Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tp://www.securityfocus.com/archive/1/440306/100/0/threaded - http://www.acid-root.new.fr/advisories/boastmachine.txt - http://securityreason.com/securityalert/1252
CVE ID: CVE-2006-3830 State: PUBLISHED Published: 2006-07-25T00:00:00Z Last Updated: 2024-09-16T18:04:26.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Languages selection in the admin interface in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to upload files with arbitrary extensions to the bmc/Inc/Lang directory. NOTE: because the uploaded files cannot be accessed through HTTP, this issue is a vulnerability only if there is a likely usage pattern in which the files would be opened or executed by local users, e.g., malware files with names that entice local users to open the files. Additional Analyst Notes: - CV
by local users, e.g., malware files with names that entice local users to open the files. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - http://www.acid-root.new.fr/advisories/boastmachine.txt
CVE ID: CVE-2006-3831 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Backup selection in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - http://securitytracker.com/id?1016515 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://securityreason.com/s
uritytracker.com/id?1016515 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://securityreason.com/securityalert/1271 - http://www.acid-root.new.fr/advisories/boastmachine.txt
CVE ID: CVE-2006-3832 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Gerrit van Aaken Loudblog 0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27442 - http://secunia.com/advisories/21157 - http://loudblog.de/forum/viewtopic.php?id=762 - http://retrogod.altervista.org/loudblog_05_sql.html - http://www.vupen.com/english/advisories/2006/2934 - http://loudblog.de/forum/viewtopic.php?id=770 - https://exchange.xforce.ibmcloud
upen.com/english/advisories/2006/2934 - http://loudblog.de/forum/viewtopic.php?id=770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27896 - http://www.securityfocus.com/archive/1/440763/100/0/threaded - http://securityreason.com/securityalert/1274
CVE ID: CVE-2006-3833 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in EJ3 TOPo 2.2.178 allows remote attackers to overwrite existing entries and establish new passwords for the overwritten entries via a URL with a modified entry ID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27711 - http://securityreason.com/securityalert/1279 - http://www.securityfocus.com/archive/1/439890/100/100/threaded - http://www.securityfocus.com/bid/18959
CVE ID: CVE-2006-3834 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: EJ3 TOPo 2.2.178 includes the password in cleartext in the ID field to index.php, which allows context-dependent attackers to obtain entry passwords via log files, referrers, or other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1279 - http://www.securityfocus.com/archive/1/439890/100/100/threaded
CVE ID: CVE-2006-3835 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, as demonstrated by URLs ending with /;index.jsp and /;help.do. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19106 - http://tomcat.apache.org/security-4.html - http://secunia.com/advisories/30908 - http://secunia.com/advisories/37297 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://secunia.com/advisories/30899
isories/37297 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-239312-1 - http://secunia.com/advisories/30899 - http://www.sec-consult.com/289.html - http://www.vupen.com/english/advisories/2008/1979/references - http://www.securityfocus.com/archive/1/500412/100/0/threaded - http://www.vupen.com/english/advisories/2007/1727 - http://secunia.com/advisories/33668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27902 - http://www.securityfocus.com/archive/1/500396/100/0/threaded - http://www.securityfocus.com/archive/1/468048/100/0/threaded - http://www.vupen.com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://s
com/english/advisories/2009/0233 - http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html - http://support.avaya.com/elmodocs2/security/ASA-2007-206.htm - http://secunia.com/advisories/25212 - http://www.securityfocus.com/archive/1/507729/100/0/threaded - http://securitytracker.com/id?1016576 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0467.html - http://tomcat.apache.org/security-5.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/34183 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
/ricerca/advisory/download/SN-2009-02.txt - http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx - http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540 - https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E - https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E
CVE ID: CVE-2006-3836 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in UNIDOmedia Chameleon LE 1.203 and earlier, and possibly Chameleon PRO, allows remote attackers to read arbitrary files via the rmid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440765/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27898 - http://www.vupen.com/english/advisories/2006/2948 - http://www.securityfocus.com/bid/19107 - http://securityreason.com/securityalert/1280 - http://sec
dvisories/2006/2948 - http://www.securityfocus.com/bid/19107 - http://securityreason.com/securityalert/1280 - http://secunia.com/advisories/21156
CVE ID: CVE-2006-3837 State: PUBLISHED Published: 2006-07-25T01:00:00 Last Updated: 2024-08-07T18:48:39.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1275 - http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt - http://www.securityfocus.com/archive/1/440421/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnera
phptgb.txt - http://www.securityfocus.com/archive/1/440421/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27775 - http://secunia.com/advisories/21102
CVE ID: CVE-2006-3838 State: PUBLISHED Published: 2006-07-27T01:00:00 Last Updated: 2024-08-07T18:48:39.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in eIQnetworks Enterprise Security Analyzer (ESA) before 2.5.0, as used in products including (a) Sidewinder, (b) iPolicy Security Manager, (c) Astaro Report Manager, (d) Fortinet FortiReporter, (e) Top Layer Network Security Analyzer, and possibly other products, allow remote attackers to execute arbitrary code via long (1) DELTAINTERVAL, (2) LOGFOLDER, (3) DELETELOGS, (4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (1
4) FWASERVER, (5) SYSLOGPUBLICIP, (6) GETFWAIMPORTLOG, (7) GETFWADELTA, (8) DELETERDEPDEVICE, (9) COMPRESSRAWLOGFILE, (10) GETSYSLOGFIREWALLS, (11) ADDPOLICY, and (12) EDITPOLICY commands to the Syslog daemon (syslogserver.exe); (13) GUIADDDEVICE, (14) ADDDEVICE, and (15) DELETEDEVICE commands to the Topology server (Topology.exe); the (15) LICMGR_ADDLICENSE command to the License Manager (EnterpriseSecurityAnalyzer.exe); the (16) TRACE and (17) QUERYMONITOR commands to the Monitoring agent (Monitoring.exe); and possibly other vectors related to the Syslog daemon (syslogserver.exe). Additional Analyst Notes: - CVE Program Container: References: - http://www.tippingpoint.com/security/advisori
ver.exe). Additional Analyst Notes: - CVE Program Container: References: - http://www.tippingpoint.com/security/advisories/TSRT-06-07.html - http://www.securityfocus.com/bid/19167 - http://www.eiqnetworks.com/products/enterprisesecurity/EnterpriseSecurityAnalyzer/ESA_2.5.0_Release_Notes.pdf - http://secunia.com/advisories/21218 - http://www.vupen.com/english/advisories/2006/3007 - http://www.osvdb.org/27526 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27950 - http://secunia.com/advisories/21217 - http://www.osvdb.org/27527 - http://securitytracker.com/id?1016580 - http://www.tippingpoint.com/security/advisories/TSRT-06-03.html - http://www.securityfocus.com/bid/19163 - http://www.v
http://www.tippingpoint.com/security/advisories/TSRT-06-03.html - http://www.securityfocus.com/bid/19163 - http://www.vupen.com/english/advisories/2006/2985 - http://www.securityfocus.com/archive/1/441198/100/0/threaded - http://secunia.com/advisories/21215 - http://www.securityfocus.com/archive/1/441195/100/0/threaded - http://www.vupen.com/english/advisories/2006/3008 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27953 - http://www.osvdb.org/27528 - http://secunia.com/advisories/21211 - http://www.securityfocus.com/bid/19164 - http://www.kb.cert.org/vuls/id/513068 - http://www.securityfocus.com/archive/1/441200/100/0/threaded - http://archive.cert.uni-stuttgart.de/bugtraq/2006/08
68 - http://www.securityfocus.com/archive/1/441200/100/0/threaded - http://archive.cert.uni-stuttgart.de/bugtraq/2006/08/msg00152.html - http://www.securityfocus.com/archive/1/441197/100/0/threaded - http://www.vupen.com/english/advisories/2006/3006 - http://www.tippingpoint.com/security/advisories/TSRT-06-04.html - http://secunia.com/advisories/21214 - http://www.securityfocus.com/bid/19165 - http://www.osvdb.org/27525 - http://www.vupen.com/english/advisories/2006/3010 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27951 - http://secunia.com/advisories/21213 - http://www.vupen.com/english/advisories/2006/3009 - http://www
erabilities/27951 - http://secunia.com/advisories/21213 - http://www.vupen.com/english/advisories/2006/3009 - http://www.zerodayinitiative.com/advisories/ZDI-06-023.html - http://www.zerodayinitiative.com/advisories/ZDI-06-024.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27954
CVE ID: CVE-2006-3840 State: PUBLISHED Published: 2006-07-27T10:00:00 Last Updated: 2024-08-07T18:48:39.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SMB Mailslot parsing functionality in PAM in multiple ISS products with XPU (24.39/1.78/epj/x.x.x.1780), including Proventia A, G, M, Server, and Desktop, BlackICE PC and Server Protection 3.6, and RealSecure 7.0, allows remote attackers to cause a denial of service (infinite loop) via a crafted SMB packet that is not properly handled by the SMB_Mailslot_Heap_Overflow decode. Additional Analyst Notes: - CVE Program Container: References: - https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630 - http
VE Program Container: References: - https://iss.custhelp.com/cgi-bin/iss.cfg/php/enduser/std_adp.php?p_faqid=3630 - http://www.securityfocus.com/archive/1/441278/100/0/threaded - http://www.nsfocus.com/english/homepage/research/0607.htm - http://secunia.com/advisories/21219 - http://www.vupen.com/english/advisories/2006/2996 - http://securitytracker.com/id?1016592 - http://xforce.iss.net/xforce/alerts/id/230 - http://www.securityfocus.com/bid/19178 - http://securitytracker.com/id?1016590 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27965 - http://securitytracker.com/id?1016591
CVE ID: CVE-2006-3841 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebScarab before 20060718-1904, when used with Microsoft Internet Explorer 6 SP2 or Konqueror 3.5.3, allows remote attackers to inject arbitrary web script or HTML via the URL, which is not sanitized before being returned in an error message when WebScarab is not able to access the URL. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1276 - http://www.securityfocus.com/bid/19063 - http://lists.grok.org.uk/pipermail/full-disclos
reason.com/securityalert/1276 - http://www.securityfocus.com/bid/19063 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047995.html - http://moritz-naumann.com/adv/0012/webscarabxss/0012.txt - http://www.securityfocus.com/archive/1/440441/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27797 - http://www.vupen.com/english/advisories/2006/2878 - http://secunia.com/advisories/21114
CVE ID: CVE-2006-3842 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:38.883Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440417/100/0/threaded - http://secunia.com/advisories/21085 - http://www.securityfocus.com/bid/19016 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27818 - http://securityreason.com/securityalert/1273
CVE ID: CVE-2006-3843 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:38.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in com_calendar.php in Calendar Mambo Module 1.5.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440407/100/0/threaded - http://www.securityfocus.com/bid/19027 - http://securityreason.com/securityalert/1272
CVE ID: CVE-2006-3844 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.240Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Quick 'n Easy FTP Server 3.0 allows remote authenticated users to execute arbitrary commands via a long argument to the LIST command, a different issue than CVE-2006-2027. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2875 - http://www.securiteam.com/exploits/5WP0C2AJ5W.html - http://secunia.com/advisories/21127 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27839 - http://www.osvdb.org/27400 - http://www.securityfocus.com/bid/19067
CVE ID: CVE-2006-3845 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in lzh.fmt in WinRAR 3.00 through 3.60 beta 6 allows remote attackers to execute arbitrary code via a long filename in a LHA archive. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21080 - http://www.securityfocus.com/bid/19043 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27815 - http://www.rarlabs.com/rarnew.htm - http://www.vupen.com/english/advisories/2006/2867 - http://hustlelabs.com/advisories/04072006_rarlabs.pdf
CVE ID: CVE-2006-3846 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in extadminmenus.class.php in the MultiBanners 1.0.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27916 - http://www.securityfocus.com/bid/19100 - http://www.vupen.com/english/advisories/2006/2933 - http://securityreason.com/securityalert/1277 - http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt -
ies/2006/2933 - http://securityreason.com/securityalert/1277 - http://solpotcrew.org/adv/BlueSpy-adv-multibanners.txt - http://secunia.com/advisories/21168 - http://www.securityfocus.com/archive/1/440881/100/0/threaded
CVE ID: CVE-2006-3847 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in (1) admin.php, and possibly (2) details.php, (3) modify.php, (4) newgroup.php, (5) newtask.php, and (6) rss.php, in MoSpray (aka com_mospray) 1.8 RC1 allows remote attackers to execute arbitrary PHP code via a URL in the basedir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440939/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27917 - http://secunia.com/advisories/21166 - http://kurdishsecuri
https://exchange.xforce.ibmcloud.com/vulnerabilities/27917 - http://secunia.com/advisories/21166 - http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-14-mospray-basedir.html - https://www.exploit-db.com/exploits/2062 - http://www.securityfocus.com/bid/19122 - http://www.vupen.com/english/advisories/2006/2932
CVE ID: CVE-2006-3848 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CGI wrapper for IP Calculator (IPCalc) 0.40 allows remote attackers to inject arbitrary web script or HTML via the URI (REQUEST_URI environment variable), which is used in the actionurl variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27446 - http://www.securityfocus.com/archive/1/441304/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0487.html - http://secunia.com/advisories/21151 - https://exchange.xforce
.neohapsis.com/archives/fulldisclosure/2006-07/0487.html - http://secunia.com/advisories/21151 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27924 - http://www.vupen.com/english/advisories/2006/2944 - http://www.securityfocus.com/archive/1/440860/100/100/threaded - http://www.securityfocus.com/bid/19130 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/att-0487/NDSA20060705.txt.asc
CVE ID: CVE-2006-3849 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a (1) long message handled by the recvTextMessage function in multiplay.c or a (2) long filename handled by NETrecvFile function in netplay/netplay.c. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/warzonebof-adv.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/27910 - http://www.vupen.com/english/advisories/2006/2943 - http://w
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/27910 - http://www.vupen.com/english/advisories/2006/2943 - http://www.securityfocus.com/archive/1/441039/100/0/threaded - http://securityreason.com/securityalert/1283 - http://secunia.com/advisories/21474 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27915 - http://www.securityfocus.com/bid/19118 - http://www.gentoo.org/security/en/glsa/glsa-200608-16.xml
CVE ID: CVE-2006-3850 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upgrader.php in Vanilla CMS 1.0.1 and earlier, when /conf/old_settings.php exists, allows remote attackers to execute arbitrary PHP code via a URL in the RootDirectory parameter. NOTE: this issue has been disputed by a third party who states that the RootDirectory parameter is initialized before being used, for version 1.0. CVE analysis concurs with the dispute, but it is unclear whether older versions are affected Additional Analyst Notes: - CVE Program Container: References: - http:
it is unclear whether older versions are affected Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/440938/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-July/000937.html - http://www.attrition.org/pipermail/vim/2006-July/000944.html - http://www.securityfocus.com/archive/1/442450/100/0/threaded - http://securitytracker.com/id?1016568 - http://www.securityfocus.com/bid/19127 - http://www.osvdb.org/28287 - http://securityreason.com/securityalert/1281
CVE ID: CVE-2006-3851 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in upgradev1.php in X7 Chat 2.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the old_prefix parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27921 - http://www.vupen.com/english/advisories/2006/2941 - http://www.securityfocus.com/bid/19123 - https://www.exploit-db.com/exploits/2068
CVE ID: CVE-2006-3852 State: PUBLISHED Published: 2006-07-25T23:00:00 Last Updated: 2024-08-07T18:48:39.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Micro GuestBook allows remote attackers to execute arbitrary SQL commands via the (1) name or (2) comment ("text") fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2935 - http://www.securityfocus.com/archive/1/440855/100/0/threaded - http://www.osvdb.org/28677 - http://www.securityfocus.com/bid/19119 - http://it.security.netsons.org/exploit/MicroGuestBook.txt - http://secunia.com/advisories/21155 - http
s.com/bid/19119 - http://it.security.netsons.org/exploit/MicroGuestBook.txt - http://secunia.com/advisories/21155 - http://securityreason.com/securityalert/1285 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27911