Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6449 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30724 - http://www.vupen.com/english/advisories/2006/4850
CVE ID: CVE-2006-6450 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in dagent/downloadreport.asp in Novell ZENworks Patch Management (ZPM) before 6.3.2.700 allow remote attackers to execute arbitrary SQL commands via the (1) agentid and (2) pass parameters. Additional Analyst Notes: - CVE Program Container: References: - https://secure-support.novell.com/KanisaPlatform/Publishing/298/3506963_f.SAL_Public.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30768 - http://www.vupen.com/english/advisories/2006/4864 - http://www.securityfocus.com/bid/
mcloud.com/vulnerabilities/30768 - http://www.vupen.com/english/advisories/2006/4864 - http://www.securityfocus.com/bid/21473 - http://secunia.com/advisories/23243
CVE ID: CVE-2006-6451 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SWsoft Plesk 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) get_password.php or (2) login_up.php3. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30320 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls34 - http://securitytracker.com/id?1017236 - http://marc.info/?l=bugtraq&m=116370467532206&w=2 - http://www.securityfocus.com/
ttp://securitytracker.com/id?1017236 - http://marc.info/?l=bugtraq&m=116370467532206&w=2 - http://www.securityfocus.com/bid/21067
CVE ID: CVE-2006-6452 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the MyArticles module before 0.6 beta 1, for RunCMS, allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) topics.php, (2) submit.php, and (3) class/calendar.class.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=466097 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30618 - http://www.vupen.com/english/advisories/2006/4777
CVE ID: CVE-2006-6453 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in JOWAMP_ShowPage.php in J-OWAMP Web Interface 2.1 allows remote authenticated users to execute arbitrary PHP code via a URL in the link parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20836 - http://secunia.com/advisories/23276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30775 - https://www.exploit-db.com/exploits/2895 - http://www.vupen.com/english/advisories/2006/4905
CVE ID: CVE-2006-6454 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: execInBackground.php in J-OWAMP Web Interface 2.1b and earlier allows remote attackers to execute arbitrary commands via shell metacharacters to the (1) exe and (2) args parameters, which are used in an exec function call. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30781 - http://www.vupen.com/english/advisories/2006/4905
CVE ID: CVE-2006-6455 State: PUBLISHED Published: 2006-12-10T21:00:00 Last Updated: 2024-08-07T20:26:46.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin/default.asp in DUware DUdirectory 3.1, and possibly DUdirectory Pro and Pro SQL 3.x, allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4908 - http://www.securityfocus.com/archive/1/453809/100/0/threaded - http://www.securityfocus.com/bid/21485 - ht
s/2006/4908 - http://www.securityfocus.com/archive/1/453809/100/0/threaded - http://www.securityfocus.com/bid/21485 - http://secunia.com/advisories/23275 - http://securityreason.com/securityalert/2017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30783
CVE ID: CVE-2006-6456 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2000, 2002, and 2003 and Word Viewer 2003 allows remote attackers to execute code via unspecified vectors related to malformed data structures that trigger memory corruption, a different vulnerability than CVE-2006-5994. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0215.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746 - http://securitytracker.com/id?10175
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A746 - http://securitytracker.com/id?1017579 - http://vil.mcafeesecurity.com/vil/content/v_vul27249.htm - http://secunia.com/advisories/23205 - http://isc.sans.org/diary.php?storyid=1925 - http://www.securityfocus.com/archive/1/454069/100/0/threaded - http://www.securityfocus.com/bid/21518 - http://www.securityfocus.com/archive/1/454093/100/0/threaded - http://www.vupen.com/english/advisories/2007/0435 - http://www.osvdb.org/30825 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30806 - http://vil.mcafeesecurity.com/vil/content/v_141056.htm - http://archi
change.xforce.ibmcloud.com/vulnerabilities/30806 - http://vil.mcafeesecurity.com/vil/content/v_141056.htm - http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0199.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-014 - http://www.kb.cert.org/vuls/id/166700 - http://www.vupen.com/english/advisories/2006/4920 - http://www.securityfocus.com/archive/1/454072/100/0/threaded - http://blogs.technet.com/msrc/archive/2006/12/10/new-report-of-a-word-zero-day.aspx - http://securitytracker.com/id?1017358
CVE ID: CVE-2006-6457 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: tiki-wiki_rss.php in Tikiwiki 1.9.5, 1.9.2, and possibly other versions allows remote attackers to obtain sensitive information (MySQL username and password) via an invalid (large or negative) ver parameter, which leaks the information in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452639/100/200/threaded
CVE ID: CVE-2006-6458 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero, which triggers an infinite loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21509 - http:
te loop. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21509 - http://secunia.com/advisories/23321 - http://www.vupen.com/english/advisories/2006/4918 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439
CVE ID: CVE-2006-6459 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in toplist.php in PhpBB Toplist 1.3.7 allows remote attackers to inject arbitrary HTML or web script via the (1) Name and (2) Information fields when adding a new site (toplistnew action). Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2015 - http://www.securityfocus.com/bid/21506 - http://www.securityfocus.com/archive/1/453923/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30808
CVE ID: CVE-2006-6460 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yourfreeworld.com Short Url & Url Tracker Script allows remote attackers to obtain sensitive information via an invalid id parameter to login.php, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2509. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2006-05/0384.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26573
CVE ID: CVE-2006-6461 State: PUBLISHED Published: 2006-12-11T17:00:00 Last Updated: 2024-08-07T20:26:46.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26571 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0381.html
CVE ID: CVE-2006-6462 State: PUBLISHED Published: 2006-12-11T18:00:00 Last Updated: 2024-08-07T20:26:46.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in engine/oldnews.inc.php in CM68 News 12.02.06 allows remote attackers to execute arbitrary PHP code via a URL in the addpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21499 - http://www.vupen.com/english/advisories/2006/4911 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30785 - http://cm68.de/?cm68news_download - https://www.exploit-db.com/exploits/2897 - http://secunia.com/advisories/23326
CVE ID: CVE-2006-6463 State: PUBLISHED Published: 2006-12-11T18:00:00 Last Updated: 2024-08-07T20:26:46.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2016 - http://www.securityfocus.com/bid/21500 - http://secunia.com/advisories/23296 - http://www.securityfocus.com/archive/1/453912/100/0/threaded - http://cupu.us/adv/15-iFX-2006-adv-midicart-phpbackdoor.txt
CVE ID: CVE-2006-6464 State: PUBLISHED Published: 2006-12-11T18:00:00 Last Updated: 2024-08-07T20:26:46.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: viewcart in Midicart accepts negative numbers in the Qty (quantity) field, which allows remote attackers to obtain a smaller total price for a shopping cart. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2016 - http://www.securityfocus.com/bid/21500 - http://secunia.com/advisories/23296 - http://www.securityfocus.com/archive/1/453912/100/0/threaded - http://cupu.us/adv/15-iFX-2006-adv-midicart-phpbackdoor.txt
CVE ID: CVE-2006-6465 State: PUBLISHED Published: 2006-12-11T18:00:00 Last Updated: 2024-08-07T20:26:46.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in WBmap.php in WikyBlog 1.3.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter. NOTE: CVE disputes this vulnerability because l is validated by ctype_alpha before use Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2875 - http://www.vupen.com/english/advisories/2006/4823 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30650
CVE ID: CVE-2006-6466 State: PUBLISHED Published: 2006-12-11T18:00:00 Last Updated: 2024-08-07T20:26:46.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in WBmap.php in WikyBlog 1.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) key, (2) d, (3) l, or (4) v parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: CVE disputes the l vector because l is validated by ctype_alpha before use. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4823
CVE ID: CVE-2006-6467 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-17T04:23:45.703Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not properly restrict access to SMB file resources, which allows remote attackers to gain unspecified file or directory access via vectors related to (1) visibility of the SMB "Homes" share and (2) SMB file system browsing. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6468 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-16T22:31:16.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not check the Fully Qualified Domain Name (FQDN) during a "Validate Repository SSL Certificate" scan, which has unknown impact and attack vectors, possibly related to spoofed certificates. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6469 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-17T01:56:37.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 do not block the postgres port (5432/tcp), which has unknown impact and remote attack vectors, probably related to unauthorized connections to a PostgreSQL daemon. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6470 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-17T01:21:27.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNMP Agent in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 returns no error for a non-writable object, which has unknown impact and attack vectors. NOTE: due to the vagueness of the advisory, it is not clear whether this is a vulnerability, or a bug in a security feature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6471 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-17T00:02:25.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 use weak permissions for certain files, which allows unspecified file access. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6472 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-17T02:16:58.063Z Vendors: n/a Products: n/a Problem Types: n/a Description: The httpd.conf file in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 configures port 443 to be always active, which has unknown impact and remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6473 State: PUBLISHED Published: 2006-12-11T18:00:00Z Last Updated: 2024-09-16T17:23:12.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 have unknown impact and attack vectors, related to (1) an Immediate Image Overwrite (IIO) error message at the Local User Interface (LUI) if overwrite fails, (2) an IIO failure when a Held Job is deleted, and (3) an On Demand Image Overwrite failure when the overwrite is greater than 2 Gb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/a
he overwrite is greater than 2 Gb. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23265 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf
CVE ID: CVE-2006-6474 State: PUBLISHED Published: 2006-12-14T20:00:00 Last Updated: 2024-08-07T20:26:46.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in McAfee VirusScan for Linux 4510e and earlier includes the current working directory in the DT_RPATH environment variable, which allows local users to load arbitrary ELF DSO libraries and execute arbitrary code by installing malicious libraries in that directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23429 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30898 - http://secunia.com/advisories/23278 - http://securitytracker.com/i
/exchange.xforce.ibmcloud.com/vulnerabilities/30898 - http://secunia.com/advisories/23278 - http://securitytracker.com/id?1017385 - http://www.vupen.com/english/advisories/2006/5023 - http://www.securityfocus.com/bid/21592 - http://security.gentoo.org/glsa/glsa-200612-15.xml
CVE ID: CVE-2006-6475 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:26:46.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode with SSL enabled, allows remote attackers to cause a denial of service (refused connections) via malformed requests, which results in a mishandled exception. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandiant.com/firstresponse.htm - http://www.securityfocus.com/archive/1/454712/100/0/threaded - http://secunia.com/advisories/23393 - http://www.vupen.com/english/advisories/2006/5061 - http://www.securityfocus.com/
http://secunia.com/advisories/23393 - http://www.vupen.com/english/advisories/2006/5061 - http://www.securityfocus.com/bid/21548 - http://securityreason.com/securityalert/2052 - http://securitytracker.com/id?1017394 - http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt
CVE ID: CVE-2006-6476 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:26:46.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and when the agent is bound to 0.0.0.0 (all interfaces), opens sockets in non-exclusive mode, which allows local users to hijack the socket, and capture data or cause a denial of service (loss of daemon operation). Additional Analyst Notes: - CVE Program Container: References: - http://www.mandiant.com/firstresponse.htm - http://www.securityfocus.com/archive/1/454712/100/0/threaded - http://secunia.com/advisories/23393 - http://www.vupen.com/eng
//www.securityfocus.com/archive/1/454712/100/0/threaded - http://secunia.com/advisories/23393 - http://www.vupen.com/english/advisories/2006/5061 - http://www.securityfocus.com/bid/21548 - http://securityreason.com/securityalert/2052 - http://securitytracker.com/id?1017394 - http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt
CVE ID: CVE-2006-6477 State: PUBLISHED Published: 2006-12-20T02:00:00 Last Updated: 2024-08-07T20:26:46.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandiant.com/firstresponse.htm - http://www.securityfocus.com/archive/1/454712/100/0/threaded - http://secunia.com/advisories/23393 - http://www.vupen.com/english/advisorie
focus.com/archive/1/454712/100/0/threaded - http://secunia.com/advisories/23393 - http://www.vupen.com/english/advisories/2006/5061 - http://www.securityfocus.com/bid/21548 - http://securityreason.com/securityalert/2052 - http://securitytracker.com/id?1017394 - http://www.symantec.com/enterprise/research/SYMSA-2006-013.txt
CVE ID: CVE-2006-6478 State: PUBLISHED Published: 2006-12-12T00:00:00 Last Updated: 2024-08-07T20:26:46.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) email.php, the (2) no parameter in (b) voirannonce.php, the (3) idmembre parameter in (c) admin/admin_membre/fiche_membre.php, and the (4) idannonce parameter in (d) admin/admin_annonce/okvalannonce.php and (e) admin/admin_annonce/changeannonce.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453966/100/0/threaded - htt
Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453966/100/0/threaded - http://www.securityfocus.com/bid/21514 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30803 - http://secunia.com/advisories/23318 - http://www.vupen.com/english/advisories/2006/4940 - http://securityreason.com/securityalert/2019
CVE ID: CVE-2006-6479 State: PUBLISHED Published: 2006-12-12T00:00:00 Last Updated: 2024-08-07T20:26:46.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in AnnonceScriptHP 2.0 allow remote attackers to inject arbitrary web script or HTML via the email parameter in (1) erreurinscription.php, (2) Templates/admin.dwt.php, (3) Templates/commun.dwt.php, (4) membre.dwt.php, and (5) admin/admin_config/Aide.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453966/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30804 - http://www.securityfocus.com/bid/215