Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0309 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0238 - http://www.securityfocus.com/archive/1/422266/100/0/threaded - http://www.securityfocus.com/bid/16307 - http://www.securityfocus.com/archive/1/421929/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24125 - http://securit
yfocus.com/archive/1/421929/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24125 - http://securitytracker.com/id?1015490 - http://secunia.com/advisories/18461 - http://www.securityfocus.com/archive/1/422064/100/0/threaded
CVE ID: CVE-2006-0310 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a javascript URI in the BBcode url tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16889 - http://www.osvdb.org/22526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24141 - http://www.vupen.com/english/advisories/2006/0240 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html - http://mikeheltonisawesome.com/viewcomments.php?idd=46 - http:/
hives.neohapsis.com/archives/bugtraq/2006-01/0322.html - http://mikeheltonisawesome.com/viewcomments.php?idd=46 - http://evuln.com/vulns/37/summary.html - http://www.securityfocus.com/bid/16286
CVE ID: CVE-2006-0311 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16889 - http://www.vupen.com/english/advisories/2006/0240 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html - http://mikeheltonisawesome.com/viewcomments.php?idd=46 - http://evuln.com/vulns/37/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24142 - http://
p?idd=46 - http://evuln.com/vulns/37/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24142 - http://www.securityfocus.com/bid/16286 - http://www.osvdb.org/22527
CVE ID: CVE-2006-0312 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the uza parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/16889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24143 - http://www.vupen.com/english/advisories/2006/0240 - http://archives.neohapsis.com/archives/bugtraq/2006-01/0322.html - http://mikeheltonisawesome.com/viewcomments.php?idd=46 - http://evuln.com/vulns/37/summary.html - http://www.
322.html - http://mikeheltonisawesome.com/viewcomments.php?idd=46 - http://evuln.com/vulns/37/summary.html - http://www.securityfocus.com/bid/16286
CVE ID: CVE-2006-0313 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PDFdirectory before 1.0 allow remote attackers to execute arbitrary SQL commands via multiple unspecified vectors involving (1) util.php, (2) userpref.php, (3) user.php, (4) uploadfrm.php, (5) title.php, (6) team.php, (7) stats.php, (8) page.php, (9) org.php, (10) member.php, (11) index.php, (12) group.php, or (13) anniv.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22412 - http://www.osvdb.org/22407 - http://www.osvdb.org/22405 - http://www
ntainer: References: - http://www.osvdb.org/22412 - http://www.osvdb.org/22407 - http://www.osvdb.org/22405 - http://www.osvdb.org/22411 - http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682 - http://www.securityfocus.com/bid/16273 - http://www.osvdb.org/22404 - http://secunia.com/advisories/18459 - http://www.osvdb.org/22403 - http://www.osvdb.org/22410 - http://www.vupen.com/english/advisories/2006/0231 - http://www.osvdb.org/22409 - http://www.osvdb.org/22406 - http://www.osvdb.org/22408 - http://www.osvdb.org/22414 - http://www.osvdb.org/22415 - http://www.osvdb.org/22413
CVE ID: CVE-2006-0314 State: PUBLISHED Published: 2006-01-19T01:00:00Z Last Updated: 2024-09-16T22:44:57.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: PDFdirectory before 1.0 stores sensitive data in plaintext, which allows remote attackers to obtain arbitrary users' passwords by direct queries to the database, possibly via one of the SQL injection vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=382411&group_id=122682 - http://www.osvdb.org/22402
CVE ID: CVE-2006-0315 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php filename, which allows remote attackers to conduct directory traversal attacks, and produces resultant cross-site scripting (XSS) and path disclosure. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16257 - http://www.securityfocus.com/archive/1/422071/100/0/threaded - http://zur.homelinux.com/Advisories/ezdatabase_dir_trans.txt - https://exchange.xforce.ibmcl
e/1/422071/100/0/threaded - http://zur.homelinux.com/Advisories/ezdatabase_dir_trans.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24134 - http://secunia.com/advisories/18043 - http://www.osvdb.org/22684 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24135 - http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0515.html
CVE ID: CVE-2006-0316 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:14.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures (YGP) Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0221 - http://www.osvdb.org/22486 - http://www.kb.cert.org/vuls/id/MIMG-6KRSQP - http://secunia.com/advisories/18521 - http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=new
RSQP - http://secunia.com/advisories/18521 - http://news.com.com/2061-10789_3-6027865.html?part=rss&tag=6027865&subj=news - http://www.securityfocus.com/bid/16262 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24160 - http://securitytracker.com/id?1015494 - http://www.kb.cert.org/vuls/id/715730
CVE ID: CVE-2006-0317 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERY_STRING variable. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18473 - http://www.securityfocus.com/bid/16266 - https://exchange.xforce.ib
References: - http://secunia.com/advisories/18473 - http://www.securityfocus.com/bid/16266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24151 - http://www.vupen.com/english/advisories/2006/0197
CVE ID: CVE-2006-0318 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter in a login action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18467 - http://www.securityfocus.com/bid/16269 - http://www.osvdb.org/22495 - http://evuln.com/vulns/34/summary - http://www.vupen.com/english/advisories/2006/0204 - http://www.securityfocus.com/archive/1/422137/100
vulns/34/summary - http://www.vupen.com/english/advisories/2006/0204 - http://www.securityfocus.com/archive/1/422137/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24131
CVE ID: CVE-2006-0319 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to create arbitrary files via ".." (dot dot) sequences in a (1) PUT, (2) SIZE, and possibly other commands. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22496 - http://marc.info/?l=full-disclosure&m=113717162320654&w=2 - http://secunia.com/advisories/18508 - http://www.securityfocus.com/bid/16321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24190 - http://www.lo
08 - http://www.securityfocus.com/bid/16321 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24190 - http://www.lort.dk/DSR-farmerswife44sp1.pl
CVE ID: CVE-2006-0320 State: PUBLISHED Published: 2006-01-19T01:00:00 Last Updated: 2024-08-07T16:34:13.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24124 - http://evuln.com/vulns/31/summary - http://www.securityfocus.com/archive/1/422068/100/0/threaded - http://www.securityfocus.com/bid/16244 - http://www.vupen.com/e
/www.securityfocus.com/archive/1/422068/100/0/threaded - http://www.securityfocus.com/bid/16244 - http://www.vupen.com/english/advisories/2006/0195 - http://www.osvdb.org/22445
CVE ID: CVE-2006-0321 State: PUBLISHED Published: 2006-01-24T00:00:00 Last Updated: 2024-08-07T16:34:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail 6.3.0 and other versions before 6.3.2 allows remote attackers to cause a denial of service (crash) via crafted e-mail messages that cause a free of an invalid pointer when fetchmail bounces the message to the originator or local postmaster. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2006//Aug/msg00000.html - http://www.securityfocus.com/bid/16365 - http://developer.berlios.de/project/shownotes.php?release_id=8784 - https://exchange.xforce.ibmclou
ocus.com/bid/16365 - http://developer.berlios.de/project/shownotes.php?release_id=8784 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24265 - http://www.securityfocus.com/archive/1/422936/100/0/threaded - http://fetchmail.berlios.de/fetchmail-SA-2006-01.txt - http://www.vupen.com/english/advisories/2006/3101 - http://secunia.com/advisories/21253 - http://secunia.com/advisories/18571 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.443499 - http://www.vupen.com/english/advisories/2006/0300 - http://www.securityfocus.com/bid/19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747 -
19289 - http://www.us-cert.gov/cas/techalerts/TA06-214A.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=348747 - http://www.osvdb.org/22691 - http://securitytracker.com/id?1015527 - http://secunia.com/advisories/18895
CVE ID: CVE-2006-0322 State: PUBLISHED Published: 2006-01-19T21:00:00 Last Updated: 2024-08-07T16:34:13.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability the edit comment formatting functionality in MediaWiki 1.5.x before 1.5.6 and 1.4.x before 1.4.14 allows attackers to cause a denial of service (infinite loop) via "certain malformed links." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0392 - http://lists.suse.com/archive/suse-security-announce/2006-Feb/0001.html - http://sourceforge.net/project/shownotes.php?release_id=386609 - http://secunia.com/advisories/18717 - https://exchange.xfor
://sourceforge.net/project/shownotes.php?release_id=386609 - http://secunia.com/advisories/18717 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24478 - http://secunia.com/advisories/18711
CVE ID: CVE-2006-0323 State: PUBLISHED Published: 2006-03-23T23:00:00 Last Updated: 2024-08-07T16:34:13.867Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in swfformat.dll in multiple RealNetworks products and versions including RealPlayer 10.x, RealOne Player, Rhapsody 3, and Helix Player allows remote attackers to execute arbitrary code via a crafted SWF (Flash) file with (1) a size value that is less than the actual size, or (2) other unspecified manipulations. Additional Analyst Notes: - CVE Program Container: References: - http://www.service.real.com/realplayer/security/03162006_player/en/ - http://secunia.com/advisories/19358 - http://www.novell.com/linux/s
e.real.com/realplayer/security/03162006_player/en/ - http://secunia.com/advisories/19358 - http://www.novell.com/linux/security/advisories/2006_18_realplayer.html - http://secunia.com/advisories/19362 - http://www.vupen.com/english/advisories/2006/1057 - http://www.redhat.com/support/errata/RHSA-2006-0257.html - http://securityreason.com/securityalert/690 - http://secunia.com/advisories/19365 - http://www.gentoo.org/security/en/glsa/glsa-200603-24.xml - http://securitytracker.com/id?1015806 - http://www.securityfocus.com/bid/17202 - http://www.securityfocus.com/archive/1/430621/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25408 - http://secunia.com/advisories/19390 -
0621/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25408 - http://secunia.com/advisories/19390 - http://www.kb.cert.org/vuls/id/231028
CVE ID: CVE-2006-0324 State: PUBLISHED Published: 2006-01-19T21:00:00 Last Updated: 2024-08-07T16:34:13.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24222 - https://sourceforge.net/project/shownotes.php?release_id=387180&group_id=156586 - http://securitytracker.com/id?1015522 - https://sourceforge.net/forum/forum.php?forum_id=532233 - http://www.s
=156586 - http://securitytracker.com/id?1015522 - https://sourceforge.net/forum/forum.php?forum_id=532233 - http://www.securityfocus.com/archive/1/422364/100/0/threaded - http://www.vupen.com/english/advisories/2006/0268 - http://www.securityfocus.com/bid/16319 - http://www.osvdb.org/22670 - http://securityreason.com/securityalert/356 - http://evuln.com/vulns/41/summary.html
CVE ID: CVE-2006-0325 State: PUBLISHED Published: 2006-01-20T21:00:00 Last Updated: 2024-08-07T16:34:13.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etomite Content Management System 0.6, and possibly earlier versions, when downloaded from the web site in January 2006 after January 10, contains a back door in manager/includes/todo.inc.php, which allows remote attackers to execute arbitrary commands via the "cij" parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16336 - http://secunia.com/advisories/18556 - http://www.vupen.com/english/advisories/2006/0283 - http://www.etomite.org/forums/index.php?showtopic=4185 - h
s/18556 - http://www.vupen.com/english/advisories/2006/0283 - http://www.etomite.org/forums/index.php?showtopic=4185 - http://www.osvdb.org/22693 - http://www.securityfocus.com/archive/1/423497/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24254 - http://www.etomite.org/forums/index.php?showtopic=4291 - http://www.lucaercoli.it/advs/etomite.txt - http://www.securityfocus.com/archive/1/423523/100/0/threaded
CVE ID: CVE-2006-0327 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:13.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: TYPO3 3.7.1 allows remote attackers to obtain sensitive information via a direct request to (1) thumbs.php, (2) showpic.php, or (3) tables.php, which causes them to incorrectly define a variable and reveal the path in an error message when a require function call fails. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/422390/100/0/threaded - http://securityreason.com/securityalert/361 - http://www.osvdb.org/22666 - http://bugs.typo3.org/view.php?id=2248 - http://www.irmplc
tyreason.com/securityalert/361 - http://www.osvdb.org/22666 - http://bugs.typo3.org/view.php?id=2248 - http://www.irmplc.com/advisory015.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/24244 - http://www.osvdb.org/22665 - http://secunia.com/advisories/18546 - http://www.vupen.com/english/advisories/2006/0269 - http://www.securityfocus.com/archive/1/422360/100/0/threaded - http://www.osvdb.org/22667
CVE ID: CVE-2006-0328 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Tftpd32 2.81 allows remote attackers to cause a denial of service via format string specifiers in a filename in a (1) GET or (2) SEND request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16333 - http://securityreason.com/securityalert/362 - http://www.securityfocus.com/archive/1/422405/100/0/threaded - http://www.osvdb.org/22661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24250 - http://www.critical.lt/?vulnerabilities/200 - http://
661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24250 - http://www.critical.lt/?vulnerabilities/200 - http://www.kb.cert.org/vuls/id/632633 - http://www.vupen.com/english/advisories/2006/0263 - http://www.critical.lt/research/tftpd32_281_dos.txt - http://secunia.com/advisories/18539
CVE ID: CVE-2006-0329 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:13.787Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in HITSENSER Data Mart Server BS, BS-S, BS-M, BS-L, and EX allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.hitachi-support.com/security_e/vuls_e/HS05-026_e/index-e.html - http://www.vupen.com/english/advisories/2006/0266 - http://www.osvdb.org/22669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24240 - http://www.securityfocus.com/bid/16326 - http://secunia.com/advisories/18553
force.ibmcloud.com/vulnerabilities/24240 - http://www.securityfocus.com/bid/16326 - http://secunia.com/advisories/18553 - http://securitytracker.com/id?1015519
CVE ID: CVE-2006-0330 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:13.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Gallery before 1.5.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving the user name (fullname). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24247 - http://secunia.com/advisories/21502 - http://www.osvdb.org/22660 - http://www.us.debian.org/security/2006/dsa-1148 - http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml - http://secunia.com/advisorie
an.org/security/2006/dsa-1148 - http://www.gentoo.org/security/en/glsa/glsa-200601-13.xml - http://secunia.com/advisories/18557 - http://www.securityfocus.com/bid/16334 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=325285 - http://secunia.com/advisories/18627 - http://www.vupen.com/english/advisories/2006/0282 - http://gallery.menalto.com/page/gallery_1_5_2_release
CVE ID: CVE-2006-0331 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/363 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24258 - http://www.securityfocus.com/archive/1/422414/100/0/threaded - http://www.squirrelmail.org/plugin_view.php?id=117
CVE ID: CVE-2006-0332 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pantomime in Ecartis 1.0.0 snapshot 20050909 stores e-mail attachments in a publicly accessible directory, which may allow remote attackers to upload arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=listar-dev&m=113770802408358&w=2 - http://secunia.com/advisories/18524 - http://www.vupen.com/english/advisories/2006/0260 - http://marc.info/?l=listar-dev&m=113732552708625&w=2 - http://www.securityfocus.com/bid/16317 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24220
CVE ID: CVE-2006-0333 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ar-blog 5.2 allows remote attackers to inject arbitrary web script or HTML via the (1) month or (2) year parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24246 - http://www.securityfocus.com/archive/1/422386/100/0/threaded - http://www.securityfocus.com/archive/1/435205/100/0/threaded
CVE ID: CVE-2006-0334 State: PUBLISHED Published: 2006-01-21T00:00:00 Last Updated: 2024-08-07T16:34:14.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in My Amazon Store Manager 1.0 allows remote attackers to inject arbitrary web script or HTML via the Keywords parameter. NOTE: some sources claim that the affected parameter is "q", but the only public archive of the original researcher notification shows an XSS manipulation in "Keywords". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18535 - http://www.vupen.com/english/advisories/2006/0252 - https://exchange.xforce.ibmclo
http://secunia.com/advisories/18535 - http://www.vupen.com/english/advisories/2006/0252 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24230 - http://osvdb.org/ref/22/22626-my_amazon.txt - http://www.securityfocus.com/bid/16312 - http://www.osvdb.org/22626