Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2735 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: This is a similar vulnerability to CVE-2006-2507. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=38 - http://www.securityfocus.com/archive/1/435298/100/0/threaded - http://phpbb-tweaks.com/topics.html-p-17623
?viewdoc=38 - http://www.securityfocus.com/archive/1/435298/100/0/threaded - http://phpbb-tweaks.com/topics.html-p-17623#17623 - http://securityreason.com/securityalert/1001 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0709.html - http://www.securityfocus.com/bid/18155 - http://www.osvdb.org/25821 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26857 - http://www.securityfocus.com/archive/1/435286/100/0/threaded - http://www.vupen.com/english/advisories/2006/2045 - http://secunia.com/advisories/20354 - http://www.nukedx.com/?getxpl=38
CVE ID: CVE-2006-2736 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: This is a similar vulnerability to CVE-2006-2507. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435298/100/0/threaded - http://phpbb-tweaks.com/topics.html-p-17623#17623 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
100/0/threaded - http://phpbb-tweaks.com/topics.html-p-17623#17623 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26890 - http://www.securityfocus.com/archive/1/435289/100/0/threaded - http://www.nukedx.com/?viewdoc=41 - http://securityreason.com/securityalert/1001 - http://secunia.com/advisories/20350 - http://www.vupen.com/english/advisories/2006/2044 - http://www.securityfocus.com/bid/18153 - http://www.nukedx.com/?getxpl=41
CVE ID: CVE-2006-2737 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via the addDB action. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1013 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26951 - http://www.kapda.ir/advisory-337.html - http://www.securityfocus.com/archive/1/435311/100/0/threaded - http://www.kapda.ir
tp://www.kapda.ir/advisory-337.html - http://www.securityfocus.com/archive/1/435311/100/0/threaded - http://www.kapda.ir/attach-1661-nukedit.txt - http://www.securityfocus.com/bid/18157 - http://www.vupen.com/english/advisories/2006/2052 - http://secunia.com/advisories/20348
CVE ID: CVE-2006-2738 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid login shell in the initfile for the ldap-server, which allows remote attackers to access any server where the default has not been changed. Additional Analyst Notes: - CVE Program Container: References: - http://www.open-xchange.org/bugzilla/show_bug.cgi?id=2815 - http://www.securityfocus.com/bid/18115 - http://www.securityfocus.com/archive/1/435198/100/0/threaded - http://www.vupen.com/english/advisories/2006/203
/18115 - http://www.securityfocus.com/archive/1/435198/100/0/threaded - http://www.vupen.com/english/advisories/2006/2037 - http://secunia.com/advisories/20323 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26761 - http://securityreason.com/securityalert/1012 - http://www.golem.de/0605/45407.html
CVE ID: CVE-2006-2739 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the tinybb_footers parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20356 - http://www.nukedx.com/?viewdoc=33 - http://securitytracker.com/id?1016172 - http://www.securityfocus.com/bid/18147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26824 - http://www.securityfocus.com/archive/1
ocus.com/bid/18147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26824 - http://www.securityfocus.com/archive/1/487311/100/200/threaded - http://www.securityfocus.com/archive/1/435281/100/0/threaded - http://www.vupen.com/english/advisories/2006/2035 - http://securityreason.com/securityalert/1011 - http://www.nukedx.com/?getxpl=33
CVE ID: CVE-2006-2740 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20356 - http://www.nukedx.com/?viewdoc=33 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26826 - http://securitytracker.com/id?1016172 - http://www.securityfocus.com/
change.xforce.ibmcloud.com/vulnerabilities/26826 - http://securitytracker.com/id?1016172 - http://www.securityfocus.com/bid/18147 - http://www.securityfocus.com/archive/1/435281/100/0/threaded - http://www.vupen.com/english/advisories/2006/2035 - http://securityreason.com/securityalert/1011 - http://www.nukedx.com/?getxpl=33
CVE ID: CVE-2006-2741 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web script or HTML via the q parameter in forgot.php, which is echoed in an error message, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.nukedx.com/?viewdoc=33 - http://securitytracker.com/id?1016172 - http://www.securityfocus.com/bid/18147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26829 - http://www.securityfocus.com/archive/1/435281/100/0/threa
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26829 - http://www.securityfocus.com/archive/1/435281/100/0/threaded - http://securityreason.com/securityalert/1011 - http://www.nukedx.com/?getxpl=33
CVE ID: CVE-2006-2742 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL commands via the (1) count and (2) from variables to (a) database.mysql.inc, (b) database.pgsql.inc, and (c) database.mysqli.inc. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20140 - http://drupal.org/node/65357 - http://www.securityfocus.com/bid/18245 - http://www.vupen.com/english/advisories/2006/1975 - http://www.debian.org/security/2006/dsa-1125 - http://secun
/18245 - http://www.vupen.com/english/advisories/2006/1975 - http://www.debian.org/security/2006/dsa-1125 - http://secunia.com/advisories/21244 - http://www.securityfocus.com/archive/1/435790/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26654
CVE ID: CVE-2006-2743 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/65409 - http://www.securityfocus.com/archive/1/435794/100/0/threaded - http://secunia.com/advisories/20140 - http://www.securityfocus.com/bid/18245 - http://www.vupen.com/english/advisories/2006/1975 - http://www
visories/20140 - http://www.securityfocus.com/bid/18245 - http://www.vupen.com/english/advisories/2006/1975 - http://www.debian.org/security/2006/dsa-1125 - https://www.exploit-db.com/exploits/1821 - http://secunia.com/advisories/21244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26655
CVE ID: CVE-2006-2744 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435283/100/0/threaded - http://www.nukedx.com/?viewdoc=35 - http://www.vupen.com/english/advisories/2006/2036 - http://www.nukedx.com/?getxpl=35 - http://www.osvdb.org/26100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26839
p://www.nukedx.com/?getxpl=35 - http://www.osvdb.org/26100 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26839 - http://www.securityfocus.com/bid/18149 - http://secunia.com/advisories/20358 - http://securityreason.com/securityalert/1010
CVE ID: CVE-2006-2745 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/arch
simple, and (g) ciao. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435283/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26854 - http://www.nukedx.com/?viewdoc=35 - http://www.vupen.com/english/advisories/2006/2036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26841 - http://www.nukedx.com/?getxpl=35 - http://www.osvdb.org/26101 - http://www.osvdb.org/26103 - http://www.securityfocus.com/bid/18149 - http://www.osvdb.org/26102 - http://secunia.com/advisories/20358 - http://securityreason.com/securityalert/1010
CVE ID: CVE-2006-2746 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p-themes" index.inc.php files including (c) lowgraphic, (d) classic, (e) puzzle, (f) simple, and (g) ciao. NOTE: vectors 2 and 3 might be resultant from file inclusion issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/arch
ile inclusion issues. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435283/100/0/threaded - http://www.nukedx.com/?viewdoc=35 - http://www.vupen.com/english/advisories/2006/2036 - http://www.osvdb.org/26105 - http://www.nukedx.com/?getxpl=35 - http://www.securityfocus.com/bid/18151 - http://www.osvdb.org/26104 - http://secunia.com/advisories/20358 - http://securityreason.com/securityalert/1010
CVE ID: CVE-2006-2747 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.912Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitrary files or execute PHP code via a .. (dot dot) sequence and trailing null (%00) byte in the subsite parameter in a showsubsite todo. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20373 - http://securityreason.com/securityalert/1009 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26724 - http://www.securityfocus.com/archive/1/435365/100/0/threaded - http:
xchange.xforce.ibmcloud.com/vulnerabilities/26724 - http://www.securityfocus.com/archive/1/435365/100/0/threaded - http://www.securityfocus.com/bid/18185 - http://securitytracker.com/id?1016180 - http://www.vupen.com/english/advisories/2006/2065
CVE ID: CVE-2006-2748 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.911Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary SQL commands via multiple vectors, as demonstrated by the (1) type parameter in adminfunctions.php and the (2) catalogue_id parameter in editcatalogue.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=576483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26968 - http://www.securityf
.net/forum/forum.php?forum_id=576483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26968 - http://www.securityfocus.com/archive/1/435380/100/0/threaded - http://secunia.com/advisories/20341 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - http://securitytracker.com/id?1016178 - http://securityreason.com/securityalert/1014 - http://www.securityfocus.com/bid/18169 - http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631
CVE ID: CVE-2006-2749 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.011Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary SQL commands via the (1) txtCustomField and (2) CustomFieldID array parameters. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=576483 - http://www.securityfocus.com/archive/1/435380/100/0/threaded - http://secunia.com/advisories/20341 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - http://securitytra
http://secunia.com/advisories/20341 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - http://securitytracker.com/id?1016178 - http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477 - http://securityreason.com/securityalert/1014 - http://www.securityfocus.com/bid/18169
CVE ID: CVE-2006-2750 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.038Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) before 0.7.0.1 allows remote attackers to inject arbitrary web scripts or HTML via failed SQL queries, which is reflected in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=576483 - http://www.securityfocus.com/archive/1/435380/100/0/threaded - http://secunia.com/advisories/20341 - http://www.seclab.tuwien.ac.at/advisori
ocus.com/archive/1/435380/100/0/threaded - http://secunia.com/advisories/20341 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26966 - http://securitytracker.com/id?1016178 - http://securityreason.com/securityalert/1014 - http://www.securityfocus.com/bid/18169 - http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/core.php?r1=477&r2=631
CVE ID: CVE-2006-2751 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.965Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote attackers to inject arbitrary web scripts or HTML via the item_list parameter in search.php. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=576483 - http://www.securityfocus.com/archive/1/435380/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26965 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - http://svn.so
xforce.ibmcloud.com/vulnerabilities/26965 - http://www.seclab.tuwien.ac.at/advisories/TUVSA-0605-001.txt - http://svn.sourceforge.net/viewcvs.cgi/osic-win/branches/osic_0-7/osic/search.php?view=markup&rev=477 - http://securityreason.com/securityalert/1014
CVE ID: CVE-2006-2752 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable permissions, which allows attackers to obtain the rc (RedCarpet) password. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20396 - http://www.securityfocus.com/archive/1/435491/100/0/threaded
CVE ID: CVE-2006-2753 State: PUBLISHED Published: 2006-06-01T17:00:00 Last Updated: 2024-08-07T17:58:51.900Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to execute arbitrary SQL commands via crafted multibyte encodings in character sets such as SJIS, BIG5, and GBK, which are not properly handled when the mysql_real_escape function is used to escape the input. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1092 - http://lists.mysql.com/announce/364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2687
security/2006/dsa-1092 - http://lists.mysql.com/announce/364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26875 - http://secunia.com/advisories/20712 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:097 - http://secunia.com/advisories/20541 - http://www.us-cert.gov/cas/techalerts/TA07-072A.html - http://secunia.com/advisories/20562 - http://www.trustix.org/errata/2006/0034/ - http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html - http://docs.info.apple.com/article.html?artnum=305214 - http://www.gentoo.org/security/en/glsa/glsa-200606-13.xml - http://secunia.com/advisories/20365 - http://secunia.com/advisories/20531 - https://oval.cisecurity.org/rep
606-13.xml - http://secunia.com/advisories/20365 - http://secunia.com/advisories/20531 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10312 - http://www.vupen.com/english/advisories/2006/2105 - http://www.securityfocus.com/bid/18219 - http://secunia.com/advisories/20489 - http://securitytracker.com/id?1016216 - https://usn.ubuntu.com/303-1/ - http://www.vupen.com/english/advisories/2007/0930 - http://www.ubuntu.com/usn/usn-288-3 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=369735 - http://secunia.com/advisories/20625 - http://www.redhat.com/support/errata/RHSA-2006-0544.html - http://secunia.com/advisories/24479
CVE ID: CVE-2006-2754 State: PUBLISHED Published: 2006-06-01T17:00:00 Last Updated: 2024-08-07T17:58:52.083Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary code via a long hostname. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/305-1/ - http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c.diff?r1=1.21&r2=1.22&hideattic=1&sortbydate=0&f=h - http://secunia.com/advisories/20126 - http://secunia.com/advisories/20495 - http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22 - http://w
isories/20495 - http://www.openldap.org/devel/cvsweb.cgi/servers/slurpd/st.c?hideattic=1&sortbydate=0#rev1.22 - http://www.vupen.com/english/advisories/2006/1921 - http://www.gentoo.org/security/en/glsa/glsa-200606-17.xml - http://www.securityfocus.com/archive/1/436674/100/0/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:096 - http://secunia.com/advisories/20685 - http://www.osvdb.org/25659 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.008-openldap.html - http://www.openldap.org/software/release/changes.html - http://secunia.com/advisories/20848
CVE ID: CVE-2006-2755 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:52.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1007 - http://www.securityfocus.com/archive/1/435288/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26870 - http://www.securityfocus.com/archive/1/435296/100/0/threaded - http://w
ange.xforce.ibmcloud.com/vulnerabilities/26870 - http://www.securityfocus.com/archive/1/435296/100/0/threaded - http://www.nukedx.com/?viewdoc=40 - http://www.securityfocus.com/bid/18152
CVE ID: CVE-2006-2756 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eitsop My Web Server 1.0 allows remote attackers to cause a denial of service (application crash) via a long GET request. NOTE: CVE analysis suggests that this is a different product, and therefore a different vulnerability, than CVE-2002-1897. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18144 - http://seclists.org/lists/bugtraq/2006/May/0563.html - http://seclists.org/lists/bugtraq/2006/May/0601.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26885 - http://sec
/seclists.org/lists/bugtraq/2006/May/0601.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26885 - http://secunia.com/advisories/20335 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0722.html
CVE ID: CVE-2006-2757 State: PUBLISHED Published: 2006-06-02T01:00:00 Last Updated: 2024-08-07T17:58:51.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Chipmunk guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) start parameter in (a) index.php; (2) forumID parameter in index.php, (b) newtopic.php, and (c) reply.php; and (3) ID parameter to (d) edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstorm.linuxsecurity.com/0811-exploits/chipmunkguestbook-sqlxss.txt - http://www.securityfocus.com/archive/1/435306/100/0/threaded - http://osvdb.org/50345 - http://www.sec