Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2557 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:51:04.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsportal (TRanx rebuilded), allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26439 - http://www.osvdb.org/25531 - http://www.securityfocus.com/bid/18000 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html - http://florian-amrhein.de/n
rityfocus.com/bid/18000 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0308.html - http://florian-amrhein.de/newsportal/forum/article?id=1&group=amrhein.newsportal - https://exchange.xforce.ibmcloud.com/vulnerabilities/26471 - http://securityreason.com/securityalert/947 - https://www.exploit-db.com/exploits/1789 - http://www.osvdb.org/25577 - http://secunia.com/advisories/20128 - http://www.vupen.com/english/advisories/2006/1838 - http://secunia.com/advisories/20119 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0325.html
CVE ID: CVE-2006-2558 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:58:50.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the User-Agent (useragent) header in an HTTP request, which is not filtered when the log files are viewed. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20246 - http://www.securityfocus.com/archive/1/435005/30/4740/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26643 - http://securitytracker.com/id?1016147 - http://www.vupen.com
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/26643 - http://securitytracker.com/id?1016147 - http://www.vupen.com/english/advisories/2006/1937 - http://www.securityfocus.com/bid/18086 - http://www.securityfocus.com/archive/1/434822/100/0/threaded
CVE ID: CVE-2006-2559 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:58:50.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26707 - http://secunia.com/advisories/20161 - http://securitytracker.com/id?1016134 - http://www.securityview.org/how-does-the
- http://secunia.com/advisories/20161 - http://securitytracker.com/id?1016134 - http://www.securityview.org/how-does-the-upnp-flaw-works.html - http://www.vupen.com/english/advisories/2006/1909 - http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
CVE ID: CVE-2006-2560 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:58:50.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sitecom WL-153 router firmware before 1.38 allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20183 - http://www.securityview.org/how-does-the-upnp-flaw-works.html - http://www.vupen.com/english/advisories/2006/1912 - http://www.securityview.o
ew.org/how-does-the-upnp-flaw-works.html - http://www.vupen.com/english/advisories/2006/1912 - http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
CVE ID: CVE-2006-2561 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:58:50.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: Edimax BR-6104K router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter (possibly within NewInternalClient), which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20169 - http://www.securityview.org/how-does-the-upnp-flaw-works.html - http://www.vupen.com/english/advisories/2006/1911 - http://ww
//www.securityview.org/how-does-the-upnp-flaw-works.html - http://www.vupen.com/english/advisories/2006/1911 - http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26709
CVE ID: CVE-2006-2562 State: PUBLISHED Published: 2006-05-24T01:00:00 Last Updated: 2024-08-07T17:58:50.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZyXEL P-335WT router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityview.org/how-does-the-upnp-flaw-works.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26710 - http://secunia.com/advisories/20184 - http://www.vupen.com/english/advisorie
xforce.ibmcloud.com/vulnerabilities/26710 - http://secunia.com/advisories/20184 - http://www.vupen.com/english/advisories/2006/1910 - http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
CVE ID: CVE-2006-2563 State: PUBLISHED Published: 2006-05-29T16:00:00 Last Updated: 2024-08-07T17:58:50.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The cURL library (libcurl) in PHP 4.4.2 and 5.1.4 allows attackers to bypass safe mode and read files via a file:// request containing null characters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21847 - http://secunia.com/advisories/20337 - http://www.securityfocus.com/bid/18116 - http://secunia.com/advisories/22039 - http://secunia.com/advisories/21050 - http://securityreason.com/securityalert/959 - http://securityreason.com/achievement_securityalert/39 - http://www.mandriva
tp://securityreason.com/securityalert/959 - http://securityreason.com/achievement_securityalert/39 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:122 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26764 - http://www.novell.com/linux/security/advisories/2006_22_sr.html - http://securitytracker.com/id?1016175 - http://www.vupen.com/english/advisories/2006/2055 - http://www.novell.com/linux/security/advisories/2006_52_php.html
CVE ID: CVE-2006-2564 State: PUBLISHED Published: 2006-05-24T20:00:00 Last Updated: 2024-08-07T17:58:50.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlstraSoft E-Friends allow remote attackers to inject arbitrary web script or HTML by (1) posting a blog, (2) posting a listing, (3) posting an event, (4) adding comments, or (5) sending a message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1944 - http://www.securityfocus.com/archive/1/434846/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26650 - http://www.securityfocus.
archive/1/434846/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26650 - http://www.securityfocus.com/bid/18079 - http://secunia.com/advisories/20229 - http://securityreason.com/securityalert/954
CVE ID: CVE-2006-2565 State: PUBLISHED Published: 2006-05-24T20:00:00 Last Updated: 2024-08-07T17:58:50.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Alstrasoft Article Manager Pro 1.6 allows remote attackers to execute arbitrary SQL commands via (1) the author_id parameter in profile.php and (2) the aut_id parameter in userarticles.php. NOTE: the aut_id vector can produce resultant path disclosure if the SQL manipulation is invalid. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26674 - http://secunia.com/advisories/20228 - htt
curityalert/949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26674 - http://secunia.com/advisories/20228 - http://www.vupen.com/english/advisories/2006/1943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26676 - http://www.securityfocus.com/archive/1/434847/100/0/threaded
CVE ID: CVE-2006-2566 State: PUBLISHED Published: 2006-05-24T20:00:00 Last Updated: 2024-08-07T17:58:50.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Alstrasoft Article Manager Pro 1.6 allows remote attackers to obtain sensitive information via (1) a quote character or possibly an invalid value in the action parameter in a request to mrarticles.php or (2) a login QUERY_STRING to admin.php without any additional parameters, which reveal the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/949 - http://www.vupen.com/english/advisories/2006/1943 - https://exchange.xforce.ibmcloud.com/vulner
.com/securityalert/949 - http://www.vupen.com/english/advisories/2006/1943 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26676 - http://www.securityfocus.com/archive/1/434847/100/0/threaded
CVE ID: CVE-2006-2567 State: PUBLISHED Published: 2006-05-24T20:00:00 Last Updated: 2024-08-07T17:58:50.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in submit_article.php in Alstrasoft Article Manager Pro 1.6 allows remote attackers to inject arbitrary web script or HTML when submitting an article, as demonstrated using a javascript URI in a Cascading Style Sheets (CSS) property of a STYLE attribute of an element. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/949 - http://secunia.com/advisories/20228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26673 - http://www.v
rt/949 - http://secunia.com/advisories/20228 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26673 - http://www.vupen.com/english/advisories/2006/1943 - http://www.securityfocus.com/archive/1/434847/100/0/threaded
CVE ID: CVE-2006-2568 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) allows remote attackers to execute arbitrary PHP code via a URL in the thispath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20242 - http://www.vupen.com/english/advisories/2006/1915 - http://www.securityfocus.com/bid/18075 - https://www.exploit-db.com/exploits/1814 - http://www.osvdb.org/25714 - http://www.ubbcentral.com/boards/showflat.php/Cat/0/Numbe
ww.exploit-db.com/exploits/1814 - http://www.osvdb.org/25714 - http://www.ubbcentral.com/boards/showflat.php/Cat/0/Number/4560078/an/0/page/0#Post4560078 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26596
CVE ID: CVE-2006-2569 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows remote attackers to execute arbitrary SQL commands via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18077 - http://secunia.com/advisories/20167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26592 - https://www.exploit-db.com/exploits/1810 - http://www.vupen.com/english/advisories/2006/1925
CVE ID: CVE-2006-2570 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:50.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS["CLPath"] parameter to (1) reconfig.php and (2) srxclr.php. NOTE: this might be due to a globals overwrite issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18076 - https://www.exploit-db.com/exploits/1809 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26590
CVE ID: CVE-2006-2571 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.html in Alkacon OpenCms 6.0.0, 6.0.2, and 6.0.3 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search action. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25710 - http://www.eazel.es/media/advisory002-OpenCms-Xml-Content-Demo-search-engine-Cross-site-scripting.html - http://securitytracker.com/id?1016158 - http://www.vupen.com/english/advisories/2006/1931 - http://secunia.com/advisories/20251
securitytracker.com/id?1016158 - http://www.vupen.com/english/advisories/2006/1931 - http://secunia.com/advisories/20251 - http://www.securityfocus.com/archive/1/434932/100/0/threaded
CVE ID: CVE-2006-2572 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.336Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in DGBook 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) email, and (4) address parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25732 - http://www.securityfocus.com/archive/1/436615/100/0/threaded - http://www.securityfocus.com/archive/1/434869/100/0/threaded - http://www.securityfocus.com/bid/18310 - http://secunia.com/advisories/20201 - https://exchange.xforce.ibmclou
hreaded - http://www.securityfocus.com/bid/18310 - http://secunia.com/advisories/20201 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26629 - http://securityreason.com/securityalert/948 - http://www.vupen.com/english/advisories/2006/1942
CVE ID: CVE-2006-2573 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in DGBook 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, (4) address, (5) comment, and (6) ip parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26630 - http://secunia.com/advis
es: - http://www.osvdb.org/25733 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26630 - http://secunia.com/advisories/20201 - http://www.vupen.com/english/advisories/2006/1942
CVE ID: CVE-2006-2574 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:50.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Software Distributor in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allow local users to gain privileges via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434838/100/0/threaded - http://www.vupen.com/english/advisories/2006/1947 - http://secunia.com/advisories/20230 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5568 - http://secunia.com/advisories/20332 - http
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5568 - http://secunia.com/advisories/20332 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00659649 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26609 - http://www.securityfocus.com/bid/18098 - http://securitytracker.com/id?1016139 - http://support.avaya.com/elmodocs2/security/ASA-2006-106.htm - http://securityreason.com/securityalert/964 - http://www.securityfocus.com/archive/1/434838/100/0/threaded
CVE ID: CVE-2006-2575 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service (crash) via a client flag (frameNum) that is greater than 41, which triggers an assert error. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20250/ - http://www.osvdb.org/25737 - http://www.vupen.com/english/advisories/2006/1939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26607 - http://www.securityfocus.com/archive/1/434908/100/0/threaded - ht
//exchange.xforce.ibmcloud.com/vulnerabilities/26607 - http://www.securityfocus.com/archive/1/434908/100/0/threaded - http://www.securityfocus.com/bid/18104 - http://aluigi.altervista.org/adv/panza-adv.txt - http://securitytracker.com/id?1016149
CVE ID: CVE-2006-2576 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) lib.simplesel.php, (b) lib.filelist.php, (c) tree.documents.php, (d) lib.repo.php, and (e) lib.php, and (2) GLOBALS[where_scs] to (f) lib.teleskill.php. NOTE: this issue might be resultant from a global overwrite vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25
global overwrite vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26633 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0113.html - http://www.osvdb.org/26711 - https://www.exploit-db.com/exploits/1817 - http://www.vupen.com/english/advisories/2006/1935 - http://secunia.com/advisories/20260
CVE ID: CVE-2006-2577 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) where_cms, (2) where_lms, (3) where_upgrade, (4) BBC_LIB_PATH, and (5) BBC_LANGUAGE_PATH parameters in various unspecified scripts. NOTE: the provenance of some of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25757 -
m third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26633 - http://secunia.com/advisories/20260
CVE ID: CVE-2006-2578 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/cron.php in eSyndicat Directory 1.2, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the path_to_config parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20218 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26663 - http://www.vupen.com/english/advisories/2006/1983 - http://pridels0.blogspot.com/2006/05/esyndicat-directo
ities/26663 - http://www.vupen.com/english/advisories/2006/1983 - http://pridels0.blogspot.com/2006/05/esyndicat-directory-software-local.html
CVE ID: CVE-2006-2579 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:51.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in HP OpenView Storage Data Protector 5.1 and 5.5 allows remote attackers to execute arbitrary code via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434871/100/0/threaded - http://securityreason.com/securityalert/965 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26635 - http://secunia.com/advisories/20196 - http://securitytracker.com/id?1016138 - http://www.securityfocus.com/archive/1/434871/100/0/threaded - http://ww
20196 - http://securitytracker.com/id?1016138 - http://www.securityfocus.com/archive/1/434871/100/0/threaded - http://www.vupen.com/english/advisories/2006/1946 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00671912 - http://www.securityfocus.com/bid/18095
CVE ID: CVE-2006-2580 State: PUBLISHED Published: 2006-05-24T23:00:00 Last Updated: 2024-08-07T17:58:50.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allow remote attackers to gain privileged access, execute arbitrary commands, or create arbitrary files via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00672314 - http://securityreason.com/securityalert/966 - http://secunia.com/advisories/20193 - http://www.vupen.com/english/advisories/2006/1945 - http://www.sec
rityalert/966 - http://secunia.com/advisories/20193 - http://www.vupen.com/english/advisories/2006/1945 - http://www.securityfocus.com/archive/1/434872/100/0/threaded - http://securitytracker.com/id?1016137 - http://www.securityfocus.com/bid/18096 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26636 - http://www.securityfocus.com/archive/1/434872/100/0/threaded
CVE ID: CVE-2006-2581 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.364Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Wiki content in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20264 - http://www.vupen.com/english/advisories/2006/1949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26664
CVE ID: CVE-2006-2582 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: The editing form in RWiki 2.1.0pre1 through 2.1.0 allows remote attackers to execute arbitrary Ruby code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20264 - http://www.vupen.com/english/advisories/2006/1949 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26668