Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2189 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Servous sBLOG 0.7.2 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. NOTE: this issue can be used to trigger path disclosure. In addition, it might be primary to vector 1 in CVE-2006-1135. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17782 - http://securityreason.com/securityalert/836 - http://www.subjectzero.net/research/sblog.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/26213 - h
ert/836 - http://www.subjectzero.net/research/sblog.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/26213 - http://www.securityfocus.com/archive/1/432724/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26212 - http://www.osvdb.org/25612
CVE ID: CVE-2006-2190 State: PUBLISHED Published: 2006-05-04T10:00:00 Last Updated: 2024-08-07T17:43:27.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ow-shared.pl in OpenWebMail (OWM) 2.51 and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionid parameter in (1) openwebmail-send.pl, (2) openwebmail-advsearch.pl, (3) openwebmail-folder.pl, (4) openwebmail-prefs.pl, (5) openwebmail-abook.pl, (6) openwebmail-read.pl, (7) openwebmail-cal.pl, and (8) openwebmail-webdisk.pl. NOTE: the openwebmail-main.pl vector is already covered by CVE-2005-2863. Additional Analyst Notes: - CVE Program Container: Ref
e openwebmail-main.pl vector is already covered by CVE-2005-2863. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/04/open-webmail-251-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26105 - http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/log/trunk/?rev=233&limit=33 - http://secunia.com/advisories/16734 - http://openwebmail.acatysmoof.com/archive/html/owm-announce/owm-announce.200605/msg00000.html - http://openwebmail.acatysmoof.com/dev/svn/index.pl/openwebmail/diff/trunk/src/cgi-bin/openwebmail/shares/ow-shared.pl?rev1=232%3Brev2=233
CVE ID: CVE-2006-2191 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T17:43:27.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable. Additional Analyst Notes: - CVE Program Container: References: - http://mail.python.org/pipermail/mailman-announce/2006-September/000087.html - http://secunia.com/advisories/22639 - http://people.debian.org/~terpstra/message/20060906.155339.0c0732a4.en.html - http://www.novell.com/linux/security/advisories/2006_25_sr.html - h
~terpstra/message/20060906.155339.0c0732a4.en.html - http://www.novell.com/linux/security/advisories/2006_25_sr.html - http://secunia.com/advisories/21732
CVE ID: CVE-2006-2192 State: REJECTED Published: N/A Last Updated: 2025-06-19T15:26:27.957Z Description: No description available.
CVE ID: CVE-2006-2193 State: PUBLISHED Published: 2006-06-08T19:00:00 Last Updated: 2024-08-07T17:43:27.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the t2p_write_pdf_string function in tiff2pdf in libtiff 3.8.2 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a TIFF file with a DocumentName tag that contains UTF-8 characters, which triggers the overflow when a character is sign extended to an integer that produces more digits than expected in an sprintf call. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3486 - http://secunia.com/advi
otes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/3486 - http://secunia.com/advisories/31670 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:102 - http://www.vupen.com/english/advisories/2006/2197 - http://secunia.com/advisories/20520 - http://secunia.com/advisories/20766 - http://secunia.com/advisories/20488 - http://security.gentoo.org/glsa/glsa-200607-03.xml - http://secunia.com/advisories/20501 - http://secunia.com/advisories/27222 - http://www.vupen.com/english/advisories/2007/4034 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9788 - h
g/show_bug.cgi?id=1196 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9788 - http://www.debian.org/security/2006/dsa-1091 - http://www.redhat.com/support/errata/RHSA-2008-0848.html - http://secunia.com/advisories/27181 - http://secunia.com/advisories/20693 - http://lists.suse.com/archive/suse-security-announce/2006-Jun/0008.html - http://secunia.com/advisories/27832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26991 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201331-1 - http://secunia.com/advisories/21002 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355 - http://www.securityfocus.com/bid/18331 - https://usn.ubuntu.co
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=370355 - http://www.securityfocus.com/bid/18331 - https://usn.ubuntu.com/289-1/ - http://sunsolve.sun.com/search/document.do?assetkey=1-26-103160-1
CVE ID: CVE-2006-2194 State: PUBLISHED Published: 2006-07-05T18:00:00 Last Updated: 2024-08-07T17:43:28.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: The winbind plugin in pppd for ppp 2.4.4 and earlier does not check the return code from the setuid function call, which might allow local users to gain privileges by causing setuid to fail, such as exceeding PAM limits for the maximum number of user processes, which prevents the winbind NTLM authentication helper from dropping privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:119 - http://www.osvdb.org/26994 - http://www.debian.org/security
//www.mandriva.com/security/advisories?name=MDKSA-2006:119 - http://www.osvdb.org/26994 - http://www.debian.org/security/2006/dsa-1106 - http://secunia.com/advisories/20963 - http://secunia.com/advisories/20987 - http://secunia.com/advisories/20996 - http://secunia.com/advisories/20967 - http://www.securityfocus.com/bid/18849 - http://www.ubuntu.com/usn/usn-310-1
CVE ID: CVE-2006-2195 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T17:43:28.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in horde 3 (horde3) before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) templates/problem/problem.inc and (2) test.php. Additional Analyst Notes: - CVE Program Container: References: - http://cvs.horde.org/diff.php?f=horde%2Ftest.php&r1=1.145&r2=1.146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27168 - http://secunia.com/advisories/20750 - http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format
ories/20750 - http://overlays.gentoo.org/dev/chtekk/browser/horde/www-apps/horde/files/horde-3.1.1-xss.diff?rev=4&format=txt - http://cvs.horde.org/diff.php?r1=2.25&r2=2.26&f=horde%2Ftemplates%2Fproblem%2Fproblem.inc - http://securitytracker.com/id?1016310 - http://www.debian.org/security/2006/dsa-1098 - http://secunia.com/advisories/20672 - http://www.debian.org/security/2006/dsa-1099 - http://secunia.com/advisories/20849 - http://www.osvdb.org/26514 - http://bugs.gentoo.org/show_bug.cgi?id=136830 - http://secunia.com/advisories/20661 - http://www.osvdb.org/26513 - http://www.novell.com/linux/security/advisories/2006_16_sr.html - http://www.vupen.com/english/advisories/2006/2356 - http://ww
www.novell.com/linux/security/advisories/2006_16_sr.html - http://www.vupen.com/english/advisories/2006/2356 - http://www.gentoo.org/security/en/glsa/glsa-200606-28.xml - http://secunia.com/advisories/20960 - http://www.securityfocus.com/bid/18436
CVE ID: CVE-2006-2196 State: PUBLISHED Published: 2006-06-26T10:00:00 Last Updated: 2024-08-07T17:43:27.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in pinball 0.3.1 allows local users to gain privileges via unknown attack vectors that cause pinball to load plugins from an attacker-controlled directory while operating at raised privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20834 - http://www.osvdb.org/26829 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27420 - http://www.debian.org/security/2006/dsa-1102 - http://secunia.com/advisories/20778 - http://www.vupen.com/english/adviso
http://www.debian.org/security/2006/dsa-1102 - http://secunia.com/advisories/20778 - http://www.vupen.com/english/advisories/2006/2535
CVE ID: CVE-2006-2197 State: PUBLISHED Published: 2006-06-15T10:00:00 Last Updated: 2024-08-07T17:43:28.333Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in wv2 before 0.2.3 might allow context-dependent attackers to execute arbitrary code via a crafted Microsoft Word document. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20899 - http://www.vupen.com/english/advisories/2006/2350 - http://secunia.com/advisories/20844 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27184 - http://secunia.com/advisories/20689 - http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml - http://secunia.com/advisories/20826 -
om/advisories/20689 - http://www.gentoo.org/security/en/glsa/glsa-200606-24.xml - http://secunia.com/advisories/20826 - http://secunia.com/advisories/20665 - https://usn.ubuntu.com/300-1/ - http://secunia.com/advisories/20688 - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:109 - http://www.securityfocus.com/bid/18437 - http://sourceforge.net/project/shownotes.php?group_id=10501&release_id=424094 - http://www.debian.org/security/2006/dsa-1100 - http://securitytracker.com/id?1016313
CVE ID: CVE-2006-2198 State: PUBLISHED Published: 2006-06-30T18:00:00 Last Updated: 2024-08-07T17:43:27.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to conduct unauthorized activities via an OpenOffice document with a malicious BASIC macro, which is executed without prompting the user. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1104 - http://www.ubuntu.com/usn/usn-313-1 - https://issues.rpath.com/browse/RPL-475 - http://www.openoffice.org/security/CVE-2006-2199.html - http://secunia.com/advisories/20893 - http
.com/browse/RPL-475 - http://www.openoffice.org/security/CVE-2006-2199.html - http://secunia.com/advisories/20893 - http://security.gentoo.org/glsa/glsa-200607-12.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/27564 - http://www.vupen.com/english/advisories/2006/2621 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102490-1 - http://secunia.com/advisories/22129 - http://www.securityfocus.com/archive/1/447035/100/0/threaded - http://secunia.com/advisories/20975 - http://secunia.com/advisories/20867 - http://secunia.com/advisories/21278 - http://secunia.com/advisories/20910 - http://fedoranews.org/cms/node/2343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006
com/advisories/20910 - http://fedoranews.org/cms/node/2343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:118 - http://secunia.com/advisories/20995 - http://secunia.com/advisories/20911 - http://securitytracker.com/id?1016414 - http://www.securityfocus.com/bid/18738 - http://secunia.com/advisories/23620 - http://www.redhat.com/support/errata/RHSA-2006-0573.html - http://www.novell.com/linux/security/advisories/2006_40_openoffice.html - http://secunia.com/advisories/20913 - http://www.ubuntu.com/usn/usn-313-2 - http://www.vupen.com/english/advisories/2006/2607 - http://www.kb.cert.org/vuls/id/170113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova
- http://www.kb.cert.org/vuls/id/170113 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11082
CVE ID: CVE-2006-2199 State: PUBLISHED Published: 2006-06-30T18:00:00 Last Updated: 2024-08-07T17:43:28.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Java Applets in OpenOffice.org 1.1.x (aka StarOffice) up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to escape the Java sandbox and conduct unauthorized activities via certain applets in OpenOffice documents. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1104 - http://www.ubuntu.com/usn/usn-313-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1 - https://issues.rpath.com/browse/RPL-475 - http://www.open
//sunsolve.sun.com/search/document.do?assetkey=1-26-102475-1 - https://issues.rpath.com/browse/RPL-475 - http://www.openoffice.org/security/CVE-2006-2199.html - http://secunia.com/advisories/20893 - http://security.gentoo.org/glsa/glsa-200607-12.xml - http://www.vupen.com/english/advisories/2006/2621 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11338 - http://www.securityfocus.com/archive/1/447035/100/0/threaded - http://secunia.com/advisories/20975 - http://secunia.com/advisories/20867 - http://secunia.com/advisories/21278 - http://secunia.com/advisories/20910 - http://fedoranews.org/cms/node/2343 - http://www.mandriva.com/security/advisories?name
://secunia.com/advisories/20910 - http://fedoranews.org/cms/node/2343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:118 - http://secunia.com/advisories/20995 - http://secunia.com/advisories/20911 - http://securitytracker.com/id?1016414 - http://secunia.com/advisories/23620 - http://www.kb.cert.org/vuls/id/243681 - http://www.redhat.com/support/errata/RHSA-2006-0573.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27569 - http://www.securityfocus.com/bid/18737 - http://www.novell.com/linux/security/advisories/2006_40_openoffice.html - http://secunia.com/advisories/20913 - http://www.ubuntu.com/usn/usn-313-2 - http://www.vupen.com/english/advisories/2006/2607
CVE ID: CVE-2006-2200 State: PUBLISHED Published: 2006-06-27T19:00:00 Last Updated: 2024-08-07T17:43:28.256Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in libmms, as used by (a) MiMMS 0.0.9 and (b) xine-lib 1.1.0 and earlier, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via the (1) send_command, (2) string_utf16, (3) get_data, and (4) get_media_packet functions, and possibly other functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23512 - http://www.ubuntu.com/usn/usn-315-1 - http://www.vupen.com/english/advisories/2006/2487 - http
ia.com/advisories/23512 - http://www.ubuntu.com/usn/usn-315-1 - http://www.vupen.com/english/advisories/2006/2487 - http://secunia.com/advisories/21036 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:117 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.433842 - http://www.ubuntu.com/usn/usn-309-1 - http://sourceforge.net/project/shownotes.php?release_id=468432 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:121 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=374577 - http://www.securityfocus.com/bid/18608 - http://secunia.com/advisories/20749 - http://secunia.com/advisories/21023 - http://secunia.com/advisories/23218 -
8608 - http://secunia.com/advisories/20749 - http://secunia.com/advisories/21023 - http://secunia.com/advisories/23218 - http://secunia.com/advisories/21139 - http://secunia.com/advisories/20964 - http://secunia.com/advisories/20948 - http://security.gentoo.org/glsa/glsa-200607-07.xml
CVE ID: CVE-2006-2201 State: PUBLISHED Published: 2006-05-04T16:00:00 Last Updated: 2024-08-07T17:43:28.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in CA Resource Initialization Manager (CAIRIM) 1.x before 20060502, as used in z/OS Common Services and the LMP component in multiple products, allows attackers to violate integrity via a certain "problem state program" that uses SVC to gain access to supervisor state, key 0. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1656 - http://www.osvdb.org/25234 - http://securitytracker.com/id?1016028 - http://supportconnectw.ca.com/public/ca_com
/1656 - http://www.osvdb.org/25234 - http://securitytracker.com/id?1016028 - http://supportconnectw.ca.com/public/ca_common_docs/cairimsecurity-notice.asp - http://www.securityfocus.com/archive/1/433246/100/0/threaded - http://www.securityfocus.com/bid/17840 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26234 - http://secunia.com/advisories/19953 - http://supportconnectw.ca.com/public/ca_common_docs/cairim-affprods.asp
CVE ID: CVE-2006-2202 State: PUBLISHED Published: 2006-05-04T17:00:00 Last Updated: 2024-08-07T17:43:27.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016019 - http://secunia.com/advisories/19948 - http://www.securityfocus.com/bid/17793 - http://www.securityfocus.com/archive/1/432731/100/0/threaded - http://www.osvdb.org/25231 - http://www.securityfocus.com/archive/1/432952/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnera
.org/25231 - http://www.securityfocus.com/archive/1/432952/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26224 - http://securityreason.com/securityalert/841 - http://www.vupen.com/english/advisories/2006/1655
CVE ID: CVE-2006-2203 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:28.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerio MailServer before 6.1.4 has unknown impact and remote attack vectors related to a "possible bypass of attachment filter." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1610 - http://secunia.com/advisories/19875 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26170 - http://www.kerio.com/kms_history.html
CVE ID: CVE-2006-2204 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:28.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the topic deletion functionality (post_delete function in func_mod.php) for Invision Power Board 2.1.5 allows remote authenticated moderators to execute arbitrary SQL commands via the selectedpids parameter, which bypasses an integer value check when the $id variable is an array. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26190 - http://securityreason.com/securityalert/551 - http://
837 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26190 - http://securityreason.com/securityalert/551 - http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpo - http://www.vupen.com/english/advisories/2006/1605 - http://www.securityfocus.com/archive/1/432591/100/0/threaded - http://www.securityfocus.com/archive/1/432948/30/0/threaded - http://secunia.com/advisories/19901
CVE ID: CVE-2006-2205 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:27.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: The audio_write function in NetBSD 3.0 allows local users to cause a denial of service (kernel crash) by using the audiosetinfo ioctl to change the sample rate of an audio device. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17999 - http://www.osvdb.org/25086 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-014.txt.asc - http://securitytracker.com/id?1016004
CVE ID: CVE-2006-2206 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:27.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MS-Logon authentication scheme in UltraVNC (aka Ultr@VNC) 1.0.1 uses weak encryption (XOR) for challenge/response, which allows remote attackers to gain privileges by sniffing and decrypting passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17824 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26283 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0057.html
CVE ID: CVE-2006-2208 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:28.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) hash and (2) page parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.cyber-soldiers.org/Dream/mynews.txt - http://www.osvdb.org/25223 - http://www.vupen.com/english/advisories/2006/1635 - http://secunia.com/advisories/19935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26199 - http://www.securityfocus.com/bid/17823
CVE ID: CVE-2006-2209 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:28.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands via (1) the transtype parameter in an add action or (2) entry parameter in an edit action. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25349 - http://secunia.com/advisories/20008 - http://www.vupen.com/english/advisories/2006/1691 - http://www.
.osvdb.org/25349 - http://secunia.com/advisories/20008 - http://www.vupen.com/english/advisories/2006/1691 - http://www.securityfocus.com/bid/17821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26356 - http://downloads.securityfocus.com/vulnerabilities/exploits/pacheckbook-1.1-mutlsql.txt
CVE ID: CVE-2006-2210 State: PUBLISHED Published: 2006-05-05T10:00:00 Last Updated: 2024-08-07T17:43:27.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this issue might be resultant from the directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26230 - http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html - http://www.securityfocus.com/archive/1/43
- http://d4igoro.blogspot.com/2006/05/321soft-php-gallery-09-directory.html - http://www.securityfocus.com/archive/1/432964/100/0/threaded - http://secunia.com/advisories/19924 - http://www.vupen.com/english/advisories/2006/1629