Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0793 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:55.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24753 - http://secunia.com/advisories/18776 - http://www.vupen.com/english/advisories/2006/0639 - http://www.osvdb.
ties/24753 - http://secunia.com/advisories/18776 - http://www.vupen.com/english/advisories/2006/0639 - http://www.osvdb.org/23261
CVE ID: CVE-2006-0794 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: help.php in V-webmail 1.6.2 allows remote attackers to obtain the installation path via unspecified invalid parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24754 - http://secunia.com/advisories/18776 - http://www.osvdb.org/23262 - http://www.vupen.com/english/advisories/2006/0639
CVE ID: CVE-2006-0795 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in convert.cgi in Quirex 2.0.2 and earlier allows remote attackers to read arbitrary files, and possibly execute arbitrary code, via the (1) quiz_head, (2) quiz_foot, and (3) template variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426188/100/0/threaded - http://evuln.com/vulns/78/summary.html - http://www.securityfocus.com/bid/16709 - http://www.vupen.com/english/advisories/2006/0641 - https://exchange.xforce.ibmcloud.com/
.securityfocus.com/bid/16709 - http://www.vupen.com/english/advisories/2006/0641 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24672 - http://secunia.com/advisories/18926
CVE ID: CVE-2006-0796 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.php in Clever Copy 3.0 allows remote attackers to inject arbitrary web script or HTML via the Subject field when sending private messages (privatemessages.php). NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24747 - http://www.osvdb.org/23235
m/english/advisories/2006/0616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24747 - http://www.osvdb.org/23235 - http://www.securityfocus.com/bid/16681 - http://secunia.com/advisories/18873
CVE ID: CVE-2006-0797 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol (L2CAP) packet whose length field is less than the actual length of the packet, possibly triggering a buffer overflow, as demonstrated using the Bluetooth Stack Smasher (BSS). Additional Analyst Notes: - CVE Program Container: References: - http://www.secuobs.com/news/15022006-nokia_n70.shtml#english - http://www.vupen.com/english/adv
Container: References: - http://www.secuobs.com/news/15022006-nokia_n70.shtml#english - http://www.vupen.com/english/advisories/2006/0538 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24688 - http://www.securityfocus.com/bid/16666 - http://secunia.com/advisories/18724 - http://www.osvdb.org/23061 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0316.html
CVE ID: CVE-2006-0798 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in the IMAP service in Macallan Mail Solution before 4.8.05.004 allow remote authenticated users to read e-mails of other users or create, modify, or delete directories via a .. (dot dot) in the argument to the (1) CREATE, (2) SELECT, (3) DELETE, or (4) RENAME commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24761 - http://secunia.com/secunia_research/2006-4/advisory/ - http://securitytracker.com/id?10156
d.com/vulnerabilities/24761 - http://secunia.com/secunia_research/2006-4/advisory/ - http://securitytracker.com/id?1015647 - http://www.securityfocus.com/bid/16704 - http://macallan.club.fr/MMS/index.html - http://secunia.com/advisories/18775 - http://www.vupen.com/english/advisories/2006/0644 - http://www.osvdb.org/23269
CVE ID: CVE-2006-0799 State: PUBLISHED Published: 2006-02-19T21:00:00 Last Updated: 2024-08-07T16:48:56.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page with an anchor element with a legitimate "href" attribute, a form whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL. NOTE: this issue is very similar to CVE-2004-1104, although the manipulations are slightly different. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulne
y different. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/17938 - http://www.securityfocus.com/archive/1/425298/100/0/threaded - http://www.osvdb.org/23609 - http://www.securityfocus.com/archive/1/425386/100/0/threaded - http://www.securityfocus.com/archive/1/425883/100/0/threaded
CVE ID: CVE-2006-0800 State: PUBLISHED Published: 2006-02-20T22:00:00 Last Updated: 2024-08-07T16:48:56.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is interpreted as a ">" character by some web browsers but bypasses the blacklist protection in (1) the pnVarCleanFromInput function in pnAPI.php, (2) the pnSecureInput function in pnAntiCracker.php, and (3) the htmltext parameter in an edituser operation to user.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/en
edituser operation to user.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24823 - http://www.securityfocus.com/bid/16752 - http://news.postnuke.com/index.php?name=News&file=article&sid=2754 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html - http://secunia.com/advisories/18937 - http://securityreason.com/securityalert/454
CVE ID: CVE-2006-0801 State: PUBLISHED Published: 2006-02-20T22:00:00 Last Updated: 2024-08-07T16:48:55.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0673 - http://www.securityfocus.com/bid/16752 - http://news.postnuke.com/index.php?name=News&file=article&sid=2754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24827 - http://archives.neohapsis.co
e=News&file=article&sid=2754 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24827 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html - http://secunia.com/advisories/18937 - http://securityreason.com/securityalert/454
CVE ID: CVE-2006-0802 State: PUBLISHED Published: 2006-02-20T22:00:00 Last Updated: 2024-08-07T16:48:56.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is enabled, allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0673 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24823 - http://www.securityfocus.com/bid/16752 - http://news.postnuke.com/index.php?name=News&file=
.com/vulnerabilities/24823 - http://www.securityfocus.com/bid/16752 - http://news.postnuke.com/index.php?name=News&file=article&sid=2754 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0469.html - http://secunia.com/advisories/18937 - http://securityreason.com/securityalert/454
CVE ID: CVE-2006-0803 State: PUBLISHED Published: 2006-02-23T20:00:00 Last Updated: 2024-08-07T16:48:56.618Z Vendors: n/a Products: n/a Problem Types: n/a Description: The signature verification functionality in the YaST Online Update (YOU) script handling relies on a gpg feature that is not intended for signature verification, which prevents YOU from detecting malicious scripts or code that do not pass the signature check when gpg 1.4.x is being used. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_13_gpg.html - http://www.novell.com/linux/security/advisories/2006_09_gpg.html - http://www.securityfocus.com/bid/16889
CVE ID: CVE-2006-0804 State: PUBLISHED Published: 2006-02-21T01:00:00 Last Updated: 2024-08-07T16:48:55.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in TIN 1.8.0 and earlier might allow attackers to execute arbitrary code via unknown vectors that trigger a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200611-18.xml - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://www.vupen.com/english/advisories/2006/0702 - http://www.openpkg.org/security/OpenPKG-SA-2006.005-tin.html - http://secunia.com/advisories/19130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
enPKG-SA-2006.005-tin.html - http://secunia.com/advisories/19130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24841 - http://www.securityfocus.com/bid/16728
CVE ID: CVE-2006-0805 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16722 - http://securityreason.com/securityalert/455 - http://www.securityfocus.com
s: - http://www.securityfocus.com/bid/16722 - http://securityreason.com/securityalert/455 - http://www.securityfocus.com/archive/1/425394/100/0/threaded - http://secunia.com/advisories/18936 - http://www.waraxe.us/advisory-45.html
CVE ID: CVE-2006-0806 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:55.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow remote attackers to inject arbitrary web script or HTML via (1) the next_page parameter in adodb-pager.inc.php and (2) other unspecified vectors related to PHP_SELF. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19590 - http://secunia.com/advisories/19555 - http://www.vupen.com/english/advisories/2006/0664 - http://securityreason.com/securityalert/452 - http://ww
ries/19555 - http://www.vupen.com/english/advisories/2006/0664 - http://securityreason.com/securityalert/452 - http://www.debian.org/security/2006/dsa-1029 - http://secunia.com/advisories/18928 - http://www.debian.org/security/2006/dsa-1030 - http://www.gulftech.org/?node=research&article_id=00101-02182006 - http://www.securityfocus.com/bid/16720 - http://secunia.com/advisories/19591 - http://www.securityfocus.com/archive/1/425393/100/0/threaded - http://www.vupen.com/english/advisories/2006/2021 - http://secunia.com/advisories/19691 - http://sourceforge.net/project/shownotes.php?release_id=419843&group_id=8956 - http://www.debian.org/security/2006/dsa-1031 - http://phpesp.cvs.sourceforge.ne
es.php?release_id=419843&group_id=8956 - http://www.debian.org/security/2006/dsa-1031 - http://phpesp.cvs.sourceforge.net/phpesp/phpESP/admin/include/lib/adodb/adodb-pager.inc.php?r1=1.1&r2=1.2 - http://www.osvdb.org/23362 - http://www.gentoo.org/security/en/glsa/glsa-200604-07.xml
CVE ID: CVE-2006-0807 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NJStar Chinese and Japanese Word Processor 4.x and 5.x before 5.10 allows user-assisted attackers to execute arbitrary code via font names in NJStar (.njx) documents. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24773 - http://www.njstar.com/njstar/chinese/ - http://secunia.com/advisories/18702 - http://securityreason.com/securityalert/461 - http://www.njstar.com/njstar/jap
/ - http://secunia.com/advisories/18702 - http://securityreason.com/securityalert/461 - http://www.njstar.com/njstar/japanese/ - http://www.securityfocus.com/bid/16737 - http://www.osvdb.org/23354 - http://secunia.com/secunia_research/2006-5/advisory/ - http://www.securityfocus.com/archive/1/425498/100/0/threaded - http://securitytracker.com/id?1015649
CVE ID: CVE-2006-0808 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: MUTE 0.4 allows remote attackers to cause a denial of service (messages not forwarded) and obtain sensitive information about a target by filling a client's mWebCache cache with malicious "zombie" nodes. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24931 - http://secunia.com/advisories/18980 - http://cvs.sourceforge.net/viewcvs.py/mute-net/MUTE/doc/notes/notes.txt?view=markup
CVE ID: CVE-2006-0809 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Skate Board 0.9 allow remote attackers to execute arbitrary SQL commands via the (1) usern parameter in (a) sendpass.php, and the (2) usern and (3) passwd parameters and (4) sf_cookie cookie in (b) login.php and (c) logged.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16936 - http://www.osvdb.org/23302 - http://www.osvdb.org/23303 - http://evuln.com/vulns/84/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/2477
www.osvdb.org/23303 - http://evuln.com/vulns/84/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24779 - http://www.securityfocus.com/archive/1/426658/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24778 - http://securityreason.com/securityalert/540 - http://secunia.com/advisories/18978 - http://www.osvdb.org/23301
CVE ID: CVE-2006-0810 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.189Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in config.php in Skate Board 0.9 allows remote authenticated administrators to execute arbitrary PHP code by causing certain variables in config.php to be modified, possibly due to XSS or direct static code injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16936 - http://evuln.com/vulns/84/summary.html - http://www.osvdb.org/23304 - http://www.securityfocus.com/archive/1/426658/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabiliti
23304 - http://www.securityfocus.com/archive/1/426658/30/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24780 - http://securityreason.com/securityalert/540 - http://secunia.com/advisories/18978
CVE ID: CVE-2006-0811 State: PUBLISHED Published: 2006-02-21T02:00:00 Last Updated: 2024-08-07T16:48:56.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in reguser.php in Skate Board 0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters involved with the registration form. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16936 - http://evuln.com/vulns/84/summary.html - http://www.osvdb.org/23305 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24781 - http://www.securityfocus.com/archive/1/426658/30/0/threaded - http://securityreason.com/secur
om/vulnerabilities/24781 - http://www.securityfocus.com/archive/1/426658/30/0/threaded - http://securityreason.com/securityalert/540 - http://secunia.com/advisories/18978
CVE ID: CVE-2006-0812 State: PUBLISHED Published: 2006-02-23T20:00:00 Last Updated: 2024-08-07T16:48:55.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015670 - http://secunia.com/secunia_research/2005-65/advisory/ - http://secunia.com/advisories/16583 - http://www.vupen.com/english/advisories/2006/0701 - http://www.securityfocus.com/bid/16788 - https://exch
sories/16583 - http://www.vupen.com/english/advisories/2006/0701 - http://www.securityfocus.com/bid/16788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24928 - http://www.securityfocus.com/archive/1/425890/100/0/threaded
CVE ID: CVE-2006-0813 State: PUBLISHED Published: 2006-02-24T11:00:00 Last Updated: 2024-08-07T16:48:56.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in WinACE 2.60 allows user-assisted attackers to execute arbitrary code via a large header block in an ARJ archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0709 - http://secunia.com/advisories/17251 - http://www.osvdb.org/23383 - http://www.securityfocus.com/archive/1/425894/100/0/threaded - http://secunia.com/secunia_research/2005-67/advisory/ - http://securitytracker.com/id?1015672 - http://www.securityfocus.com/bid/16786 - http:
unia_research/2005-67/advisory/ - http://securitytracker.com/id?1015672 - http://www.securityfocus.com/bid/16786 - http://securityreason.com/securityalert/479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24872
CVE ID: CVE-2006-0814 State: PUBLISHED Published: 2006-03-06T21:00:00 Last Updated: 2024-08-07T16:48:56.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing (1) "." (dot) and (2) space characters, which are ignored by Windows, as demonstrated by PHP files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426446/100/0/threaded - http://trac.lighttpd.net/trac/changeset/1005 - http://www.osvdb.org/23542 - http://secunia.com/advisories/18886 - http://www.vupen.c
lighttpd.net/trac/changeset/1005 - http://www.osvdb.org/23542 - http://secunia.com/advisories/18886 - http://www.vupen.com/english/advisories/2006/0782 - http://securityreason.com/securityalert/523 - http://www.securityfocus.com/bid/16893 - http://secunia.com/secunia_research/2006-9/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/24976 - http://securitytracker.com/id?1015703
CVE ID: CVE-2006-0815 State: PUBLISHED Published: 2006-03-06T23:00:00 Last Updated: 2024-08-07T16:48:56.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetworkActiv Web Server 3.5.15 allows remote attackers to read script source code via a crafted URL with a "/" (forward slash) after the file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16895 - http://www.securityfocus.com/archive/1/426461/100/0/threaded - http://secunia.com/secunia_research/2006-10/advisory - http://www.vupen.com/english/advisories/2006/0783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24979 - http://secunia.com/advisories/18947 - http
ries/2006/0783 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24979 - http://secunia.com/advisories/18947 - http://www.networkactiv.com/WebServer.html
CVE ID: CVE-2006-0816 State: PUBLISHED Published: 2006-03-24T11:00:00 Last Updated: 2024-08-07T16:48:56.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orion Application Server before 2.0.7, when running on Windows, allows remote attackers to obtain the source code of JSP files via (1) . (dot) and (2) space characters in the extension of a URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-11/advisory/ - http://www.securityfocus.com/bid/17204 - http://www.securityfocus.com/archive/1/428601/100/0/threaded - http://securitytracker.com/id?1015823 - http://www.vupen.com/english/advisories/2006/1055 - http://www.osvdb.org
eaded - http://securitytracker.com/id?1015823 - http://www.vupen.com/english/advisories/2006/1055 - http://www.osvdb.org/24053 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1455.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25405 - http://secunia.com/advisories/18950
CVE ID: CVE-2006-0817 State: PUBLISHED Published: 2006-07-18T23:00:00 Last Updated: 2024-08-07T16:48:56.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path directory traversal vulnerability in (a) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (b) VisNetic MailServer before 8.5.0.5 allows remote attackers to include arbitrary files via a full Windows path and drive letter in the (1) language parameter in accounts/inc/include.php and (2) lang_settings parameter in admin/inc/include.php, which is not properly sanitized by the securepath function, a related issue to CVE-2005-4556. Additional Analyst Notes: - CVE Program Container: Reference