Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4432 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the final component of the PHP session identifier (PHPSESSID). NOTE: in some cases, this issue can be leveraged to perform direct static code injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444263/100/0/threaded - http://www.osvdb.org/28232 - http://securityreason.com/securityalert/1466 - http://www.hardened-ph
4263/100/0/threaded - http://www.osvdb.org/28232 - http://securityreason.com/securityalert/1466 - http://www.hardened-php.net/advisory_052006.128.html - http://secunia.com/advisories/21573 - http://www.vupen.com/english/advisories/2006/3388 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28576
CVE ID: CVE-2006-4433 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third party session handlers, which might make it easier for remote attackers to exploit other vulnerabilities by inserting PHP code into the PHPSESSID, which is stored in the session file. NOTE: it could be argued that this not a vulnerability in PHP itself, rather a design limitation that enables certain attacks against session handlers that do not account for this limitation. Additional Analyst Notes: - CVE Progr
certain attacks against session handlers that do not account for this limitation. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28233 - http://www.securityfocus.com/archive/1/444263/100/0/threaded - http://securityreason.com/securityalert/1466 - http://www.osvdb.org/28273 - http://www.hardened-php.net/advisory_052006.128.html - http://secunia.com/advisories/21573 - http://www.vupen.com/english/advisories/2006/3388
CVE ID: CVE-2006-4434 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via a long "header line", which causes a previously freed variable to be referenced. NOTE: the original developer has disputed the severity of this issue, saying "The only denial of service that is possible here is to fill up the disk with core dumps if the OS actually generates different core dumps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process
umps (which is unlikely)... the bug is in the shutdown code (finis()) which leads directly to exit(3), i.e., the process would terminate anyway, no mail delivery or receiption is affected." Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata.html#sendmail3 - http://www.attrition.org/pipermail/vim/2006-August/000999.html - http://securitytracker.com/id?1016753 - http://secunia.com/advisories/21637 - http://www.vupen.com/english/advisories/2006/3994 - http://www.osvdb.org/28193 - http://secunia.com/advisories/21749 - http://secunia.com/advisories/21700 - http://www.debian.org/security/2006/dsa-1164 - http://secunia.com/advisories/21641 - http://www.se
om/advisories/21700 - http://www.debian.org/security/2006/dsa-1164 - http://secunia.com/advisories/21641 - http://www.sendmail.org/releases/8.13.8.html - http://www.vupen.com/english/advisories/2006/3393 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:156 - http://www.securityfocus.com/bid/19714 - http://www.novell.com/linux/security/advisories/2006_21_sr.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102664-1 - http://secunia.com/advisories/22369 - http://www.openbsd.org/errata38.html#sendmail3 - http://secunia.com/advisories/21696
CVE ID: CVE-2006-4435 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD 3.8, 3.9, and possibly earlier versions allows context-dependent attackers to cause a denial of service (kernel panic) by allocating more semaphores than the default. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28195 - http://securitytracker.com/id?1016756 - http://secunia.com/advisories/21642 - http://www.securityfocus.com/bid/19713 - http://www.openbsd.org/errata.html#sem - http://www.openbsd.org/errata38.html#sem - https://exchange.xforce.ibmcloud.com/vulnerabilities/28617
CVE ID: CVE-2006-4436 State: PUBLISHED Published: 2006-08-29T00:00:00 Last Updated: 2024-08-07T19:06:07.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of size 0 when isakmpd acts as a responder during SA negotiation, which allows remote attackers to replay IPSec packets and bypass the replay protection. Additional Analyst Notes: - CVE Program Container: References: - http://www.openbsd.org/errata38.html#isakmpd - http://www.osvdb.org/28194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28645 - http://securitytracker.com/id?1016757 - http://secunia.com/a
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/28645 - http://securitytracker.com/id?1016757 - http://secunia.com/advisories/21652 - http://www.debian.org/security/2006/dsa-1175 - http://www.securityfocus.com/bid/19712 - http://secunia.com/advisories/21905 - http://www.openbsd.org/errata.html#isakmpd
CVE ID: CVE-2006-4437 State: PUBLISHED Published: 2006-09-14T22:00:00 Last Updated: 2024-08-07T19:06:07.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in Tagger LE allows remote attackers to execute arbitrary PHP code via the query string in (1) tags.php, (2) sign.php, and (3) admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3606 - http://secunia.com/secunia_research/2006-62/advisory/ - http://www.securityfocus.com/bid/20023 - http://www.osvdb.org/28756 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28941 - http://secunia.com/advisories/21449 - http://www.securi
6 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28941 - http://secunia.com/advisories/21449 - http://www.securityfocus.com/archive/1/446010/100/0/threaded - http://www.osvdb.org/28755 - http://www.osvdb.org/28757 - http://securityreason.com/securityalert/1584
CVE ID: CVE-2006-4438 State: PUBLISHED Published: 2006-09-20T23:00:00 Last Updated: 2024-08-07T19:06:07.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20119 - http://secunia.com/advisories/22019 - http://www.vupen.com/english/advisories/2006/3719 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/049552.html
CVE ID: CVE-2006-4439 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:06:07.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22992 - http://secunia.com/advisories/21633 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1 - http://support.avaya.com/el
a.com/advisories/21633 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1 - http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm - http://www.osvdb.org/28203 - http://www.securityfocus.com/bid/19730 - http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm - http://www.vupen.com/english/advisories/2006/3397 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010
CVE ID: CVE-2006-4440 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:06:07.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in main.php in Ay System Solutions CMS 2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://aysad.net/download/logs/WCSv2.7_upgrades.log - http://secunia.com/advisories/21661 - http://www.osvdb.org/28245 - http://www.vupen.com/english/advisories/2006/3394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28593 - https://www.exploit-db.com/explo
ish/advisories/2006/3394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28593 - https://www.exploit-db.com/exploits/2263 - http://www.securityfocus.com/bid/19735
CVE ID: CVE-2006-4441 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:14:46.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Ay System Solutions CMS 2.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path[ShowProcessHandle] parameter to (1) home.php or (2) impressum.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21661 - http://www.vupen.com/english/advisories/2006/3394 - http://www.osvdb.org/28246 - http
p://secunia.com/advisories/21661 - http://www.vupen.com/english/advisories/2006/3394 - http://www.osvdb.org/28246 - http://www.osvdb.org/28247
CVE ID: CVE-2006-4442 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:14:46.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PHP iAddressBook before 0.95 allows remote attackers to inject arbitrary web script or HTML via the cat_name parameter, related to adding a category. (categories field). NOTE: some details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://wacha.ch/wiki/addressbook:changelog - http://www.securityfocus.com/bid/19698 - http://secunia.com/advisories/21611 - http://www.vupen.com/english/advisories/2006/3371 - http://www.osvd
om/bid/19698 - http://secunia.com/advisories/21611 - http://www.vupen.com/english/advisories/2006/3371 - http://www.osvdb.org/28174
CVE ID: CVE-2006-4443 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:14:46.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in myajaxphp.php in AlstraSoft Video Share Enterprise allows remote attackers to execute arbitrary PHP code via a URL in the config[BASE_DIR] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28583 - http://www.securityfocus.com/archive/1/444416/100/0/threaded - http://www.securityfocus.com/bid/19724 - http://securityreason.com/securityalert/1467
CVE ID: CVE-2006-4444 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:14:46.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the (1) tid parameter in the (a) todo/view (aka TODO List View), (b) todo/modify (aka TODO List Modify), or (c) todo/delete functionality; the (2) pid parameter in the (d) workflow/view or (e) workflow/print functionality; the (3) uid parameter in the (f) schedule/user_view, (g) phonemessage/add, (h) phonemessage/history, or (i) schedule/view functionality; the (4) cid parameter in (j
er_view, (g) phonemessage/add, (h) phonemessage/history, or (i) schedule/view functionality; the (4) cid parameter in (j) todo/index; the (5) iid parameter in the (k) memo/view or (l) memo/print functionality; or the (6) event parameter in the (m) schedule/view functionality. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21664 - http://cybozu.co.jp/products/dl/notice_060825/ - http://vuln.sg/cybozugaroon-en.html - http://www.securityfocus.com/bid/19731 - http://www.osvdb.org/28364 - http://www.osvdb.org/28363 - http://www.osvdb.org/28365 - http://www.vupen.com/english/advisories/2006/3399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
db.org/28365 - http://www.vupen.com/english/advisories/2006/3399 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28594 - http://www.osvdb.org/28362 - http://www.osvdb.org/28361 - http://www.osvdb.org/28366
CVE ID: CVE-2006-4445 State: PUBLISHED Published: 2006-08-29T23:00:00 Last Updated: 2024-08-07T19:14:46.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CuteNews 1.3.x allow remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter to (1) show_news.php or (2) search.php. NOTE: CVE analysis as of 20060829 has not identified any scenarios in which these vectors could result in remote file inclusion Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444733/100/0/threaded - http://www.osvdb.org/29842 - https://exchange.xforce.ibmcloud.com/vulnerabilit
cus.com/archive/1/444733/100/0/threaded - http://www.osvdb.org/29842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28582 - http://archives.neohapsis.com/archives/bugtraq/2006-09/0040.html - http://www.securityfocus.com/archive/1/444385/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-August/001000.html
CVE ID: CVE-2006-4446 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in DirectAnimation.PathControl COM object (daxctle.ocx) in Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a Spline function call whose first argument specifies a large number of points. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21910 - http://securityreason.com/securityalert/1468 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.securityfocus.com/arc
yreason.com/securityalert/1468 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.securityfocus.com/archive/1/444504/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28608 - http://www.osvdb.org/28841 - http://www.xsec.org/index.php?module=releases&act=view&type=1&id=19 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A437 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067 - http://securitytracker.com/id?1016764 - http://www.securityfocus.com/bid/19738
CVE ID: CVE-2006-4447 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.372Z Vendors: n/a Products: n/a Problem Types: n/a Description: X.Org and XFree86, including libX11, xdm, xf86dga, xinit, xload, xtrans, and xterm, does not check the return values for setuid and seteuid calls when attempting to drop privileges, which might allow local users to gain privileges by causing those calls to fail, such as by exceeding a ulimit. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21660 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:160 - http://lists.freedesktop.org/archives/xorg/2006-June/016146.html - ht
riva.com/security/advisories?name=MDKSA-2006:160 - http://lists.freedesktop.org/archives/xorg/2006-June/016146.html - http://www.kb.cert.org/vuls/id/300368 - http://www.vupen.com/english/advisories/2006/3409 - http://secunia.com/advisories/21693 - http://www.debian.org/security/2006/dsa-1193 - http://security.gentoo.org/glsa/glsa-200704-22.xml - http://secunia.com/advisories/22332 - http://www.vupen.com/english/advisories/2007/0409 - http://security.gentoo.org/glsa/glsa-200608-25.xml - http://www.securityfocus.com/bid/23697 - http://secunia.com/advisories/25059 - http://secunia.com/advisories/25032 - http://mail.gnome.org/archives/beast/2006-December/msg00025.html - http://www.securityfocus.
unia.com/advisories/25032 - http://mail.gnome.org/archives/beast/2006-December/msg00025.html - http://www.securityfocus.com/bid/19742 - http://secunia.com/advisories/21650
CVE ID: CVE-2006-4448 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in interact 2.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) CONFIG[BASE_PATH] parameter in (a) admin/autoprompter.php and (b) includes/common.inc.php, and the (2) CONFIG[LANGUAGE_CPATH] parameter in (c) admin/autoprompter.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19739 - http://www.securityfocus.com/archive/1/444526/100/0/threaded - https://exchange.xfo
://www.securityfocus.com/bid/19739 - http://www.securityfocus.com/archive/1/444526/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28485 - https://www.exploit-db.com/exploits/2218 - http://securityreason.com/securityalert/1471
CVE ID: CVE-2006-4449 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in attachment.php in MyBulletinBoard (MyBB) 1.1.7 and possibly other versions allows remote attackers to inject arbitrary web script or HTML via a GIF image that contains URL-encoded Javascript, which is rendered by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/444414/100/0/threaded - http://securityreason.com/securityalert/1469 - http://secunia.com/advisories/21645 - http://www.securityfocus.com/bid/19718 - ht
ecurityreason.com/securityalert/1469 - http://secunia.com/advisories/21645 - http://www.securityfocus.com/bid/19718 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28587 - http://www.mybboard.com/archive.php?nid=18
CVE ID: CVE-2006-4450 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: usercp_avatar.php in PHPBB 2.0.20, when avatar uploading is enabled, allows remote attackers to use the server as a web proxy by submitting a URL to the avatarurl parameter, which is then used in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1470 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0238.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26537 - http://www.securityfocus.com/bid/17965 - http://secunia.com/advisories/2009
.xforce.ibmcloud.com/vulnerabilities/26537 - http://www.securityfocus.com/bid/17965 - http://secunia.com/advisories/20093
CVE ID: CVE-2006-4451 State: PUBLISHED Published: 2006-08-30T01:00:00 Last Updated: 2024-08-07T19:14:46.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in CJ Tag Board 3.0 allows remote attackers to execute arbitrary PHP code via the (1) User-Agent HTTP header in tag.php, which is executed by all.php, and (2) the banned parameter in admin_index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21561 - http://secunia.com/secunia_research/2006-61/advisory/ - http://www.securityfocus.com/bid/19748 - http://www.vupen.com/english/advisories/2006/3406
CVE ID: CVE-2006-4452 State: PUBLISHED Published: 2006-08-30T15:00:00 Last Updated: 2024-08-07T19:14:46.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in security/include/_class.security.php in Web3news 0.95 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PHPSECURITYADMIN_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28618 - http://www.securityfocus.com/bid/19744 - http://secunia.com/advisories/21640 - http://www.osvdb.org/28248
ities/28618 - http://www.securityfocus.com/bid/19744 - http://secunia.com/advisories/21640 - http://www.osvdb.org/28248 - https://www.exploit-db.com/exploits/2269
CVE ID: CVE-2006-4453 State: PUBLISHED Published: 2006-08-30T15:00:00 Last Updated: 2024-08-07T19:14:46.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PmWiki before 2.1.18 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving "table markups". Additional Analyst Notes: - CVE Program Container: References: - http://www.pmichaud.com/wiki/PmWiki/ChangeLog - http://www.osvdb.org/28268 - http://secunia.com/advisories/21667 - http://www.securityfocus.com/bid/19747
CVE ID: CVE-2006-4454 State: PUBLISHED Published: 2006-08-30T15:00:00 Last Updated: 2024-08-07T19:14:46.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28619 - http://www.osvdb.org/28238 - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0741.html - http://www.securityfocus.com/bid/19745
CVE ID: CVE-2006-4455 State: PUBLISHED Published: 2006-08-30T15:00:00 Last Updated: 2024-08-07T19:14:46.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (crash) via unspecified vectors involving the PRIVMSG command. NOTE: the vendor has disputed this vulnerability, stating that it does not affect 2.6.7 "or any recent version" Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28325 - http://www.xchat.org/ - http://www.securityfocus.com/bid/19398 - https://www.exploit-db.com/exploits/2124 - http://marc.info/
//www.xchat.org/ - http://www.securityfocus.com/bid/19398 - https://www.exploit-db.com/exploits/2124 - http://marc.info/?l=bugtraq&m=115523184321922&w=2 - http://forum.xchat.org/viewtopic.php?t=2918 - https://www.exploit-db.com/exploits/2147 - http://securitytracker.com/id?1016687
CVE ID: CVE-2006-4456 State: PUBLISHED Published: 2006-08-31T10:00:00 Last Updated: 2024-08-07T19:14:46.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3411 - https://www.exploit-db.com/exploits/2275 - http://securitytracker.com/id?1016768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28623 - http://www.securityfocus.com/bid/19752 - http://www.osvdb.org/28291 - http://secunia.com/