/mailarchive/forum.php?thread_id=31151112&forum_id=2949 - http://secunia.com/advisories/23231 - http://sourceforge.net/project/shownotes.php?release_id=468120 - http://www.vupen.com/english/advisories/2006/4859 - http://www.securit
rge.net/project/shownotes.php?release_id=468120 - http://www.vupen.com/english/advisories/2006/4859 - http://www.securityfocus.com/bid/21444
CVE ID: CVE-2006-6396 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in BlazeVideo HDTV Player 2.1, and possibly earlier, allows remote attackers to execute arbitrary code via a long filename in a PLF playlist, a different product than CVE-2006-6199. NOTE: it was later reported that 3.5 is also affected. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2880 - http://secunia.com/advisories/23192 - http://www.securityfocus.com/bid/30442 - http://www.securityfocus.com/bid/21399
CVE ID: CVE-2006-6397 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in banner/banner.c in FreeBSD, NetBSD, and OpenBSD might allow local users to modify memory via a long banner. NOTE: CVE and multiple third parties dispute this issue. Since banner is not setuid, an exploit would not cross privilege boundaries in normal operations. This issue is not a vulnerability Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452374/100/200/threaded - http://www.securityfocus.com/archive/1/452322/100/200/threaded - http://www.securityf
rchive/1/452374/100/200/threaded - http://www.securityfocus.com/archive/1/452322/100/200/threaded - http://www.securityfocus.com/archive/1/452330/100/200/threaded - http://www.securityfocus.com/archive/1/452470/100/200/threaded
CVE ID: CVE-2006-6398 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:26:46.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Superfreaker Studios UPublisher 1.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (a) sendarticle.asp and (b) printarticle.asp, and the ID parameter to (c) index.asp and (d) preferences.asp, different vectors than CVE-2006-5888. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22840 - http://www.securityfocus.com/archive/1/453462/100/0/threaded
CVE ID: CVE-2006-6399 State: PUBLISHED Published: 2006-12-08T01:00:00Z Last Updated: 2024-09-17T00:00:42.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp. NOTE: the provenance of this information is unknown; details are obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22840
CVE ID: CVE-2006-6400 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in JustSystems Hanako 2004 through 2006, Hanako viewer 1.x, Ichitaro 2004, Ichitaro 2005, Ichitaro Lite2, Ichitaro viewer 4.x, and Sanshiro 2005 allows remote attackers to execute arbitrary code via the (1) Keyword and (2) Title fields, related to string length fields. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2347272891/index.html - http://www.justsystem.co.jp/info/pd6005.html - http://securitytracker.com/id?1017336 - http://www.vupen.com/english/advisories/2006/4857
ystem.co.jp/info/pd6005.html - http://securitytracker.com/id?1017336 - http://www.vupen.com/english/advisories/2006/4857 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/92_e.html - http://www.securityfocus.com/bid/21445 - http://secunia.com/advisories/23185
CVE ID: CVE-2006-6401 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22813 - http://securitytracker.com/id?1017210 - http://www.osvdb.org/30319 - http://marc.info/?l=bugtraq&m=116344068502988&w=2 - http://www.vupen.com/english/advisories/2006/4468
CVE ID: CVE-2006-6402 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22813 - http://securitytracker.com/id?1017210 - http://marc.info/?l=bugtraq&m=116344068502988&w=2 - http://www.vupen.com/english/advisories/2006/4468 - http://www.osvdb.org/displayvuln.php?osvdb_id=30318
CVE ID: CVE-2006-6403 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array parameters, probably resulting in a path disclosure in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30213 - http://securitytracker.com/id?1017210 - http://marc.info/?l=bugtraq&m=116344068502988&w=2
CVE ID: CVE-2006-6404 State: PUBLISHED Published: 2009-10-19T19:27:00 Last Updated: 2024-08-07T20:26:46.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: INNOVATION Data Processing FDR/UPSTREAM 3.3.0 (GA Oct 2003) allows remote attackers to cause a denial of service (service outage) via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/30782 - http://osvdb.org/ref/30/30782-fdr_portscan.txt - http://www.attrition.org/pipermail/vim/2009-October/002278.html
CVE ID: CVE-2006-6405 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: BitDefender Mail Protection for SMB 2.0 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21461 - http://www.securityfocus.com/archive/1/453654/100/0/threaded - http://www.quantenblog.net/security/virus-scanner-bypass
CVE ID: CVE-2006-6406 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clam AntiVirus (ClamAV) 0.88.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21461 - http://kolab.org/security/kolab-vendor-notice-14.txt - http://secunia.com/advisories/23460 - http://www.vupen.com/english/advisories/2006/4948 - http://www.debian.org/security/2006/dsa-1238 - http://www.novell.c
- http://www.vupen.com/english/advisories/2006/4948 - http://www.debian.org/security/2006/dsa-1238 - http://www.novell.com/linux/security/advisories/2006_78_clamav.html - http://www.securityfocus.com/archive/1/453654/100/0/threaded - http://secunia.com/advisories/23379 - http://www.quantenblog.net/security/virus-scanner-bypass - http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 - http://www.vupen.com/english/advisories/2006/5113 - http://secunia.com/advisories/23411 - http://secunia.com/advisories/23362
CVE ID: CVE-2006-6407 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:45.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Prot Antivirus for Linux x86 Mail Servers 4.6.6 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21461 - http://www.securityfocus.com/archive/1/453654/100/0/threaded - http://www.quantenblog.net/security/virus-scanner-bypass
CVE ID: CVE-2006-6408 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kaspersky Anti-Virus for Linux Mail Servers 5.5.10 allows remote attackers to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21461 - http://www.securityfocus.com/archive/1/453654/100/0/threaded - http://www.quantenblog.net/security/virus-scanner-bypass
CVE ID: CVE-2006-6409 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: F-Secure Anti-Virus for Linux Gateways 4.65 allows remote attackers to cause a denial of service (possibly fatal scan error), and possibly bypass virus detection, by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21461 - http://www.securityfocus.com/archive/1/453654/100/0/threaded - http://www.quantenblog.net/security/virus-scanner-bypass
CVE ID: CVE-2006-6410 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in VMWare 5.5.1 allows local users to execute arbitrary code via a long VmdbDb parameter to the Initialize function. Additional Analyst Notes: - CVE Program Container: References: - http://www.open-security.org/advisories/17 - http://www.securityfocus.com/archive/1/452775/100/100/threaded - https://www.exploit-db.com/exploits/2264 - http://www.securityfocus.com/bid/19732 - http://securityreason.com/securityalert/2008 - http://www.securityfocus.com/archive/1/452746/100/100/threaded
CVE ID: CVE-2006-6411 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:26:46.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service (crash) via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23256 - http://www.securityfocus.com/archive/1/453754/100/0/threaded - http://securityreason.com/securityalert/2009 - http://www.vupen.com/english/advisories/2006/4894 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051140.h
//www.vupen.com/english/advisories/2006/4894 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051140.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30771 - http://www.securityfocus.com/bid/21475
CVE ID: CVE-2006-6413 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Amateras sns 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4902 - http://secunia.com/advisories/23257 - http://amateras.sourceforge.jp/cgi-bin/fswiki/wiki.cgi?page=sns - http://www.securityfocus.com/bid/21489 - http://jvn.jp/jp/JVN%2334830904/index.html
CVE ID: CVE-2006-6414 State: PUBLISHED Published: 2006-12-10T11:00:00Z Last Updated: 2024-09-17T01:26:27.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in dettaglio.asp in dol storye allow remote attackers to execute arbitrary SQL commands via the (1) id_doc or (2) id_aut parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21463
CVE ID: CVE-2006-6415 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAds_path is used as a constant Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30774 - http://attrition.org/pipermail/vim/2006-December/001171.html - http://www.securityfocus.com/archi
ulnerabilities/30774 - http://attrition.org/pipermail/vim/2006-December/001171.html - http://www.securityfocus.com/archive/1/453773/100/0/threaded
CVE ID: CVE-2006-6416 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PhpLeague - Univert PhpLeague 0.81 allow remote attackers to execute arbitrary PHP code via a URL in the cheminmini parameter to (1) consult/miniseul.php or (2) config.php. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29819 - http://secunia.com/advisories/23342 - http://www.securityfocus.c
://exchange.xforce.ibmcloud.com/vulnerabilities/29819 - http://secunia.com/advisories/23342 - http://www.securityfocus.com/bid/20756
CVE ID: CVE-2006-6417 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21332 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30580 - http://www.securityfocus.com/archive/1/452998/100/100/threaded - http://secunia.com/advisories/23346 - https://tiifp.org/tarkus/advisories/b2evolution111106_01.
52998/100/100/threaded - http://secunia.com/advisories/23346 - https://tiifp.org/tarkus/advisories/b2evolution111106_01.txt - http://securityreason.com/securityalert/2006 - http://www.vupen.com/english/advisories/2006/4938
CVE ID: CVE-2006-6418 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:46.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the POSIX Threads library (libpthread) on HP Tru64 UNIX 4.0F PK8, 4.0G PK4, and 5.1A PK6 allows local users to gain root privileges via a long PTHREAD_CONFIG environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00800193 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00800193 - http://www.vupen.com/english/advisories/2006/4483 - http://www.netragard.com/pdfs/research/HP-TRU64-LIBPTHREAD-20060811.txt - http:/
upen.com/english/advisories/2006/4483 - http://www.netragard.com/pdfs/research/HP-TRU64-LIBPTHREAD-20060811.txt - http://securitytracker.com/id?1017211 - http://secunia.com/advisories/22743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30178 - http://www.securityfocus.com/bid/21035
CVE ID: CVE-2006-6419 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:26:45.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.1.0 beta 2 and earlier for Joomla! (com_jce) allows remote attackers to include and possibly execute arbitrary local files via the (1) plugin or (2) file parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30798 - http://www.vupen.com/english/advisories/2006/4