Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
w.vupen.com/english/advisories/2006/4928 - https://www.exploit-db.com/exploits/2904 - http://www.vupen.com/english/advisories/2006/4946 - http://www.attrition.org/pipermail/vim/2006-December/001176.html
CVE ID: CVE-2006-6567 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23356 - http://www.vupen.com/english/advisories/2006/4982 - https://www.exploit-db.com/exploits/2924 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30856 - http://www.securityfocus.com/bid/21577
CVE ID: CVE-2006-6568 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the phpEx parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23356 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30857 - https://www.exploit-db.com/exploits/2924 - http://www.securityfocus.com/bid/21577
CVE ID: CVE-2006-6569 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) do and (2) chem parameters with a "modfich" floap parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21595 - http://www.securityfocus.com/archive/1/454385/100/0/threaded - http://securityreason.com/securityalert/2035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30888
CVE ID: CVE-2006-6570 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in upload.php in GenesisTrader 1.0 allows remote authenticated users to upload arbitrary files via unspecified vectors, possibly involving form.php and the ajoutfich "foap" action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21595 - http://www.securityfocus.com/archive/1/454385/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30889 - http://securityreason.com/securityalert/2035
CVE ID: CVE-2006-6571 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cuve, (2) chem, (3) do, and possibly other parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21595 - http://www.securityfocus.com/archive/1/454385/100/0/threaded - http://securityreason.com/securityalert/2035 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30890
CVE ID: CVE-2006-6572 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.908Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Advanced Access Control (AAC) Option 4.0, and Access Gateway 4.2 with Advanced Access Control 4.2, before 20061114, when the Browser-Only access feature is enabled, allows remote authenticated users to bypass access policies via a certain login method, a different issue than CVE-2006-4846. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017227 - http://www.vupen.com/english/
lyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017227 - http://www.vupen.com/english/advisories/2006/4525 - http://www.securityfocus.com/bid/21080 - http://support.citrix.com/article/CTX111615 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30302 - http://support.citrix.com/article/CTX111614 - http://secunia.com/advisories/22909
CVE ID: CVE-2006-6573 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Citrix Access Gateway 4.5 Advanced Edition, and 4.2 with Advanced Access Control (AAC) 4.2, when deployed on the Access Gateway appliance 4.2 through 4.2.2 allows remote authenticated users to "gain access to data" and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017228 - http://www.vupen.com/english/advisories/2006/4524 - http://www.securityfocus.com/bid/21079 - http://www.kb.cert.org/vuls/id/5
//www.vupen.com/english/advisories/2006/4524 - http://www.securityfocus.com/bid/21079 - http://www.kb.cert.org/vuls/id/555220 - http://support.citrix.com/article/CTX111695 - http://secunia.com/advisories/22909 - http://secunia.com/advisories/22908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30298
CVE ID: CVE-2006-6574 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.861Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mantis before 1.1.0a2 does not implement per-item access control for Issue History (Bug History), which allows remote attackers to obtain sensitive information by reading the Change column, as demonstrated by the Change column of a custom field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30870 - http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/core/history_api.php?view=log - http://sourceforge.net/project/shownotes.php?release_id=469627 - http://se
isbt/mantisbt/core/history_api.php?view=log - http://sourceforge.net/project/shownotes.php?release_id=469627 - http://secunia.com/advisories/23258 - http://bugs.mantisbugtracker.com/view.php?id=7364 - http://secunia.com/advisories/28551 - http://mantisbt.cvs.sourceforge.net/mantisbt/mantisbt/core/history_api.php?r1=1.34&r2=1.35 - http://www.vupen.com/english/advisories/2006/4978 - http://bugs.mantisbugtracker.com/view.php?id=3375 - http://www.mantisbugtracker.com/changelog.php - http://www.securityfocus.com/bid/21566 - http://www.debian.org/security/2008/dsa-1467
CVE ID: CVE-2006-6575 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 and 0.6.1 allows remote attackers to execute arbitrary PHP code via a URL in the LOGIN_style parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2930 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30887
CVE ID: CVE-2006-6576 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long PASS command. NOTE: it was later reported that 4.70 is also affected. NOTE: the USER vector is already covered by CVE-2005-0634. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/45924 - http://retrogod.altervista.org/golden_heap.html - http://www.vupen.com/english/advisories/2006/4936 - http://se
/45924 - http://retrogod.altervista.org/golden_heap.html - http://www.vupen.com/english/advisories/2006/4936 - http://secunia.com/advisories/23323 - http://www.securityfocus.com/bid/45957 - http://www.exploit-db.com/exploits/16036 - http://packetstormsecurity.com/files/161711/Golden-FTP-Server-4.70-Buffer-Overflow.html
CVE ID: CVE-2006-6577 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21366 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30616 - http://www.securityfocus.com/archive/1/453134/100/200/threaded - http://securityreason.com/securityalert/2037
CVE ID: CVE-2006-6578 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Information Services (IIS) 5.1 permits the IUSR_Machine account to execute non-EXE files such as .COM files, which allows attackers to execute arbitrary commands via arguments to any .COM file that executes those arguments, as demonstrated using win.com when it is in a web directory with certain permissions. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2036 - http://www.securityfocus.com/archive/1/454268/100/0/threaded
CVE ID: CVE-2006-6579 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows XP has weak permissions (FILE_WRITE_DATA and FILE_READ_DATA for Everyone) for %WINDIR%\pchealth\ERRORREP\QHEADLES, which allows local users to write and read files in this folder, as demonstrated by an ASP shell that has write access by IWAM_machine and read access by IUSR_Machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454268/100/0/threaded
CVE ID: CVE-2006-6580 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/change.php in ProNews 1.5 does not check whether a user is permitted to change news items, which allows remote attackers to add or delete information within an item, and possibly have other impacts. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21559 - http://secunia.com/advisories/23315
CVE ID: CVE-2006-6581 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.491Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the debugClassLocation parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017219 - http://marc.info/?l=bugtraq&m=116345671023015&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30234 - http://www.securityfocus.com/bid/21047
CVE ID: CVE-2006-6582 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) members_username (user) and (2) members_password (password) fields in a login action in members/default.asp, and (3) the Search box. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=26656 - https://exchange.xforce.ibmcloud.com/
Container: References: - http://www.hackerscenter.com/archive/view.asp?id=26656 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30901 - http://secunia.com/advisories/23372 - http://www.vupen.com/english/advisories/2006/5025 - http://securitytracker.com/id?1017384
CVE ID: CVE-2006-6583 State: PUBLISHED Published: 2006-12-15T19:00:00Z Last Updated: 2024-09-16T18:18:50.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScriptMate User Manager 2.1 and earlier allow remote attackers to obtain sensitive information via unspecified vectors related to (1) the Logins box and (2) the Search box. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=26656 - http://securitytracker.com/id?1017384
CVE ID: CVE-2006-6584 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in italkplus (Italk+) before 0.92.1 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://italk.sourceforge.net/italk-sa-1.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/30900 - http://secunia.com/advisories/23374 - http://www.vupen.com/english/advisories/2006/5014
CVE ID: CVE-2006-6585 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Extensions manager in Mozilla Firefox 2.0 does not properly populate the list of local extensions, which allows attackers to construct an extension that hides itself by finding its name in the list and then calling RemoveElement, as demonstrated by the FFsniFF extension. NOTE: it was later reported that 3.0 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454058/100/0/threaded - http://azurit.elbiahosting.sk/ffsniff/ffsniff-0.2.tar.gz - http://www.sec
ityfocus.com/archive/1/454058/100/0/threaded - http://azurit.elbiahosting.sk/ffsniff/ffsniff-0.2.tar.gz - http://www.securityfocus.com/archive/1/493585/100/0/threaded - http://securityreason.com/securityalert/2046
CVE ID: CVE-2006-6586 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in (1) secure.php or (2) checklogin.php in admin/auth/. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2740 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30094 - http://securitytracker.com/id?1017204
CVE ID: CVE-2006-6587 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) allows remote attackers to inject arbitrary web script or HTML by posting a message. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017360 - http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0177.html - http://www.securityfocus.com/bid/21529 - https://issues.apache.org/jira/browse/OFBIZ-260 - https://issues.apache.org/jira/br
://www.securityfocus.com/bid/21529 - https://issues.apache.org/jira/browse/OFBIZ-260 - https://issues.apache.org/jira/browse/OFBIZ-178
CVE ID: CVE-2006-6588 State: PUBLISHED Published: 2006-12-15T19:00:00Z Last Updated: 2024-09-16T19:41:40.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: The forum implementation in the ecommerce component in the Apache Open For Business Project (OFBiz) trusts the (1) dataResourceTypeId, (2) contentTypeId, and certain other hidden form fields, which allows remote attackers to create unauthorized types of content, modify content, or have other unknown impact. Additional Analyst Notes: - CVE Program Container: References: - https://issues.apache.org/jira/browse/OFBIZ-178
CVE ID: CVE-2006-6589 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ecommerce/control/keywordsearch in the Apache Open For Business Project (OFBiz) and Opentaps 0.9.3 allows remote attackers to inject arbitrary web script or HTML via the SEARCH_STRING parameter, a different issue than CVE-2006-6587. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23457 - http://jira.undersunconsulting.com/browse/OFBIZ-559 - https://issues.apache.org/j
http://secunia.com/advisories/23457 - http://jira.undersunconsulting.com/browse/OFBIZ-559 - https://issues.apache.org/jira/browse/OFBIZ-260 - http://www.securityfocus.com/bid/21702
CVE ID: CVE-2006-6590 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitrary PHP code via a URL in the script_folder parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30891 - https://www.exploit-db.com/exploits/2931
CVE ID: CVE-2006-6591 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the repphp parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2040 - http://www.securityfocus.com/archive/1/448689/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29582
CVE ID: CVE-2006-6592 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:34:00.540Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the page[path] parameter to (1) index.php, (2) admin.php, (3) rss.php, (4) rdf.php, (5) rss2.php, or (6) files/mainfile.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2039 - http://www.securityfocus.com/archive/1/448603/100/0/threaded - http://www.securityfocus.com/bid/20512 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29585
CVE ID: CVE-2006-6593 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20526 - http://www.securityfocus.com/archive/1/448644/100/0/threaded - http://securityreason.com/securityalert/2038 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29566
CVE ID: CVE-2006-6594 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in utilities/usermessages.asp in ScriptMate User Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the mesid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=26656 - http://secunia.com/advisories/23372 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30902 - http://www.vupen.com/english/advisories/2006/5025 - http://securitytracker.com/id?1017384
CVE ID: CVE-2006-6595 State: PUBLISHED Published: 2006-12-15T19:00:00 Last Updated: 2024-08-07T20:33:59.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in ScriptMate User Manager 2.1 and earlier allow remote attackers to execute arbitrary SQL commands via "Manage Resources" and possibly other unspecified components. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackerscenter.com/archive/view.asp?id=26656 - http://www.vupen.com/english/advisories/2006/5025 - http://securitytracker.com/id?1017384
CVE ID: CVE-2006-6596 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via a session (HAW) file, which can be automatically opened using Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454388/100/0/threaded - http://www.securityfocus.com/bid/21594 - http://secunia.com/advisories/23366 - http://securityreason.com/securityalert/2045 - http://www.vupen.com/english/advisories/2006/5013
CVE ID: CVE-2006-6597 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via the /r option in a telnet:// URI, which is configured to use hawin32.exe. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454388/100/0/threaded - http://www.securityfocus.com/bid/21594 - http://secunia.com/advisories/23366 - http://securityreason.com/securityalert/2045 - http://www.vupen.com/english/advisories/2006/5013
CVE ID: CVE-2006-6598 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:33:59.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt-972 allows remote authenticated users to read arbitrary files via .. (dot dot) sequences in the path parameter, a different vector than CVE-2006-6328. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21613 - http://tf-b4rt.berlios.de/changelog-torrentflux_2.1-b4rt.txt - http://secunia.com/advisories/23402 - https://www.exploit-db.com/exploits/2902
CVE ID: CVE-2006-6599 State: PUBLISHED Published: 2006-12-15T22:00:00 Last Updated: 2024-08-07T20:34:00.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharacters (";" semicolon) in the announce parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23270 - http://www.securityfocus.com/bid/21526 - https://www.exploit-db.com/exploits/2903 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30850
CVE ID: CVE-2006-6600 State: PUBLISHED Published: 2006-12-15T22:00:00Z Last Updated: 2024-09-17T02:31:37.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in dir.php in TorrentFlux 2.2, when allows remote attackers to inject arbitrary web script or HTML via double URL-encoded strings in the dir parameter, a related issue to CVE-2006-5609. Additional Analyst Notes: - CVE Program Container: References: - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=%23400582 - http://secunia.com/advisories/23270