Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4857 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21980 - http://securityreason.com/securityalert/1599 - http://www.vupen.com/english/advisories/2006/3662 - http://www.securityfocus.com/archive/1/446074/100/0/threaded - http://www.securityfocus.com/bid/20033
sories/2006/3662 - http://www.securityfocus.com/archive/1/446074/100/0/threaded - http://www.securityfocus.com/bid/20033 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28964
CVE ID: CVE-2006-4858 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.328Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3610 - http://www.securityfocus.com/bid/20018 - http://securityreason.com/securityalert/1598 - http://secunia.com/advisories/21943 - https://exchange.xforce.ibmcloud.com/vulnera
curityreason.com/securityalert/1598 - http://secunia.com/advisories/21943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28959 - http://www.securityfocus.com/archive/1/446110/100/0/threaded - https://www.exploit-db.com/exploits/2367
CVE ID: CVE-2006-4859 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20044 - https://www.exploit-db.com/exploits
tes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20044 - https://www.exploit-db.com/exploits/2370
CVE ID: CVE-2006-4860 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, and (12) imanager.php in Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/31014 - http://www.limboportal.com/index.php/option/downloads/task/download/id/110
: References: - http://www.osvdb.org/31014 - http://www.limboportal.com/index.php/option/downloads/task/download/id/110 - http://www.osvdb.org/31022 - http://www.osvdb.org/31016 - http://www.osvdb.org/31012 - http://www.osvdb.org/31015 - http://www.osvdb.org/31018 - http://www.osvdb.org/31021 - http://www.osvdb.org/31019 - http://www.osvdb.org/31045 - http://www.osvdb.org/31020 - http://www.limboportal.com/index.php/option/downloads/task/info/id/110/Itemid/46 - http://www.osvdb.org/31017 - http://www.osvdb.org/31013
CVE ID: CVE-2006-4861 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:23:41.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1601 - http://www.securityfocus.com/archive/1/446078/100/0/threaded
CVE ID: CVE-2006-4862 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:32:21.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.aspx in easypage allows remote attackers to execute arbitrary SQL commands via the srch parameter in the Search page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20049 - http://www.securityfocus.com/archive/1/446122/100/0/threaded
CVE ID: CVE-2006-4863 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:32:21.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2) stats.php, (3) detail.php, or (4) erase.php. NOTE: CVE and a third party dispute this vulnerability, because the langfile parameter is set to english.php in each file. NOTE: CVE also disputes a later report of this vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2 Additional Analyst Notes: - CVE Prog
is vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2 Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446062/100/0/threaded - http://securityvulns.com/Rdocument844.html - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/archive/1/477363/100/0/threaded - http://www.securityfocus.com/archive/1/482006/100/0/threaded - http://securityvulns.com/source26994.html - http://marc.info/?l=bugtraq&m=115860241806867&w=2
CVE ID: CVE-2006-4864 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:32:21.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3658 - http://www.nyubicrew.org/adv/home_edition2001-adv-01.txt - http://secunia.com/advisories/21971 - http://securityreason.com/securityalert/1603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28992 - http://www.securityfocus.com/archi
com/securityalert/1603 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28992 - http://www.securityfocus.com/archive/1/446106/100/0/threaded
CVE ID: CVE-2006-4865 State: PUBLISHED Published: 2006-09-19T18:00:00 Last Updated: 2024-08-07T19:32:21.666Z Vendors: n/a Products: n/a Problem Types: n/a Description: Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1604 - http://www.securityfocus.com/archive/1/446112/100/0/threaded
CVE ID: CVE-2006-4866 State: PUBLISHED Published: 2006-09-19T19:00:00Z Last Updated: 2024-09-16T18:43:30.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20034 - http://www.netragard.com/pdfs/research/apple-kext-tools-20060822.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049452.html
CVE ID: CVE-2006-4867 State: PUBLISHED Published: 2006-09-19T19:00:00 Last Updated: 2024-08-07T19:32:21.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is "Forum." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3660 - https://www.exploit-db.com/exploits/2378 - http://secunia.com/advisories/21956 - http://www.securityfocus.com/bid/20069 - http://www.gnuturk.com/mods.php?go=Forums&p=vtop&t_id=138
CVE ID: CVE-2006-4868 State: PUBLISHED Published: 2006-09-19T19:00:00 Last Updated: 2024-08-07T19:32:21.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.securiteam.com/index.php/archives/624 - http://www.securityfocus.com/archive/1/446881/100/200/threaded - http://www.securityfocus.com/bi
ndex.php/archives/624 - http://www.securityfocus.com/archive/1/446881/100/200/threaded - http://www.securityfocus.com/bid/20096 - http://www.securityfocus.com/archive/1/446523/100/0/threaded - http://www.securityfocus.com/archive/1/446505/100/0/threaded - http://www.vupen.com/english/advisories/2006/3679 - http://www.kb.cert.org/vuls/id/416092 - http://www.microsoft.com/technet/security/advisory/925568.mspx - http://support.microsoft.com/kb/925486 - http://secunia.com/advisories/21989 - http://www.securityfocus.com/archive/1/448552/100/0/threaded - http://www.securityfocus.com/archive/1/448552/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055
com/archive/1/448552/100/0/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-055 - http://www.us-cert.gov/cas/techalerts/TA06-262A.html - http://www.securityfocus.com/archive/1/446528/100/0/threaded - http://www.osvdb.org/28946 - http://securitytracker.com/id?1016879 - http://sunbeltblog.blogspot.com/2006/09/seen-in-wild-zero-day-exploit-being.html - http://www.securityfocus.com/archive/1/447070/100/0/threaded - http://www.securityfocus.com/archive/1/446378/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29004
CVE ID: CVE-2006-4869 State: PUBLISHED Published: 2006-09-19T19:00:00 Last Updated: 2024-08-07T19:32:21.645Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallery_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21897 - http://www.securityfocus.com/bid/19993 - http://www.osvdb.org/28763 - https://www.exploit-db.com/exploits/2357 - http://www.vupen.com/english/advisories/2006/3595
CVE ID: CVE-2006-4870 State: PUBLISHED Published: 2006-09-19T19:00:00 Last Updated: 2024-08-07T19:32:22.290Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2377 - http://secunia.com/advisories/21955 - http://www.osvdb.org/28923 - http://www.securityfocus.com/bid/20068 - http://www.osvdb.org/28924 - http://www.vupen.com/english/advisories/
g/28923 - http://www.securityfocus.com/bid/20068 - http://www.osvdb.org/28924 - http://www.vupen.com/english/advisories/2006/3659 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28981
CVE ID: CVE-2006-4871 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29003 - http://securityreason.com/securityalert/1610 - http://www.securityfocus.com/archive/1/446222/100/0/threaded - http://secunia.com/advisories/22006 - http://www.vupen.com/english/advisories/2006/3680 - http://securitytracker.c
ded - http://secunia.com/advisories/22006 - http://www.vupen.com/english/advisories/2006/3680 - http://securitytracker.com/id?1016878 - http://www.securityfocus.com/bid/20089
CVE ID: CVE-2006-4872 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446319/100/0/threaded - http://www.securityfocus.com/bid/20080 - http://www.vupen.com/english/advisories/2006/3689 - http://secunia.com/advisories/22013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29015 - http://securityreason.com/securityal
com/advisories/22013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29015 - http://securityreason.com/securityalert/1609 - http://securitytracker.com/id?1016882
CVE ID: CVE-2006-4873 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php, (2) modules/register.php, (3) modules/poll.php, (4) modules/panel.php, (5) modules/pm.php, (6) modules/news.php, (7) modules/templates_change.php, (8) modules/users.php, (9) modules/misc.php, (10) modules/masspm.php, (11) modules/mass-email.php, (12) modules/main-nav.php, (13) modules/login.php, (14) modules/layout.php, (15) modules/hq.php, (16) modules/forum.php, (17) modules/forum-admin.php, (18) modules/e
.php, (14) modules/layout.php, (15) modules/hq.php, (16) modules/forum.php, (17) modules/forum-admin.php, (18) modules/events.php, (19) modules/emoticons.php, (20) modules/download.php, (21) modules/blocks.php, (22) modules/ban.php, (23) modules/badwords.php, (24) modules/ads.php, or (25) modules/admin.php, which reveals the installation path in various error messages. NOTE: The modules/online.php vector is already covered by CVE-2006-1679. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446064/100/0/threaded - http://www.securityfocus.com/bid/20048 - http://securityreason.com/securityalert/1608
CVE ID: CVE-2006-4874 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1) language[Admin name] and (2) language[Admin back] parameters in (a) modules/blocks.php; the (3) language[Register title] and (4) language[Register title2] parameters in (b) modules/register.php; the (5) language[Mass-Email form title], (6) language[Mass-Email form desc], (7) language[Mass-Email form desc2] (8) language[Mass-Email form desc3], and (9) language[Mass-Email form desc4] parame
(7) language[Mass-Email form desc2] (8) language[Mass-Email form desc3], and (9) language[Mass-Email form desc4] parameters in (c) modules/mass-email.php; the (10) language[Forgotten title], (11) language[Forgotten desc], (12) language[Forgotten desc2], (13) language[Forgotten desc3], (14) language[Forgotten desc4], and (15) language[Forgotten desc5] parameters in (d) modules/register.php; and the (16) language[Search view desc], (17) language[Search view desc2], (18) language[Search view desc3], (19) language[Search view desc4], (20) language[Search view desc5], (21) language[Search view desc6], (22) language[Search view desc7], and (23) language[Search view desc8] parameters in (e) module
uage[Search view desc6], (22) language[Search view desc7], and (23) language[Search view desc8] parameters in (e) modules/search.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446064/100/0/threaded - http://www.securityfocus.com/bid/20048 - http://securityreason.com/securityalert/1608
CVE ID: CVE-2006-4875 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files, and possibly files with arbitrary extensions, to gallery/albums/public. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446064/100/0/threaded - http://www.securityfocus.com/bid/20048 - http://securityreason.com/securityalert/1608
CVE ID: CVE-2006-4876 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446064/100/0/threaded - http://www.securityfocus.com/bid/20048 - http://securityreason.com/securityalert/1608
CVE ID: CVE-2006-4877 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20061 - http://www.vupen.com/english/advisories/2006/3688 - http://www.osvdb.org/28966 - http://securityreason.com/securityalert/1607
/www.vupen.com/english/advisories/2006/3688 - http://www.osvdb.org/28966 - http://securityreason.com/securityalert/1607 - http://www.osvdb.org/28967 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded - http://www.osvdb.org/28965
CVE ID: CVE-2006-4878 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20061 - http://www.osvdb.org/28964 - http://www.vupen.com/english/advisories/2006/3688 - h
p://www.securityfocus.com/bid/20061 - http://www.osvdb.org/28964 - http://www.vupen.com/english/advisories/2006/3688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29673 - http://www.securityfocus.com/bid/20616 - https://www.exploit-db.com/exploits/2593 - http://securityreason.com/securityalert/1607 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded
CVE ID: CVE-2006-4879 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:21.656Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20061 - http://www.vupen.com/english/advisories/2006/3688 - http://securityreason.com/securityalert/1607 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded
CVE ID: CVE-2006-4880 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20061 - http://www.osvdb.org/28973 - http://www.vupen.com/english/advisories/2006/3688 - http://securityreason.com/securityalert/1607 - http://secunia.com/advisories/22014 - http://www.sec
visories/2006/3688 - http://securityreason.com/securityalert/1607 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded
CVE ID: CVE-2006-4881 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error and (4) txt_templatenotexist parameters in (c) template.php; the (5) split parameter in certain files, as demonstrated by (d) editprofile.php, (e) search.php, (f) index.php, and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow
ile.php, (e) search.php, (f) index.php, and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) txt_logout parameter in (i) loginline.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28969 - http://www.securityfocus.com/bid/20061 - http://www.vupen.com/english/advisories/2006/3688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29017 - http://www.osvdb.org/28972 - http://www.osvdb.org/28971 - http://securityreason.com/securityalert/1607 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded - http:
yalert/1607 - http://secunia.com/advisories/22014 - http://www.securityfocus.com/archive/1/446318/100/0/threaded - http://www.osvdb.org/28968 - http://www.osvdb.org/28970
CVE ID: CVE-2006-4882 State: PUBLISHED Published: 2006-09-19T21:00:00 Last Updated: 2024-08-07T19:32:22.074Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20083 - http://securitytracker.com/id?1016881 - http://www.vupen.com/english/advisories/2006/3683 - http://www.securityfocus.com/archive/1/446254/100/0/threaded - http://secunia.com/advisories/21987 - http://securityreason.com/securityalert/1606 - https://exchange.xforce.i
hreaded - http://secunia.com/advisories/21987 - http://securityreason.com/securityalert/1606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28980