Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
https://www.exploit-db.com/exploits/1881 - http://www.majorsecurity.de/advisory/major_rls8.txt - http://www.osvdb.org/26170 - http://securitytracker.com/id?1016272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26932 - http://secunia.com/advisories/20468 - http://www.osvdb.org/26168 - http://www.securityfocus.com/bid/18278 - http://www.securityfocus.com/archive/1/436134/100/0/threaded - http://www.osvdb.org/26169 - http://www.vupen.com/english/advisories/2006/2152 - http://www.securityfocus.com/archive/1/435991/100/0/threaded
CVE ID: CVE-2006-2882 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities submit.asp in ASPScriptz Guest Book 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) GBOOK_UNAME, (2) GBOOK_EMAIL, (3) GBOOK_CITY, (4) GBOOK_COU, (5) GBOOK_WWW, and (6) GBOOK_MESS form fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436028/100/0/threaded - http://www.vupen.com/english/advisories/2006/2150 - http://secunia.com/advisories/20416 - https://exchange.xforce.ibmc
- http://www.vupen.com/english/advisories/2006/2150 - http://secunia.com/advisories/20416 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26944 - http://www.securityfocus.com/bid/18285 - http://securityreason.com/securityalert/1056 - http://colander.altervista.org/advisory/ASzGB.txt
CVE ID: CVE-2006-2883 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20471 - http://www.securityfocus.com/archive/1/435982/100/0/threaded - http://www.vupen.com/english/advisories/2006/2165 - http://securitytracker.com/id?1016226 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26986 - http://securityreason.com/securityalert/1055 - http://www
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26986 - http://securityreason.com/securityalert/1055 - http://www.securityfocus.com/bid/18282
CVE ID: CVE-2006-2884 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20471 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26987 - http://www.securityfocus.com/archive/1/435982/100/0/threaded - http://www.vupen.com/english/advisories/2006/2165 - http://securitytracker.com/id?1016226 - http://securityreason.com/securityalert/1055 - http://www.securityfocus.
/2165 - http://securitytracker.com/id?1016226 - http://securityreason.com/securityalert/1055 - http://www.securityfocus.com/bid/18282
CVE ID: CVE-2006-2885 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in view.php and the (2) fSearchableText parameter in /search/simpleSearch.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26940 - http://secunia.com/advisories/20455 - http://www.osvdb.org/26179 - http://www.vupen.com/english/advisories/2006/2157 - http://pridel
ia.com/advisories/20455 - http://www.osvdb.org/26179 - http://www.vupen.com/english/advisories/2006/2157 - http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html - http://www.securityfocus.com/bid/18324 - http://www.osvdb.org/26180
CVE ID: CVE-2006-2886 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.053Z Vendors: n/a Products: n/a Problem Types: n/a Description: view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting error message. NOTE: this might be resultant from another vulnerability, since this vector also produces XSS. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26943 - http://www.osvdb.org/26297 - http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.
rabilities/26943 - http://www.osvdb.org/26297 - http://pridels0.blogspot.com/2006/06/knowledgetree-open-source-xss-vuln.html
CVE ID: CVE-2006-2887 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the UserName parameter in (1) validatelogin.asp or (2) adminlogin.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26127 - http://www.kapda.ir/advisory-340.html - http://www.vupen.com/english/advisories/2006/2149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26947 - http://www.osvdb.org/26274 - http://secunia.com/advisories/20423 - http://securi
ce.ibmcloud.com/vulnerabilities/26947 - http://www.osvdb.org/26274 - http://secunia.com/advisories/20423 - http://securitytracker.com/id?1016229 - http://www.securityfocus.com/bid/18287 - http://securityreason.com/securityalert/1054 - http://www.securityfocus.com/archive/1/436018/100/0/threaded
CVE ID: CVE-2006-2888 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WK[wkPath] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26942 - http://secunia.com/advisories/20487 - http://www.securityfocus.com/bid/18291 - https://www.exploit-db.com/exploits/1883 - http://www.vupen.com/english/advisories/2006/2167
CVE ID: CVE-2006-2889 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the (1) category or (2) archivedate parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435856/100/0/threaded - http://retrogod.altervista.org/pixelpost_15rc12_xpl.html - http://securityreason.com/securityalert/1061 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
ost_15rc12_xpl.html - http://securityreason.com/securityalert/1061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26922 - http://www.securityfocus.com/bid/18276 - http://securitytracker.com/id?1016217
CVE ID: CVE-2006-2890 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to admin scripts such as admin/view_info.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435856/100/0/threaded - http://retrogod.altervista.org/pixelpost_15rc12_xpl.html - http://securityreason.com/securityalert/1061 - http://www.securityfocus.com/bid/182
ista.org/pixelpost_15rc12_xpl.html - http://securityreason.com/securityalert/1061 - http://www.securityfocus.com/bid/18276 - http://securitytracker.com/id?1016217
CVE ID: CVE-2006-2891 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435856/100/0/threaded - http://retrogod.altervista.org/pixelpost_15rc12_xpl.html - http://securityreason.com/securityalert/1061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26925
CVE ID: CVE-2006-2892 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML and web script via the message parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18296 - http://www.securityfocus.com/archive/1/436125/100/0/threaded - http://www.vupen.com/english/advisories/2006/2188 - http://securityreason.com/securityalert/1060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26963 - http://secunia.com/advis
ityreason.com/securityalert/1060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26963 - http://secunia.com/advisories/20498
CVE ID: CVE-2006-2893 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in GANTTy 1.0.3 allows remote attackers to obtain the full path of the web server via an invalid lang parameter in an authenticate action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18296 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26964 - http://www.securityfocus.com/archive/1/436125/100/0/threaded - http://www.vupen.com/english/advisories/2006/2188 - http://securityreason.com/securityalert/1060 - http://secunia.com/advisories/20498
CVE ID: CVE-2006-2894 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before 1.1.5, and Netscape 8.1 and earlier allow user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the for
characters to be inserted into a file upload input control, which can then upload the file when the user submits the form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/482876/100/200/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://lcamtuf.coredump.cx/focusbug/ - http://secunia.com/advisories/27414 - http://www.securityfocus.com/archive/1/482925/100/0/threaded - https://issues.rpath.com/browse/RPL-1858 - http://www.vupen.com/english/advisories/2006/2163 - http://archives.neohapsis.com/archives/bugtraq/2007-02/0166.html - http://securityreason.com/securityalert/1059 - http://h20000.www2.hp.com/bizsup
com/archives/bugtraq/2007-02/0166.html - http://securityreason.com/securityalert/1059 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://secunia.com/advisories/27298 - http://securitytracker.com/id?1018837 - http://www.vupen.com/english/advisories/2007/3544 - http://secunia.com/advisories/20470 - https://usn.ubuntu.com/535-1/ - http://secunia.com/advisories/20472 - http://secunia.com/advisories/20467 - http://www.vupen.com/english/advisories/2006/2160 - http://secunia.com/advisories/27383 - http://www.novell.com/linux/security/advisories/2007_57_mozilla.html - http://secunia.com/advisories/21532 - http://www.vupen.com/english/advisories/2008/0083 - ht
ries/2007_57_mozilla.html - http://secunia.com/advisories/21532 - http://www.vupen.com/english/advisories/2008/0083 - http://secunia.com/advisories/27387 - http://www.vupen.com/english/advisories/2006/2164 - http://www.securityfocus.com/bid/18308 - http://secunia.com/advisories/27403 - https://bugzilla.mozilla.org/show_bug.cgi?id=56236 - http://archives.neohapsis.com/archives/bugtraq/2007-02/0187.html - http://lists.virus.org/full-disclosure-0702/msg00225.html - http://www.vupen.com/english/advisories/2006/2162 - https://bugzilla.mozilla.org/show_bug.cgi?id=290478 - http://www.mozilla.org/security/announce/2007/mfsa2007-32.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/0
www.mozilla.org/security/announce/2007/mfsa2007-32.html - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html - http://www.thanhngan.org/fflinuxversion.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 - http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 - http://secunia.com/advisories/27335 - https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/20442 - http://www.gnucitizen.org/blog/browser-focus-rip - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://s
.org/blog/browser-focus-rip - http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 - http://www.securityfocus.com/archive/1/482932/100/200/threaded - https://bugzilla.mozilla.org/show_bug.cgi?id=370092 - http://www.ubuntu.com/usn/usn-536-1
CVE ID: CVE-2006-2895 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:26.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2159 - http://svn.wikimedia.org/viewvc/mediawiki/tags/REL1_6_7/phase3/RELEASE-NOTES - http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-June/000048.html - http://secunia.com/advisories/20458 - https://exchange.xforce.ibmcloud.com/vulnerabili
-announce/2006-June/000048.html - http://secunia.com/advisories/20458 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27029
CVE ID: CVE-2006-2896 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form field in an Edit Profile action. Additional Analyst Notes: - CVE Program Container: References: - http://www.funkboard.co.uk/forum/thread.php?id=302 - https://www.exploit-db.com/exploits/1875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26912 - http://securityreason.com/securityalert/1066 - http://www.securityfocus.com/archive/1/435987/100/0/threaded - http://www.vupen.com/english/advisories/2006/2158
1066 - http://www.securityfocus.com/archive/1/435987/100/0/threaded - http://www.vupen.com/english/advisories/2006/2158 - http://secunia.com/advisories/20433
CVE ID: CVE-2006-2897 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.funkboard.co.uk/forum/thread.php?id=302 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27084 - http://www.vupen.com/english/advisories/2006/2158 - http://secunia.com/advisories/20433
CVE ID: CVE-2006-2898 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via truncated IAX 2 (IAX2) video frames, which bypasses a length check and leads to a buffer overflow involving negative length check. NOTE: the vendor advisory claims that only a DoS is possible, but the original researcher is reliable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016236 - http://ww
able. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016236 - http://www.debian.org/security/2006/dsa-1126 - http://secunia.com/advisories/20899 - http://secunia.com/advisories/20658 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27045 - http://secunia.com/advisories/21222 - http://www.asterisk.org/node/95 - http://www.gentoo.org/security/en/glsa/glsa-200606-15.xml - http://www.securityfocus.com/bid/18295 - http://secunia.com/advisories/20497 - http://www.securityfocus.com/archive/1/436127/100/0/threaded - http://www.vupen.com/english/advisories/2006/2181 - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://
vupen.com/english/advisories/2006/2181 - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://www.securityfocus.com/archive/1/436671/100/0/threaded
CVE ID: CVE-2006-2899 State: PUBLISHED Published: 2006-06-07T10:00:00 Last Updated: 2024-08-07T18:06:27.210Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execute arbitrary code, possibly by uploading a file with multiple extensions into the WebLink directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436001/100/0/threaded - http://securitytracker.com/id?1016233 - http://www.securityfocus.com/bid/18279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26948 - http://securityreason.com/securityalert/10
.com/bid/18279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26948 - http://securityreason.com/securityalert/1063
CVE ID: CVE-2006-2900 State: PUBLISHED Published: 2006-06-07T16:00:00 Last Updated: 2024-08-07T18:06:27.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box and using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2161 - http://securit
Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2161 - http://securityreason.com/securityalert/1059 - http://www.securityfocus.com/bid/18308 - http://secunia.com/advisories/20449 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046610.html
CVE ID: CVE-2006-2901 State: PUBLISHED Published: 2006-06-07T21:00:00 Last Updated: 2024-08-07T18:06:27.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obtain sensitive system information via a request to an arbitrary .cfg file, which returns configuration information including passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/489009/100/0/threaded - http://www.securityfocus.com/archive/1/436281/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://secunia.com/advis
rchive/1/436281/100/0/threaded - http://www.gnucitizen.org/projects/router-hacking-challenge/ - http://secunia.com/advisories/20474 - http://www.securityfocus.com/bid/18299 - http://securitytracker.com/id?1016234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26973 - http://www.intruders.com.br/adv0206en.html - http://www.intruders.org.br/adv0206en.html - http://securityreason.com/securityalert/1064 - http://www.vupen.com/english/advisories/2006/2186
CVE ID: CVE-2006-2902 State: PUBLISHED Published: 2006-06-08T16:00:00 Last Updated: 2024-08-07T18:06:27.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Particle Links 1.2.2 might allow remote attackers to access arbitrary files via ".." sequences in an HTTP request. NOTE: it is not clear whether this issue is legitimate, as the original researcher seems unsure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/436112/100/0/threaded
CVE ID: CVE-2006-2903 State: PUBLISHED Published: 2006-06-08T16:00:00 Last Updated: 2024-08-07T18:06:27.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin.php in Particle Links 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20491 - http://www.securityfocus.com/archive/1/436112/100/0/threaded - http://www.securityfocus.com/bid/18344 - http://www.vupen.com/english/advisories/2006/2169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26957
CVE ID: CVE-2006-2904 State: PUBLISHED Published: 2006-06-08T16:00:00 Last Updated: 2024-08-07T18:06:27.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Partial Links 1.2.2 allows remote attackers to execute arbitrary SQL commands via the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20491 - http://www.securityfocus.com/archive/1/436112/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26955 - http://www.securityfocus.com/bid/18342
CVE ID: CVE-2006-2905 State: PUBLISHED Published: 2006-06-08T16:00:00 Last Updated: 2024-08-07T18:06:27.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Partial Links 1.2.2 allows remote attackers to obtain sensitive information via a direct request to (1) page_footer.php and (2) page_header.php, which displays the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26956 - http://secunia.com/advisories/20491 - http://www.securityfocus.com/archive/1/436112/100/0/threaded - http://www.vupen.com/english/advisories/2006/2169
CVE ID: CVE-2006-2906 State: PUBLISHED Published: 2006-06-08T16:00:00 Last Updated: 2024-08-07T18:06:27.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2.0.33 allows remote attackers to cause a denial of service (CPU consumption) via malformed GIF data that causes an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26976 - http://secunia.com/advisories/23783 - http://secunia.com/advisories/21186 - http://secunia.com/advisories/20887 - https://usn.ubuntu.com/298-1/ - http://secu