Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5872 State: PUBLISHED Published: 2006-12-18T00:00:00 Last Updated: 2024-08-07T20:04:55.662Z Vendors: n/a Products: n/a Problem Types: n/a Description: login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017391 - http://www.securityfocus.com/bid/21634 - http://secunia.com/advisories/23375 - http://secunia.com/advisories/23419 - http://www.vupen.com/english/advisories/2006/5043 - http://www.debian.org/security/2006/dsa-1239 -
om/advisories/23419 - http://www.vupen.com/english/advisories/2006/5043 - http://www.debian.org/security/2006/dsa-1239 - http://www.vupen.com/english/advisories/2007/0407 - http://www.securityfocus.com/archive/1/458300/100/0/threaded
CVE ID: CVE-2006-5873 State: PUBLISHED Published: 2006-12-12T00:00:00 Last Updated: 2024-08-07T20:04:55.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23333 - http://sourceforge.net/project/shownotes.php?group_id=97282&release_id=468202 - http://secunia.com/advisories/23230 - http://l2tpns.cvs.sourceforge.net/l2tpns/l2tpns/cluster.c?r1=1.53&r2=1.54 - https://excha
secunia.com/advisories/23230 - http://l2tpns.cvs.sourceforge.net/l2tpns/l2tpns/cluster.c?r1=1.53&r2=1.54 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30732 - http://www.debian.org/security/2006/dsa-1230 - http://www.vupen.com/english/advisories/2006/4860 - http://www.securityfocus.com/bid/21443
CVE ID: CVE-2006-5874 State: PUBLISHED Published: 2006-12-10T02:00:00 Last Updated: 2024-08-07T20:04:55.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23327 - http://www.debian.org/security/2006/dsa-1232 - http://www.novell.com/linux/security/advisories/2006_78_clamav.html - http://www.securityfocus.com/bid/21510 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 - http://secunia
ttp://www.securityfocus.com/bid/21510 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:230 - http://secunia.com/advisories/23411 - http://secunia.com/advisories/23362
CVE ID: CVE-2006-5875 State: PUBLISHED Published: 2006-12-14T00:00:00 Last Updated: 2024-08-07T20:04:55.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: eoc.py in Enemies of Carlotta (EoC) before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23377 - http://secunia.com/advisories/23382 - http://www.debian.org/security/2006/dsa-1236 - http://www.osvdb.org/30849 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30923 - http://liw.iki.fi/lists/eoc%40liw.iki.fi/msg00366.html - http://www.securityfocus.com/bid/2
.com/vulnerabilities/30923 - http://liw.iki.fi/lists/eoc%40liw.iki.fi/msg00366.html - http://www.securityfocus.com/bid/21572 - http://www.vupen.com/english/advisories/2006/5000
CVE ID: CVE-2006-5876 State: PUBLISHED Published: 2007-01-16T19:00:00 Last Updated: 2024-08-07T20:04:55.602Z Vendors: n/a Products: n/a Problem Types: n/a Description: The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2007/dsa-1248 - http://www.securityfocus.com/bid/22034 - https://issues.rpath.com/browse/RPL-965 - http://secunia.com/advisories/23961 - http://secunia.com/advisories/23734 - http://www.vupen.com/english/advisorie
965 - http://secunia.com/advisories/23961 - http://secunia.com/advisories/23734 - http://www.vupen.com/english/advisories/2007/0173 - http://ftp.gnome.org/pub/gnome/sources/libsoup/2.2/libsoup-2.2.99.news - http://osvdb.org/31667 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:029 - http://fedoranews.org/cms/node/2509 - http://secunia.com/advisories/23871 - http://secunia.com/advisories/23770 - http://secunia.com/advisories/23873 - http://www.ubuntu.com/usn/usn-411-1 - http://secunia.com/advisories/23976 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31519
CVE ID: CVE-2006-5877 State: PUBLISHED Published: 2007-02-23T21:00:00 Last Updated: 2024-08-07T20:04:55.595Z Vendors: n/a Products: n/a Problem Types: n/a Description: The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.mozdev.org/show_bug.cgi?id=9730 - http://www.securityfocus.com/bid/22684 - http://enigmail.mozdev.org/changelog.html#enig0.94.2 - http://www.ubuntu.com/usn/usn-427-1
CVE ID: CVE-2006-5878 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200612-14.xml - http://secunia.com/advisories/22789 - http://www.debian.org/security/2006/dsa-1209 - http://secunia.com/advisories/23357 - http://www.vupen.com/english/advisories/2006/4422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30146 - http
- http://www.vupen.com/english/advisories/2006/4422 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30146 - http://secunia.com/advisories/22868 - http://trac.edgewall.org/ticket/4049 - http://trac.edgewall.org/wiki/ChangeLog
CVE ID: CVE-2006-5879 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll_ID parameter, a different vector than CVE-2006-1353. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2762 - http://secunia.com/advisories/22845 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30186 - http://www.securityfocus.com/bid/21039 - http://www.vupen.com/english/advisories/2006/4461 - http://www.securityfocus.com
ttp://www.securityfocus.com/bid/21039 - http://www.vupen.com/english/advisories/2006/4461 - http://www.securityfocus.com/archive/1/451384/100/0/threaded
CVE ID: CVE-2006-5880 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.663Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30185 - https://www.exploit-db.com/exploits/2761 - http://secunia.com/advisories/22844 - http://www.securityfocus.com/bid/21044
CVE ID: CVE-2006-5881 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the cl_cat_ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30193 - http://securitytracker.com/id?1017214 - http://www.securityfocus.com/archive/1/451326/100/0/threaded - http://secunia.com/advisories/22827 - http://www.vupen.com/english/advisories/2006/4466 - http://www.securityfocus.com/bid/21015 -
nia.com/advisories/22827 - http://www.vupen.com/english/advisories/2006/4466 - http://www.securityfocus.com/bid/21015 - https://www.exploit-db.com/exploits/2754 - http://securityreason.com/securityalert/1853
CVE ID: CVE-2006-5882 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/209376 - http://securitytracker.com/id?1017212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30202 - http://www.vupen.com/english
curitytracker.com/id?1017212 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30202 - http://www.vupen.com/english/advisories/2006/4460 - http://www.vupen.com/english/advisories/2006/4459 - http://www.linksys.com/servlet/Satellite?c=L_Download_C2&childpagename=US%2FLayout&cid=1115417109934&packedargs=sku%3D1144763513196&pagename=Linksys%2FCommon%2FVisitorWrapper - http://www.kb.cert.org/vuls/id/MAPG-6VGNHW - http://projects.info-pull.com/mokb/MOKB-11-11-2006.html - http://secunia.com/advisories/22831
CVE ID: CVE-2006-5883 State: PUBLISHED Published: 2006-11-14T19:00:00 Last Updated: 2024-08-07T20:04:55.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451374/100/0/threaded - http://www.osvdb.org/30387 - http://www.vupen.com/english/advisories/2006/4500 - http://aria-security.net/advisory/cpanel.txt - http://www.osvdb.org/30386 - htt
vupen.com/english/advisories/2006/4500 - http://aria-security.net/advisory/cpanel.txt - http://www.osvdb.org/30386 - http://secunia.com/advisories/22825 - http://www.securityfocus.com/bid/21027 - http://securityreason.com/securityalert/1847
CVE ID: CVE-2006-5884 State: PUBLISHED Published: 2006-11-14T21:00:00 Last Updated: 2024-08-07T20:04:55.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly related to (1) Danim.dll and (2) Lmrt.dll, a different set of vulnerabilities than CVE-2006-4446 and CVE-2006-4777. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://www.osvdb.org/31324 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-067
CVE ID: CVE-2006-5885 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4472 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30195 - http://www.securityfocus.com/archive/1/451334/100/0/threaded - http://securitytracker.com/id?1017216 - https://www.exploit-db.com/exploits/2756 - http://securityreason.com/securityalert/1856 - http://www.
r.com/id?1017216 - https://www.exploit-db.com/exploits/2756 - http://securityreason.com/securityalert/1856 - http://www.securityfocus.com/bid/21019 - http://secunia.com/advisories/22829
CVE ID: CVE-2006-5886 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30194 - http://www.securityfocus.com/bid/21017 - https://www.exploit-db.com/exploits/2755 - http://securityreason.com/securityalert/1850 - http://www.securityfocus.com/archive/1/451331/100/0/threaded - http://secunia.com
ecurityreason.com/securityalert/1850 - http://www.securityfocus.com/archive/1/451331/100/0/threaded - http://secunia.com/advisories/22828 - http://www.vupen.com/english/advisories/2006/4469
CVE ID: CVE-2006-5887 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2757 - http://www.securityfocus.com/archive/1/451336/100/0/threaded - http://www.securityfocus.com/bid/21006 - http://securitytracker.com/id?1017217 - http://www.vupen.com/english/advisories/2006/4475 - http://securityreason.com/securityalert/1855 - http://secu
1017217 - http://www.vupen.com/english/advisories/2006/4475 - http://securityreason.com/securityalert/1855 - http://secunia.com/advisories/22830 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30196
CVE ID: CVE-2006-5888 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30190 - https://www.exploit-db.com/exploits/2765 - http://www.vupen.com/english/advisories/2006/4463 - http://www.securityfocus.com/archive/1/451372/100/0/threaded - http://secunia.com/advisories/22840
CVE ID: CVE-2006-5889 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22810 - https://www.exploit-db.com/exploits/2751 - http://www.securityfocus.com/bid/21026 - https://sourceforge.net/project/shownotes.php?release_id=463357&group_id=165855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30200 - http://www.vupen.com/english/advisories/2006/4467 -
5855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30200 - http://www.vupen.com/english/advisories/2006/4467 - http://www.craigheffner.com/security/exploits/brewblogger1.3.1.txt
CVE ID: CVE-2006-5890 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.671Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22839 - http://www.vupen.com/english/advisories/2006/4465 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30189 - https://www.exploit-db.com/exploits/2764
CVE ID: CVE-2006-5891 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30187 - http://www.securityfocus.com/archive/1/451307/100/0/threaded - https://www.exploit-db.com/exploits/2763 - http://www.securityfocus.com/archive/1/451519/100/0/threaded - http://secunia.com/advisorie
ploit-db.com/exploits/2763 - http://www.securityfocus.com/archive/1/451519/100/0/threaded - http://secunia.com/advisories/22838 - http://securityreason.com/securityalert/1851
CVE ID: CVE-2006-5892 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451320/100/0/threaded - http://www.securityfocus.com/bid/20987 - http://secunia.com/advisories/22796 - http://www.vupen.com/english/advisories/2006/4428 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30160 - https://www.exploit-db.com/exploits/2746
CVE ID: CVE-2006-5893 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4480 - https://www.exploit-db.com/exploits/2767 - http://securitytracker.com/id?1017252 - http://marc.info/?l=bugtraq&m=116374093504388&w=2 - http://sourceforge.net/project/showno
curitytracker.com/id?1017252 - http://marc.info/?l=bugtraq&m=116374093504388&w=2 - http://sourceforge.net/project/shownotes.php?release_id=463892&group_id=95217 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30191 - http://www.securityfocus.com/bid/21012
CVE ID: CVE-2006-5894 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21009 - http://www.vupen.com/english/advisories/2006/4473 - http://secunia.com/advisories/22847 - ht
curityfocus.com/bid/21009 - http://www.vupen.com/english/advisories/2006/4473 - http://secunia.com/advisories/22847 - https://www.exploit-db.com/exploits/2760 - http://www.rahim.webd.pl/exploit127.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30183
CVE ID: CVE-2006-5895 State: PUBLISHED Published: 2006-11-14T22:00:00 Last Updated: 2024-08-07T20:04:55.926Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-November/001123.html - http://securityreason.com/securityalert/1848 - http://www.securityfocus.com/bid/21001 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30198 - http://www.vupen.com/english/advisories/2006/4481 - http://www.securityfocus.com/archive
oud.com/vulnerabilities/30198 - http://www.vupen.com/english/advisories/2006/4481 - http://www.securityfocus.com/archive/1/451298/100/0/threaded - https://www.exploit-db.com/exploits/2750 - http://www.osvdb.org/30368 - http://secunia.com/advisories/22820
CVE ID: CVE-2006-5896 State: PUBLISHED Published: 2006-11-27T21:00:00 Last Updated: 2024-08-07T20:04:55.931Z Vendors: n/a Products: n/a Problem Types: n/a Description: REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30538 - http://securityreason.com/securityalert/1911 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050879.html - http://www.securityfocus.com/archive/1/453020/100/0/thr
rok.org.uk/pipermail/full-disclosure/2006-November/050879.html - http://www.securityfocus.com/archive/1/453020/100/0/threaded - http://netvigilance.com/advisory0007 - http://www.osvdb.org/30264
CVE ID: CVE-2006-5897 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter to (1) avatar.php, (2) colorhelp_popup.php, (3) color_popup.php, (4) index.php, (5) index1.php, (6) lib/connected_users.lib.php, (7) lib/index.lib.php, and (8) phpMyChat.php3; and the (9) L parameter to logs.php. NOTE: CVE analysis suggests that vector 1 might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/
that vector 1 might be incorrect. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4454 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30122 - http://secunia.com/advisories/22782 - http://www.securityfocus.com/archive/1/450919/100/0/threaded - http://securityreason.com/securityalert/1854
CVE ID: CVE-2006-5898 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.956Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30121 - http://securityreason.com/securityalert/1852 - http://www.securityfocus.com/archive/1/450923/100/0/threaded
CVE ID: CVE-2006-5899 State: PUBLISHED Published: 2006-11-15T15:00:00 Last Updated: 2024-08-07T20:04:55.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and, if not deleted, intentionally allows setting repertoire without an inclusion attack Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450676/100/0/threaded - http://www.securityfo
VE Program Container: References: - http://www.securityfocus.com/archive/1/450676/100/0/threaded - http://www.securityfocus.com/archive/1/450685/100/0/threaded