Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
7420.html - http://www.osvdb.org/26874 - http://www.vupen.com/english/advisories/2006/2562 - http://www.kb.cert.org/vuls/id/701121 - http://www.zerodayinitiative.com/advisories/ZDI-06-019.html - http://www.vupen.com/english/advisories/2006/2563 - http://www.gracenote.com/sec062706/SonySecurityNotification.html - http://secunia.com/advisories/20861 - http://securitytracker.com/id?1016389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27416 - http://secunia.com/advisories/20862
CVE ID: CVE-2006-3135 State: PUBLISHED Published: 2006-07-13T21:00:00 Last Updated: 2024-08-07T18:16:05.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update. Additional Analyst Notes: - CVE Program Container: References: - http://
Email fields during (e) a user profile update. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-52/advisory/ - http://secunia.com/advisories/20589 - http://www.osvdb.org/27143 - http://securityreason.com/securityalert/1236 - http://www.osvdb.org/27139 - http://www.osvdb.org/27140 - http://www.osvdb.org/27142 - http://www.vupen.com/english/advisories/2006/2783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27712 - http://www.osvdb.org/27141
CVE ID: CVE-2006-3136 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2025-01-17T13:57:51.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4) /xmlrpc/api_metaweblog.inc.php. NOTE: this is a similar vulnerability to CVE-2006-2583. NOTE: this issue has been disputed by third parties, who state that the DIR_LIBS parameter is defined in an include file before being used Additional Analyst Notes: - CVE Program Co
e that the DIR_LIBS parameter is defined in an include file before being used Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.osvdb.org/27502 - http://www.securityfocus.com/archive/1/437986/100/200/threaded - http://securityreason.com/securityalert/1120 - http://www.vupen.com/english/advisories/2006/2408 - http://securitytracker.com/id?1016325 - http://www.securityfocus.com/archive/1/437423/100/0/threaded - http://www.securityfocus.com/bid/18475
CVE ID: CVE-2006-3137 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows remote attackers to inject arbitrary web script or HTML via the cart_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/edge-ecommerce-shop-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27204 - http://www.vupen.com/english/advisories/2006/2425 - http://www.securityfocus.com/bid/18528
CVE ID: CVE-2006-3138 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp/index.php, and (3) action parameter in cp/admin_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26671 - http://www.vupen.com/english/advisories/2006/2427 - http://pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html - https://exchange.xforce.ibmcloud.com/v
s/2006/2427 - http://pridels0.blogspot.com/2006/06/phpmydirectory-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27211 - http://www.securityfocus.com/bid/18539 - http://www.osvdb.org/26669 - http://www.osvdb.org/26670 - http://secunia.com/advisories/20718
CVE ID: CVE-2006-3139 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443171/100/0/threaded - http://www.securityfocus.com/archive/1/488118/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27153 - http://pridels0.blogspot.com/2006/06/virtual-war-multipl
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27153 - http://pridels0.blogspot.com/2006/06/virtual-war-multiple-sql-inj-vuln.html - http://secunia.com/advisories/20696 - http://www.vupen.com/english/advisories/2006/2383 - http://archives.neohapsis.com/archives/bugtraq/2008-02/0186.html - http://www.osvdb.org/26533 - http://www.securityfocus.com/bid/27772 - https://exchange.xforce.ibmcloud.com/vulnerabilities/40481
CVE ID: CVE-2006-3140 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27147 - http://pridels0.blogspot.com/2006/06/openci-sql-inj.html
CVE ID: CVE-2006-3141 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.947Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20736 - http://pridels0.blogspot.com/2006/06/tradingeye-shop-r4-xss.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27202 - http://www.vupen.com/english/advisories/2006/2424 - http://www.securityfocus.com/bid/18526 - http://www.osvdb.org/26637
CVE ID: CVE-2006-3142 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/4140 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27700 - http://www.securityfocus.com/archive/1/437575/100/0/threaded - http://securityreason.com/securityalert/1122 - http://www.securityfocus.com/bid/18472
CVE ID: CVE-2006-3143 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the error_msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20752 - http://www.securityfocus.com/bid/18563 - http://www.vupen.com/english/advisories/2006/2453 - http://www.securityfocus.com/archive/1/437640/100/0/threaded - http://securityreason.com/securityalert/1121
CVE ID: CVE-2006-3144 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcms_path parameter. NOTE: it was later reported that this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20758 - http://www.securityfocus.com/bid/18537 - https://www.ex
m Container: References: - http://secunia.com/advisories/20758 - http://www.securityfocus.com/bid/18537 - https://www.exploit-db.com/exploits/9699 - https://www.exploit-db.com/exploits/1929 - https://exchange.xforce.ibmcloud.com/vulnerabilities/53273 - http://www.securityfocus.com/archive/1/456721/100/0/threaded - http://www.osvdb.org/26677 - http://www.vupen.com/english/advisories/2006/2446 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27236
CVE ID: CVE-2006-3145 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27244 - http://secunia.com/advisories/20775 - http://sourceforge.net/project/shownotes.php?release_id=425770 - http://www.trustix.org/err
cunia.com/advisories/20775 - http://sourceforge.net/project/shownotes.php?release_id=425770 - http://www.trustix.org/errata/2006/0037 - http://secunia.com/advisories/20729 - http://www.securityfocus.com/bid/18525
CVE ID: CVE-2006-3146 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2455 - http://attrition.org/pipermail/vim/2006-October/001085.html - https://exchange.xforce
com/english/advisories/2006/2455 - http://attrition.org/pipermail/vim/2006-October/001085.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27228 - http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html - http://secunia.com/advisories/20657 - http://securitytracker.com/id?1016345 - http://trifinite.org/trifinite_advisory_toshiba.html - http://www.securityfocus.com/archive/1/437811/100/0/threaded - http://www.osvdb.org/26686 - http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2 - http://www.securityfocus.com/bid/18527 - http://trifinite.org/blog/archives/2006/06/update_tosiba_a.html
CVE ID: CVE-2006-3147 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors. NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27340 - http://w
erences: - http://securitytracker.com/id?1016444 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27340 - http://www.securityfocus.com/bid/18565 - http://secunia.com/advisories/20743 - http://www.osvdb.org/26693 - http://www.vupen.com/english/advisories/2006/2459 - http://hostingcontroller.com/english/logs/hotfixlogv61_3_2.html
CVE ID: CVE-2006-3148 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27210 - http://www.osvdb.org/26694 - http://pridels0.blogspot.com/2006/06/open-realty-sql-injection-vuln.html - http://secunia.com/advisories/20704 - http://www.securityfocus.com/bid/18545 - http://www.vupen.com/english/advisories/2006/2
//secunia.com/advisories/20704 - http://www.securityfocus.com/bid/18545 - http://www.vupen.com/english/advisories/2006/2454
CVE ID: CVE-2006-3149 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20678 - http://pridels0.blogspot.com/2006/06/phpmyforum-413-xss-vuln.html - http://www.osvdb.org/26678 - http://www.securityfocus.com/bid/18542 - http://www.vupen.com/english/advisories/2006/2437 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27250
CVE ID: CVE-2006-3150 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.836Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/cavoxcms-sql-injection-vuln.html - http://www.securityfocus.com/bid/18533 - http://www.osvdb.org/26658 - http://www.vupen.com/english/advisories/2006/2433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27249 - http://secunia.com/advisories/20600
CVE ID: CVE-2006-3151 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18541 - http://pridels0.blogspot.com/2006/06/associated-xss-vuln.html - http://www.vupen.com/english/advisories/2006/2444 - http://secunia.com/advisories/20725 - http://www.osvdb.org/26672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27255
CVE ID: CVE-2006-3152 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.157Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) sectio parameter in (a) login.php, (b) write_newad.php, (c) newad.php, (d) printad.php, (e) askseller.php, (f) browse.php, (g) showmemberads.php, (h) note_ad.php, (i) abuse.php, (j) buynow.php, (k) confirm_newad.php, (2) an parameter in (l) printad.php, (m) note_ad.php, (3) who parameter in (n) showmemberads.php, and (4) adnr parameter in (o) buynow.php. Additional Analyst Notes: - CVE Pr
(3) who parameter in (n) showmemberads.php, and (4) adnr parameter in (o) buynow.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016356 - http://www.vupen.com/english/advisories/2006/2469 - http://www.osvdb.org/26702 - http://secunia.com/advisories/20740 - http://www.osvdb.org/26696 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27267 - http://www.osvdb.org/26706 - http://www.osvdb.org/26700 - http://www.osvdb.org/26699 - http://www.securityfocus.com/bid/18468 - http://www.osvdb.org/26697 - http://www.osvdb.org/26703 - http://www.osvdb.org/26698 - http://pridels0.blogspot.com/2006/06/phptrader-multiple-sql-injection-vuln.html - htt
703 - http://www.osvdb.org/26698 - http://pridels0.blogspot.com/2006/06/phptrader-multiple-sql-injection-vuln.html - http://www.osvdb.org/26704 - http://www.osvdb.org/26705 - http://www.osvdb.org/26701
CVE ID: CVE-2006-3153 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27274 - http://www.osvdb.org/26741 - http://www.vupen.com/english/advisories/2006/2475 - http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html - http://www.securityfocus.com/bid/18573 - http://secunia.com/advisories/20761
CVE ID: CVE-2006-3154 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.144Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27273 - http://www.osvdb.org/26740 - http://www.vupen.com/english/advisories/2006/2475 - http://securitytracker.com/id?1016353 - http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html - http://www.securityfocus.com/bid/18573 - http://secunia.com/advis
dels0.blogspot.com/2006/06/ultimate-estate-vuln.html - http://www.securityfocus.com/bid/18573 - http://secunia.com/advisories/20761
CVE ID: CVE-2006-3155 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) item parameter in (a) emailtofriend.pl or (b) violation.pl, (2) seller parameter in (c) vsoa.pl, (3) user parameter in (d) userask.pl or (e) leavefeed.pl, (4) itemnum parameter in userask.pl, (5) category parameter in (f) itemlist.pl, and the (6) query parameter in (g) search.pl. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot
ry parameter in (g) search.pl. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/ultimate-auction-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27276 - http://securitytracker.com/id?1016351
CVE ID: CVE-2006-3156 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the subid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18577 - http://pridels0.blogspot.com/2006/06/ultimate-eshop-xss-vuln.html - http://www.vupen.com/english/advisories/2006/2479 - http://securitytracker.com/id?1016354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27265 - http://www.osvdb.org/26746 -
uritytracker.com/id?1016354 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27265 - http://www.osvdb.org/26746 - http://secunia.com/advisories/20737
CVE ID: CVE-2006-3157 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.949Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote attackers to inject arbitrary web script or HTML via the REQ parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18569 - http://www.vupen.com/english/advisories/2006/2476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27271 - http://secunia.com/advisories/20742 - http://securitytracker.com/id?1016352 - http://pridels0.blogspot.com/2006/06/ultimatego
//secunia.com/advisories/20742 - http://securitytracker.com/id?1016352 - http://pridels0.blogspot.com/2006/06/ultimategoogle-xss-vuln.html - http://www.osvdb.org/26757
CVE ID: CVE-2006-3158 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:06.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows remote attackers to bypass security checks and upload or execute arbitrary php code via the add action. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27296 - http://www.vupen.com/english/advisories/2006/2428 - http://www.biyosecurity.be/bugs/meeting.txt - http://www.securityfocus.com/bid/18499 - http://www.osvdb.org/26627 - http://www.securit
osecurity.be/bugs/meeting.txt - http://www.securityfocus.com/bid/18499 - http://www.osvdb.org/26627 - http://www.securityfocus.com/archive/1/437992/100/0/threaded - http://secunia.com/advisories/20731
CVE ID: CVE-2006-3159 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016416 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1 - http://securitytracker.com/id?1016312 - https://exchange.x
/sunsolve.sun.com/search/document.do?assetkey=1-26-102496-1 - http://securitytracker.com/id?1016312 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27220 - http://www.vupen.com/english/advisories/2006/2633 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046920.html - http://www.securityfocus.com/bid/18749 - http://secunia.com/advisories/20919
CVE ID: CVE-2006-3160 State: PUBLISHED Published: 2006-06-22T22:00:00 Last Updated: 2024-08-07T18:16:05.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437671/100/100/threaded - http://www.vupen.com/english/advisories/2006/2435 - http://www.securityfocus.com/bid/18534 - http://www.osvdb.org/26665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27306 - http://secunia.com/advisor
4 - http://www.osvdb.org/26665 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27306 - http://secunia.com/advisories/20668