Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1007 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:15.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) dir and (2) page_id parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24974 - http://www.vupen.com/english/advisories/2006/0779 - http://www.securityfocus.com/archive/1/427222/100/0/threaded - http://secunia.com/advisories/19068 - http://biyosecurity.be/bugs/n8cms.txt - http://www.securityfocus.com/bid/16858
CVE ID: CVE-2006-1008 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:14.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) dir and (2) page_id parameter to (a) index.php and (3) userid parameter to (b) mailto.php. NOTE: it is possible that issues 1 and 2 are resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24975 - http://www.vupen.com/english/advisories/2006/07
alert/562 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24975 - http://www.vupen.com/english/advisories/2006/0779 - http://www.securityfocus.com/archive/1/427222/100/0/threaded - http://secunia.com/advisories/19068 - http://biyosecurity.be/bugs/n8cms.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25126 - http://www.securityfocus.com/bid/16858
CVE ID: CVE-2006-1009 State: PUBLISHED Published: 2006-03-06T20:00:00 Last Updated: 2024-08-07T16:56:14.507Z Vendors: n/a Products: n/a Problem Types: n/a Description: M4 Project enigma-suite before 0.73.3 (Windows) has a default password of "nominal" for the "enigma-client" account, which allows local users to gain access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24993 - http://www.bytereef.org/m4-project-blog.html - http://www.vupen.com/english/advisories/2006/0787 - http://www.osvdb.org/23572
CVE ID: CVE-2006-1010 State: PUBLISHED Published: 2006-03-06T21:00:00 Last Updated: 2024-08-07T16:56:15.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19785 - http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?r1=1.80&r2=1.81 - http://www.debian.org/security/2006/dsa-1001 - http://www.vupen.com/english/advisories/2006/0760 - http
1=1.80&r2=1.81 - http://www.debian.org/security/2006/dsa-1001 - http://www.vupen.com/english/advisories/2006/0760 - http://www.securityfocus.com/bid/16883 - http://secunia.com/advisories/19044 - http://aluigi.altervista.org/poc/crossfirebof.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/24932 - http://www.gentoo.org/security/en/glsa/glsa-200604-11.xml - http://www.osvdb.org/23549 - http://secunia.com/advisories/19194
CVE ID: CVE-2006-1011 State: PUBLISHED Published: 2006-03-06T21:00:00 Last Updated: 2024-08-07T16:56:14.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: LetterMerger 1.2 stores user information in Access database files with insecure permissions, which allows local users to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16917 - http://www.osvdb.org/23599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25020 - http://secunia.com/advisories/19074
CVE ID: CVE-2006-1012 State: PUBLISHED Published: 2006-03-06T21:00:00 Last Updated: 2024-08-07T16:56:14.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WordPress 1.5.2, and possibly other versions before 2.0, allows remote attackers to execute arbitrary SQL commands via the User-Agent field in an HTTP header for a comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25321 - http://www.gentoo.org/security/en/glsa/glsa-200603-01.xml - http://secunia.com/advisories/19123 - http://secunia.com/advisories/19109
CVE ID: CVE-2006-1013 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426498/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25220 - http://www.securityfocus.com/bid/16905
CVE ID: CVE-2006-1014 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:14.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mb_send_mail function, allows context-dependent attackers to read and create arbitrary files by providing extra -C and -X arguments to sendmail. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE. Additional Analyst Notes: - CVE Program Conta
of a particular instance; if so, then this should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0772 - http://www.osvdb.org/23534 - http://www.securityfocus.com/bid/16878 - http://www.securityfocus.com/archive/1/426342/100/0/threaded - http://secunia.com/advisories/19979 - http://www.novell.com/linux/security/advisories/05-05-2006.html - http://secunia.com/advisories/18694
CVE ID: CVE-2006-1015 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accepting remote input for the additional_parameters argument to the mail function, allows remote attackers to read and create arbitrary files via the sendmail -C and -X arguments. NOTE: it could be argued that this is a class of technology-specific vulnerability, instead of a particular instance; if so, then this should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://
if so, then this should not be included in CVE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426497/100/0/threaded - http://www.securityfocus.com/bid/16878 - http://secunia.com/advisories/19979 - http://securityreason.com/securityalert/517 - http://www.novell.com/linux/security/advisories/05-05-2006.html
CVE ID: CVE-2006-1016 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Windows XP before SP1, allows remote attackers to execute arbitrary code via JavaScript that calls IsComponentInstalled with a long first argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24923 - http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled - http://www.metasplo
erabilities/24923 - http://metasploit.com/projects/Framework/exploits.html#ie_iscomponentinstalled - http://www.metasploit.com/projects/Framework/modules/exploits/ie_iscomponentinstalled.pm
CVE ID: CVE-2006-1017 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: The c-client library 2000, 2001, or 2004 for PHP before 4.4.4 and 5.x before 5.1.5 do not check the (1) safe_mode or (2) open_basedir functions, and when used in applications that accept user-controlled input for the mailbox argument to the imap_open function, allow remote attackers to obtain access to an IMAP stream data structure and conduct unauthorized IMAP actions. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0772 - http://www.php.net/release_5_1_5.php - htt
Container: References: - http://www.vupen.com/english/advisories/2006/0772 - http://www.php.net/release_5_1_5.php - http://www.osvdb.org/23535 - http://secunia.com/advisories/21050 - http://securityreason.com/securityalert/516 - http://secunia.com/advisories/21546 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://bugs.php.net/bug.php?id=37265 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24964 - http://www.php.net/ChangeLog-5.php#5.1.5 - http://www.securityfocus.com/archive/1/426339/100/0/threaded - http://secunia.com/advisories/18694
CVE ID: CVE-2006-1018 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a diwan view action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23827 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25163 - http://www.securityfocus.com/bid/16909 - http://www.securityfocus.com/archive/1/426622/100/0/threaded
CVE ID: CVE-2006-1019 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:14.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in fce.php in UKiBoard 3.0.1 allows remote attackers to inject arbitrary web script or HTML via a BBCode url tag when using the show_post function. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, some of which reference a source URL that appears to be for an unrelated issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16912 - https://exchange.xforce.ibmcloud.com/vulne
CVE Program Container: References: - http://www.securityfocus.com/bid/16912 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24990
CVE ID: CVE-2006-1020 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:14.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in forumlib.php in Johnny_Vegas Vegas Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the postid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17079 - http://secunia.com/advisories/19219 - http://securityreason.com/securityalert/574 - http://www.vupen.com/english/advisories/2006/0790 - http://evuln.com/vulns/90/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25167 - http://www.securityfocus.com
ln.com/vulns/90/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25167 - http://www.securityfocus.com/archive/1/427470/100/0/threaded
CVE ID: CVE-2006-1021 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0781 - http://www.securityfocus.com/bid/16885 - http://www.securityfocus.com/archive/1/426363/100/0/threaded - http://secunia.com/advisories/19055 - http://yns.zaxaz.com/2006/02/28/pehepe
focus.com/archive/1/426363/100/0/threaded - http://secunia.com/advisories/19055 - http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/
CVE ID: CVE-2006-1022 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uye_klasor parameter, along with a misafir[] parameter that is set to UYE_SEVIYE. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0781 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24970 - http://securityreason.com/securityalert/515 - http://www.securityf
/exchange.xforce.ibmcloud.com/vulnerabilities/24970 - http://securityreason.com/securityalert/515 - http://www.securityfocus.com/bid/16887 - http://www.securityfocus.com/archive/1/426363/100/0/threaded - http://secunia.com/advisories/19055 - http://yns.zaxaz.com/2006/02/28/pehepe-membership-management-system-multiple-vulnerabilities/ - http://www.osvdb.org/23567
CVE ID: CVE-2006-1023 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in HP System Management Homepage (SMH) 2.0.0 through 2.1.4 on Windows allows remote attackers to access certain files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19059 - http://securitytracker.com/id?1015692 - http://www.vupen.com/english/advisories/2006/0769 - http://www.securityfocus.com/archive/1/426345/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24996 - http://www.securityfocus.com/bid/168
26345/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24996 - http://www.securityfocus.com/bid/16876 - http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00601530
CVE ID: CVE-2006-1024 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MgrLogin.asp in Addsoft StoreBot 2005 Professional allows remote attackers to execute arbitrary SQL commands via the Pwd parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16897 - http://www.osvdb.org/23575 - http://www.vupen.com/english/advisories/2006/0784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24987 - http:/
http://www.vupen.com/english/advisories/2006/0784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24987 - http://secunia.com/advisories/19019
CVE ID: CVE-2006-1025 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:14.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manage.asp in Addsoft StoreBot 2002 Standard allows remote attackers to inject arbitrary web script or HTML via the ShipMethod parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0785 - http://www.osvdb.org/23574 - http://www.securityfocus.com/bid/16898 - http://secunia.com/advisories/19060 - https://ex
- http://www.osvdb.org/23574 - http://www.securityfocus.com/bid/16898 - http://secunia.com/advisories/19060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24986
CVE ID: CVE-2006-1026 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: JFacets before 0.2 allows remote attackers to gain privileges as any account via a GET request with a modified account profileID. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1439037&group_id=154666&atid=792697 - http://www.vupen.com/english/advisories/2006/0767 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24958 - http://sourceforge.net/project/shownotes.php?group_id=154666&release_id=396824 - http://secunia.com/advisories/19031
CVE ID: CVE-2006-1027 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" (slash) in the feed parameter to index.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23815 - http://www.securityfocus.com/archive/1/426538/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25028 - http://www.joomla.org/content/view/938/78/ - http://securityreason.com/securityalert/527
CVE ID: CVE-2006-1028 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to cause a denial of service (stressed file cache) by creating many files via filenames in the feed parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426538/100/0/threaded - http://secunia.com/advisories/19105 - http://www.osvdb.org/23817 - http://www.joomla.org/content/view/938/78/ - http://securityreason.com/securityalert/527
CVE ID: CVE-2006-1029 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.360Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cross-site scripting (XSS) countermeasures in class.inputfilter.php in Joomla! 1.0.7 allow remote attackers to cause a denial of service via a crafted mosmsg parameter to index.php with a malformed sequence of multiple tags, as demonstrated using "<<>AAA<><>", possibly due to nested or empty tags. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426538/100/0/threaded - http://www.osvdb.org/23816 - http://www.joomla.org/content/view/938/78/
CVE ID: CVE-2006-1030 State: PUBLISHED Published: 2006-03-07T00:00:00 Last Updated: 2024-08-07T16:56:15.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mod_templatechooser in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via an unspecified attack vector that reveals the path. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0818 - http://secunia.com/advisories/19105 - http://www.osvdb.org/23818 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25028 - http://www.joomla.org/content/view/938/78/
CVE ID: CVE-2006-1031 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SG_HOME parameter. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/igenus_202_xpl_pl.html - http://www.osvdb.org/23530 - http://www.vupen.com/english/advisories/2006/0753 - http://secunia.com/advisories/19036 - http://www.securityfocus.com/bid/16829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24935
CVE ID: CVE-2006-1032 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:14.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, exoops, and possibly other programs, allows remote attackers to execute arbitrary PHP code via the base64 tag. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015691 - http://securityreason.com/securityalert/502 - http://www.securityfocus.com/archive/1/426193 - http://www.vupen.com/english/advisories/2006/0745 - http://www.gulftech.org/?node=research&article_id=00
hive/1/426193 - http://www.vupen.com/english/advisories/2006/0745 - http://www.gulftech.org/?node=research&article_id=00105-02262006 - http://secunia.com/advisories/19058 - http://secunia.com/advisories/19028 - http://www.securityfocus.com/bid/16833
CVE ID: CVE-2006-1033 State: PUBLISHED Published: 2006-03-07T11:00:00 Last Updated: 2024-08-07T16:56:15.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject arbitrary web script or HTML via (1) uname, (2) error, (3) profile or (4) the username filed parameter to the (a) Your_Account module, (5) catid, (6) sid, (7) Story Text or (8) Extended text text fields in the (b) News module, (9) month, (10) year or (11) sa parameter to the (c) Stories_Archive module, (12) show, (13) cid, (14) ratetype, or (15) orderby parameter to the (d) Web_Links module, (16) op, or (17) pol
module, (12) show, (13) cid, (14) ratetype, or (15) orderby parameter to the (d) Web_Links module, (16) op, or (17) pollid parameter to the (e) Surveys module, (18) c parameter to the (f) Downloads module, (19) meta, or (20) album parameter to the (g) coppermine module, or the search box in the (21) Search, (22) Stories_Archive, (23) Downloads, and (24) Topics module. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24843 - http://securitytracker.com/id?1015661 - http://www.vupen.com/english/advisories/2006/0688 - http://lostmon.blogspot.com/2006/02/multiple-cross-site-scripting-in.
ttp://www.vupen.com/english/advisories/2006/0688 - http://lostmon.blogspot.com/2006/02/multiple-cross-site-scripting-in.html - http://secunia.com/advisories/18940
CVE ID: CVE-2006-1034 State: PUBLISHED Published: 2006-03-07T11:00:00Z Last Updated: 2024-09-16T17:53:17.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php and possibly (2) galerie_onfly.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. The second vector might not be XSS. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16843