Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
19198 - http://www.securityfocus.com/archive/1/441286/100/0/threaded - http://securityreason.com/securityalert/1309 - http://secunia.com/advisories/21227 - http://www.vupen.com/english/advisories/2006/3015 - https://www.exploit-db.com/exploits/2078
CVE ID: CVE-2006-3931 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via a long command line argument (filename). NOTE: This may not be a vulnerability if Midirecord is not installed setuid. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441204/100/0/threaded - http://securityreason.com/securityalert/1303 - http://www.securityfocus.com/bid/19190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2804
/securityalert/1303 - http://www.securityfocus.com/bid/19190 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28047 - http://advisories.echo.or.id/adv/adv41-theday-2006.txt
CVE ID: CVE-2006-3932 State: PUBLISHED Published: 2006-07-31T21:00:00 Last Updated: 2024-08-07T18:48:39.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21212 - http://www.vupen.com/english/advisories/2006/2983 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27961
CVE ID: CVE-2006-3933 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21193 - http://www.opencms.org/opencms/en/shownews.html?id=1002 - http://securityreason.com/securityalert/1302 - http://www.securityfocus.com/archive/1/441182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28033 - http://o0o.nu/~meder/OpenCMS_mul
/1/441182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28033 - http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
CVE ID: CVE-2006-3934 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21193 - http://www.opencms.org/opencms/en/shownews.html?id=1002 - http://securityreason.com/securityalert/1302 - http://www.securityfocus.com/archive/1/441182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
- http://www.securityfocus.com/archive/1/441182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28000 - http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
CVE ID: CVE-2006-3935 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.419Z Vendors: n/a Products: n/a Problem Types: n/a Description: system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate valu
am modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28026 - http://secunia.com/advisories/21193 - http://www.opencms.org/opencms/en/shownews.html?id=1002 - http://securityreason.com/securityalert/1302 - http://www.securityfocus.com/archive/1/441182/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28003 - h
ps://exchange.xforce.ibmcloud.com/vulnerabilities/27996 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28003 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28010 - http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip - https://exchange.xforce.ibmcloud.com/vulnerabilities/28036
CVE ID: CVE-2006-3936 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.404Z Vendors: n/a Products: n/a Problem Types: n/a Description: system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21193 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28001 - http://www.opencms.org/opencms/en/shownews.html?id=1002 - http://securityreason.com/securityalert/1302 - http://www.securityfocus.com/ar
ms.org/opencms/en/shownews.html?id=1002 - http://securityreason.com/securityalert/1302 - http://www.securityfocus.com/archive/1/441182/100/0/threaded - http://o0o.nu/~meder/OpenCMS_multiple_vulnerabilities.txt - http://www.opencms.org/export/download/opencms/opencms_6.2.2_src.zip
CVE ID: CVE-2006-3937 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1304 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27979 - http://www.securityfocus.com/archive/1/441170/100/0/threaded
CVE ID: CVE-2006-3938 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3) edit_link.php in ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php in /ecrire/tools/; (8) /ecrire/inc/connexion.php and (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) and class.blogpost.php in /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, and (16) class.xblogpost.php i
php in /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, and (16) class.xblogpost.php in /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, which reveal the installation path in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/459820/100/0/threaded - http://www.osvdb.org/29814 - http://www.osvdb.org/29828 - http://www.osvdb.org/29825 - http://www.osvdb.org/29816 - http://www.osvdb.org/29826 - http://www.osvdb.org/29817 - http://www.osvdb.org/29815 - http://www.osvdb.org/29818 - http://www.osvdb.org/29812 - https://exchange.xforce.ibmcloud.com/v
//www.osvdb.org/29815 - http://www.osvdb.org/29818 - http://www.osvdb.org/29812 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27913 - http://securityreason.com/securityalert/1307 - http://www.osvdb.org/29830 - http://www.osvdb.org/29821 - http://www.osvdb.org/29827 - http://www.osvdb.org/29831 - http://www.osvdb.org/29820 - http://www.osvdb.org/29829 - http://zone14.free.fr/advisories/8/ - http://www.osvdb.org/29823 - http://www.osvdb.org/29813 - http://www.osvdb.org/29824 - http://www.osvdb.org/29822 - http://www.securityfocus.com/archive/1/440874/100/100/threaded
CVE ID: CVE-2006-3939 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, which permits changing the Extensions Mode file type; (2) access.php, which permits changing the Protection Method; (3) edituser.php, which permits adding upload capabilities to user accounts; (4) settings.php, which permits changing the admin information; and (5) index.php, which permits uploading of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.
which permits uploading of arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19175 - http://securityreason.com/securityalert/1305 - http://www.securityfocus.com/archive/1/441172/100/0/threaded
CVE ID: CVE-2006-3940 State: PUBLISHED Published: 2006-07-31T22:00:00 Last Updated: 2024-08-07T18:48:39.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.php. NOTE: the auction_rating.php vector is already covered by CVE-2005-1234. NOTE: the original disclosure states that the product name is "PHP-Auction", but this is probably an error. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28006 - http://www.securityfo
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28006 - http://www.securityfocus.com/archive/1/441190/100/0/threaded - http://www.securityfocus.com/bid/19179 - http://securityreason.com/securityalert/1306 - http://www.aria-security.net/advisory/phpauction.txt
CVE ID: CVE-2006-3941 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service (grid service shutdown) and possibly execute arbitrary code using buffer overflows via unknown vectors that cause (1) qmaster or (2) execd to terminate. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22425 - http://www.securityfocus.com/bid/19218 - http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm - http://securitytracker.com/id?101
tyfocus.com/bid/19218 - http://support.avaya.com/elmodocs2/security/ASA-2006-204.htm - http://securitytracker.com/id?1016607 - http://www.vupen.com/english/advisories/2006/3066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28083 - http://www.osvdb.org/27639 - http://secunia.com/advisories/21185 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102322-1
CVE ID: CVE-2006-3942 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.439Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability. NOTE: the name "Mailslot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot. Additional
slot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot. Additional Analyst Notes: - CVE Program Container: References: - http://xforce.iss.net/xforce/alerts/id/231 - http://www.vupen.com/english/advisories/2006/3037 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.securityfocus.com/archive/1/443287/100/200/threaded - http://www.securityfocus.com/bid/19215 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-063 - http://www.coresecurity.com/common/showdoc.php?idx=562&idxseccion=10 - http://securitytracker.com/id?1016606 - http://secunia.com/advisories/21276 - http://securitytracker.com/
dxseccion=10 - http://securitytracker.com/id?1016606 - http://secunia.com/advisories/21276 - http://securitytracker.com/id?1017035 - http://www.securityfocus.com/archive/1/449179/100/0/threaded - http://www.osvdb.org/27644 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A428 - http://blogs.technet.com/msrc/archive/2006/07/28/443837.aspx
CVE ID: CVE-2006-3943 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1) RGBExtraColor, (2) RGBForeColor, and (3) RGBBackColor properties. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-27-ndfxarteffects-rgbextracolor.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28046 - http://www.osvdb.org/27530 - http://www.securityfocus.com/bid/19184
CVE ID: CVE-2006-3944 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow exception, or to (b) 0x7ffffffe, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27372 - http://www.securityfocus.com/bid/19113 - http://browserfun.blogspot.com/2006/07/mobb-24-formslistbox1-listwidth.html -
http://www.securityfocus.com/bid/19113 - http://browserfun.blogspot.com/2006/07/mobb-24-formslistbox1-listwidth.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27931 - http://www.vupen.com/english/advisories/2006/2954
CVE ID: CVE-2006-3945 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.403Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27977 - http://browserfun.blogspot.com/2006/07/mobb-26-opera-css-background.html - http://www.osvdb.org/27374 - http://www.vupen.com/english/advisories/2006/2987
CVE ID: CVE-2006-3946 State: PUBLISHED Published: 2006-07-31T23:00:00 Last Updated: 2024-08-07T18:48:39.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-31-sa
tag. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-31-safari-khtmlparserpoponeblock.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28081 - http://secunia.com/advisories/22187 - http://www.vupen.com/english/advisories/2006/3852 - http://www.osvdb.org/27534 - http://secunia.com/advisories/21271 - http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html - http://www.securityfocus.com/bid/19250 - http://securitytracker.com/id?1016957 - http://www.vupen.com/english/advisories/2006/3069
CVE ID: CVE-2006-3947 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21292 - http://www.osvdb.org/27653 - http://securityreason.com/securityalert/1313 - http://www.vupen.com/english/advisories/2006/3055 - https://www.exploit-db.com/exploits/2086 - http://www
tyalert/1313 - http://www.vupen.com/english/advisories/2006/3055 - https://www.exploit-db.com/exploits/2086 - http://www.securityfocus.com/bid/19222 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28074 - http://www.securityfocus.com/archive/1/441538/100/0/threaded
CVE ID: CVE-2006-3948 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19208 - http://www.securityfocus.com/archive/1/441490/100/0/threaded - http://securityreason.com/securityalert/1311 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28062 - http://www.aria-security.net/advisory/inp.txt
CVE ID: CVE-2006-3949 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1318 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28075 - http://www.securityfocus.com/bid/19223 - http://www.securityfocus.com/archive/1/441541/100/0/threaded
CVE ID: CVE-2006-3950 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0722.html - http://www.securityfocus.com/bid/19237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28087 - http://www.vupen.com/english/advisories/2006/3059 - http://www.osvdb.org/27636 - http://secunia.com/advisories/21281
CVE ID: CVE-2006-3951 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.353Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2939 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27920 - http://www.securityfocus.com/bid/19124 - https://www.exploit-db.com/exploits/2064
CVE ID: CVE-2006-3952 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28084 - http://www.vupen.com/english/advisories/2006/3068 - http://secunia.com/advisories/21289 - http://www.securityfocus.com/bid/19243 -
.vupen.com/english/advisories/2006/3068 - http://secunia.com/advisories/21289 - http://www.securityfocus.com/bid/19243 - http://www.osvdb.org/27646
CVE ID: CVE-2006-3953 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441534/100/0/threaded - http://www.securityfocus.com/bid/19193 - http://securityreason.com/securityalert/1319
CVE ID: CVE-2006-3954 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (dot dot) in the gallery parameter in a (1) avatar or (2) do_avatar action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/441534/100/0/threaded - http://securityreason.com/securityalert/1319 - http://www.securityfocus.com/bid/19195
CVE ID: CVE-2006-3955 State: PUBLISHED Published: 2006-08-01T21:00:00 Last Updated: 2024-08-07T18:48:39.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1315 - http://securitytracker.com/id?1016557 - http://www.osvdb.org/28675 - http://securitytracker.com/id?1016558 - http://www.osvdb.org/28676 - http://www.securityfocus.com/archive/1/440875/100/100/thread
curitytracker.com/id?1016558 - http://www.osvdb.org/28676 - http://www.securityfocus.com/archive/1/440875/100/100/threaded - http://www.osvdb.org/28674 - http://www.securityfocus.com/bid/19095 - http://www.securityfocus.com/archive/1/440839/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27905