Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5423 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin_module.php in Lou Portail 1.4.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the g_admin_rep parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22461 - http://www.securityfocus.com/bid/20609 - http://www.vupen.com/english/advisories/2006/4087
CVE ID: CVE-2006-5424 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Justsystem Ichitaro 2006, 2006 trial version, and Government 2006 allows remote attackers to execute arbitrary code via a modified document, possibly because of a buffer overflow, a different vulnerability than CVE-2006-4326. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20610 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29654 - http://jvn.jp/jp/JVN%2390815371/index.html - http://www.vupen.com/english/advisories/2006/4092 - http://secuni
s/29654 - http://jvn.jp/jp/JVN%2390815371/index.html - http://www.vupen.com/english/advisories/2006/4092 - http://secunia.com/advisories/22386 - http://www.justsystem.co.jp/info/pd6004.html
CVE ID: CVE-2006-5425 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: XORP (eXtensible Open Router Platform) 1.2 and 1.3 allows remote attackers to cause a denial of service (application crash) via an Open Shortest Path First (OSPF) Link State Advertisement (LSA) with an invalid LSA length field. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22462 - http://www.xorp.org/advisories/XORP_SA_06:01.ospf.txt - http://www.securityfocus.com/bid/20597 - http://marc.info/?l=full-disclosure&m=116115975806681&w=2 - http://labs.musecurity.com/advisories/MU-200
com/bid/20597 - http://marc.info/?l=full-disclosure&m=116115975806681&w=2 - http://labs.musecurity.com/advisories/MU-200610-01.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/29658 - http://securitytracker.com/id?1017079 - http://www.vupen.com/english/advisories/2006/4107
CVE ID: CVE-2006-5426 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.234Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/lcUser.php in LoCal Calendar System 1.1 remote attackers to execute arbitrary PHP code via a URL in the LIBDIR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20619 - http://www.vupen.com/english/advisories/2006/4100 - http://secunia.com/advisories/22484 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29665 - https://www.exploit-db.com/exploits/2595
CVE ID: CVE-2006-5427 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the plug_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29649 - https://www.exploit-db.com/exploits/2591 - http://secunia.com/advisories/22455 - http://www.securityfocus.com/bid/20601 - http://www.vupen.com/english/advisories/2006/408
secunia.com/advisories/22455 - http://www.securityfocus.com/bid/20601 - http://www.vupen.com/english/advisories/2006/4088
CVE ID: CVE-2006-5428 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: rpc.php in Cerberus Helpdesk 3.2.1 does not verify a client's privileges for a display_get_requesters operation, which allows remote attackers to bypass the GUI login and obtain sensitive information (ticket data) via a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://forum.cerberusweb.com/showthread.php?t=7922 - http://secunia.com/advisories/22418 - http://www.vupen.com/english/advisories/2006/4089 - http://www.securityfocus.com/bid/20598 - https://exchange.xforce.ibmcloud.com/vulnerabil
/english/advisories/2006/4089 - http://www.securityfocus.com/bid/20598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29655
CVE ID: CVE-2006-5429 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Barry Nauta BRIM 1.2.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the renderer parameter in template.tpl.php in (1) templates/barrel/, (2) templates/sidebar/, (3) templates/text-only, (4) templates/slashdot/, (5) templates/penguin/, (6) templates/pda/, (7) templates/oerdec/, (8) templates/nifty/, (9) templates/mylook, and (10) templates/barry/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/ad
(10) templates/barry/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4086 - http://secunia.com/advisories/22465 - https://www.exploit-db.com/exploits/2589 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29647 - http://www.securityfocus.com/bid/20594
CVE ID: CVE-2006-5430 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.192Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the search functionality in db-central (dbc) Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4106 - http://secunia.com/advisories/22407 - http://www.securityfocus.com/bid/20622 - http://www.osvdb
h/advisories/2006/4106 - http://secunia.com/advisories/22407 - http://www.securityfocus.com/bid/20622 - http://www.osvdb.org/29832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29666
CVE ID: CVE-2006-5431 State: PUBLISHED Published: 2006-10-20T17:00:00 Last Updated: 2024-08-07T19:48:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appDirName parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20606 - http://www.securityfocus.com/archive/1/449105/100/0/threaded - http://securityreason.com/securityalert/1748 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29648
CVE ID: CVE-2006-5432 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when register_globals is enabled, allow remote attackers to create or overwrite arbitrary files via the (1) email[to], (2) email[from], (3) name[to], (4) name[from], (5) picture, (6) comment, or (7) sessionID parameter, as demonstrated by creating a new .php file that permits remote file inclusion, and then requesting this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20620 -
ng this file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20620 - http://www.vupen.com/english/advisories/2006/4105 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29669 - http://www.osvdb.org/29840 - https://www.exploit-db.com/exploits/2590 - http://secunia.com/advisories/22471
CVE ID: CVE-2006-5433 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in modules/guestbook/index.php in ALiCE-CMS 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[local_root] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29633 - https://www.exploit-db.com/exploits/2582 - http://www.securityfocus.com/bid/20585
CVE ID: CVE-2006-5434 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in p-news.php in P-News 1.16 and 1.17 allows remote attackers to execute arbitrary PHP code via a URL in the pn_lang parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29587 - https://www.exploit-db.com/exploits/2577
CVE ID: CVE-2006-5435 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in groupcp.php in phpBB 2.0.10 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: CVE and the vendor dispute this vulnerability because $phpbb_root_path is defined before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449114/100/0/threaded - http://www.securityfocus.com/archive/1/449232/100/0/threaded
CVE ID: CVE-2006-5436 State: PUBLISHED Published: 2006-10-20T23:00:00Z Last Updated: 2024-09-16T23:16:39.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in FreeFAQ 1.0.e allows remote attackers to execute arbitrary PHP code via a URL in the faqpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/freefaq-0.9.e-rfi.pl - http://www.securityfocus.com/bid/20621
CVE ID: CVE-2006-5437 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in upgrade.php in phpAdsNew 2.0.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the phpAds_config[language] parameter. NOTE: this issue could not be reproduced by a third party Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29640 - http://www.securityfocus.com/archive/1/448994/100/0/threaded - http://www.securityfocus.com/archive/1/449084/100/0/threaded
CVE ID: CVE-2006-5438 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29844 - http://www.vupen.com/english/advisories/2006/4104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://se
tp://www.vupen.com/english/advisories/2006/4104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://secunia.com/advisories/22464
CVE ID: CVE-2006-5439 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Misc Tools 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.osvdb.org/29833 - http
sh/advisories/2006/4101 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.osvdb.org/29833 - http://secunia.com/advisories/22470
CVE ID: CVE-2006-5440 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Form Designer 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.osvdb.org/29845 - http://www.vupe
sories/22459 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.osvdb.org/29845 - http://www.vupen.com/english/advisories/2006/4103
CVE ID: CVE-2006-5441 State: PUBLISHED Published: 2006-10-20T23:00:00 Last Updated: 2024-08-07T19:48:30.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminfoot.php in Comdev Web Blogger 4.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29846 - http://secunia.com/advisories/22433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.vupen.
6 - http://secunia.com/advisories/22433 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29220 - http://www.vupen.com/english/advisories/2006/4102
CVE ID: CVE-2006-5442 State: PUBLISHED Published: 2006-10-21T00:00:00 Last Updated: 2024-08-07T19:48:30.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: ViewVC 1.0.2 and earlier does not specify a charset in its HTTP headers or HTML documents, which allows remote attackers to conduct cross-site scripting (XSS) attacks that inject arbitrary UTF-7 encoded JavaScript code via a view. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448762/100/0/threaded - http://viewvc.tigris.org/servlets/ReadMsg?list=announce&msgNo=5&raw=true - http://www.hardened-php.net/advisory_102006.134.html - http://securityreason.com/securityalert/175
ce&msgNo=5&raw=true - http://www.hardened-php.net/advisory_102006.134.html - http://securityreason.com/securityalert/1755 - http://secunia.com/advisories/22395 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29576 - http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?rev=HEAD - http://www.securityfocus.com/bid/20543
CVE ID: CVE-2006-5443 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in XIAO Gang WWW Interactive Mathematics Server (WIMS) before 3.60 allows remote attackers to modify unspecified data via unspecified vectors involving "variable rights." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29668 - http://www.vupen.com/english/advisories/2006/4108 - http://freshmeat.net/projects/wims/?branch_id=11538&release_id=238917 - http://secunia.com/advisories/22415
CVE ID: CVE-2006-5444 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.383Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones, allows remote attackers to execute arbitrary code via a certain dlen value that passes a signed integer comparison and leads to a heap-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22480 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13 - http://www.us.debian.org/security
.com/advisories/22480 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13 - http://www.us.debian.org/security/2006/dsa-1229 - http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml - http://www.novell.com/linux/security/advisories/2006_69_asterisk.html - http://www.securityfocus.com/bid/20617 - http://www.vupen.com/english/advisories/2006/4097 - http://secunia.com/advisories/22651 - http://www.osvdb.org/29972 - http://www.securityfocus.com/archive/1/449183/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050171.html - http://secunia.com/advisories/23212 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12 - https://exchange.xforce.ibmcl
unia.com/advisories/23212 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.0.12 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29663 - http://www.kb.cert.org/vuls/id/521252 - http://securitytracker.com/id?1017089 - http://secunia.com/advisories/22979 - http://www.asterisk.org/node/109 - http://www.securityfocus.com/archive/1/449127/100/0/threaded
CVE ID: CVE-2006-5445 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of service (resource consumption) via unspecified vectors that result in the creation of "a real pvt structure" that uses more resources than necessary. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4098 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13 - http://www.gentoo.org/
com/english/advisories/2006/4098 - http://ftp.digium.com/pub/asterisk/releases/ChangeLog-1.2.13 - http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml - http://www.securityfocus.com/bid/20835 - http://www.novell.com/linux/security/advisories/2006_69_asterisk.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29664 - http://secunia.com/advisories/22651 - http://www.securityfocus.com/archive/1/449183/100/0/threaded - http://www.asterisk.org/node/110 - http://secunia.com/advisories/22979 - http://www.asterisk.org/node/109 - http://www.osvdb.org/29973
CVE ID: CVE-2006-5446 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in lobby/config.php in Casinosoft Casino Script (aka Masvet) 3.2 allows remote attackers to execute arbitrary SQL commands via the cfam parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4131 - http://secunia.com/advisories/22398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29684 - http://www.securityfocus.com/bid/20646 - http://www.securitylab.ru/forum/read.php?FID=16&TID=23884
CVE ID: CVE-2006-5447 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in DEV Web Management System (WMS) 1.5 allows remote attackers to inject arbitrary web script or HTML via the action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.x0n3-h4ck.org/index.php?name=news&article=139 - http://www.securityfocus.com/bid/20590 - http://securityreason.com/securityalert/1758 - http://www.securityfocus.com/archive/1/449121/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29659
CVE ID: CVE-2006-5448 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: The drmstor.dll ActiveX object in Microsoft Windows Digital Rights Management System (DRM) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long parameter to the StoreLicense function, which triggers "memory corruption" and possibly a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1756 - http://www.securityfocus.com/archive/1/448097/100/200/threaded
CVE ID: CVE-2006-5449 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.229Z Vendors: n/a Products: n/a Problem Types: n/a Description: procmail in Ingo H3 before 1.1.2 Horde module allows remote authenticated users to execute arbitrary commands via shell metacharacters in the mailbox destination of a filter rule. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1204 - http://www.vupen.com/english/advisories/2006/4124 - http://www.securityfocus.com/bid/20637 - http://secunia.com/advisories/22482 - http://www.gentoo.org/security/en/glsa/glsa-200611-22.xml - http://secunia.com/advisories/23100 - http://secu
es/22482 - http://www.gentoo.org/security/en/glsa/glsa-200611-22.xml - http://secunia.com/advisories/23100 - http://secunia.com/advisories/22656 - http://bugs.horde.org/ticket/?Horde=6ed1a009f3396864553976a45948339e&id=4513 - http://lists.horde.org/archives/announce/2006/000296.html
CVE ID: CVE-2006-5450 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.asp in Kinesis Interactive Cinema System (KICS) CMS allows remote attackers to execute arbitrary SQL commands via the (1) txtUsername (user) or (2) txtPassword (pass) parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1757 - http://www.securityfocus.com/bid/20607 - http://www.securityfocus.com/archive/1/449227/100/0/threaded - http://www.vupen.com/english/advisories/2006/4130 - https://exchange.xforce.ibmcloud.com/vulnerabili
27/100/0/threaded - http://www.vupen.com/english/advisories/2006/4130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29683 - http://secunia.com/advisories/22493 - http://www.osvdb.org/29901
CVE ID: CVE-2006-5451 State: PUBLISHED Published: 2006-10-23T17:00:00 Last Updated: 2024-08-07T19:48:30.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) file, and (3) users array variables in (a) admin.php, which are not properly handled when the administrator views the Activity Log; and the (4) torrent parameter, as used by the displayName variable, in (b) startpop.php, different vectors than CVE-2006-5227. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/448948/100/0