Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2990 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/vanillasoft-helpdesk-xss-vuln.html - http://secunia.com/advisories/20544 - http://securitytracker.com/id?1016254 - http://www.securityfocus.com/bid/18368 - http://www.vupen.com/english/advisories/2006/2247 - https://exchange.xforce.ibmcloud.c
www.securityfocus.com/bid/18368 - http://www.vupen.com/english/advisories/2006/2247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27020
CVE ID: CVE-2006-2991 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web script or HTML via a JavaScript URI in the SRC attribute of an IMG element, and possibly other manipulations, in the ringid parameter in (1) next.cgi, (2) stats.cgi, or (3) list.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20590 - http://www.securityfocus.com/bid/18360 - http://www.osvdb.org/26318 - http://securityreason.com/securityalert/1082 - http://www.osv
securityfocus.com/bid/18360 - http://www.osvdb.org/26318 - http://securityreason.com/securityalert/1082 - http://www.osvdb.org/26320 - http://www.vupen.com/english/advisories/2006/2281 - http://www.securityfocus.com/archive/1/436690/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27053 - http://www.osvdb.org/26319
CVE ID: CVE-2006-2992 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the key_m parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27085 - http://www.vupen.com/english/advisories/2006/2244 - http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html - http://www.osvdb.org/26280 - http://secunia.com/advisories/20554 - http://www.securityfocus.com/bid/1841
ook-vuln.html - http://www.osvdb.org/26280 - http://secunia.com/advisories/20554 - http://www.securityfocus.com/bid/18418
CVE ID: CVE-2006-2993 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in (1) Displayview.asp and (2) Details_Photo_bv.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2244 - http://pridels0.blogspot.com/2006/06/my-photo-scrapbook-vuln.html - http://www.osvdb.org/26282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27087 - http://www.osvdb.org/26281 - http://secunia.com/
rg/26282 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27087 - http://www.osvdb.org/26281 - http://secunia.com/advisories/20554 - http://www.securityfocus.com/bid/18418
CVE ID: CVE-2006-2994 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) url fields, and (4) text field (content parameter). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27065 - http://securityreason.com/securityalert/1081 - http://secunia.com/advisories/20615 - http://www.securityfocus.com/bid/18495 - http://www.vupen.com/english/advisories/2006/
://secunia.com/advisories/20615 - http://www.securityfocus.com/bid/18495 - http://www.vupen.com/english/advisories/2006/2421 - http://www.securityfocus.com/archive/1/436602/100/0/threaded
CVE ID: CVE-2006-2995 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INCDIR parameter in (1) include/nav.php and (2) include/lang.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2272 - https://www.exploit-db.com/exploits/1898 - http://www.osvdb.org/26339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27039 - http://www.osvdb.org/26340 - http://www.securityfocus.com/bid
tps://exchange.xforce.ibmcloud.com/vulnerabilities/27039 - http://www.osvdb.org/26340 - http://www.securityfocus.com/bid/18378 - http://secunia.com/advisories/20568
CVE ID: CVE-2006-2996 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dir[data] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18370 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27050 - http://secunia.com/advisories/20588 - https://www.exploit-db.com/exploits/1896 - http://www.vupen.com/english/advisories/2006/2274
CVE ID: CVE-2006-2997 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the raw parameter in the search field. Additional Analyst Notes: - CVE Program Container: References: - http://www.majorsecurity.de/advisory/major_rls12.txt - http://secunia.com/advisories/20585 - http://securitytracker.com/id?1016275 - http://securityreason.com/securityalert/1093 - http://www.securityfocus.com/archive/1/436703/100/0/threaded - http://www.vupen.co
curityreason.com/securityalert/1093 - http://www.securityfocus.com/archive/1/436703/100/0/threaded - http://www.vupen.com/english/advisories/2006/2279 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27055
CVE ID: CVE-2006-2998 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1899 - http://www.vupen.com/english/advisories/2006/2273 - http://www.securityfocus.com/bid/18373 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27040 - http://secunia.com/advisories/20569
CVE ID: CVE-2006-2999 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in OkScripts QuickLinks 1.1 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20594 - http://www.securityfocus.com/archive/1/436561 - http://securityreason.com/securityalert/1080 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27133 - http://www.vupen.com/english/advisories/2006/2275
CVE ID: CVE-2006-3000 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27134 - http://www.securityfocus.com/archive/1/436561 - http://secunia.com/advisories/20593 - http://www.vupen.com/english/advisories/2006/2276 - http://securityreason.com/securityalert/1080
CVE ID: CVE-2006-3001 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkMall 1.0 allow remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: this might be resultant from another vulnerability, since the XSS is reflected in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20621 - http://www.securityfocus.com/archive/1/436561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27131 - http://www.vupen.com/english/advisories/2006/2282
/436561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27131 - http://www.vupen.com/english/advisories/2006/2282 - http://securityreason.com/securityalert/1080
CVE ID: CVE-2006-3002 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in details.php in Easy Ad-Manager allows remote attackers to inject arbitrary web script or HTML via the mbid parameter, which is reflected in an error message. NOTE: on 20060829, the vendor notified CVE that this issue has been fixed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18339 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27109 - http://www.vupen.com/english/advisories/2006/2248 - http://securityreason.com/securityal
oud.com/vulnerabilities/27109 - http://www.vupen.com/english/advisories/2006/2248 - http://securityreason.com/securityalert/1079 - http://www.securityfocus.com/archive/1/436413 - http://secunia.com/advisories/20539
CVE ID: CVE-2006-3003 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:04.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: details.php in Easy Ad-Manager allows remote attackers to obtain the full installation path via an invalid mbid parameter, which leaks the path in an error message. NOTE: this might be resultant from another vulnerability, since this vector also produces cross-site scripting (XSS). NOTE: on 20060829, the vendor notified CVE that this issue has been fixed. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27110 - http://securityreason.com/securityalert/1079 - h
erences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27110 - http://securityreason.com/securityalert/1079 - http://www.securityfocus.com/archive/1/436413 - http://secunia.com/advisories/20539
CVE ID: CVE-2006-3004 State: PUBLISHED Published: 2006-06-13T01:00:00 Last Updated: 2024-08-07T18:16:05.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in player.php and (2) keyword parameter when performing a search. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27062 - http://secunia.com/advisories/20530 - http://securityreason.com/securityalert/1097 - http://www.securityfocus.com/archive/1/436424 - http://www.securityfocus.com/bid/18340 - http
n.com/securityalert/1097 - http://www.securityfocus.com/archive/1/436424 - http://www.securityfocus.com/bid/18340 - http://www.vupen.com/english/advisories/2006/2237
CVE ID: CVE-2006-3005 State: PUBLISHED Published: 2006-06-13T10:00:00 Last Updated: 2024-08-07T18:16:05.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JPEG library in media-libs/jpeg before 6b-r7 on Gentoo Linux is built without the -maxmem feature, which could allow context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted JPEG file that exceeds the intended memory limits. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200606-11.xml - http://secunia.com/advisories/20563 - http://bugs.gentoo.org/show_bug.cgi?id=130889 - http://www.osvdb.org/26317 - https://exchange.xforce.ibmcl
ories/20563 - http://bugs.gentoo.org/show_bug.cgi?id=130889 - http://www.osvdb.org/26317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31451
CVE ID: CVE-2006-3006 State: PUBLISHED Published: 2006-06-13T10:00:00 Last Updated: 2024-08-07T18:16:05.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2290 - http://secunia.com/advisories/20619 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27142 - http://www.securityfocus.com/archive/1/436599/100/0/threaded - http://www.securityfocus.com/bid/18391 - http://www.secu
http://www.securityfocus.com/archive/1/436599/100/0/threaded - http://www.securityfocus.com/bid/18391 - http://www.securityfocus.com/archive/1/436774/100/0/threaded
CVE ID: CVE-2006-3007 State: PUBLISHED Published: 2006-06-13T10:00:00 Last Updated: 2024-08-07T18:16:05.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SHOUTcast 1.9.5 allow remote attackers to inject arbitrary HTML or web script via the DJ fields (1) Description, (2) URL, (3) Genre, (4) AIM, and (5) ICQ. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2254 - http://secunia.com/advisories/20524 - http://www.gentoo.org/security/en/glsa/glsa-200607-05.xml - http://secunia.com/advisories/21005 - http://marc.info/?l=bugtraq&m=114980135615062&w=2 - https://exchange.
607-05.xml - http://secunia.com/advisories/21005 - http://marc.info/?l=bugtraq&m=114980135615062&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27129 - http://www.securityfocus.com/bid/18376
CVE ID: CVE-2006-3008 State: REJECTED Published: 2006-06-13T10:00:00 Last Updated: 2007-02-12T10:00:00 Description: No description available.
CVE ID: CVE-2006-3009 State: PUBLISHED Published: 2006-06-13T22:00:00 Last Updated: 2024-08-07T18:16:05.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to inject arbitrary HTML or web script via the (1) tf_lang, (2) tf_name, (3) tf_user, (4) tf_lastname, (5) tf_contact, (6) tf_datebefore, and (7) tf_dateafter parameters to files such as (a) publication/publication_index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www
ndex.php, and (e) company/company_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26201 - http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html - http://www.osvdb.org/26198 - http://www.osvdb.org/26199 - http://www.osvdb.org/26202 - http://www.osvdb.org/26200 - http://secunia.com/advisories/20486 - http://www.securityfocus.com/bid/18348 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27031
CVE ID: CVE-2006-3010 State: PUBLISHED Published: 2006-06-13T22:00:00 Last Updated: 2024-08-07T18:16:06.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers to execute arbitrary SQL commands via the (1) new_order and (2) order_dir parameters to (a) index.php, (b) group/group_index.php, (c) user/user_index.php, (d) list/list_index.php, and (e) company/company_index.php, and the (3) entity and (4) tf_dateafter parameter to company/company_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-
Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/obm-multiple-sql-inj-and-xss-vuln.html - http://www.osvdb.org/26206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27030 - http://www.osvdb.org/26207 - http://www.osvdb.org/26205 - http://www.osvdb.org/26204 - http://secunia.com/advisories/20486 - http://www.securityfocus.com/bid/18348 - http://www.osvdb.org/26203
CVE ID: CVE-2006-3011 State: PUBLISHED Published: 2006-06-26T21:00:00 Last Updated: 2024-08-07T18:16:05.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe mode and open_basedir restrictions via a "php://" or other scheme in the third argument, which disables safe mode. Additional Analyst Notes: - CVE Program Container: References: - http://www.php.net/release_5_1_5.php - http://securitytracker.com/id?1016377 - http://secunia.com/advisories/21050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27414 - http://securityreason.com/securityalert/1129 - http://c
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27414 - http://securityreason.com/securityalert/1129 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?r1=1.543.2.51.2.9&r2=1.543.2.51.2.10&pathrev=PHP_4_4&diff_format=u - http://secunia.com/advisories/21546 - http://www.vupen.com/english/advisories/2006/2523 - http://www.ubuntu.com/usn/usn-320-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - http://secunia.com/advisories/21125 - http://cvs.php.net/viewvc.cgi/php-src/ext/standard/basic_functions.c?diff_format=u&view=log&pathrev=PHP_4_4 - http://secunia.com/advisories/20818 - http://www.osvdb.org/26827 - http://www.securityfocus.com/bid/18645 -
v=PHP_4_4 - http://secunia.com/advisories/20818 - http://www.osvdb.org/26827 - http://www.securityfocus.com/bid/18645 - http://securityreason.com/achievement_securityalert/41
CVE ID: CVE-2006-3012 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via the (1) login parameter in (a) client/stats.php and (b) admin/stats.php, or the (2) pass parameter in client/stats.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27195 - http://www.securityfocus.com/bid/18448 - http://www.osvdb.org/26510 - http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php - http://www.redteam-pentest
448 - http://www.osvdb.org/26510 - http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php - http://www.redteam-pentesting.de/advisories/rt-sa-2006-004.txt - http://www.securityfocus.com/archive/1/437290/100/0/threaded - http://www.vupen.com/english/advisories/2006/2402 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046954.html
CVE ID: CVE-2006-3013 State: PUBLISHED Published: 2006-06-19T10:00:00 Last Updated: 2024-08-07T18:16:05.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Interpretation conflict in resetpw.php in phpBannerExchange before 2.0 Update 6 allows remote attackers to execute arbitrary SQL commands via an email parameter containing a null (%00) character after a valid e-mail address, which passes the validation check in the eregi PHP command. NOTE: it could be argued that this vulnerability is due to a bug in the eregi PHP command and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in phpBannerExchange. Additional Analyst Notes: - CVE Program
if so, then this should not be treated as a vulnerability in phpBannerExchange. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046953.html - http://www.securityfocus.com/bid/18448 - http://www.osvdb.org/26509 - http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php - http://www.redteam-pentesting.de/advisories/rt-sa-2006-005.txt - http://www.vupen.com/english/advisories/2006/2358 - http://www.securityfocus.com/archive/1/437294/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27193 - http://secunia.com/advisories/20687
CVE ID: CVE-2006-3014 State: PUBLISHED Published: 2006-06-22T00:00:00 Last Updated: 2024-08-07T18:16:04.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3573 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.vupen.com/english/advisories/2006/4507 - http://www.securityfocus.com/bid/19980 -
echalerts/TA06-318A.html - http://www.vupen.com/english/advisories/2006/4507 - http://www.securityfocus.com/bid/19980 - http://secunia.com/advisories/22882 - http://secunia.com/advisories/21865 - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0414.html - http://www.securiteam.com/windowsntfocus/5TP0M0KIUA.html - http://hackingspirits.com/vuln-rnd/vuln-rnd.html - http://www.adobe.com/support/security/bulletins/apsb06-11.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A538 - http://www.vupen.com/english/advisories/2006/3577 - http://www.securityfocus.com/bid/18583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 - https://
06/3577 - http://www.securityfocus.com/bid/18583 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27312 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 - http://securitytracker.com/id?1016344
CVE ID: CVE-2006-3015 State: PUBLISHED Published: 2006-06-14T15:00:00 Last Updated: 2024-08-07T18:16:04.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary files via encoded spaces and double-quote characters in a scp or sftp URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27075 - http://winscp.net/eng/docs/history#3.8.2 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046810.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html - http://secunia.com/advis
06-June/046810.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0196.html - http://secunia.com/advisories/20575 - http://www.vupen.com/english/advisories/2006/2289 - http://www.securityfocus.com/bid/18384 - http://www.kb.cert.org/vuls/id/912588