Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3908 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19154 - http://www.vupen.com/english/advisories/2006/2993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27959 - http://gn
tp://www.vupen.com/english/advisories/2006/2993 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27959 - http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date - http://aluigi.altervista.org/adv/gnefs-adv.txt
CVE ID: CVE-2006-3909 State: PUBLISHED Published: 2006-07-27T22:00:00 Last Updated: 2024-08-07T18:48:39.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.php in WWWthreads allows remote attackers to inject arbitrary web script or HTML via the week parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21221 - http://www.securityfocus.com/archive/1/441191/100/0/threaded - http://www.osvdb.org/27542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27997 - http://www.aria-security.net/advisory/wwwthreads.txt - http://www.vupen.com/english/advisories/2006/3005 - http://www.
- http://www.aria-security.net/advisory/wwwthreads.txt - http://www.vupen.com/english/advisories/2006/3005 - http://www.securityfocus.com/bid/19177
CVE ID: CVE-2006-3910 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Internet Explorer 6 on Windows XP SP2, when Outlook is installed, allows remote attackers to cause a denial of service (crash) by calling the NewDefaultItem function of an OVCtl (OVCtl.OVCtl.1) ActiveX object, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-20-ovctl-newdefaultitem.html - http://www.osvdb.org/27112 - http://www.securityfocus.com/bid/19079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27845 - http://www.vupen
- http://www.securityfocus.com/bid/19079 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27845 - http://www.vupen.com/english/advisories/2006/2915
CVE ID: CVE-2006-3911 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in OSI Codes PHP Live! 3.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the css_path parameter in (1) help.php and (2) setup/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1297 - http://www.osvdb.org/27448 - http://www.vupen.com/english/advisories/2006/2940 - http://www.neosecurityteam.net/index.php?action=advisories&id=25 - http://www.securityfocus.com/archive/1/440955 - http://secu
/www.neosecurityteam.net/index.php?action=advisories&id=25 - http://www.securityfocus.com/archive/1/440955 - http://secunia.com/advisories/21158 - http://www.securityfocus.com/bid/19116 - http://www.osvdb.org/27449 - https://www.exploit-db.com/exploits/2060 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27914 - http://securitytracker.com/id?1016581 - http://www.securityfocus.com/archive/1/447947/100/200/threaded - http://securitytracker.com/id?1017017
CVE ID: CVE-2006-3912 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the SFX module in WinRAR before 3.60 beta 8 has unspecified vectors and impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27031 - https://www.exploit-db.com/exploits/1992 - http://www.rarlabs.com/rarnew.htm - https://www.exploit-db.com/exploits/1984 - https://www.exploit-db.com/exploits/1985
CVE ID: CVE-2006-3913 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c. Additional Analyst Notes: - CVE Program Container: References: - http://
ndle_unit_orders function in server/unithand.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2942 - http://aluigi.altervista.org/adv/freecivx-adv.txt - http://secunia.com/advisories/21254 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27955 - http://secunia.com/advisories/21352 - http://www.securityfocus.com/archive/1/441042/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27956 - http://www.securityfocus.com/bid/19117 - http://www.debian.org/security/2006/dsa-1142 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:135 - http://securityreason.com/securityalert/1296 - http://secunia.com/ad
driva.com/security/advisories?name=MDKSA-2006:135 - http://securityreason.com/securityalert/1296 - http://secunia.com/advisories/21171
CVE ID: CVE-2006-3914 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Blackboard Academic Suite 6.2.3.23 allows remote authenticated users to inject arbitrary HTML or web script by bypassing client-side validation through disabling JavaScript when submitting an essay response, which has no server-side validation before being viewed via "View Attempt Details" in the Gradebook. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1295 - http://www.securityfocus.com/archive/1/440888/100/0/threaded - http
es: - http://securityreason.com/securityalert/1295 - http://www.securityfocus.com/archive/1/440888/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27895 - http://securitytracker.com/id?1016556 - http://www.securityfocus.com/bid/19101
CVE ID: CVE-2006-3915 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by iterating over any native function, as demonstrated with the window.alert function, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27932 - http://www.vupen.com/english/advisories/2006/2955 - http://www.securityfocus.com/bid/19140 - http://browserfun.blogspot.com/2006/07/mobb-25-native-function-iterator.html - htt
p://www.securityfocus.com/bid/19140 - http://browserfun.blogspot.com/2006/07/mobb-25-native-function-iterator.html - http://www.osvdb.org/27373
CVE ID: CVE-2006-3916 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in snews.php in sNews (aka Solucija News) 1.4 allows remote attackers to inject arbitrary web script or HTML via the search_query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://security-net.biz/adv/D25706a.txt - http://www.vupen.com/english/advisories/2006/2968 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27940 - http://www.osvdb.org/27481 - http://secunia.com/advisories/21189 - http://www.securityfocus.com/bid/19156
CVE ID: CVE-2006-3917 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/gabarits.php in R. Corson PHP Forge 3 beta 2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg_racine parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2938 - https://www.exploit-db.com/exploits/2058 - http://www.securityfocus.com/bid/19139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27919
CVE ID: CVE-2006-3918 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com
onstrated using a Flash SWF file. Additional Analyst Notes: - CVE Program Container: References: - ftp://patches.sgi.com/support/free/security/advisories/20060801-01-P - http://www.vupen.com/english/advisories/2010/1572 - http://svn.apache.org/viewvc?view=rev&revision=394965 - http://secunia.com/advisories/28749 - http://www.f-secure.com/en_EMEA/support/security-advisory/fsc-2010-2.html - http://www.debian.org/security/2006/dsa-1167 - http://www.securityfocus.com/bid/19661 - http://secunia.com/advisories/21744 - http://archives.neohapsis.com/archives/bugtraq/2006-07/0425.html - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securitytracker.com/id?1024144 - http://secunia.com/
ml - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - http://www.securitytracker.com/id?1024144 - http://secunia.com/advisories/22317 - http://secunia.com/advisories/22523 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.vupen.com/english/advisories/2006/5089 - http://www.vupen.com/english/advisories/2006/3264 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0151.html - http://secunia.com/advisories/21598 - http://secunia.com/advisories/21399 - http://marc.info/?l=bugtraq&m=125631037611762&w=2 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10352 - http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm - http://secunia
tion/oval%3Aorg.mitre.oval%3Adef%3A10352 - http://support.avaya.com/elmodocs2/security/ASA-2006-194.htm - http://secunia.com/advisories/21478 - http://www.redhat.com/support/errata/RHSA-2006-0619.html - http://secunia.com/advisories/21986 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://www14.software.ibm.com/webapp/set2/subscriptions/pqvcmjd?mode=18&ID=3117 - http://www.vupen.com/english/advisories/2006/4207 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/21848 - http://rhn.redhat.com/errata/RHSA-2006-0618.html - http://www-1.ibm.com/support/docview.wss?uid=swg1PK24631 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.htm
.ibm.com/support/docview.wss?uid=swg1PK24631 - http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html - http://rhn.redhat.com/errata/RHSA-2006-0692.html - http://secunia.com/advisories/40256 - http://www.novell.com/linux/security/advisories/2006_51_apache.html - http://www.vupen.com/english/advisories/2006/2963 - http://secunia.com/advisories/21174 - http://marc.info/?l=bugtraq&m=129190899612998&w=2 - http://www.ubuntu.com/usn/usn-575-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12238 - http://secunia.com/advisories/29640 - http://securityreason.com/securityalert/1294 - http://openbsd.org/errata.html#httpd2 - http://www-1.ibm.
isories/29640 - http://securityreason.com/securityalert/1294 - http://openbsd.org/errata.html#httpd2 - http://www-1.ibm.com/support/docview.wss?uid=swg24013080 - http://secunia.com/advisories/21172 - http://kb.vmware.com/KanisaPlatform/Publishing/466/5915871_f.SAL_Public.html - http://securitytracker.com/id?1016569 - http://www.vupen.com/english/advisories/2006/2964 - http://secunia.com/advisories/22140 - https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r6
a0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r652fc951306cdeca5a276e2021a34878a76695a9f3cfb6490b4a6840%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/reb542d2038e9c331506e0cbff881b47e40fbe2bd93ff00979e60cdf7%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rafd145ba6cd0a4ced113a5823cdaff45aeb36eb09855b216401c66d6%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apach
3E - https://lists.apache.org/thread.html/r5f9c22f9c28adbd9f00556059edc7b03a5d5bb71d4bb80257c0d34e4%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rb9c9f42dafa25d2f669dac2a536a03f2575bc5ec1be6f480618aee10%40%3Ccvs.httpd.apache.org%3E - https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E
CVE ID: CVE-2006-3919 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:48:39.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in SD Studio CMS allows remote attackers to execute arbitrary SQL commands via the (1) news_id, (2) tid, and (3) page_id parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19173 - http://www.vupen.com/english/advisories/2006/2984 - http://security-net.biz/adv/D24706a.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27963 - http://secunia.com/advisories/21207
CVE ID: CVE-2006-3920 State: PUBLISHED Published: 2006-07-28T22:00:00 Last Updated: 2024-08-07T18:48:39.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22425 - http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1374 - https://exchange.xforce.ibmcloud.com/vulnerabilit
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1374 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28048 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102206-1 - http://securitytracker.com/id?1016589 - http://secunia.com/advisories/21226 - http://www.vupen.com/english/advisories/2006/2997
CVE ID: CVE-2006-3921 State: PUBLISHED Published: 2006-07-28T23:00:00 Last Updated: 2024-08-07T18:48:39.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22425 - http://securitytracker.com/id?1016596 - http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28061 - http://secunia.com/advisories/21251
ity/ASA-2006-204.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28061 - http://secunia.com/advisories/21251 - http://www.securityfocus.com/bid/19200 - http://securitytracker.com/id?1016597 - http://www.vupen.com/english/advisories/2006/3020 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102521-1
CVE ID: CVE-2006-3922 State: PUBLISHED Published: 2006-07-28T23:00:00 Last Updated: 2024-08-07T18:48:39.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_membre/inscription.php in PortailPHP 1.7 allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441468 - http://secunia.com/advisories/21224 - http://securityreason.com/securityalert/1310 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28051 - http://www.vupen.com/english/advisories/2006/3014 - http://www.securityfocus.com/bid/19207 - htt
vulnerabilities/28051 - http://www.vupen.com/english/advisories/2006/3014 - http://www.securityfocus.com/bid/19207 - https://www.exploit-db.com/exploits/2081
CVE ID: CVE-2006-3923 State: PUBLISHED Published: 2006-07-28T23:00:00 Last Updated: 2024-08-07T18:48:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add.php in Fire-Mouse Toplist 1.1 and earlier, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the Seitenname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440859/100/100/threaded - http://www.securityfocus.com/bid/19120 - http://www.vupen.com/english/advisories/2006/2962 - http://www.majorsecurity.de/advisory/major_rls24.txt - https://exchange.xforce.ibmcloud.com
glish/advisories/2006/2962 - http://www.majorsecurity.de/advisory/major_rls24.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27912 - http://securityreason.com/securityalert/1299 - http://secunia.com/advisories/21173
CVE ID: CVE-2006-3924 State: PUBLISHED Published: 2006-07-28T23:00:00 Last Updated: 2024-08-07T18:48:39.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19210 - http://secunia.com/advisories/21239 - http://www.osvdb.org/27586 - http://www.dokeos.com/news.php#145
CVE ID: CVE-2006-3925 State: PUBLISHED Published: 2006-07-28T23:00:00 Last Updated: 2024-08-07T18:48:39.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19205 - http://www.vupen.com/english/advisories/2006/3016 - http://secunia.com/advisories/20845 - https://exchange.
/bid/19205 - http://www.vupen.com/english/advisories/2006/3016 - http://secunia.com/advisories/20845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28055
CVE ID: CVE-2006-3926 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28032 - http://securitytracker.com/id?1016595 - http://www.osvdb.org/27546 - http://www.osvdb.org/27545 - http://secunia.com/advisories/21201 - http://www.securityfocus.com/bid/1915
vdb.org/27546 - http://www.osvdb.org/27545 - http://secunia.com/advisories/21201 - http://www.securityfocus.com/bid/19158 - http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html - http://securityreason.com/securityalert/1298
CVE ID: CVE-2006-3927 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28030 - http://www.osvdb.org/27544 - http://securitytracker.com/id?1016595 - http://secunia.com/advisories/21201 - http://www.securityfocus.com/bid/19158 - http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html - http://securityreason.
.securityfocus.com/bid/19158 - http://archives.neohapsis.com/archives/bugtraq/2006-07/0474.html - http://securityreason.com/securityalert/1298
CVE ID: CVE-2006-3928 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_datapath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3013 - http://secunia.com/advisories/21234 - https://www.exploit-db.com/exploits/2077 - http://www.osvdb.org/27547 - http://www.securityfocus.com/bid/19187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28029
CVE ID: CVE-2006-3929 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.365Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19180 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28021 - http://www.osvdb.org/27548 - http://www.securityfocus.com/archive/1/441193/100/0/threaded - http://www.vupen.com/e
021 - http://www.osvdb.org/27548 - http://www.securityfocus.com/archive/1/441193/100/0/threaded - http://www.vupen.com/english/advisories/2006/3012 - http://secunia.com/advisories/21225 - http://securitytracker.com/id?1016598 - http://www.eazel.es/media/advisory004-Zyxel-Prestige-660H-61-Cross-Site-Scripting.html - http://securityreason.com/securityalert/1301
CVE ID: CVE-2006-3930 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.413Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27654 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28054 - http://www.securityfocus.com/bid/19198 - http://www.securityfocus.com/archive/1/441286/100/0/threaded - http://securityreason.com/securityalert/1309 - ht