Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2266 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Chirpy! 0.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1777 - http://www.osvdb.org/25194 - http://archives.neohapsis.com/archives/apps/freshmeat/2006-05/0002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26418 - http://www.securityfocus.com/bid/17957
CVE ID: CVE-2006-2267 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio WinRoute Firewall before 6.2.1 allows remote attackers to cause a denial of service (application crash) via unknown vectors in the "email protocol inspectors," possibly (1) SMTP and (2) POP3. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17859 - http://www.kerio.com/kwf_history.html - http://securitytracker.com/id?1016032 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26263 - http://www.vupen.com/english/advisories/2006/1677 - http://www.osvdb.org/25273 - http:/
loud.com/vulnerabilities/26263 - http://www.vupen.com/english/advisories/2006/1677 - http://www.osvdb.org/25273 - http://secunia.com/advisories/19947 - http://www.osvdb.org/25300 - http://www.securityfocus.com/archive/1/433585/100/0/threaded
CVE ID: CVE-2006-2268 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in FlexCustomer 0.0.4 and earlier allows remote attackers to bypass authentication and execute arbitrary SQL commands via the admin and ordinary user interface, probably involving the (1) checkuser and (2) checkpass parameters to (a) admin/index.php, and (3) username and (4) password parameters to (b) index.php. NOTE: it was later reported that 0.0.6 is also affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25342 - http://securityreason.com/securityalert
alyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25342 - http://securityreason.com/securityalert/858 - https://exchange.xforce.ibmcloud.com/vulnerabilities/47651 - http://www.securityfocus.com/archive/1/433125/100/0/threaded - http://secunia.com/advisories/20016 - http://www.securityfocus.com/bid/17864 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26323 - http://www.vupen.com/english/advisories/2006/1690 - http://www.osvdb.org/25343 - https://www.exploit-db.com/exploits/7622
CVE ID: CVE-2006-2269 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in myWebland MyBloggie 2.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode img tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17865 - http://www.securityfocus.com/archive/1/433126/100/0/threaded - http://securityreason.com/securityalert/857 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26295
CVE ID: CVE-2006-2270 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.996Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/config.php in Jetbox CMS 2.1 allows remote attackers to execute arbitrary code via a URL in the relative_script_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19993 - http://securitytracker.com/id?1016061 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28843 - http://www.securityfocus.com/archive/1/433121/100/0/threaded - http://www.osvdb.org/25313 - http://www.securityfocus.com/bid/17861 - http://security
/archive/1/433121/100/0/threaded - http://www.osvdb.org/25313 - http://www.securityfocus.com/bid/17861 - http://securityreason.com/securityalert/861 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26289 - http://www.vupen.com/english/advisories/2006/1686
CVE ID: CVE-2006-2271 State: PUBLISHED Published: 2006-05-09T16:00:00 Last Updated: 2024-08-07T17:43:29.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ECNE chunk handling in Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via an unexpected chunk when the session is in CLOSED state. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26430 - http://labs.musecurity.com/advisories/MU-200605-01.txt - http://secunia.com/advisories/19990 -
m/vulnerabilities/26430 - http://labs.musecurity.com/advisories/MU-200605-01.txt - http://secunia.com/advisories/19990 - http://www.vupen.com/english/advisories/2006/2554 - http://secunia.com/advisories/20716 - http://www.osvdb.org/25632 - http://secunia.com/advisories/21476 - http://secunia.com/advisories/21745 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10934 - http://www.ubuntu.com/usn/usn-302-1 - http://www.securityfocus.com/bid/17910 - http://www.debian.org/security/2006/dsa-1097 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html - http://www.trustix.org/
ries/2006-05-31.html - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html - http://www.trustix.org/errata/2006/0026 - http://www.debian.org/security/2006/dsa-1103 - http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=35d63edb1c807bc5317e49592260e84637bc432e - http://www.vupen.com/english/advisories/2006/1734 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/20398 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/20157 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-2272 State: PUBLISHED Published: 2006-05-09T16:00:00 Last Updated: 2024-08-07T17:43:29.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (kernel panic) via incoming IP fragmented (1) COOKIE_ECHO and (2) HEARTBEAT SCTP control chunks. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://labs.musecurity.com/advisories/MU-200605-01.txt - http://secunia.com/advisories/19990 - http://www.vupen.com/english/advisories/2006/2554 - http://git.ker
200605-01.txt - http://secunia.com/advisories/19990 - http://www.vupen.com/english/advisories/2006/2554 - http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=62b08083ec3dbfd7e533c8d230dd1d8191a6e813 - http://secunia.com/advisories/20716 - http://secunia.com/advisories/21476 - http://secunia.com/advisories/21745 - http://www.ubuntu.com/usn/usn-302-1 - http://www.securityfocus.com/bid/17910 - http://www.debian.org/security/2006/dsa-1097 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://www.osvdb.org/25633 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html - http://www.trustix.org/errata/2006/0026 - http://www.d
rchives.neohapsis.com/archives/fulldisclosure/2006-05/0227.html - http://www.trustix.org/errata/2006/0026 - http://www.debian.org/security/2006/dsa-1103 - http://www.vupen.com/english/advisories/2006/1734 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/20398 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 - http://secunia.com/advisories/20671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26431 - http://secunia.com/advisories/20157 - http://secunia.com/advisories/20914 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11243
CVE ID: CVE-2006-2273 State: PUBLISHED Published: 2006-05-12T00:00:00 Last Updated: 2024-08-07T17:43:29.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: The InstallProduct routine in the Verisign VUpdater.Install (aka i-Nav) ActiveX control does not verify Microsoft Cabinet (.CAB) files, which allows remote attackers to run an arbitrary executable file. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016059 - http://www.osvdb.org/25431 - http://www.zerodayinitiative.com/advisories/ZDI-06-014.html - http://www.vupen.com/english/advisories/2006/1763 - http://secunia.com/advisories/20074 - https://exchange.xforce.ibmcloud.com/vulner
pen.com/english/advisories/2006/1763 - http://secunia.com/advisories/20074 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26375 - http://www.securityfocus.com/archive/1/433589/100/0/threaded - http://securityreason.com/securityalert/878 - http://www.securityfocus.com/bid/17939
CVE ID: CVE-2006-2274 State: PUBLISHED Published: 2006-05-09T20:00:00 Last Updated: 2024-08-07T17:43:28.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (infinite recursion and crash) via a packet that contains two or more DATA fragments, which causes an skb pointer to refer back to itself when the full message is reassembled, leading to infinite recursion in the sctp_skb_pull function. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://www.vupen.com/
m/elmodocs2/security/ASA-2006-161.htm - http://www.redhat.com/support/errata/RHSA-2006-0493.html - http://www.vupen.com/english/advisories/2006/2554 - http://www.securityfocus.com/bid/17955 - http://secunia.com/advisories/20716 - http://secunia.com/advisories/21476 - http://secunia.com/advisories/21745 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:150 - http://www.ubuntu.com/usn/usn-302-1 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:123 - http://www.debian.org/security/2006/dsa-1097 - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf
1.html - http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=672e7cca17ed6036a1756ed34cf20dbd72d5e5f6 - http://www.trustix.org/errata/2006/0026 - http://www.debian.org/security/2006/dsa-1103 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26432 - http://secunia.com/advisories/21045 - http://secunia.com/advisories/20237 - http://secunia.com/advisories/20398 - http://www.osvdb.org/25746 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9531 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-2275 State: PUBLISHED Published: 2006-05-09T20:00:00 Last Updated: 2024-08-07T17:43:29.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux SCTP (lksctp) before 2.6.17 allows remote attackers to cause a denial of service (deadlock) via a large number of small messages to a receiver application that cannot process the messages quickly enough, which leads to "spillover of the receive buffer." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26433 - http://www.securityfocus.com/bid/17955 - http://secunia.com/advisories/20716 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg
om/bid/17955 - http://secunia.com/advisories/20716 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11295 - http://www.ubuntu.com/usn/usn-302-1 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://git.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=7c3ceb4fb9667f34f1599a062efecf4cdc4a4ce5 - http://www.trustix.org/errata/2006/0026 - http://secunia.com/advisories/21465 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417
CVE ID: CVE-2006-2276 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: bgpd in Quagga 0.98 and 0.99 before 20060504 allows local users to cause a denial of service (CPU consumption) via a certain sh ip bgp command entered in the telnet interface. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/284-1/ - http://www.quagga.net/news2.php?y=2006&m=5&d=4#id1146764580 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10651 - http://www.osvdb.org/25245 - http://secunia.com/advisories/20782 - http://secunia.com/advisories/20138
l%3Adef%3A10651 - http://www.osvdb.org/25245 - http://secunia.com/advisories/20782 - http://secunia.com/advisories/20138 - http://secunia.com/advisories/20421 - ftp://patches.sgi.com/support/free/security/advisories/20060602-01-U.asc - http://www.redhat.com/support/errata/RHSA-2006-0525.html - http://secunia.com/advisories/20137 - http://lists.quagga.net/pipermail/quagga-dev/2006-March/004052.html - http://securitytracker.com/id?1016204 - http://www.redhat.com/support/errata/RHSA-2006-0533.html - http://www.gentoo.org/security/en/glsa/glsa-200605-15.xml - http://www.debian.org/security/2006/dsa-1059 - http://secunia.com/advisories/20221 - http://secunia.com/advisories/20116 - http://secunia.
org/security/2006/dsa-1059 - http://secunia.com/advisories/20221 - http://secunia.com/advisories/20116 - http://secunia.com/advisories/20420 - http://www.securityfocus.com/bid/17979
CVE ID: CVE-2006-2277 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple Apple Mac OS X 10.4 applications might allow context-dependent attackers to cause a denial of service (application crash) via a crafted OpenEXR (.exr) image file, which triggers the crash when opening a folder using Finder, displaying the image in Safari, or using Preview to open the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17768 - http://www.osvdb.org/27780 - http://www.securityfocus.com/archive/1/432587/100/0/threaded - https://github.com/openexr/openexr
/www.osvdb.org/27780 - http://www.securityfocus.com/archive/1/432587/100/0/threaded - https://github.com/openexr/openexr/issues/564
CVE ID: CVE-2006-2278 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: SaphpLesson 3.0 does not initialize array variables, which allows remote attackers to obtain the full path via an non-array (1) hrow parameter to (a) show.php or (b) index.php; the (2) Lsnrow parameter to (c) showcat.php; or the (3) rows parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1708 - http://securityreason.com/securityalert/862 - http://www.osvdb.org/25366 - http://www.osvdb.org/25365 - http://www.osvdb.org/25364 - http://secunia.com/a
yalert/862 - http://www.osvdb.org/25366 - http://www.osvdb.org/25365 - http://www.osvdb.org/25364 - http://secunia.com/advisories/20034 - http://www.securityfocus.com/archive/1/433052/100/0/threaded
CVE ID: CVE-2006-2279 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SaphpLesson 3.0 allow remote attackers to execute arbitrary SQL commands via (1) the Find parameter in (a) search.php, and the (2) LID and (3) Rate parameters in (b) misc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1708 - http://securityreason.com/securityalert/862 - http://www.securityfocus.com/bid/17848 - http://www.osvdb.org/25363 - http://www.osvdb.org/25362 - http://secunia.com/advisories/20034 - http://www.sec
d/17848 - http://www.osvdb.org/25363 - http://www.osvdb.org/25362 - http://secunia.com/advisories/20034 - http://www.securityfocus.com/archive/1/433052/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26293
CVE ID: CVE-2006-2280 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in website.php in openEngine 1.8 Beta 2 and earlier allows remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26345 - http://secunia.com/advisories/20047 - http://www.vupen.com/english/advisories/2006/1728 - http://www.securityfocus.com/archive/1/433229/100/0/threaded - http://www.osvdb.org/25359 - http://www.se
es/2006/1728 - http://www.securityfocus.com/archive/1/433229/100/0/threaded - http://www.osvdb.org/25359 - http://www.securityfocus.com/bid/17871
CVE ID: CVE-2006-2281 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: X-Scripts X-Poll (xpoll) 2.30 allows remote attackers to execute arbitrary PHP code by using admin/images/add.php to upload a PHP file, then access it. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26363 - http://www.securityfocus.com/bid/17901 - http://attrition.org/pipermail/vim/2006-May/000752.html - http://securityreason.com/securityalert/872 - http://secunia.com/advisories/20057 - http://www.securityfocus.com/archive/1/433220/100/0/threaded - http://w
lert/872 - http://secunia.com/advisories/20057 - http://www.securityfocus.com/archive/1/433220/100/0/threaded - http://www.vupen.com/english/advisories/2006/1732
CVE ID: CVE-2006-2282 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.798Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in X7 Chat 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the URL of an avatar, possibly related to the avatar parameter in register.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26327 - http://www.securityfocus.com/archive/1/433131/100/0/threaded - http://securityreason.com/securityalert/859 - http://secunia.com/advisories/20007 - http://www.securityfoc
/0/threaded - http://securityreason.com/securityalert/859 - http://secunia.com/advisories/20007 - http://www.securityfocus.com/bid/17869 - http://www.vupen.com/english/advisories/2006/1702 - http://www.osvdb.org/25303
CVE ID: CVE-2006-2283 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SpiffyJr phpRaid 2.9.5 through 3.0.b3 allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) auth.php and (2) auth_phpbb when the phpBB portal is enabled, and via a URL in the smf_root_path parameter in (3) auth.php and (4) auth_SMF when the SMF portal is enabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/433252/100/0/threaded - http://www.vupen.com/english/advisori
iner: References: - http://www.securityfocus.com/archive/1/433252/100/0/threaded - http://www.vupen.com/english/advisories/2006/1726 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26346 - http://www.securityfocus.com/archive/1/433253/100/0/threaded - http://www.osvdb.org/25358 - http://www.securityfocus.com/bid/17875 - http://secunia.com/advisories/20027 - http://securityreason.com/securityalert/865
CVE ID: CVE-2006-2284 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/875 - http://www.osvdb.org/25316 - http://www.vupen.com/english/advisories/2006/1701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26280 - https://www.exploit-db.c
com/english/advisories/2006/1701 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26280 - https://www.exploit-db.com/exploits/1766 - http://www.securityfocus.com/bid/17873 - http://secunia.com/advisories/20003 - http://www.securityfocus.com/archive/1/433249/100/0/threaded
CVE ID: CVE-2006-2285 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19980 - http://securitytracker.com/id?1016089 - http://www.osvdb.org/25437 - http://www.securityfocus.com/archive/1/433247/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26274 - http://www.vupen.com/english/advisories/2006/1680 - http://securityrea
hange.xforce.ibmcloud.com/vulnerabilities/26274 - http://www.vupen.com/english/advisories/2006/1680 - http://securityreason.com/securityalert/856 - http://www.securityfocus.com/bid/17915 - http://www.securityfocus.com/bid/17873
CVE ID: CVE-2006-2286 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:29.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the (1) rootSys and (2) clarolineRepositorySys parameters, and possibly the (3) lang_path, (4) extAuthSource, (5) thisAuthSource, (6) main_configuration_file_path, (7) phpDigIncCn, and (8) drs parameters to (a) testheaderpage.php and (b) resourcelinker.inc.php. Additional Analyst Notes: - CVE Program Container: Referenc
rs to (a) testheaderpage.php and (b) resourcelinker.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1303 - http://www.dokeos.com/forum/viewtopic.php?t=6848 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25740 - http://secunia.com/advisories/19576 - http://www.dokeos.com/wiki/index.php/Security
CVE ID: CVE-2006-2287 State: PUBLISHED Published: 2006-05-09T23:00:00 Last Updated: 2024-08-07T17:43:28.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Vision Source 0.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the fields in a user's profile. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17867 - http://www.securityfocus.com/archive/1/433129/100/0/threaded - http://securityreason.com/securityalert/881 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26325