Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5510 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote attackers to include arbitrary local files via ".." sequences in the Language cookie, as demonstrated by uploading a .gif file that contains PHP code. Additional Analyst Notes: - CVE Program Container: References: - http://www.rahim.webd.pl/exploity/Exploits/104.txt - http://www.vupen.com/english/advisories/2006/4128 - http://secunia.com/advisories/22504 - http://www.securityfocus.com/bid/20665 - https://www.exploit-db.com/exploits/2
8 - http://secunia.com/advisories/22504 - http://www.securityfocus.com/bid/20665 - https://www.exploit-db.com/exploits/2598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29714 - http://www.osvdb.org/29899
CVE ID: CVE-2006-5511 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.969Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when register_globals is enabled, allows remote attackers to inject arbitrary web script, HTML, or PHP via the contents parameter, whose value is prepended to the file specified by the forum parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29711 - http://www.securityfocus.com/bid/20679 - http://attrition.org/pipermail/vim/2006-October/001095.html - https://www.exploi
ttp://www.securityfocus.com/bid/20679 - http://attrition.org/pipermail/vim/2006-October/001095.html - https://www.exploit-db.com/exploits/2616
CVE ID: CVE-2006-5512 State: PUBLISHED Published: 2006-10-25T22:00:00 Last Updated: 2024-08-07T19:55:52.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449467/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29753 - http://securityreason.com/securityalert/1773 - http://www.securityfocus.com/bid/20682 - http://attrition.org/pipermail/vim/2006-November/001106.html
CVE ID: CVE-2006-5513 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22502 - http://sourceforge.net/project/shownotes.php?release_id=457195 - http://www.vupen.com/english/advisories/2006/4151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29771 - http://www.securityfocus.com/bid/20671
CVE ID: CVE-2006-5514 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and earlier allows remote attackers to execute arbitrary SQL commands via the qzid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29712 - https://www.exploit-db.com/exploits/2604
CVE ID: CVE-2006-5515 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before 2.0.8-pr1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to injected data that is stored by a delivery script and displayed by the admin interface. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29766 - http://www.vupen.com/english/advisories/2006/4147 - http://secunia.com/advisories/22526 - http://www.vupen.com/e
29766 - http://www.vupen.com/english/advisories/2006/4147 - http://secunia.com/advisories/22526 - http://www.vupen.com/english/advisories/2006/4148 - http://www.securityfocus.com/archive/1/449484/100/0/threaded - http://sourceforge.net/project/shownotes.php?release_id=457775&group_id=36679 - http://sourceforge.net/project/shownotes.php?release_id=457774&group_id=11386 - http://securityreason.com/securityalert/1777 - http://secunia.com/advisories/22529
CVE ID: CVE-2006-5516 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before 0.4.4 allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) email parameters to wakka.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29761 - http://securityreason.com/securityalert/1776 - http://www.vupen.com/english/advisories/2006/4159 - http://secunia.com/advisories/22558 - http://www.securityfocus.com/archive/1/449518/10
om/english/advisories/2006/4159 - http://secunia.com/advisories/22558 - http://www.securityfocus.com/archive/1/449518/100/0/threaded - http://zone14.free.fr/advisories/6/ - http://www.securityfocus.com/bid/20688 - http://cvs.gna.org/cvsweb/wikini/actions/usersettings.php.diff?r1=1.14.2.1%3Br2=1.14.2.2%3Bcvsroot=wikini%3Bf=h - http://securitytracker.com/id?1017116 - http://www.wikini.net/wakka.php?wiki=WikiNiChangeLog044
CVE ID: CVE-2006-5517 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing Application (OMFA) allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) editmeetings/session.php, (2) email/session.php, (3) entityproperties/session.php, or (4) inc/mail.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2609 - http://www.osvdb.org/29975 - http://www.osvdb.org/29977 - http://www.securityfocus.com/bid/20656 - http://secunia
2609 - http://www.osvdb.org/29975 - http://www.osvdb.org/29977 - http://www.securityfocus.com/bid/20656 - http://secunia.com/advisories/22503 - http://securityreason.com/securityalert/1775 - http://www.vupen.com/english/advisories/2006/4144 - http://www.osvdb.org/29978 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29773 - http://www.osvdb.org/29976 - http://www.securityfocus.com/archive/1/449396/100/0/threaded
CVE ID: CVE-2006-5518 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate allow remote attackers to execute arbitrary PHP code via a URL in the PROJECT_ROOT parameter to (1) xml2rss.php, (2) config_local.php, (3) rssonate.php, and (4) sql2xml.php in Src/getFeed/inc/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2605 - http://www.vupen.com/english/advisories/2006/4146 - http://www.securityfocus.com/bid/20654 - http://secunia.com/advisories/22496 - ht
pen.com/english/advisories/2006/4146 - http://www.securityfocus.com/bid/20654 - http://secunia.com/advisories/22496 - http://www.osvdb.org/29935 - http://www.osvdb.org/29937 - http://www.osvdb.org/29938 - http://www.osvdb.org/29936 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29703
CVE ID: CVE-2006-5519 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather 1.8.1 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20667 - http://www.vupen.com/english/advisories/2006/4150 - https://www.exploit-db.com/exploits/2613 - http://secunia.com/advisories/22521 - https://exchange.xforce.ibmcloud.com/vulnerabilities
xploit-db.com/exploits/2613 - http://secunia.com/advisories/22521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29697
CVE ID: CVE-2006-5520 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1778 - http://www.securityfocus.com/archive/1/449295/100/0/threaded - http://www.securityfocus.com/bid/20649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29687
CVE ID: CVE-2006-5521 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29698 - http://www.securityfocus.com/bid/20666 - http://secunia.com/advisories/22522 - http://www.vupen.com/english/advisories/2006/4185 - https://www.exploit-db.com/exploits/2614 - https://www.exploit-db.com/exploits/4755
CVE ID: CVE-2006-5522 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the config parameter in (1) main.php or (2) user/account/main.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29709 - https://www.exploit-db.com/exploits/2607
CVE ID: CVE-2006-5523 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:53.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ezt_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2620 - http://www.securityfocus.com/bid/20669 - http://arfis.wordpress.com/2007/09/14/rfi-02-ez-ticket/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29702
CVE ID: CVE-2006-5524 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers to inject arbitrary web script or HTML via the p parameter. NOTE: This issue might overlap CVE-2006-5321. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20577/info - http://www.securityfocus.com/archive/1/448923/100/100/threaded - http://secunia.com/advisories/22431 - http://securityreason.com/securityalert/1779 - http://securitytracker.com/alerts/2006/Oct/1017102.html - http://www.
1 - http://securityreason.com/securityalert/1779 - http://securitytracker.com/alerts/2006/Oct/1017102.html - http://www.vupen.com/english/advisories/2006/4084
CVE ID: CVE-2006-5525 State: PUBLISHED Published: 2006-10-26T16:00:00 Last Updated: 2024-08-07T19:55:52.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" sequences, which are not rejected by the protection mechanism, as demonstrated by a SQL injection via the eid parameter in a search action in the Encyclopedia module in modules.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29705 - http
ferences: - https://www.exploit-db.com/exploits/2617 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29705 - http://www.neosecurityteam.net/index.php?action=advisories&id=27 - http://www.securityfocus.com/bid/20674 - http://www.vupen.com/english/advisories/2006/4149 - http://secunia.com/advisories/22511
CVE ID: CVE-2006-5526 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 2021.4.40 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the foing_root_path parameter in (a) faq.php, (b) index.php, (c) list.php, (d) login.php, (e) playlist.php, (f) song.php, (g) gen_m3u.php, (h) view_artist.php, (i) view_song.php, (j) flash/set_na.php, (k) flash/initialise.php, (l) flash/get_song.php, (m) includes/common.php, (n) admin/nav.php, (o) admin/main.php, (p) admin/l
lash/initialise.php, (l) flash/get_song.php, (m) includes/common.php, (n) admin/nav.php, (o) admin/main.php, (p) admin/list_artists.php, (q) admin/index.php, (r) admin/genres.php, (s) admin/edit_artist.php, (t) admin/edit_album.php, (u) admin/config.php, and (v) admin/admin_status.php in player/, different vectors than CVE-2006-3045. NOTE: CVE analysis as of 20061026 indicates that files in the admin/ and flash/ directories define foing_root_path before use. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4165 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29718 - http://www.osvdb.org/30035 - http://secunia.com/advisories/
https://exchange.xforce.ibmcloud.com/vulnerabilities/29718 - http://www.osvdb.org/30035 - http://secunia.com/advisories/22499 - https://www.exploit-db.com/exploits/2621
CVE ID: CVE-2006-5527 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:52.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the sys_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017117 - http://secunia.com/advisories/22428 - http://securityreason.com/securityalert/1785 - http://www.vupen.com/english/advisories/2006/4179 - http://www.securityfocus.com/bid/20703 - https://www.exploit-db.com/exploits/2630 - https://exchange.xfor
es/2006/4179 - http://www.securityfocus.com/bid/20703 - https://www.exploit-db.com/exploits/2630 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29755 - http://www.securityfocus.com/archive/1/449578/100/0/threaded
CVE ID: CVE-2006-5528 State: PUBLISHED Published: 2006-10-26T17:00:00Z Last Updated: 2024-09-16T19:01:04.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in mod.php in SchoolAlumni Portal 2.26 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the mod parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017105 - http://www.securityfocus.com/bid/20673
CVE ID: CVE-2006-5529 State: PUBLISHED Published: 2006-10-26T17:00:00Z Last Updated: 2024-09-16T19:57:36.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in smumdadotcom_ascyb_alumni/mod.php in SchoolAlumni Portal 2.26 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the katalog module. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017105 - http://www.securityfocus.com/bid/20673
CVE ID: CVE-2006-5530 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:52.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) admin/index.php, (2) admin/pwlost.php, and unspecified other files. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20714 - http://secunia.com/advisories/22535 - http://www.vupen.com/english/a
erences: - http://www.securityfocus.com/bid/20714 - http://secunia.com/advisories/22535 - http://www.vupen.com/english/advisories/2006/4162 - http://www.boesch-it.de/sw/php-scripts/simpnews/english/index.php
CVE ID: CVE-2006-5531 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:52.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[path] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2631 - http://www.vupen.com/english/advisories/2006/4187 - http://secunia.com/advisories/22554 - http://www.securityfocus.com/bid/20710 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29756
CVE ID: CVE-2006-5532 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:52.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rmgs/images.php in RMSOFT Gallery System 2.0 allows remote attackers to inject arbitrary web script or HTML via the kw parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20676 - http://www.vupen.com/english/advisories/2006/4161 - http://securitytracker.com/id?1017112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29769 - http://www.securityfocus.com
curitytracker.com/id?1017112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29769 - http://www.securityfocus.com/archive/1/449458/100/0/threaded - http://secunia.com/advisories/22426
CVE ID: CVE-2006-5533 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:52.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AROUNDMe 0.6.9, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter in template/barnraiser_01/pol_view.tpl.php and other unspecified PHP scripts, a different vector than CVE-2006-5401. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1786 - http://securitytracker.com/id?1017106 - http://marc.info/?l=full-disclosure&m=116154
rityreason.com/securityalert/1786 - http://securitytracker.com/id?1017106 - http://marc.info/?l=full-disclosure&m=116154841209515&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29743 - http://www.securityfocus.com/archive/1/449476/100/0/threaded
CVE ID: CVE-2006-5534 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.htm in Zwahlen Online Shop Freeware 5.2.2.50, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) cat, (2) Kat, (3) id, or (4) no parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4160 - http://www.osvdb.org/30016 - http://secunia.com/advisories/22571 - http://attrition.org/pipermail
advisories/2006/4160 - http://www.osvdb.org/30016 - http://secunia.com/advisories/22571 - http://attrition.org/pipermail/vim/2006-November/001106.html
CVE ID: CVE-2006-5535 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WebHostManager (WHM) 10.8.0 cPanel 10.9.0 R50 allow remote attackers to inject arbitrary web script or HTML via the (1) theme parameter to scripts/dosetmytheme and the (2) template parameter to scripts2/editzonetemplate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20683 - http://securityreason.com/securityalert/1780 - http://secunia.com/advisories/22555 - http://www.securityfocus.com/archive/1/449472/100/0/threaded - ht
rityalert/1780 - http://secunia.com/advisories/22555 - http://www.securityfocus.com/archive/1/449472/100/0/threaded - http://www.vupen.com/english/advisories/2006/4190 - http://changelog.cpanel.net/
CVE ID: CVE-2006-5536 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. (dot dot) in the getpage parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4191 - http://securityreason.com/securityalert/1781 - http://www.securityfocus.com/bid/20689 - http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.
w.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html - http://www.securityfocus.com/archive/1/449486/100/0/threaded - http://secunia.com/advisories/22524
CVE ID: CVE-2006-5537 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4191 - http://securityreason.com/securityalert/1781 - http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-li
alert/1781 - http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html - http://www.securityfocus.com/archive/1/449486/100/0/threaded - http://secunia.com/advisories/22524