Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5563 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.391Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Yahoo! Messenger (Service 18) before 8.1.0.195 allows remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted room name in a Conference Invite. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0566.html - http://secunia.com/advisories/22510 - http://www.securityfocus.com/
psis.com/archives/fulldisclosure/2006-10/0566.html - http://secunia.com/advisories/22510 - http://www.securityfocus.com/bid/20625 - http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0518.html - http://www.vupen.com/english/advisories/2006/4193 - http://www.securityfocus.com/archive/1/449667/100/0/threaded
CVE ID: CVE-2006-5564 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20752 - http://www.vupen.com/english/advisories/2006/4195 - http://secunia.com/advisories/22564
CVE ID: CVE-2006-5565 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the (1) name, (2) file, (3) module, and (4) func parameters in (a) index.php; and the (5) file parameter in (b) modules.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4195 - http://secunia.com/advisories/22564 - http://www.
ner: References: - http://www.vupen.com/english/advisories/2006/4195 - http://secunia.com/advisories/22564 - http://www.securityfocus.com/bid/20754
CVE ID: CVE-2006-5566 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the (1) links_exchange, (2) news, (3) search_with_change_category_ability, (4) logging, (5) feedback, (6) show_price, (7) register, (8) answer, (9) productID, and (10) inside parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22541 - http://www.securityfocus.com/archive/1/449499/100/0/th
am Container: References: - http://secunia.com/advisories/22541 - http://www.securityfocus.com/archive/1/449499/100/0/threaded - http://www.vupen.com/english/advisories/2006/4219 - http://www.securityfocus.com/bid/20685 - http://securityreason.com/securityalert/1791
CVE ID: CVE-2006-5567 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.414Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute arbitrary code via a crafted (1) ultravox-max-msg header to the Ultravox protocol handler or (2) unspecified Lyrics3 tags. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15686 - http://securitytracker.com/id?1017119 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432 - https://exchan
curitytracker.com/id?1017119 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=432 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29807 - http://secunia.com/advisories/22580 - http://www.securityfocus.com/bid/20744 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29804 - http://www.kb.cert.org/vuls/id/449092 - http://securitytracker.com/id?1017120 - http://www.vupen.com/english/advisories/2006/4196 - http://www.winamp.com/player/version_history.php#5.31 - http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=431
CVE ID: CVE-2006-5568 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29778 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050335.html - http://securityreason.com/securityalert/1789 - http://www.vupen.com/english/advisories/2006/4192 - http://secunia.com/advisories/22540 - http://www.securityfocus.com/bid/20721
CVE ID: CVE-2006-5569 State: PUBLISHED Published: 2006-10-27T16:00:00Z Last Updated: 2024-09-17T01:01:20.958Z Vendors: n/a Products: n/a Problem Types: n/a Description: FtpXQ Server 3.0.1 installs with two default testing accounts, which allows remote attackers to read or write arbitrary files via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20721
CVE ID: CVE-2006-5570 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to read arbitrary files via a .. (dot dot) in the doc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449572/100/0/threaded - http://www.vupen.com/english/advisories/2006/4158 - http://marc.info/?l=full-disclosure&m=116167230400165&w=2 - http://securitytracker.com/alerts/2006/Oct/1017110.html - http://vuln.sg/cruiseworks109d-en.html - http://secun
65&w=2 - http://securitytracker.com/alerts/2006/Oct/1017110.html - http://vuln.sg/cruiseworks109d-en.html - http://secunia.com/advisories/22139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29765 - http://securityreason.com/securityalert/1790 - http://www.securityfocus.com/bid/20698
CVE ID: CVE-2006-5571 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execute arbitrary code via a long string in the doc parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20699 - http://www.securityfocus.com/archive/1/449572/100/0/threaded - http://www.vupen.com/english/advisories/2006/4158 - http://marc.info/?l=full-disclosure&m=116167230400165&w=2 - http://securitytracker.com/alerts/2006/Oct/1017110.html - http://vuln.sg/cr
o/?l=full-disclosure&m=116167230400165&w=2 - http://securitytracker.com/alerts/2006/Oct/1017110.html - http://vuln.sg/cruiseworks109d-en.html - http://secunia.com/advisories/22139 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29763 - http://securityreason.com/securityalert/1790
CVE ID: CVE-2006-5572 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-5573 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-5574 State: PUBLISHED Published: 2007-01-09T22:00:00 Last Updated: 2024-08-07T19:55:53.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Brazilian Portuguese Grammar Checker in Microsoft Office 2003 and the Multilingual Interface for Office 2003, Project 2003, and Visio 2003 allows user-assisted remote attackers to execute arbitrary code via crafted text that is not properly parsed. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017486 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.osvdb.org/31251 - https://docs.microsoft.com/en-us/security-updates/sec
com/archive/1/457274/100/0/threaded - http://www.osvdb.org/31251 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-001 - http://www.securityfocus.com/archive/1/457274/100/0/threaded - http://www.vupen.com/english/advisories/2007/0102 - http://secunia.com/advisories/23671 - http://www.securityfocus.com/bid/21942
CVE ID: CVE-2006-5575 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-5576 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-5577 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T19:55:53.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and earlier allows remote attackers to obtain sensitive information via unspecified uses of the OBJECT HTML tag, which discloses the absolute path of the corresponding TIF folder, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5578. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4966 - http://secunia.com/advisories/23288 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://security
2006/4966 - http://secunia.com/advisories/23288 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://securitytracker.com/id?1017374 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A313 - http://www.securityfocus.com/bid/21507 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 - http://www.osvdb.org/30816
CVE ID: CVE-2006-5578 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T19:55:53.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 and earlier allows remote attackers to read Temporary Internet Files (TIF) and obtain sensitive information via unspecified vectors involving certain drag and drop operations, aka "TIF Folder Information Disclosure Vulnerability," and a different issue than CVE-2006-5577. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4966 - http://secunia.com/advisories/23288 - http://www.kb.cert.org/vuls/id/694344 - https://oval.cisecurity.org/reposi
/4966 - http://secunia.com/advisories/23288 - http://www.kb.cert.org/vuls/id/694344 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A337 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://securitytracker.com/id?1017374 - http://www.securityfocus.com/bid/21494 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 - http://www.osvdb.org/30815
CVE ID: CVE-2006-5579 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T19:55:53.610Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-58/advisory/ - http://www.vupen.com/english/advisories/2006/4966 - http://www.kb.cert.org/vuls/id/599832 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://
ories/2006/4966 - http://www.kb.cert.org/vuls/id/599832 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://www.osvdb.org/30813 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 - http://www.securityfocus.com/archive/1/454205/100/0/threaded - http://www.securityfocus.com/bid/21552 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A761 - http://secunia.com/advisories/20807 - http://securitytracker.com/id?1017373
CVE ID: CVE-2006-5581 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T19:55:53.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454210/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A116 - http://www.vupen.co
eaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A116 - http://www.vupen.com/english/advisories/2006/4966 - http://secunia.com/advisories/23288 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://www.kb.cert.org/vuls/id/347448 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.symantec.com/security_response/writeup.jsp?docid=2006-121212-1201-99 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-072 - http://www.osvdb.org/30814 - http://www.zerodayinitiative.com/advisories/ZDI-06-048.html - http://securitytracker.com/
- http://www.osvdb.org/30814 - http://www.zerodayinitiative.com/advisories/ZDI-06-048.html - http://securitytracker.com/id?1017373 - http://www.securityfocus.com/bid/21546
CVE ID: CVE-2006-5582 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-5583 State: PUBLISHED Published: 2006-12-12T20:00:00 Last Updated: 2024-08-07T19:55:53.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SNMP Service in Microsoft Windows 2000 SP4, XP SP2, Server 2003, Server 2003 SP1, and possibly other versions allows remote attackers to execute arbitrary code via a crafted SNMP packet, aka "SNMP Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21537 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1047 - http://www.kb.cert.org/vuls/id/901584 - http://www.us-cert.gov/cas/techalerts/
tion/oval%3Aorg.mitre.oval%3Adef%3A1047 - http://www.kb.cert.org/vuls/id/901584 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://securitytracker.com/id?1017371 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://secunia.com/advisories/23307 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-074 - http://www.vupen.com/english/advisories/2006/4967
CVE ID: CVE-2006-5584 State: PUBLISHED Published: 2006-12-13T01:00:00 Last Updated: 2024-08-07T19:55:53.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Remote Installation Service (RIS) in Microsoft Windows 2000 SP4 uses a TFTP server that allows anonymous access, which allows remote attackers to upload and overwrite arbitrary files to gain privileges on systems that use RIS. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4970 - http://www.kb.cert.org/vuls/id/238064 - http://securitytracker.com/id?1017368 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://docs.microsoft.com/en-us/security-updates
om/id?1017368 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-077 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://secunia.com/advisories/23312 - http://www.securityfocus.com/bid/21495 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A375
CVE ID: CVE-2006-5585 State: PUBLISHED Published: 2006-12-13T01:00:00 Last Updated: 2024-08-07T19:55:53.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017370 - http://www.vupen.com/english/advisories/2006/4968 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A560 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://secu
search/definition/oval%3Aorg.mitre.oval%3Adef%3A560 - http://www.us-cert.gov/cas/techalerts/TA06-346A.html - http://secunia.com/advisories/23348 - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://www.securityfocus.com/archive/1/454969/100/200/threaded - http://secunia.com/advisories/23308 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-075
CVE ID: CVE-2006-5586 State: PUBLISHED Published: 2007-04-04T16:00:00 Last Updated: 2024-08-07T19:55:53.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "invalid application window sizes" in layered application windows, aka the "GDI Invalid Window Size Elevation of Privilege Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/1215 - http://www.securityfocus.com/archive/1/466186/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1385 - http
86/100/200/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1385 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-017 - http://www.securityfocus.com/bid/23277 - http://www.securitytracker.com/id?1017846 - http://www.securityfocus.com/archive/1/466186/100/200/threaded
CVE ID: CVE-2006-5587 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers to execute arbitrary PHP code via a URL in the chemin_appli parameter in (1) admin/inc/organisations/form_org.inc.php and (2) admin/inc/organisations/country_insert.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20687 - https://www.exploit-db.com/exploits/2626 - http://www.vupen.com/english/advisories/2006/4214 - https://exchange.xforce.ibmcloud.com/vulne
it-db.com/exploits/2626 - http://www.vupen.com/english/advisories/2006/4214 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29721 - http://secunia.com/advisories/22561
CVE ID: CVE-2006-5588 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and magic_quotes_gpc are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter to (1) includes/rss-reader.php or (2) admin/config.php, different vectors than CVE-2006-3185. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2632 - http://cmsfaethon.org/news.php#8 - http://dev.cmsfaethon.org/tracker/?do=details&id=43 - http
oit-db.com/exploits/2632 - http://cmsfaethon.org/news.php#8 - http://dev.cmsfaethon.org/tracker/?do=details&id=43 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29757 - http://www.securityfocus.com/bid/20705
CVE ID: CVE-2006-5589 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in LedgerSMB (LSMB) 1.1.0 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified vectors in (1) OE.pm, (2) AM.pm, and (3) Form.pm. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22483 - http://sourceforge.net/project/shownotes.php?release_id=456803 - http://www.vupen.com/english/advisories/2006/4209 - http://www.securityfocus.com/archive/1/464789/100/200/threaded - http://www.securityfocus.com/bid/20749
CVE ID: CVE-2006-5590 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.357Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22539 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29785 - http://www.securityfocus.com/archive/1/449924/100/0/threaded - https://www.exploit-db.com/exploits/2645 - http://www.securityfocus.com/bid/20730 - http://www.vupen.com/english/advisories/20
//www.exploit-db.com/exploits/2645 - http://www.securityfocus.com/bid/20730 - http://www.vupen.com/english/advisories/2006/4213
CVE ID: CVE-2006-5591 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Admin/check.asp in PacPoll 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29800 - http://www.securityfocus.com/bid/20746 - http://www.vupen.com/english/advisories/2006/4208 - http://www.kapda.ir/advisory-445.html - http://www.securityfocus.com/archive/1/44966
.com/english/advisories/2006/4208 - http://www.kapda.ir/advisory-445.html - http://www.securityfocus.com/archive/1/449668/100/0/threaded - http://secunia.com/advisories/22576
CVE ID: CVE-2006-5592 State: PUBLISHED Published: 2006-10-27T18:00:00 Last Updated: 2024-08-07T19:55:53.962Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin/adpoll.asp in PacPoll 4.0 and earlier allows remote attackers to bypass authentication by setting the polllog cookie value to "xx". Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1788 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29801 - http://www.securityfocus.com/bid/20742 - http://www.vupen.com/english/advisories/2006/4208 - http://www.kapda.ir/advisory-445.html - http://www.securityfocus.com/archive/1/449668/100/0/threaded - http://secunia.com/adviso