Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
am Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24742 - http://www.securityfocus.com/bid/16683 - http://secunia.com/advisories/18874 - http://www.osvdb.org/23236 - http://www.vupen.com/english/advisories/2006/0617
CVE ID: CVE-2006-0843 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16712 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24752 - http://www.evuln.com/vulns/82/summary.html - http://secunia.com/advisories/18923 - http://securityreason.com/securityalert/522
CVE ID: CVE-2006-0844 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24755 - http://www.evuln.com/vulns/82/summary.html - http://www.securityfocus.com/bid/16714 - http://secunia.com/advisories/18923 - http://securityreason.com/securityalert/522
CVE ID: CVE-2006-0845 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.evuln.com/vulns/82/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24757 - http://secunia.com/advisories/18923 - http://securityreason.com/securityalert/522
CVE ID: CVE-2006-0846 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.939Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly using the ViewCommentsLog function. Additional Analyst Notes: - CVE Program Container: References: - http://www.evuln.com/vulns/82/summary.html - http://www.securityfocus.com/bid/16715 - http://secunia.com/advisories/18923 - https://
vuln.com/vulns/82/summary.html - http://www.securityfocus.com/bid/16715 - http://secunia.com/advisories/18923 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24758 - http://securityreason.com/securityalert/522
CVE ID: CVE-2006-0847 State: PUBLISHED Published: 2006-02-22T02:00:00 Last Updated: 2024-08-07T16:48:56.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.cherrypy.org/ - http://www.securityfocus.com/bid/16760 - http://secunia.com/advisories/18944 - http://secunia.com/advisories/20344 - http://www.vupen.com/english/advisories/2006/0677 - http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml - https://exchange.xforce.ibmclou
glish/advisories/2006/0677 - http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24809 - http://sourceforge.net/project/shownotes.php?release_id=384316&group_id=56099 - http://groups.google.com/group/cherrypy-announce/browse_thread/thread/92b2972f774fe6df/2f63afc9433dc306#2f63afc9433dc306
CVE ID: CVE-2006-0848 State: PUBLISHED Published: 2006-02-22T23:00:00 Last Updated: 2024-08-07T16:48:56.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18963 - http://www.mathematik.uni-
l Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18963 - http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html - http://www.kb.cert.org/vuls/id/999708 - http://www.securityfocus.com/bid/16736 - http://securitytracker.com/id?1015652 - http://www.us-cert.gov/cas/techalerts/TA06-053A.html - http://www.vupen.com/english/advisories/2006/0671 - http://www.us-cert.gov/cas/techalerts/TA06-062A.html - http://www.heise.de/english/newsticker/news/69862 - http://www.osvdb.org/23510 - http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php - http://docs.info.apple.com/article.html?artnum=303382 - https://exchange.xforce.ibmcloud.com/vulnerabilit
_exec.pm.php - http://docs.info.apple.com/article.html?artnum=303382 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24808
CVE ID: CVE-2006-0849 State: REJECTED Published: 2021-06-21T13:44:54 Last Updated: 2021-06-21T13:44:54 Description: No description available.
CVE ID: CVE-2006-0850 State: PUBLISHED Published: 2006-02-23T02:00:00 Last Updated: 2024-08-07T16:48:56.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the login_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24830 - http://www.vupen.com/english/advisories/2006/0676 - http://secunia.com/advisories/18951 - http://www.osvdb.org/2337
30 - http://www.vupen.com/english/advisories/2006/0676 - http://secunia.com/advisories/18951 - http://www.osvdb.org/23370 - http://www.ilch.de/news-134.html
CVE ID: CVE-2006-0851 State: PUBLISHED Published: 2006-02-23T02:00:00 Last Updated: 2024-08-07T16:48:56.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0672 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24829 - http://www.osvdb.org/23369 - https://www.exploit-db.com/exploits/1516 - http://secunia.com/advisories/18951 - http://www.securityfocus.com/bid/16735
CVE ID: CVE-2006-0852 State: PUBLISHED Published: 2006-02-23T02:00:00 Last Updated: 2024-08-07T16:48:56.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24771 - http://www.securityfocus.com/bid/16753 - http://secunia.com/advisories/18930 - http://www.vupen.com/english/advisories/2006/0663 - https://www.exploit-db.com/exploits/1512
CVE ID: CVE-2006-0853 State: PUBLISHED Published: 2006-02-23T02:00:00 Last Updated: 2024-08-07T16:48:56.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long SEARCH argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23377 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24812 - http://www.vupen.com/english/advisories/2006/0686 - http://www.securityfocus.com/archive/1/425586/100/0/threaded - http://www.securityfocus.com/bid/1674
isories/2006/0686 - http://www.securityfocus.com/archive/1/425586/100/0/threaded - http://www.securityfocus.com/bid/16744 - http://secunia.com/advisories/18986 - http://securitytracker.com/id?1015664
CVE ID: CVE-2006-0854 State: PUBLISHED Published: 2006-02-23T02:00:00 Last Updated: 2024-08-07T16:48:56.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23429 - http://www.securityfocus.com/bid/16787 - http://www.xorcrew.net/xpa/XPA-iUser.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24724 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.ht
change.xforce.ibmcloud.com/vulnerabilities/24724 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html - http://www.vupen.com/english/advisories/2006/0699 - http://secunia.com/advisories/18903
CVE ID: CVE-2006-0855 State: PUBLISHED Published: 2006-02-23T21:00:00 Last Updated: 2024-08-07T16:48:56.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015866 - http://secunia.com/advisories/19408 - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://secunia.com/advisori
nia.com/advisories/19408 - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://secunia.com/advisories/19166 - http://www.novell.com/linux/security/advisories/2006_06_sr.html - http://www.vupen.com/english/advisories/2006/1220 - http://secunia.com/advisories/19514 - http://securityreason.com/securityalert/546 - http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml - http://securitytracker.com/id?1015668 - http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt - http://secunia.com/advisories/19130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24904 - http://www.vupen.com/english/advisories/2006/0705 - http://www.guay-leroux.com/projects/zoo-advisory.tx
bilities/24904 - http://www.vupen.com/english/advisories/2006/0705 - http://www.guay-leroux.com/projects/zoo-advisory.txt - http://www.debian.org/security/2006/dsa-991 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html - http://www.securityfocus.com/archive/1/425887/100/0/threaded - http://secunia.com/advisories/19002 - http://secunia.com/advisories/19148 - http://www.securityfocus.com/bid/16790
CVE ID: CVE-2006-0856 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the Username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.evuln.com/vulns/66/summary.html - http://www.vupen.com/english/advisories/2006/0543 - http://www.securityfocus.com/bid/16609 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24544 - http://www.securityfocus.com/archive/1/425317/100/0/threaded - http://secunia.com/advi
cloud.com/vulnerabilities/24544 - http://www.securityfocus.com/archive/1/425317/100/0/threaded - http://secunia.com/advisories/18823
CVE ID: CVE-2006-0857 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425388/100/0/threaded - http://www.securityfocus.com/bid/16719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24815
CVE ID: CVE-2006-0858 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious "program" file in the C: folder. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16762 - http://www.securityfocus.com/archive/1/425504/100/0/threaded - http://secdev.zo
http://www.securityfocus.com/bid/16762 - http://www.securityfocus.com/archive/1/425504/100/0/threaded - http://secdev.zoller.lu/research/safnsec.htm
CVE ID: CVE-2006-0859 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426663/100/0/threaded - http://www.securityfocus.com/archive/1/425495/100/0/threaded - http://www.vupen.com/english/advisories/2006/0675 - http://www.osvdb.org/23374 - http://secunia.com/advisories/18946 - https://exchange.xfor
/english/advisories/2006/0675 - http://www.osvdb.org/23374 - http://secunia.com/advisories/18946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24797
CVE ID: CVE-2006-0860 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.945Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426663/100/0/threaded - http://www.securityfocus.com/archive/1/425495/100/0/threaded - http://www.vupen.com/english/
e/1/426663/100/0/threaded - http://www.securityfocus.com/archive/1/425495/100/0/threaded - http://www.vupen.com/english/advisories/2006/0675 - http://www.securityfocus.com/bid/16751 - http://secunia.com/advisories/18946 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24798 - http://www.osvdb.org/23375
CVE ID: CVE-2006-0861 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426663/100/0/threaded - http://www.securityfocus.com/archive/1/425495/100/0/threaded - http://www.vupen.com/english/advisories/2006/0675 - http://www.osvdb.org/23376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24799 - http://securityreason.com
75 - http://www.osvdb.org/23376 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24799 - http://securityreason.com/securityalert/460 - http://secunia.com/advisories/18946
CVE ID: CVE-2006-0862 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16776 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24893 - http://securitytracker.com/id?1015669 - http://www.irmplc.com/advisory017.htm - http://www.vupen.com/english/advisories/2006/0695 - http://www.securityfocus.com/archive/1/425779/100/0/threade
17.htm - http://www.vupen.com/english/advisories/2006/0695 - http://www.securityfocus.com/archive/1/425779/100/0/threaded - http://secunia.com/advisories/18994
CVE ID: CVE-2006-0863 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16776 - http://securitytracker.com/id?1015669 - http://securityreason.com/securityalert/473 - http://www.irmplc.com/advisory017.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/24894 - http://www.vupen.com/english/adviso
c.com/advisory017.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/24894 - http://www.vupen.com/english/advisories/2006/0695 - http://www.securityfocus.com/archive/1/425779/100/0/threaded - http://secunia.com/advisories/18994
CVE ID: CVE-2006-0864 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.657Z Vendors: n/a Products: n/a Problem Types: n/a Description: filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015658 - http://www.securityfocus.com/bid/16768 - http://www.vupen.com/english/advisories/2006/0691 - http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24850 - http://www.security
or1es/INCSA.2006-0x82-028-VIROBOT.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24850 - http://www.securityfocus.com/archive/1/425788/100/0/threaded - http://secunia.com/advisories/18974
CVE ID: CVE-2006-0865 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickly. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425630/100/0/threaded - http://www.neosecurityteam.net/advisories/Advisory-15.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/24837
CVE ID: CVE-2006-0866 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425630/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24838 - http://www.neosecurityteam.net/advisories/Advisory-15.txt
CVE ID: CVE-2006-0867 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service (application crash and persistent erratic behavior) via a long string in the name entry field. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24903 - http://www.securityfocus.com/archive/1/425785/100/0/threaded
CVE ID: CVE-2006-0868 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers." Additional Analyst Notes: - CVE Program Container: References: - http://pear.php.net/package/Auth/download/1.3.0r4 - http://securitytracker.com/id?1015666 - http://www.securityfocus.com/archive/1/425796/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24854
ttp://www.securityfocus.com/archive/1/425796/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24854 - http://secunia.com/advisories/19301 - http://www.vupen.com/english/advisories/2006/0696 - http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml - http://pear.php.net/package/Auth/download/1.2.4 - http://secunia.com/advisories/19008 - http://www.securityfocus.com/bid/16758
CVE ID: CVE-2006-0869 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.932Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://pear.php.net/package/LiveUser/download/ - http://securitytracker.com/id?1015659 - http://www.securityfoc
ences: - http://pear.php.net/package/LiveUser/download/ - http://securitytracker.com/id?1015659 - http://www.securityfocus.com/bid/16761 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24853 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24852 - http://www.securityfocus.com/archive/1/425711/100/0/threaded - http://securityreason.com/securityalert/466 - http://www.vupen.com/english/advisories/2006/0697 - http://www.gulftech.org/?node=research&article_id=00103-02212006
CVE ID: CVE-2006-0870 State: PUBLISHED Published: 2006-02-23T23:00:00 Last Updated: 2024-08-07T16:48:56.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16730 - http://www.nukedx.com/?viewdoc=9 - http://www.securityfocus.com/archive/1/431714/100/0/threaded - http://secunia.com/advisories/18439 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24803 - htt