Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4570 State: PUBLISHED Published: 2006-09-15T19:00:00 Last Updated: 2024-08-07T19:14:47.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loaded when the user views, forwards, or replies to the original message. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22391 - http://www.redhat.com/support/errata/RHSA-2006-0676.html - http://secunia.com/advisories/22055 - http://www.mozilla.org/security/announce/20
m/support/errata/RHSA-2006-0676.html - http://secunia.com/advisories/22055 - http://www.mozilla.org/security/announce/2006/mfsa2006-63.html - http://www.ubuntu.com/usn/usn-361-1 - http://www.ubuntu.com/usn/usn-352-1 - http://securitytracker.com/id?1016867 - http://secunia.com/advisories/22056 - http://secunia.com/advisories/22247 - http://www.us.debian.org/security/2006/dsa-1191 - http://security.gentoo.org/glsa/glsa-200610-04.xml - http://securitytracker.com/id?1016866 - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://secunia.com/advisories/21939 - http://secunia.com/advisories/21915 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
s/21939 - http://secunia.com/advisories/21915 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10892 - http://www.redhat.com/support/errata/RHSA-2006-0677.html - http://www.debian.org/security/2006/dsa-1192 - http://secunia.com/advisories/22274 - http://secunia.com/advisories/21940 - http://www.securityfocus.com/bid/20042 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28962 - http://www.ubuntu.com/usn/usn-350-1 - http://secunia.com/advisories/22342 - http://security.gentoo.org/glsa/glsa-200610-01.xml - http://secunia.com/advisories/22074 - http://secunia.com/advisories/22088 - http://www.novell.com/linux/security/advisories/2006_54_mozilla.html
ories/22074 - http://secunia.com/advisories/22088 - http://www.novell.com/linux/security/advisories/2006_54_mozilla.html - http://secunia.com/advisories/22036 - http://secunia.com/advisories/22299 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 - http://secunia.com/advisories/21916
CVE ID: CVE-2006-4571 State: PUBLISHED Published: 2006-09-15T19:00:00 Last Updated: 2024-08-07T19:14:47.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via unspecified vectors, some of which involve JavaScript, and possibly large images or plugin data. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016847 - http://secunia.com/advisories/22391 - http://www.vupen.com/english/advisories/2006/3748 - http
ytracker.com/id?1016847 - http://secunia.com/advisories/22391 - http://www.vupen.com/english/advisories/2006/3748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11728 - http://www.redhat.com/support/errata/RHSA-2006-0676.html - http://secunia.com/advisories/22055 - http://secunia.com/advisories/22195 - http://www.ubuntu.com/usn/usn-361-1 - http://www.ubuntu.com/usn/usn-352-1 - http://secunia.com/advisories/21950 - http://www.ubuntu.com/usn/usn-351-1 - http://secunia.com/advisories/22025 - http://secunia.com/advisories/22056 - http://secunia.com/advisories/22247 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 - http://www.us.debian.o
/secunia.com/advisories/22247 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 - http://www.us.debian.org/security/2006/dsa-1191 - http://secunia.com/advisories/22210 - http://www.debian.org/security/2006/dsa-1210 - http://secunia.com/advisories/24711 - http://security.gentoo.org/glsa/glsa-200610-04.xml - http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm - http://secunia.com/advisories/22849 - http://www.vupen.com/english/advisories/2008/0083 - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://secunia.com/advisories/21939 - http://securitytracker.com/id?1016848 - http://www.vupen.com/english/advisories/2006/3617 - http://secunia.com
s/21939 - http://securitytracker.com/id?1016848 - http://www.vupen.com/english/advisories/2006/3617 - http://secunia.com/advisories/21915 - http://www.vupen.com/english/advisories/2007/1198 - http://www.redhat.com/support/errata/RHSA-2006-0677.html - http://www.debian.org/security/2006/dsa-1192 - http://security.gentoo.org/glsa/glsa-200609-19.xml - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 - http://secunia.com/advisories/22274 - http://www.redhat.com/support/errata/RHSA-2006-0675.html - http://secunia.com/advisories/21940 - http://www.securityfocus.com/bid/20042 - http://secunia.com/advisories/22001 - http://www.securityfocus.com/archive/1/446140/100/0/threaded - http
om/bid/20042 - http://secunia.com/advisories/22001 - http://www.securityfocus.com/archive/1/446140/100/0/threaded - http://www.ubuntu.com/usn/usn-350-1 - http://secunia.com/advisories/21906 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 - http://secunia.com/advisories/22342 - http://security.gentoo.org/glsa/glsa-200610-01.xml - http://secunia.com/advisories/22074 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/22088 - http://secunia.com/advisories/21949 - https://issues.rpath.com/browse/RPL-640 - http://www.mozilla.org/security/announce/2006/mfsa2006-64.html - http://secunia.com/advisories/22036 - http://securitytracker.com/id?1016846 - http://www.u
ounce/2006/mfsa2006-64.html - http://secunia.com/advisories/22036 - http://securitytracker.com/id?1016846 - http://www.ubuntu.com/usn/usn-354-1 - http://secunia.com/advisories/22422 - http://secunia.com/advisories/22299 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 - http://secunia.com/advisories/21916
CVE ID: CVE-2006-4572 State: PUBLISHED Published: 2006-11-07T00:00:00 Last Updated: 2024-08-07T19:14:47.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/
sion header bypass bug." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/24098 - http://www.novell.com/linux/security/advisories/2006_79_kernel.html - http://www.kernel.org/git/?p=linux%2Fkernel%2Fgit%2Fstable%2Flinux-2.6.16.y.git&a=search&s=CVE-2006-4572 - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=6ac62be885810e1f8390f0c3b9d3ee451d3d3f19 - http://secunia.com/advisories/23384 - http://www.ubuntu.com/usn/usn-416-1 - http://readlist.com/lists/vger.kernel.org/linux-kernel/55/275979.html - http://secunia.com/advisories/22762 - http://www.vupen.com/english/advisories/2006/4386 - http://secunia.com/advisori
- http://secunia.com/advisories/22762 - http://www.vupen.com/english/advisories/2006/4386 - http://secunia.com/advisories/23474 - http://www.kernel.org/git/?p=linux/kernel/git/stable/linux-2.6.16.y.git%3Ba=commit%3Bh=0ddfcc96928145d6a6425fdd26dad6abfe7f891d - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.31 - http://www.securityfocus.com/archive/1/471457 - http://www.ubuntu.com/usn/usn-395-1 - http://secunia.com/advisories/22731 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:197 - http://secunia.com/advisories/25691 - http://www.securityfocus.com/bid/20955
CVE ID: CVE-2006-4573 State: PUBLISHED Published: 2006-10-24T18:00:00 Last Updated: 2024-08-07T19:14:47.402Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in the "utf8 combining characters handling" (utf8_handle_comb function in encoding.c) in screen before 4.0.3 allows user-assisted attackers to cause a denial of service (crash or hang) via certain UTF8 sequences. Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=305530 - http://www.vupen.com/english/advisories/2007/1939 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.480775 - http://www
007/1939 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.480775 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:191 - http://www.vupen.com/english/advisories/2006/4189 - http://www.debian.org/security/2006/dsa-1202 - http://lists.apple.com/archives/security-announce/2007/May/msg00004.html - http://www.ubuntu.com/usn/usn-370-1 - http://secunia.com/advisories/25402 - http://secunia.com/advisories/22611 - http://secunia.com/advisories/22573 - http://secunia.com/advisories/22707 - http://lists.gnu.org/archive/html/screen-users/2006-10/msg00028.html - http://www.securityfocus.com/bid/20727 - https://issues.rpath.com/browse/RPL-734 - http:/
-users/2006-10/msg00028.html - http://www.securityfocus.com/bid/20727 - https://issues.rpath.com/browse/RPL-734 - http://security.gentoo.org/glsa/glsa-200611-01.xml - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.026-screen.html - http://secunia.com/advisories/22583 - http://secunia.com/advisories/22726 - http://secunia.com/advisories/22647 - http://secunia.com/advisories/22649
CVE ID: CVE-2006-4574 State: PUBLISHED Published: 2006-10-28T00:00:00 Last Updated: 2025-01-17T14:05:27.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the MIME Multipart dissector in Wireshark (formerly Ethereal) 0.10.1 through 0.99.3 allows remote attackers to cause a denial of service (crash) via certain vectors that trigger an assertion error related to unexpected length values. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29844 - http://support.avaya.com/elmodocs2/security/ASA-2006-255.htm - https://oval.cisecurity.org/repository/search/definition/oval%3A
support.avaya.com/elmodocs2/security/ASA-2006-255.htm - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9740 - http://secunia.com/advisories/23096 - http://www.wireshark.org/security/wnpa-sec-2006-03.html - http://www.us.debian.org/security/2006/dsa-1201 - https://issues.rpath.com/browse/RPL-746 - http://secunia.com/advisories/22590 - ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P - http://www.vupen.com/english/advisories/2006/4220 - http://secunia.com/advisories/22841 - http://www.securityfocus.com/bid/20762 - http://www.novell.com/linux/security/advisories/2006_65_ethereal.html - http://www.redhat.com/support/errata/RHSA-2006-072
tp://www.novell.com/linux/security/advisories/2006_65_ethereal.html - http://www.redhat.com/support/errata/RHSA-2006-0726.html - http://secunia.com/advisories/22929 - http://www.securityfocus.com/archive/1/450307/100/0/threaded - http://secunia.com/advisories/22659 - http://secunia.com/advisories/22692 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:195 - http://securitytracker.com/id?1017129 - http://secunia.com/advisories/22672 - http://secunia.com/advisories/22797
CVE ID: CVE-2006-4575 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.688Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastname, (2) firstname, (3) passwordOld, (4) passwordNew, (5) id, (6) language, (7) defaultLetter, (8) newuserPass, (9) newuserType, (10) newuserEmail parameters in (a) user.php; the (11) goTo and (12) search parameters in (b) search.php; and the (13) groupAddName parameter in (c) save.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006
(c) save.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-76/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31238 - http://osvdb.org/32568 - http://www.securityfocus.com/bid/21870 - http://osvdb.org/32569 - http://secunia.com/advisories/21694 - http://osvdb.org/32570
CVE ID: CVE-2006-4576 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by uploading the HTML file with a GIF or JPG extension, which is rendered by Internet Explorer. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32567 - http://secunia.com/secunia_research/2006-76/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31239 - http://www.securityfocus.com/bid/21870 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4577 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML via Javascript events in the (1) email, (2) websites, and (3) groupAddName parameters in (a) save.php; the (4) errorMsg parameter in (b) index.php; and the (5) goTo and (6) search parameters in (c) search.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-76/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31240 -
- http://secunia.com/secunia_research/2006-76/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31240 - http://osvdb.org/32564 - http://osvdb.org/32565 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31247 - http://osvdb.org/32566 - http://www.securityfocus.com/bid/21870 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4578 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL database contents, which allows remote attackers to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31244 - http://secunia.com/secunia_research/2006-76/advisory/ - http://osvdb.org/32563 - http://www.securityfocus.com/bid/21870 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4579 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.535Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (dot dot) in the language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32562 - http://secunia.com/secunia_research/2006-76/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/31246 - http://www.securityfocus.com/bid/21870 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4580 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.480Z Vendors: n/a Products: n/a Problem Types: n/a Description: register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary users by setting the mode parameter to "confirm". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-76/advisory/ - http://osvdb.org/32561 - http://www.securityfocus.com/bid/21870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31249 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4581 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows remote attackers to upload arbitrary PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-76/advisory/ - http://osvdb.org/32560 - http://www.securityfocus.com/bid/21870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31250 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4582 State: PUBLISHED Published: 2007-01-03T20:00:00 Last Updated: 2024-08-07T19:14:47.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-76/advisory/ - http://osvdb.org/32559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31251 - http://secunia.com/advisories/21694
CVE ID: CVE-2006-4583 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/cmses/aedatingCMS.php, (2) inc/cmses/aedatingCMS2.php, or (3) inc/cmses/aedating4CMS.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2293 - http://www.tufat.com/changeLog2.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/28706 - http://www.vupen.com/english/advisories/2006/3449 - http:/
https://exchange.xforce.ibmcloud.com/vulnerabilities/28706 - http://www.vupen.com/english/advisories/2006/3449 - http://www.securityfocus.com/bid/19826 - http://securitytracker.com/id?1016784 - http://secunia.com/advisories/21756 - http://www.securityfocus.com/archive/1/445219/100/0/threaded
CVE ID: CVE-2006-4584 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1508 - http://www.securityfocus.com/archive/1/445079/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28754 - http://www.osvdb.org/28544 - http://www.vupen.com/english/advisories/2006/3452 - http://secunia.com/advisories/21754 - http://www.secur
b.org/28544 - http://www.vupen.com/english/advisories/2006/3452 - http://secunia.com/advisories/21754 - http://www.securityfocus.com/bid/19834 - https://www.exploit-db.com/exploits/2297 - http://acid-root.new.fr/poc/10060903.txt - http://securitytracker.com/id?1016788
CVE ID: CVE-2006-4585 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary SQL commands via the id2 parameter. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1508 - http://www.securityfocus.com/archive/1/445079/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28753 - http://www.vupen.com/e
om/archive/1/445079/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28753 - http://www.vupen.com/english/advisories/2006/3452 - http://secunia.com/advisories/21754 - http://www.osvdb.org/28545 - http://www.securityfocus.com/bid/19834 - https://www.exploit-db.com/exploits/2297 - http://acid-root.new.fr/poc/10060903.txt - http://securitytracker.com/id?1016788
CVE ID: CVE-2006-4586 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28542 - http://sec
ain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/28542 - http://securityreason.com/securityalert/1508 - http://www.securityfocus.com/archive/1/445079/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28756 - http://www.vupen.com/english/advisories/2006/3452 - http://secunia.com/advisories/21754 - http://www.securityfocus.com/bid/19834 - https://www.exploit-db.com/exploits/2297 - http://acid-root.new.fr/poc/10060903.txt - http://securitytracker.com/id?1016788
CVE ID: CVE-2006-4587 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) description parameter in unspecified modules or the (2) solution parameter in the HelpDesk module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21728 - http://www.security-net.biz/adv/D3906a.txt - http://www.vupen.com/english/advisories/2006/3444 - http://www.osvdb.org/28460 - http://www.securityfocus.com/bid/19
t - http://www.vupen.com/english/advisories/2006/3444 - http://www.osvdb.org/28460 - http://www.securityfocus.com/bid/19829 - http://www.osvdb.org/28461
CVE ID: CVE-2006-4588 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modules via a direct request to index.php with a modified module parameter, as demonstrated using the Settings module. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21728 - http://www.security-net.biz/adv/D3906a.txt - http://www.vupen.com/english/advisories/2006/3444 - http://www.securityfocus.com/bid/19829 - http://www.osvdb.org/28462
CVE ID: CVE-2006-4589 State: PUBLISHED Published: 2006-09-06T22:00:00 Last Updated: 2024-08-07T19:14:47.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the x_admindir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21729 - http://securitytracker.com/id?1016798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28717 - http://www.securityfocus.com/bid/19846 - https://www.exploit-db.com/exploits/2290 - http://www.securityfocus.com/archive/