Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
advisories/23555 - http://secunia.com/advisories/22080 - http://www.vupen.com/english/advisories/2006/4310 - http://cgit.freedesktop.org/gstreamer/gst-plugins-bad/commit/?id=bc2cdd57d549ab3ba59782e9b395d0cd683fd3ac - http://www.mandriva.com/security/advisories?name=MDKSA-2007:001 - http://securityreason.com/securityalert/1397 - http://secunia.com/advisories/26979 - https://rhn.redhat.com/errata/RHSA-2011-0477.html - http://secunia.com/advisories/23294 - http://www.vupen.com/english/advisories/2006/3231 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28305 - https://bugzilla.redhat.com/show_bug.cgi?id=497154
CVE ID: CVE-2006-4193 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmclo
he individual DLL files. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28439 - http://www.osvdb.org/29347 - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=8 - http://www.osvdb.org/29345 - http://www.securityfocus.com/archive/1/443295/100/0/threaded - http://securityreason.com/securityalert/1402 - http://www.securityfocus.com/bid/19530 - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=10 - http://www.securityfocus.com/archive/1/443290/100/0/threaded - http://www.securityfocus.com/bid/19521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28436 - http://www.securityfocus.com/bid/195
yfocus.com/bid/19521 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28436 - http://www.securityfocus.com/bid/19529 - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=9 - http://www.osvdb.org/29346 - http://www.securityfocus.com/archive/1/443299/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28438
CVE ID: CVE-2006-4194 State: PUBLISHED Published: 2006-08-17T01:00:00 Last Updated: 2024-08-07T18:57:46.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032. NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19536 - http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csi
erences: - http://www.securityfocus.com/bid/19536 - http://searchsecurity.techtarget.com/originalContent/0%2C289142%2Csid14_gci1207450%2C00.html - http://www.osvdb.org/29781 - http://www.idoel.smilejogja.com/2006/08/14/blinded-by-the-glare-of-facial-piercings-at-black-hat-or-the-one-that-got-away/ - http://www.networkworld.com/news/2006/080406-black-hat-unpatched-flaw-revealed.html?t5 - http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/tsd_products_security_response09186a008070d33b.html
CVE ID: CVE-2006-4195 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28359 - http://secunia.com/advisories/21470 -
dvisories/2006/3277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28359 - http://secunia.com/advisories/21470 - https://www.exploit-db.com/exploits/2184 - http://securityreason.com/securityalert/1406 - http://www.securityfocus.com/archive/1/443201/100/0/threaded - http://www.securityfocus.com/bid/19505
CVE ID: CVE-2006-4196 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443154/100/0/threaded - http://www.vupen.com/english/advisories/2006/3276 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28371 - http://www.securityfocus.com/bid/19489 - http://my.opera.com/atomo64/blog/show.dml/443167 - http://
nerabilities/28371 - http://www.securityfocus.com/bid/19489 - http://my.opera.com/atomo64/blog/show.dml/443167 - http://www.securityfocus.com/archive/1/445083/100/0/threaded - http://secunia.com/advisories/21463 - http://advisories.echo.or.id/adv/adv45-K-159-2006.txt - https://www.exploit-db.com/exploits/2175 - http://securityreason.com/securityalert/1400
CVE ID: CVE-2006-4197 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.356Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c. Additional Anal
rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1162 - http://secunia.com/advisories/22393 - http://secunia.com/advisories/22191 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28367 - http://secunia.com/advisories/22639 - http://secunia.com/advisories/21404 - https://issues.rpath.com/browse/RPL-610 - http://www.ubuntu.com/usn/usn-363-1 - http://www.securityfocus.com/bid/19508 - http://security.gentoo.org/glsa/glsa-200610-09.xml - http://secunia.com/advisories/22517 - http://www.novell.com/linux/security/advisories/2006_25_sr
sa/glsa-200610-09.xml - http://secunia.com/advisories/22517 - http://www.novell.com/linux/security/advisories/2006_25_sr.html - http://aluigi.altervista.org/adv/brainzbof-adv.txt - http://secunia.com/advisories/21699 - http://www.securityfocus.com/archive/1/444843/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28368 - http://secunia.com/advisories/21668 - http://www.securityfocus.com/archive/1/443205/100/0/threaded - http://securitytracker.com/id?1016691 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:157 - http://securityreason.com/securityalert/1399
CVE ID: CVE-2006-4198 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wb_class_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442987/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28338 - http://www.vupen.com/english/advisories/2007/2405 - http://www.securityfocus.com/bid/19482 - https://www.exploit-db
38 - http://www.vupen.com/english/advisories/2007/2405 - http://www.securityfocus.com/bid/19482 - https://www.exploit-db.com/exploits/2174 - http://www.securityfocus.com/archive/1/472575/100/0/threaded - http://securityreason.com/securityalert/1410 - http://secunia.com/advisories/25903 - http://sourceforge.net/forum/forum.php?forum_id=601184 - http://secwatch.org/advisories/1015085/
CVE ID: CVE-2006-4199 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page, a different vulnerability than CVE-2004-1512. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19496 - http://www.soft3304.net/04WebServer/Security.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28354 - http://secunia.com/advisories/21504
CVE ID: CVE-2006-4200 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.394Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request processing. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28355 - http://www.securityfocus.com/bid/19496 - http://www.soft3304.net/04WebServer/Security.html - http://secunia.com/advisories/21504
CVE ID: CVE-2006-4201 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.641Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016688 - http://jvn.jp/niscc/NISCC-412866/ - http://www.uniras.gov.uk/niscc/docs/re-20060811-00547.pdf?lang=en - http://secunia.com/advisories/21485 - http://h20000.www2.hp.
ww.uniras.gov.uk/niscc/docs/re-20060811-00547.pdf?lang=en - http://secunia.com/advisories/21485 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00742778 - http://www.securityfocus.com/bid/19495 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00742778 - http://www.kb.cert.org/vuls/id/673228 - http://www.vupen.com/english/advisories/2006/3273 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28348
CVE ID: CVE-2006-4202 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28374 - http://www.securityfocus.com/bid/19518 - http://secunia.com/advisories/21482 - https://www.exploit-db.com/exploits/2186
CVE ID: CVE-2006-4203 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3278 - http://www.securityfocus.com/bid/19502 - http://secunia.com/advisories/21479 - https://www.exploit-db.com/exploits/2182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28361
CVE ID: CVE-2006-4204 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_pre parameter in lib/specialdays.php and the (2) lib_path parameter in lib/dbman_filter.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21526 - http://www.securityfocus.com/bid/19541 - http://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=257&mode=thread&order=0 - https://exchange.xforce.ib
p://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=257&mode=thread&order=0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28560 - https://www.exploit-db.com/exploits/2190 - http://www.vupen.com/english/advisories/2006/3284
CVE ID: CVE-2006-4205 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including (1) Cache.class.php, (2) Customer.class.php, (3) Performance.class.php, (4) Project.class.php, (5) Representative.class.php, (6) User.class.php, or (7) common.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28362 - http://www.securityfocus.com/bid/1950
tainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28362 - http://www.securityfocus.com/bid/19503 - https://www.exploit-db.com/exploits/2183 - http://www.vupen.com/english/advisories/2006/3294
CVE ID: CVE-2006-4206 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inject arbitrary web script or HTML via the calendarID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443035/100/0/threaded - http://www.securityfocus.com/bid/20335 - http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4206 - http://securityreason.com/securityalert/1405 - ht
us.com/bid/20335 - http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4206 - http://securityreason.com/securityalert/1405 - http://www.osvdb.org/29232 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28352
CVE ID: CVE-2006-4207 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1314/exploit.html - http://www.securityfocus.com/bid/19532 - http://www.vupen.com/english/advisories/2006/3295 - https://www.exploit-db.com/exploits/2188 - http://security
d/19532 - http://www.vupen.com/english/advisories/2006/3295 - https://www.exploit-db.com/exploits/2188 - http://securitytracker.com/id?1016714 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28380
CVE ID: CVE-2006-4208 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21486 - http://trac.wordpress.org/changeset/4095 - http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/2837
www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/28375 - http://www.securityfocus.com/bid/19504 - http://securityreason.com/securityalert/1401 - http://www.securityfocus.com/archive/1/443181/100/0/threaded - http://www.vupen.com/english/advisories/2006/3280
CVE ID: CVE-2006-4209 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19477 - http://securityreason.com/securityalert/1404 - http://www.bb-pcsecurity.de/Websecurity/311/org/WEBInsta_Mailing_list_manager_%28cabsolute_path%29_1.3e_RFI.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28340 - https://www.e
t_manager_%28cabsolute_path%29_1.3e_RFI.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28340 - https://www.exploit-db.com/exploits/2171 - http://www.securityfocus.com/archive/1/442983/100/0/threaded
CVE ID: CVE-2006-4210 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via modified mail_text2, user_row[5], nu_mail_1, and shop_mail parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2181 - http://www.securityfocus.com/bid/19517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28366 - http://secunia.com/ad
p://www.securityfocus.com/bid/19517 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28366 - http://secunia.com/advisories/21454
CVE ID: CVE-2006-4211 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444 - http://www.vupen.com/english/advisories/2006/3285 - http://jvn.jp/jp/JVN%2301137722/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28403 - http://secunia.com/advis
.jp/jp/JVN%2301137722/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28403 - http://secunia.com/advisories/21519 - http://www.securityfocus.com/bid/19552
CVE ID: CVE-2006-4212 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2339103264/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28404 - http://sourceforge.net/tracker/index.php?func=detail&aid=1540643&group_id=9444&atid=309444 - http://www.vupen.com/english/advisories/2006/3285 - http://secunia.com/advisories/21519 - http
oup_id=9444&atid=309444 - http://www.vupen.com/english/advisories/2006/3285 - http://secunia.com/advisories/21519 - http://www.securityfocus.com/bid/19552
CVE ID: CVE-2006-4213 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2166 - http://www.vupen.com/english/advisories/2006/3257 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28313
CVE ID: CVE-2006-4214 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.434Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session function in ipn_main_handler.php, which can be leveraged to modify elements of $_SESSION; and allow remote authenticated users to execute arbitrary SQL commands via (2) a session id within a cookie to whos_online_session_recreate, (3) the quantity field to the add_cart function, (4) an id[] parameter when adding an item to a shopping cart, or (5) a redemp
e quantity field to the add_cart function, (4) an id[] parameter when adding an item to a shopping cart, or (5) a redemption code when checking out (dc_redeem_code parameter to includes/modules/order_total/ot_coupon.php). Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28144 - http://www.vupen.com/english/advisories/2006/3283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28393 - http://www.osvdb.org/28145 - http://www.securityfocus.com/bid/19542 - http://www.osvdb.org/28148 - http://www.osvdb.org/28147 - http://www.gulftech.org/?node=research&article_id=00109-08152006 - http://secunia.com/advisories/21484 - http://www.zen-cart.com/forum/showthre
/?node=research&article_id=00109-08152006 - http://secunia.com/advisories/21484 - http://www.zen-cart.com/forum/showthread.php?t=43579 - http://www.osvdb.org/28146
CVE ID: CVE-2006-4215 State: PUBLISHED Published: 2006-08-17T21:00:00 Last Updated: 2024-08-07T18:57:46.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the autoLoadConfig[999][0][loadFile] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28149 - http://www.vupen.com/english/advisories/2006/3283 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28394 - http://www.securityfocus.com/bid/19543 - http://www.gulftech.org/?node=research&article_id
d.com/vulnerabilities/28394 - http://www.securityfocus.com/bid/19543 - http://www.gulftech.org/?node=research&article_id=00109-08152006 - http://secunia.com/advisories/21484
CVE ID: CVE-2006-4216 State: REJECTED Published: 2006-08-17T23:00:00 Last Updated: 2006-08-29T09:00:00 Description: No description available.