Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4534 State: PUBLISHED Published: 2006-09-05T17:00:00 Last Updated: 2024-08-07T19:14:47.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2000, 2002, and Office 2003 allows remote user-assisted attackers to execute arbitrary code via unspecified vectors involving a crafted file resulting in a malformed stack, as exploited by malware with names including Trojan.Mdropper.Q, Mofei, and Femo. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28539 - http://securitytracker.com/id?1016787 - http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99 - http://
er.com/id?1016787 - http://www.symantec.com/enterprise/security_response/writeup.jsp?docid=2006-090219-2855-99 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/bid/19835 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-060 - http://www.vupen.com/english/advisories/2006/3448 - http://www.securityfocus.com/archive/1/445381/100/0/threaded - http://blogs.securiteam.com/?p=586 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28775 - http://secunia.com/advisories/21735 - http://support.microsoft.com/kb/925059 - http://www.securityfocus.com/archive/1/44528
p://secunia.com/advisories/21735 - http://support.microsoft.com/kb/925059 - http://www.securityfocus.com/archive/1/445285/100/0/threaded - http://vil.mcafeesecurity.com/vil/content/v_119055.htm - http://www.kb.cert.org/vuls/id/806548 - http://www.microsoft.com/technet/security/advisory/925059.mspx - http://www.securityfocus.com/archive/1/445162/100/100/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A578 - http://isc.sans.org/diary.php?storyid=1669
CVE ID: CVE-2006-4535 State: PUBLISHED Published: 2006-09-19T19:00:00 Last Updated: 2024-08-07T19:14:47.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are also affected, due to backporting of the CVE-2006-3745 patch. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.
ww.mandriva.com/security/advisories?name=MDKSA-2007:025 - http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg02314.html - http://www.debian.org/security/2006/dsa-1183 - http://secunia.com/advisories/22292 - http://www.redhat.com/support/errata/RHSA-2006-0689.html - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=204460 - http://secunia.com/advisories/22082 - http://secunia.com/advisories/21945 - http://www.securityfocus.com/bid/20087 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29011 - http://secunia.com/advisories/22382 - http://secunia.com/advisories/21967 - http://www.ubuntu.com/usn/u
bilities/29011 - http://secunia.com/advisories/22382 - http://secunia.com/advisories/21967 - http://www.ubuntu.com/usn/usn-347-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-249.htm - http://securitytracker.com/id?1016992 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10530 - http://secunia.com/advisories/22945 - http://secunia.com/advisories/22093 - http://www.debian.org/security/2006/dsa-1184
CVE ID: CVE-2006-4536 State: PUBLISHED Published: 2006-09-05T18:00:00 Last Updated: 2024-08-07T19:14:47.294Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in module/rejestracja.php in CMS Frogss 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the podpis parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28599 - http://secwatch.org/advisories/1015206/ - http://www.securityfocus.com/bid/19727 - https://www.exploit-db.com/exploits/2262
CVE ID: CVE-2006-4537 State: PUBLISHED Published: 2006-09-05T18:00:00 Last Updated: 2024-08-07T19:14:47.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: NET$SESSION_CONTROL.EXE in DECnet-Plus in OpenVMS ALPHA 7.3-2 and Alpha 8.2 writes a password to an audit log file when there is a successful connection after a "network breakin" event, which allows local users to obtain passwords by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017472 - http://www.securityfocus.com/bid/19783 - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt - http://www.osvdb.org/28272 - http://secunia.com/advisori
.hp.com/openvms_patches/alpha/V7.3-2/AXP_DNVOSIECO03-V732.txt - http://www.osvdb.org/28272 - http://secunia.com/advisories/21705 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28695 - http://secunia.com/advisories/23632 - http://www.vupen.com/english/advisories/2006/3423 - http://securitytracker.com/id?1016772 - ftp://ftp.itrc.hp.com/openvms_patches/alpha/V8.2/AXP_DNVOSIECO02-V82.txt
CVE ID: CVE-2006-4538 State: PUBLISHED Published: 2006-09-05T19:00:00 Last Updated: 2024-08-07T19:14:47.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel 2.6.17 and earlier, when running on IA64 or SPARC platforms, allows local users to cause a denial of service (crash) via a malformed ELF file that triggers memory maps that cross region boundaries. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10301 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/27
g.mitre.oval%3Adef%3A10301 - http://www.redhat.com/support/errata/RHSA-2007-1049.html - http://secunia.com/advisories/27913 - http://rhn.redhat.com/errata/RHSA-2007-0014.html - http://support.avaya.com/elmodocs2/security/ASA-2007-063.htm - http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.17.11 - http://www.us.debian.org/security/2006/dsa-1237 - http://secunia.com/advisories/33280 - http://secunia.com/advisories/24206 - http://secunia.com/advisories/23474 - http://secunia.com/advisories/21967 - http://www.ubuntu.com/usn/usn-347-1 - http://www.vupen.com/english/advisories/2006/3670 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://secunia.com
s/2006/3670 - http://www.us.debian.org/security/2006/dsa-1233 - http://secunia.com/advisories/23370 - http://secunia.com/advisories/21999 - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.17.y.git%3Ba=commit%3Bh=8833ebaa3f4325820fe3338ccf6fae04f6669254 - http://secunia.com/advisories/23997 - http://secunia.com/advisories/24482 - http://lkml.org/lkml/2006/9/4/116 - http://www.securityfocus.com/bid/19702 - http://www.redhat.com/support/errata/RHSA-2008-0787.html - http://secunia.com/advisories/23395 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:060
CVE ID: CVE-2006-4539 State: PUBLISHED Published: 2006-09-05T23:00:00 Last Updated: 2024-08-07T19:14:47.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) includes/widgets/module_company_tickets.php and (2) includes/widgets/module_track_tickets.php Client Support Center in Cerberus Helpdesk 3.2 Build 317, and possibly earlier, allows remote attackers to bypass security restrictions and obtain sensitive information via the ticket parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://forum.cerberusweb.com/showthread.php?t=7671 - http://secuni
Analyst Notes: - CVE Program Container: References: - http://forum.cerberusweb.com/showthread.php?t=7671 - http://secunia.com/advisories/21706 - http://securitytracker.com/id?1016976 - http://www.securityfocus.com/bid/19797 - http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_company_tickets.php.diff?r1=1.6%3Br2=1.7%3Bf=h - http://cerberusweb.com/cvsweb.pl/support-center/cerberus-support-center/includes/widgets/module_track_tickets.php.diff?r1=1.17%3Br2=1.18%3Bf=h - http://www.vupen.com/english/advisories/2006/3421 - http://www.osvdb.org/28317
CVE ID: CVE-2006-4540 State: PUBLISHED Published: 2006-09-05T23:00:00 Last Updated: 2024-08-07T19:14:47.456Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in learncenter.asp in Learn.com LearnCenter allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444842 - http://secunia.com/advisories/21716 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28694 - http://www.osvdb.org/28306 - http://www.attrition.org/pipermail/vim/2006-October/001093.html - http://www.vupen.com/english/advisories/2006/3432 - htt
ttp://www.attrition.org/pipermail/vim/2006-October/001093.html - http://www.vupen.com/english/advisories/2006/3432 - http://www.securityfocus.com/bid/19781
CVE ID: CVE-2006-4541 State: PUBLISHED Published: 2006-09-05T23:00:00 Last Updated: 2024-08-07T19:14:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: RapDrv.sys in BlackICE PC Protection 3.6.cpn, cpj, cpiE, and possibly 3.6 and earlier, allows local users to cause a denial of service (crash) via a NULL third argument to the NtOpenSection API function. NOTE: it was later reported that 3.6.cqn is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1512 - http://www.osvdb.org/28332 - http://secunia.com/advisories/21710 - http://www.securityfocus.com/archive/1/444958/100/0/threaded - http://www.securityfocus.co
ecunia.com/advisories/21710 - http://www.securityfocus.com/archive/1/444958/100/0/threaded - http://www.securityfocus.com/bid/19800 - http://www.matousec.com/info/advisories/BlackICE-Insufficient-validation-of-arguments-of-NtOpenSection.php - http://www.matousec.com/info/advisories/plague-in-security-software-drivers.php - http://www.matousec.com/projects/windows-personal-firewall-analysis/plague-in-security-software-drivers.php - http://www.vupen.com/english/advisories/2006/3431 - http://www.securityfocus.com/archive/1/479830/100/0/threaded
CVE ID: CVE-2006-4542 State: PUBLISHED Published: 2006-09-05T23:00:00 Last Updated: 2024-08-07T19:14:47.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webmin before 1.296 and Usermin before 1.226 do not properly handle a URL with a null ("%00") character, which allows remote attackers to conduct cross-site scripting (XSS), read CGI program source code, list directories, and possibly execute programs. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2399776858/index.html - http://www.securityfocus.com/bid/19820 - http://secunia.com/advisories/22114 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/89_e.html - http://www.vupen.
ecunia.com/advisories/22114 - http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/89_e.html - http://www.vupen.com/english/advisories/2006/3424 - http://secunia.com/advisories/21690 - http://www.debian.org/security/2006/dsa-1199 - http://www.osvdb.org/28338 - http://secunia.com/advisories/22087 - http://www.osvdb.org/28337 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:170 - http://securitytracker.com/id?1016776 - http://webmin.com/security.html - http://secunia.com/advisories/22556 - http://securitytracker.com/id?1016777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28699
CVE ID: CVE-2006-4543 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.625Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444716/100/0/threaded - http://secunia.com/advisories/21635 - http://securityreas
http://www.securityfocus.com/archive/1/444716/100/0/threaded - http://secunia.com/advisories/21635 - http://securityreason.com/securityalert/1490 - http://www.securityfocus.com/bid/19771
CVE ID: CVE-2006-4544 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the exbb[home_path] parameter in files in the modules directory including (1) birstday/birst.php (2) birstday/select.php, (3) birstday/profile_show.php, (4) newusergreatings/pm_newreg.php, (5) punish/p_error.php, (6) punish/profile.php, and (7) threadstop/threadstop.php. NOTE: the (8) modules/userstop/userstop.php vector might overlap CVE-2006-4488, although it is
hreadstop/threadstop.php. NOTE: the (8) modules/userstop/userstop.php vector might overlap CVE-2006-4488, although it is for a slightly different product from the same vendor. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1501 - http://www.securityfocus.com/archive/1/444825/100/0/threaded - http://www.securityfocus.com/bid/19787 - http://securitytracker.com/id?1016773 - http://advisories.echo.or.id/adv/adv46-matdhule-2006.txt
CVE ID: CVE-2006-4545 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, and (5) libs/profile/proccess.php. NOTE: CVE disputes this claim, as the _SERVER array and the _SERVER[DOCUMENT_ROOT] index are controlled by PHP and cannot be manipulated by an attacker Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/
anipulated by an attacker Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444897/100/0/threaded - http://www.osvdb.org/29872 - http://www.securityfocus.com/archive/1/445006/100/100/threaded - http://www.attrition.org/pipermail/vim/2006-September/001012.html - http://www.securityfocus.com/bid/19754
CVE ID: CVE-2006-4546 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on the server, to add new administrators to any list via a modified MEMBERS_.List_ parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21698 - http://securitytracker.com/id?1016771 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html - http://securityreason.com/securityalert/1502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28679
8/0817.html - http://securityreason.com/securityalert/1502 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28679 - http://www.securityfocus.com/archive/1/444844/100/0/threaded
CVE ID: CVE-2006-4547 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user with a ' (single quote) character in the name, which reveals the details of the underlying SQL query, possibly because of a forced SQL error or SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016771 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0817.html - http://securityreason.com/securityalert/1502 - http://www.securityfocus.com/a
rchives/fulldisclosure/2006-08/0817.html - http://securityreason.com/securityalert/1502 - http://www.securityfocus.com/archive/1/444844/100/0/threaded
CVE ID: CVE-2006-4548 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary PHP code via the tinyMCE_imglib_include image/jpeg parameter in e107_handlers/tiny_mce/plugins/ibrowser/ibrowser.php, as demonstrated by a multipart/form-data request. NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if
hat this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in e107. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/e107_075_xpl.html - http://www.securityfocus.com/archive/1/444644/100/0/threaded - http://securityreason.com/securityalert/1497
CVE ID: CVE-2006-4549 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.442Z Vendors: n/a Products: n/a Problem Types: n/a Description: CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource function. NOTE: this issue is not a vulnerability in standard distributions, but could be an issue if the source has been modified. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444805/100/0/threaded - http://www.securityfocus.com/bid/19779 - http://secunia.com/advisories/22000
CVE ID: CVE-2006-4550 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files via .. (dot dot) sequences in the format parameter with a leading ".", which bypasses a security check. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444805/100/0/threaded - http://www.securityfocus.com/bid/19779 - http://secunia.com/advisories/22000
CVE ID: CVE-2006-4551 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via (1) the file specified as the value of the format parameter, and possibly (2) the RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444805/100/0/threaded - http://www.securityfocus.com/bid/19779 - http://secunia.com/advisories/22000
CVE ID: CVE-2006-4552 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary web script or HTML via the RSS feed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444805/100/0/threaded - http://www.securityfocus.com/bid/19779 - http://secunia.com/advisories/22000
CVE ID: CVE-2006-4553 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1491 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28596 - http://www.securityfocus.com/archive/1/444425/100/0/threaded - http://www.securityfocus.com/bid/19725 - http://secunia.com/adviso
w.securityfocus.com/archive/1/444425/100/0/threaded - http://www.securityfocus.com/bid/19725 - http://secunia.com/advisories/21636
CVE ID: CVE-2006-4554 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus before 5.0.1.28, as used in products including (1) Tumbleweed EMF, (2) VCOM/Ontrack PowerDesk Pro, (3) Canyon Drag and Zip, (4) Canyon Power File, and (5) Canyon Power File Gold, allow context-dependent attackers to execute arbitrary code via an inconsistent size parameter in a ZOO file header. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444881/100/0/thre
dditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444881/100/0/threaded - http://www.becubed.com/downloads/compfix.txt - http://secunia.com/advisories/21750 - http://www.vupen.com/english/advisories/2006/3438 - http://www.vupen.com/english/advisories/2006/3437 - http://secunia.com/advisories/21718 - http://www.vupen.com/english/advisories/2006/3428 - http://www.vupen.com/english/advisories/2006/3429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28693 - http://secunia.com/advisories/21720 - http://secunia.com/advisories/21751 - http://www.vupen.com/english/advisories/2006/3439 - http://www.securityfocus.com/bid/19796 - http://secur
sories/21751 - http://www.vupen.com/english/advisories/2006/3439 - http://www.securityfocus.com/bid/19796 - http://securityreason.com/securityalert/1498 - http://www.mnin.org/advisories/2006_cp5_tweed.pdf - http://secunia.com/advisories/21714
CVE ID: CVE-2006-4555 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors involving an HTML document that references the CLSID of the control. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/649289 - http://secunia.com/advisories/21743 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28735 - http://www.vupen.com/english/advisories/2006/3434 - http://securitytracker.com/id?1016781 - http://www.securityfocus
5 - http://www.vupen.com/english/advisories/2006/3434 - http://securitytracker.com/id?1016781 - http://www.securityfocus.com/bid/19810
CVE ID: CVE-2006-4556 State: PUBLISHED Published: 2006-09-06T00:00:00 Last Updated: 2024-08-07T19:14:47.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has stated that the product distribution does not include an index.php file. Also, this might be related to CVE-2006-4242 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444216/100/100/threaded - http://www.securityfocus.com/archive/1/443674/100/100