Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6332 State: PUBLISHED Published: 2006-12-10T11:00:00 Last Updated: 2024-08-07T20:19:35.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in net80211/ieee80211_wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encode_ie and giwscan_cb functions. Additional Analyst Notes: - CVE Program Container: References: - http://www.novell.com/linux/security/advisories/2006_74_madwifi.html - http://www.securityfocus.com/bid/21486 - http://madwifi.org/changeset/1842 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://security.gentoo.org/glsa/glsa-200
ngeset/1842 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://security.gentoo.org/glsa/glsa-200612-09.xml - http://secunia.com/advisories/23335 - http://secunia.com/advisories/23277 - http://madwifi.org/wiki/news/20061207/release-0-9-2-1-fixes-critical-security-issue - http://www.kb.cert.org/vuls/id/925529 - http://www.vupen.com/english/advisories/2006/4901 - http://www.ubuntu.com/usn/usn-404-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30800 - http://secunia.com/advisories/23694 - http://lists.immunitysec.com/pipermail/dailydave/2006-December/003888.html
CVE ID: CVE-2006-6333 State: PUBLISHED Published: 2006-12-06T22:00:00 Last Updated: 2024-08-07T20:19:35.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: The tr_rx function in ibmtr.c for Linux kernel 2.6.19 assigns the wrong flag to the ip_summed field, which allows remote attackers to cause a denial of service (memory corruption) via crafted packets that cause the kernel to interpret another field as an offset. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21490 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee28b0da1069ced1688aa9d0b7b378353b988321 - http://www.kernel.org/git/?p=linux/k
it/torvalds/linux-2.6.git%3Ba=commit%3Bh=ee28b0da1069ced1688aa9d0b7b378353b988321 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=blobdiff%3Bh=0d97e10ccac580e16d3dffbe4a9a88144360e64a%3Bhp=bfe59865b1dd50e5c4dbd4cefe506a31e1495a1a%3Bhb=ee28b0da1069ced1688aa9d0b7b378353b988321%3Bf=drivers/net/tokenring/ibmtr.c - http://secunia.com/advisories/23254 - http://www.vupen.com/english/advisories/2006/4907
CVE ID: CVE-2006-6334 State: PUBLISHED Published: 2006-12-08T01:00:00 Last Updated: 2024-08-07T20:19:35.175Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.230 for Windows allows remote malicious web sites to execute arbitrary code via a DataSize parameter that is less than the length of the Data buffer. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23246 - http://securityreason.com/securityalert/1995 - http://www.vupen.com/english/advisories/2006/4865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30740 - h
995 - http://www.vupen.com/english/advisories/2006/4865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30740 - http://www.securityfocus.com/bid/21458 - https://www.exploit-db.com/exploits/5106 - http://www.kb.cert.org/vuls/id/210969 - http://www.tippingpoint.com/security/advisories/TSRT-06-15.html - http://support.citrix.com/article/CTX111827 - http://fortconsult.net/files/fortconsult.dk/citrix_advisory_dec2006.pdf - http://securitytracker.com/id?1017343 - http://www.citrix.com/English/SS/downloads/downloads.asp?dID=2755 - http://www.securityfocus.com/archive/1/453760/100/0/threaded
CVE ID: CVE-2006-6335 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T20:19:35.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via (1) a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and (2) a CPIO archive, with a long filename that is not null-terminated, which triggers a stack-based overflow in veex.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-046.html -
onal Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-06-046.html - http://www.sophos.com/support/knowledgebase/article/17340.html - http://www.securityfocus.com/bid/21563 - http://www.securityfocus.com/archive/1/454197/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30852 - http://www.securityfocus.com/archive/1/454211/100/0/threaded - http://www.vupen.com/english/advisories/2006/4919 - http://secunia.com/advisories/23325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30851 - http://www.sophos.com/support/knowledgebase/article/21637.html - http://www.zerodayinitiative.com/advisories/ZDI-06-045.html
CVE ID: CVE-2006-6336 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T20:19:35.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x allows remote attackers to execute arbitrary code via a crafted request containing successive delimiters. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-07-001.html - http://www.securityfocus.com/archive/1/456077/100/0/threaded - http://www.securityfocus.com/bid/21897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31325 - http://osvdb.org/32587 - http://www.vu
ocus.com/bid/21897 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31325 - http://osvdb.org/32587 - http://www.vupen.com/english/advisories/2007/0066 - http://secunia.com/advisories/23622 - http://securitytracker.com/id?1017474
CVE ID: CVE-2006-6337 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:19:35.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to execute arbitrary SQL commands via the (1) kullanici or (2) parola parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21627 - http://secunia.com/advisories/23291 - http://www.vupen.com/english/advisories/2006/4825 - http://www.securityfocus.com/archive/1/454589/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30919 - http://www.secu
focus.com/archive/1/454589/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30919 - http://www.securityfocus.com/archive/1/453234/100/0/threaded - http://www.securityfocus.com/bid/21398
CVE ID: CVE-2006-6338 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:19:35.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to upload and execute arbitrary .php files by embedding PHP code in a JPEG or GIF file that is uploaded to inc/images/uploads/userpics/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4821 - http://www.securityfocus.com/archive/1/453178/100/0/threaded - http://www.securityfocus.com/bid/21389 - https://exchange.xforce.ibmcloud.com/vulnerabil
chive/1/453178/100/0/threaded - http://www.securityfocus.com/bid/21389 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30653 - http://secunia.com/advisories/23194 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051022.html
CVE ID: CVE-2006-6339 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:19:35.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4821 - http://www.securityfocus.com/archive/1/453179/100/0/threaded - http://www.securityfocus.com/bid/21391 - http://securityreason.com/securityalert/1984 - http://secunia.com/advisories/23194 - https://exchange.xforce.ibmcloud.com/v
p://securityreason.com/securityalert/1984 - http://secunia.com/advisories/23194 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30631
CVE ID: CVE-2006-6340 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.054Z Vendors: n/a Products: n/a Problem Types: n/a Description: keystone.exe in nVIDIA nView allows attackers to cause a denial of service via a long command line argument. NOTE: it is not clear whether this issue crosses security boundaries. If not, then this is not a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21260 - http://www.securityfocus.com/archive/1/452439/100/100/threaded - http://securityreason.com/securityalert/1973
CVE ID: CVE-2006-6341 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the apx_root_path parameter to (1) act/act_check_access.php, (2) dsp/dsp_form_booking_ctl.php, and (3) dsp/dsp_bookings.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21147 - http://securityreason.com/securityalert/1972 - http://www.attrition.org/pipermail/vim/2006-December/001163.html - http://www.attrition.org/pipermail/vi
ityalert/1972 - http://www.attrition.org/pipermail/vim/2006-December/001163.html - http://www.attrition.org/pipermail/vim/2006-December/001164.html - https://www.exploit-db.com/exploits/2794 - http://www.securityfocus.com/archive/1/452138/100/200/threaded
CVE ID: CVE-2006-6342 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the (1) category and (2) agent parameters in (a) search_listing.asp, and the (3) property_id parameter in (b) detail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452115/100/200/threaded - http://www.securityfocus.com/bid/21199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30435 - http://securityreason.com/securit
rityfocus.com/bid/21199 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30435 - http://securityreason.com/securityalert/1976
CVE ID: CVE-2006-6343 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23180 - http://www.securityfocus.com/bid/21366 - http://www.securityfocus.com/archive/1/453125/100/0/threaded - http://www.vupen.com/english/advisories/2006/4805 - http://securityreason.com/securityalert/1974 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30640
CVE ID: CVE-2006-6344 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to (1) plugins/ipsearch/ipsearch.admin.php, and (2) pfs/pfs.edit.inc.php, (3) users/users.register.inc.php in system/core. NOTE: the users.profile.inc.php vector is identified by CVE-2006-6177. NOTE: these issues might be related to SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.neocrome.net/page.php?id=2233 - http://secunia.com/advisories/23180 - http://www.vupen.
tainer: References: - http://www.neocrome.net/page.php?id=2233 - http://secunia.com/advisories/23180 - http://www.vupen.com/english/advisories/2006/4805
CVE ID: CVE-2006-6345 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21449 - ht
-2006-4134. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21449 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30765 - http://www.vupen.com/english/advisories/2006/4863 - http://secunia.com/advisories/23262 - http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Remote_Arbitrary_File_Removal.pdf - http://securityreason.com/securityalert/1986 - http://securitytracker.com/id?1017342 - http://www.securityfocus.com/archive/1/453561/100/0/threaded
CVE ID: CVE-2006-6346 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 and earlier, allows remote attackers to cause a denial of service (service shutdown), obtain sensitive information (configuration files), and conduct certain other unauthorized activities, related to "Undocumented Features." NOTE: it is possible that there are multiple issues. This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended. This is likely a d
n is based upon a vague initial disclosure. Details will be updated after the grace period has ended. This is likely a different issue than CVE-2006-4134. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30766 - http://www.vupen.com/english/advisories/2006/4863 - http://www.cybsec.com/vuln/CYBSEC-Security_Pre-Advisory_SAP_IGS_Undocumented_Features.pdf - http://secunia.com/advisories/23262 - http://securitytracker.com/id?1017341 - http://www.securityfocus.com/bid/21448 - http://www.securityfocus.com/archive/1/453560/100/0/threaded - http://securityreason.com/securityalert/1985
CVE ID: CVE-2006-6347 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.129Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453471/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30731 - http://securityreason.com/securityalert/1983
CVE ID: CVE-2006-6348 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in board.php in mowdBB RC-6 allows remote attackers to inject arbitrary web script or HTML via the forum_name[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1977 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30710 - http://www.securityfocus.com/archive/1/453508/100/0/threaded
CVE ID: CVE-2006-6349 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute arbitrary SQL commands via (1) the main parameter in a view action (includes/mainpage/view.asp) in default.asp or (2) a query in the search engine. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/3015 - http://www.vupen.com/english/advisories/2006/5192 - http://securityreason.com/securityalert/1975 - http://www.securityfocus.com/bid/21758 - https://exchange.x
s/2006/5192 - http://securityreason.com/securityalert/1975 - http://www.securityfocus.com/bid/21758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30443 - http://www.securityfocus.com/archive/1/452194/100/200/threaded - http://secunia.com/advisories/23289 - http://www.securityfocus.com/bid/21198
CVE ID: CVE-2006-6350 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for listpics.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4847 - http://www.securityfocus.com/archive/1/453416/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30713 - http://secunia.com/advisories/23210
CVE ID: CVE-2006-6351 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: KhaledMuratList stores sensitive data under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for (1) CL2F9R1A2C1N.mdb or (2) Data2F9R1A2C1N.mdb. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30661 - http://www.securityfocus.com/archive/1/453328/100/0/threaded - http://secunia.com/advisories/23310 - http://securityreason.com/securityalert/1999
CVE ID: CVE-2006-6352 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infinite loop) via a crafted ACE file. NOTE: this issue has at least a partial overlap with CVE-2006-6294. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23328 - http://www.f-prot.com/news/gen_news/061201_release_unix467.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30707 - http://securitytracker.com/id?1017331 - http://www.securityfocus.com/bid/21420 - h
.ibmcloud.com/vulnerabilities/30707 - http://securitytracker.com/id?1017331 - http://www.securityfocus.com/bid/21420 - http://securityreason.com/securityalert/1998 - http://www.securityfocus.com/archive/1/453475/100/0/threaded - https://www.exploit-db.com/exploits/2892 - http://gleg.net/fprot.txt - http://security.gentoo.org/glsa/glsa-200612-12.xml - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051096.html
CVE ID: CVE-2006-6353 State: PUBLISHED Published: 2006-12-07T01:00:00Z Last Updated: 2024-09-16T17:08:20.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in BOMArchiveHelper in Mac OS X allow user-assisted remote attackers to cause a denial of service (application crash) via unspecified vectors related to (1) certain KERN_PROTECTION_FAILURE thread crashes and (2) certain KERN_INVALID_ADDRESS thread crashes, as discovered with the "iSec Partners FileP fuzzer". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21446 - http://security-protocols.com/2006/12/04/bomarchivehelper-needs-some-lovin/
CVE ID: CVE-2006-6354 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL commands via the (1) iNews, (2) iType, or (3) Action parameter. NOTE: the iType parameter in type.asp is covered by CVE-2005-3976. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23228 - http://www.aria-security.com/forum/showthread.php?t=61 - http://www.securityfocus.com/bid/15681 - http://www.vupen.com/english/advisories/2006/4834 - http://www.securityfocus.com/a
p://www.securityfocus.com/bid/15681 - http://www.vupen.com/english/advisories/2006/4834 - http://www.securityfocus.com/archive/1/453317/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30673 - http://securityreason.com/securityalert/1996
CVE ID: CVE-2006-6355 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL commands via the iCity parameter. NOTE: the iState parameter is already covered by CVE-2005-2049. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=59 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30672 - http://securityreason.com/securityalert/1997 - http://www.securityfocus.com/bid/24637 - http://www.securityfocus.com/archive/1/453318/100
ason.com/securityalert/1997 - http://www.securityfocus.com/bid/24637 - http://www.securityfocus.com/archive/1/453318/100/0/threaded
CVE ID: CVE-2006-6356 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) url, (2) id, (3) subject, (4) username, or (5) time parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4826 - http://securityreason.com/securityalert/1994 - http://www.securityfocus.com/bid/21404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30664 - http://www.securityfocus.com/arch
rityfocus.com/bid/21404 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30664 - http://www.securityfocus.com/archive/1/453321/100/0/threaded - http://secunia.com/advisories/23214
CVE ID: CVE-2006-6357 State: PUBLISHED Published: 2006-12-07T01:00:00 Last Updated: 2024-08-07T20:26:45.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4826