Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
osvdb.org/25062 - http://pridels0.blogspot.com/2006/04/kmail-23-vuln.html - http://secunia.com/advisories/19755 - http://www.osvdb.org/25063 - http://www.osvdb.org/25064 - http://www.vupen.com/english/advisories/2006/1564 - http://www.osvdb.org/25061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26117
CVE ID: CVE-2006-2105 State: PUBLISHED Published: 2006-04-29T10:00:00Z Last Updated: 2024-09-16T18:55:54.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Jupiter CMS 1.1.4 and 1.1.5 allows remote attackers to read arbitrary files via ".." sequences terminated by a %00 (null) character in the n parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17716 - http://downloads.securityfocus.com/vulnerabilities/exploits/jupitercms-lteq1.1.5-local-file-include.txt
CVE ID: CVE-2006-2106 State: PUBLISHED Published: 2006-04-29T10:00:00 Last Updated: 2024-08-07T17:35:31.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Edgewall Software Trac 0.9.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors related to a "wiki macro." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19870 - http://jvn.jp/jp/JVN%2384091359/index.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26125 - http://www.edgewall.com/blog/news/trac_0_9_5.html - http://www.vupen.com/english/advisories/2006/1557 - http://securitytr
ttp://www.edgewall.com/blog/news/trac_0_9_5.html - http://www.vupen.com/english/advisories/2006/1557 - http://securitytracker.com/id?1015986 - http://www.securityfocus.com/bid/17741
CVE ID: CVE-2006-2107 State: PUBLISHED Published: 2006-04-29T10:00:00 Last Updated: 2024-08-07T17:35:31.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in BL4 SMTP Server 0.1.4 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long argument to the (1) EHLO, (2) MAIL FROM, and (3) RCPT TO commands. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26114 - http://advisories.echo.or.id/adv/adv30-theday-2006.txt - http://www.securityfocus.com/bid/17714 - http://www.securityfocus.com/archive/1/43232
.or.id/adv/adv30-theday-2006.txt - http://www.securityfocus.com/bid/17714 - http://www.securityfocus.com/archive/1/432329/100/0/threaded
CVE ID: CVE-2006-2108 State: PUBLISHED Published: 2006-04-29T10:00:00 Last Updated: 2024-08-07T17:35:31.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: parser.exe in Océ (OCE) 3121/3122 Printer allows remote attackers to cause a denial of service (crash or reboot) via a long request, possibly triggering a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25000 - https://www.exploit-db.com/exploits/1718 - http://www.securityfocus.com/bid/17715 - http://secunia.com/advisories/19847 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26123
CVE ID: CVE-2006-2109 State: PUBLISHED Published: 2006-05-02T10:00:00 Last Updated: 2024-08-07T17:35:31.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0.11, and possibly other versions before 2.0.12, allows remote attackers to inject arbitrary web script or HTML via parameters that are set as global variables within the program, as demonstrated using the table parameter to login.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26211 - http://secunia.com/advisories/19937 - https://www.kl
ces: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26211 - http://secunia.com/advisories/19937 - https://www.klink.name/security/aklink-sa-2006-001-jsboard-xss.txt - http://www.securityfocus.com/bid/17778 - http://www.securityfocus.com/archive/1/432714/100/0/threaded - http://www.vupen.com/english/advisories/2006/1636 - http://www.osvdb.org/25222
CVE ID: CVE-2006-2110 State: PUBLISHED Published: 2006-05-01T19:00:00 Last Updated: 2024-08-07T17:35:31.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Virtual Private Server (Vserver) 2.0.x before 2.0.2-rc18 and 2.1.x before 2.1.1-rc18 provides certain context capabilities (ccaps) that allow local guest users to perform operations that were only intended to be allowed by the guest-root. Additional Analyst Notes: - CVE Program Container: References: - http://list.linux-vserver.org/archive/vserver/msg13167.html - http://www.securityfocus.com/bid/17842 - http://www.debian.org/security/2006/dsa-1060 - http://www.vupen.com/english/advisories/2006/1661 - http://secunia.com/advisor
//www.debian.org/security/2006/dsa-1060 - http://www.vupen.com/english/advisories/2006/1661 - http://secunia.com/advisories/19961 - http://secunia.com/advisories/20206 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26285 - http://dev.croup.de/proj/gentoo-vps/browser/vserver-sources/2.0.1-r4/4915_vs2.0.1-vxcapable-fix.patch
CVE ID: CVE-2006-2111 State: PUBLISHED Published: 2006-05-01T19:00:00 Last Updated: 2024-08-07T17:35:31.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605 - http://secunia.com/advisories/19738 - http://secunia.com/Internet_Explore
efinition/oval%3Aorg.mitre.oval%3Adef%3A1605 - http://secunia.com/advisories/19738 - http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/ - http://secunia.com/advisories/22477 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26281 - http://www.securityfocus.com/archive/1/449883/100/200/threaded - http://securitytracker.com/id?1016005 - http://www.securityfocus.com/archive/1/449917/100/0/threaded - http://www.securityfocus.com/archive/1/471947/100/0/threaded - http://www.osvdb.org/25073 - http://www.securityfocus.com/bid/17717 - http://www.vupen.com/english/advisories/200
aded - http://www.osvdb.org/25073 - http://www.securityfocus.com/bid/17717 - http://www.vupen.com/english/advisories/2006/1558 - http://www.us-cert.gov/cas/techalerts/TA07-163A.html - http://www.kb.cert.org/vuls/id/783761 - http://www.vupen.com/english/advisories/2007/2154 - http://www.securityfocus.com/archive/1/471947/100/0/threaded
CVE ID: CVE-2006-2112 State: PUBLISHED Published: 2006-08-25T01:00:00 Last Updated: 2024-08-07T17:35:31.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, allows remote attackers to use the FTP printing interface as a proxy ("FTP bounce") by using arbitrary PORT arguments to connect to systems for which access would be otherwise restricted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19711 - http://www.vupen.com/english
lyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19711 - http://www.vupen.com/english/advisories/2006/3401 - http://www.osvdb.org/28249 - http://secunia.com/advisories/21630 - http://marc.info/?l=bugtraq&m=115652437223454&w=2 - http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities - https://exchange.xforce.ibmcloud.com/vulnerabilities/28637 - http://www.securityfocus.com/archive/1/444321/100/0/threaded - http://secunia.com/advisories/22463
CVE ID: CVE-2006-2113 State: PUBLISHED Published: 2006-08-25T01:00:00 Last Updated: 2024-08-07T17:35:31.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The embedded HTTP server in Fuji Xerox Printing Systems (FXPS) print engine, as used in products including (1) Dell 3000cn through 5110cn and (2) Fuji Xerox DocuPrint firmware before 20060628 and Network Option Card firmware before 5.13, does not properly perform authentication for HTTP requests, which allows remote attackers to modify system configuration via crafted requests, including changing the administrator password or causing a denial of service to the print server. Additional Analyst Notes: - CVE Program Container: Re
rator password or causing a denial of service to the print server. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3401 - http://www.securityfocus.com/bid/19716 - http://www.osvdb.org/28250 - http://secunia.com/advisories/21630 - http://marc.info/?l=bugtraq&m=115652437223454&w=2 - http://itso.iu.edu/20060824_FXPS_Print_Engine_Vulnerabilities - http://www.securityfocus.com/archive/1/444321/100/0/threaded - http://secunia.com/advisories/22463
CVE ID: CVE-2006-2114 State: PUBLISHED Published: 2006-05-01T19:00:00 Last Updated: 2024-08-07T17:35:31.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via a long request. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17737 - http://www.securityfocus.com/archive/1/432362/100/0/threaded - http://securityreason.com/securityalert/816 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26159
CVE ID: CVE-2006-2115 State: PUBLISHED Published: 2006-05-01T19:00:00 Last Updated: 2024-08-07T17:35:31.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in SWS web Server 0.1.7 allows remote attackers to execute arbitrary code via unspecified vectors that are not properly handled in a syslog function call. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26158 - http://www.securityfocus.com/bid/17737 - http://www.securityfocus.com/archive/1/432362/100/0/threaded - http://securityreason.com/securityalert/816
CVE ID: CVE-2006-2116 State: PUBLISHED Published: 2006-05-01T21:00:00 Last Updated: 2024-08-07T17:35:31.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432576/100/0/threaded - http://www.securityfocus.com/bid/17753 - http://securityreason.com/securityalert/825 - http://www.planetc.de/download/planetgallery/planetgallery.html
CVE ID: CVE-2006-2117 State: PUBLISHED Published: 2006-05-01T21:00:00 Last Updated: 2024-08-07T17:35:31.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.net/portals/thyme - http://www.vupen.com/english/advisories/2006/1602 - http://securityreason.com/securityalert/822 - http://secunia.com/advisories/19909 - http://www.securityfocus.com/bid/17746 - http://www.securityfocus.com/archive/1/432588/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-
/bid/17746 - http://www.securityfocus.com/archive/1/432588/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-September/001019.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26188
CVE ID: CVE-2006-2118 State: PUBLISHED Published: 2006-05-01T21:00:00 Last Updated: 2024-08-07T17:35:31.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admin_gallery.php3, possibly related to the add action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/821 - http://www.securityfocus.com/bid/17755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26210 - http://www.securityfocus.com/archive/1/432575/100/0/threaded
CVE ID: CVE-2006-2119 State: PUBLISHED Published: 2006-05-01T21:00:00 Last Updated: 2024-08-07T17:35:31.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitrary code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.lobnan.de/advisories/artmedic.txt - http://www.securityfocus.com/bid/17736 - http://kurdishsecurity.blogspot.com/2006/04/artmedic-event-remote-file-include.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26150 - http://www.securityfocus.com/archive/1/432397/100/0/threaded - http://ww
nge.xforce.ibmcloud.com/vulnerabilities/26150 - http://www.securityfocus.com/archive/1/432397/100/0/threaded - http://www.osvdb.org/25130 - http://secunia.com/advisories/19907 - http://securityreason.com/securityalert/811 - http://www.vupen.com/english/advisories/2006/1588
CVE ID: CVE-2006-2120 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a crafted TIFF image with Yr/Yg/Yb values that exceed the YCR/YCG/YCB values, which triggers an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20210 - http://bugzilla.remotesensing.org/show_bug.cgi?id=1065 - http://secunia.com/advisories/19949 - http://www.securityfocus.com/bid/17809 - https://usn.ubuntu.com/277-1/ - http://secunia.com/advisories/206
ories/19949 - http://www.securityfocus.com/bid/17809 - https://usn.ubuntu.com/277-1/ - http://secunia.com/advisories/20667 - http://secunia.com/advisories/19936 - http://secunia.com/advisories/19964 - http://www.trustix.org/errata/2006/0024 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=189974 - http://secunia.com/advisories/20330 - http://www.debian.org/security/2006/dsa-1078 - ftp://patches.sgi.com/support/free/security/advisories/20060501-01-U.asc - http://support.avaya.com/elmodocs2/security/ASA-2006-119.htm - http://www.redhat.com/support/errata/RHSA-2006-0425.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572 - http://www.mandriva
html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9572 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:082 - http://secunia.com/advisories/20023
CVE ID: CVE-2006-2121 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432404/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26203 - http://www.securityfocus.com/archive/1/432596/100/0/threaded - http
exchange.xforce.ibmcloud.com/vulnerabilities/26203 - http://www.securityfocus.com/archive/1/432596/100/0/threaded - http://securityreason.com/securityalert/824 - http://www.securityfocus.com/bid/17731
CVE ID: CVE-2006-2122 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.453Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via a URL in the page parameter. NOTE: the original report for this issue is probably erroneous, since CoolMenus does not appear to be written in PHP. Additional Analyst Notes: - CVE Program Container: References: - http://kurdishsecurity.blogspot.com/2006/04/coolmenus-event-remote-file-include.html - http://www.securityfocus.com/archive/1/432630/100/0/threaded - http://securityreason.com/securityalert/823 - http
html - http://www.securityfocus.com/archive/1/432630/100/0/threaded - http://securityreason.com/securityalert/823 - http://www.dhtmlcentral.com/projects/coolmenus/ - http://www.securityfocus.com/archive/1/432395/100/0/threaded - http://www.securityfocus.com/archive/1/432597/100/0/threaded - http://www.securityfocus.com/bid/17738
CVE ID: CVE-2006-2123 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 allow remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19849 - http://www.securityfocus.com/bid/17734 - http://sourceforge.net/project/shownotes.php?release_id=413412 - http://www.osvdb.org/25066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26151 - http://www.vupen.com/english/advisor
/www.osvdb.org/25066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26151 - http://www.vupen.com/english/advisories/2006/1572
CVE ID: CVE-2006-2124 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prevaction, (2) previd, (3) prevstart, (4) itemid, (5) id, and (6) action parameters in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26180 - http://pridels0.blogspot.com/2006/05/sunshop-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1582 -
6180 - http://pridels0.blogspot.com/2006/05/sunshop-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1582 - http://secunia.com/advisories/19871 - http://www.osvdb.org/25119
CVE ID: CVE-2006-2125 State: REJECTED Published: 2006-05-01T22:00:00 Last Updated: 2006-05-04T09:00:00 Description: No description available.
CVE ID: CVE-2006-2126 State: PUBLISHED Published: 2006-05-01T22:00:00 Last Updated: 2024-08-07T17:35:31.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) categori and (2) stranica parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1581 - http://www.securityfocus.com/bid/17765 - http://pridels0.blogspot.com/2006/04/maxtrade-sql-inj.html - http://secunia.com/advisories/19876 - http://www.osvdb.org/25122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26171
CVE ID: CVE-2006-2127 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL commands via the r parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-164A.html - http://www.securityfocus.com/archive/1/432602/100/0/threaded - http://securityreason.com/securityalert/810 - http://www.securityfocus.com/bid/17744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26198
CVE ID: CVE-2006-2128 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) email and (2) password parameter to (a) admin/login.php, (3) find_str parameter to (b) search.php, or (4) artid parameter to (c) art.php, or (5) catid parameter to (d) cat.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25127 - http://secunia.com/advisories/19882 - http://www.vupen.com/english/advisories/2006/1578 - http://www.securityfocus.com/bid/17762 - htt
.com/advisories/19882 - http://www.vupen.com/english/advisories/2006/1578 - http://www.securityfocus.com/bid/17762 - http://www.osvdb.org/25126 - http://evuln.com/vulns/130/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26148 - http://www.securityfocus.com/archive/1/435787/100/0/threaded - http://soot.shabgard.org/bugs/propublish.txt - http://www.osvdb.org/25125 - http://www.osvdb.org/25124
CVE ID: CVE-2006-2129 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.393Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19882 - http://www.vupen.com/english/advisories/2006/1578 - http://www.securityfocus.com/bid/17762 - http://www.osvdb.org/25128 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26149 - http://evuln.com/vulns/130/summary.html
CVE ID: CVE-2006-2130 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26152 - http://evuln.com/vulns/131/summary.html - http://secunia.com/advisories/19899 - http://www.vupen.com/english/advisories/2006/1603 - http://www.osvdb.org/25167
CVE ID: CVE-2006-2131 State: PUBLISHED Published: 2006-05-01T23:00:00 Last Updated: 2024-08-07T17:35:31.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify the IP address of a client, which makes it easier for remote attackers to spoof the source IP and bypass voting restrictions. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/131/summary.html - http://secunia.com/advisories/19899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26154 - http://www.vupen.com/english/advisories/2006/1603
CVE ID: CVE-2006-2132 State: PUBLISHED Published: 2006-05-01T23:00:00Z Last Updated: 2024-09-16T23:01:21.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via the iPro parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17722 - http://downloads.securityfocus.com/vulnerabilities/exploits/duclassified-detail.asp-sql-inj.txt