Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4721 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.833Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence and trailing null (%00) byte in the language Cookie parameter, as demonstrated by executing PHP code via a log file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21843 - http://www.securityfocus.com/archive/1/463217/100/0/threaded - http://www.vupen.com/english/advisories/2006/3549 - https://www.exploit
urityfocus.com/archive/1/463217/100/0/threaded - http://www.vupen.com/english/advisories/2006/3549 - https://www.exploit-db.com/exploits/2333 - http://www.securityfocus.com/archive/1/463191/100/0/threaded - http://sn4k3.persiangig.com/Expl0it/CCleaguePro_V1.0.1RC1%20Directory%20Traversal%20Vulnerability.txt - http://unkn0wn.awardspace.com/Blog/?p=46
CVE ID: CVE-2006-4722 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:40.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) index.php and possibly (2) collector.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19937 - http://www.vupen.com/english/advisories/2006/3546 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28838 - http://www.securityfocus.com/archive/1/445743/100/0/threaded - http://securityreaso
ibmcloud.com/vulnerabilities/28838 - http://www.securityfocus.com/archive/1/445743/100/0/threaded - http://securityreason.com/securityalert/1552
CVE ID: CVE-2006-4723 State: PUBLISHED Published: 2006-09-12T16:00:00 Last Updated: 2024-08-07T19:23:41.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globals and WebAdmin is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SoftParserFileXml parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3542 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28821 - http://www.securityfocus.com/bid/19918 - https://www.exploit-db.com/exploits/2328 - http://secunia.com/advi
ties/28821 - http://www.securityfocus.com/bid/19918 - https://www.exploit-db.com/exploits/2328 - http://secunia.com/advisories/21833
CVE ID: CVE-2006-4724 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7.01 allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors involving a crafted command. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3574 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28912 - http://www.securityfocus.com/bid/19984 - http://www.adobe.com/support/security/bulletins/apsb06-12.html - http://securitytracker.co
securityfocus.com/bid/19984 - http://www.adobe.com/support/security/bulletins/apsb06-12.html - http://securitytracker.com/id?1016833 - http://secunia.com/advisories/21866
CVE ID: CVE-2006-4725 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:41.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call components (CFC) within a sandbox from CFML templates that are located outside of the sandbox. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3574 - http://www.securityfocus.com/bid/19985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28920 - http://www.adobe.com/support/security/bulletins/apsb06-13.html - http://securitytracker.com/id?1016833 - http://secunia.com/adv
www.adobe.com/support/security/bulletins/apsb06-13.html - http://securitytracker.com/id?1016833 - http://secunia.com/advisories/21866
CVE ID: CVE-2006-4726 State: PUBLISHED Published: 2006-09-14T00:00:00 Last Updated: 2024-08-07T19:23:40.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving a ColdFusion error page. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21858 - http://www.securityfocus.com/bid/19982 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28922 - http://www.vupen.com/english/advisories/2006/3575 - http://securitytracker.com/id?1016833 - http://www.adobe.com/support/sec
://www.vupen.com/english/advisories/2006/3575 - http://securitytracker.com/id?1016833 - http://www.adobe.com/support/security/bulletins/apsb06-14.html
CVE ID: CVE-2006-4727 State: PUBLISHED Published: 2008-05-09T17:00:00 Last Updated: 2024-08-07T19:23:41.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the (1) lineId and (2) sort parameters. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/ref/28/28722-tumbleweed-emf.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/42392 - http://www.osvdb.org/28722
CVE ID: CVE-2006-4731 State: PUBLISHED Published: 2006-09-13T00:00:00 Last Updated: 2024-08-07T19:23:40.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) LedgerSMB before 1.0.0p1 allow remote attackers to execute arbitrary Perl code via an unspecified terminal parameter value containing ../ (dot dot slash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19960 - http://www.sql-ledger.org/cgi-bin/nav.pl?page=news.html&title=What%27s%20New - http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=44
/nav.pl?page=news.html&title=What%27s%20New - http://sourceforge.net/project/shownotes.php?group_id=175965&release_id=446778 - http://securityreason.com/securityalert/1553 - http://secunia.com/advisories/21886 - http://www.vupen.com/english/advisories/2006/3555 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28885 - http://svn.sourceforge.net/viewvc/ledger-smb/trunk/login.pl?r1=53&r2=69 - http://www.securityfocus.com/archive/1/445817/100/0/threaded - http://www.vupen.com/english/advisories/2006/3554 - http://secunia.com/advisories/21824
CVE ID: CVE-2006-4732 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:40.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445784/100/0/threaded - http://securityreason.com/securityalert/1547 - http://silversmith.persiangig.com/PoC.rar
CVE ID: CVE-2006-4733 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation. Additional Analyst Notes: - CVE Program Container: References: - http://sips.cvs.sourceforge.net/
w this recommendation. Additional Analyst Notes: - CVE Program Container: References: - http://sips.cvs.sourceforge.net/sips/sips/sipssys/code/box.inc.php?revision=1.9&view=markup - http://securityreason.com/securityalert/1549 - http://www.attrition.org/pipermail/vim/2007-February/001268.html - https://www.exploit-db.com/exploits/3245 - http://www.securityfocus.com/archive/1/445770/100/0/threaded - http://www.securityfocus.com/bid/19945
CVE ID: CVE-2006-4734 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execute arbitrary SQL commands via the (1) pid and (2) where parameters. Additional Analyst Notes: - CVE Program Container: References: - http://tikiwiki.cvs.sourceforge.net/tikiwiki/tiki/tiki-g-admin_processes.php?view=log - https://exchange.xforce.ibmcloud.com/vulnerabilities/28869 - http://www.securityfocus.com/bid/19947 - http://securityreason.com/securityalert/1544 - http://www.hackers.ir/advisories/tikiwiki.ht
ecurityfocus.com/bid/19947 - http://securityreason.com/securityalert/1544 - http://www.hackers.ir/advisories/tikiwiki.html - http://www.securityfocus.com/archive/1/445790/100/0/threaded
CVE ID: CVE-2006-4735 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rss_fetch.inc.php or (2) rss_parse.inc.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1564 - http://www.securityfocus.com/archive/1/445729/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28858
CVE ID: CVE-2006-4736 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:40.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL commands via the (1) adminname and (2) adminpass parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28877 - http://securityreason.com/securityalert/1563 - http://www.securityfocus.com/archive/1/445789/100/0/threaded
ies/28877 - http://securityreason.com/securityalert/1563 - http://www.securityfocus.com/archive/1/445789/100/0/threaded - http://secunia.com/advisories/21860 - http://www.securityfocus.com/bid/19950
CVE ID: CVE-2006-4737 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:40.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML via the item parameter. NOTE: The view vector is already covered by CVE-2006-3586.2. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28841 - http://www.securityfocus.com/bid/19303 - http://securityreason.com/securityalert/1562 - http://www.securityfocus.com/archive/1/445652/100/0/threaded
CVE ID: CVE-2006-4738 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:40.973Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter. NOTE: The relative_script_path vector is already covered by CVE-2006-2270. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28843 - http://securityreason.com/securityalert/1562 - http://www.securityfocus.com/archive/1/445652/100/0/threaded
CVE ID: CVE-2006-4739 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script or HTML, as demonstrated via the OriginalImageData parameter to phpthumb.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19303 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28842 - http://securityreason.com/securityalert/1562 - http://www.securityfocus.com/archive/1/445652/100/0/threaded
CVE ID: CVE-2006-4740 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28844 - http://www.securityfocus.com/bid/19303 - http://securityreason.com/securityalert/1562 - http://www.securityfocus.com/archive/1/445652/100/0/threaded
CVE ID: CVE-2006-4741 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:40.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary code via the svr_rootPhpStart parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1561 - http://www.securityfocus.com/archive/1/445780/100/0/threaded - http://www.securityfocus.com/bid/19931
CVE ID: CVE-2006-4742 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1561 - http://www.securityfocus.com/archive/1/445780/100/0/threaded - http://www.securityfocus.com/bid/19931
CVE ID: CVE-2006-4743 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.php, (2) akismet.php, (3) archive.php, (4) archives.php, (5) attachment.php, (6) blogger.php, (7) comments.php, (8) comments-popup.php, (9) dotclear.php, (10) footer.php, (11) functions.php, (12) header.php, (13) hello.php, (14) wp-content/themes/default/index.php, (15) links.php, (16) livejournal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single
urnal.php, (17) mt.php, (18) page.php, (19) rss.php, (20) searchform.php, (21) search.php, (22) sidebar.php, (23) single.php, (24) textpattern.php, (25) upgrade-functions.php, (26) upgrade-schema.php, or (27) wp-db-backup.php, which reveal the path in various error messages. NOTE: another researcher has disputed the details of this report, stating that version 2.0.5 does not exist. NOTE: the admin-footer.php, admin-functions.php, default-filters.php, edit-form-advanced.php, edit-link-form.php, edit-page-form.php, kses.php, locale.php, rss-functions.php, template-loader.php, and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php ve
and wp-db.php vectors are already covered by CVE-2006-0986. The edit-form-comment.php, vars.php, and wp-settings.php vectors are already covered by CVE-2005-4463. The menu-header.php vector is already covered by CVE-2005-2110. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445374/100/0/threaded - http://www.securityfocus.com/archive/1/445471/100/0/threaded - http://www.securityfocus.com/archive/1/445711/100/0/threaded - http://www.securityfocus.com/archive/1/445604/100/0/threaded
CVE ID: CVE-2006-4744 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote attackers to obtain sensitive information by sniffing. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1560 - http://www.securityfocus.com/archive/1/445608/100/0/threaded - http://www.airscanner.com/security/06070101_abidia_oanywhere.htm
CVE ID: CVE-2006-4745 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in plaintext, which allows local users to disable authentication and access the file by modifying a certain value in the file header. Additional Analyst Notes: - CVE Program Container: References: - http://airscanner.com/security/06062602_pocketexpensepro.htm - http://securityreason.com/securityalert/1559 - http://www.securityfocus.com/archive/1/445607/100/0/threaded
CVE ID: CVE-2006-4746 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.086Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the l parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445725/100/0/threaded - http://securityreason.com/securityalert/1568 - https://www.exploit-db.com/exploits/2318
CVE ID: CVE-2006-4747 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.102Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web script or HTML via (1) the id parameter in delete.php and (2) the error parameter in error.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445745/100/0/threaded - http://www.securityfocus.com/bid/19932 - http://securityreason.com/securityalert/1567
CVE ID: CVE-2006-4748 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.158Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) xagent, (2) xpath, (3) xreferer, and (4) xdns parameters in (a) admin/plugins/NP_Log.php, and the (5) pitem parameter in (b) admin/plugins/NP_Poll.php; and allow remote authenticated users to execute arbitrary SQL commands via the (6) pageRef parameter in (c) admin/plugins/NP_Referrer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackers.ir/advisories/blogcms.html
rer.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.hackers.ir/advisories/blogcms.html - http://www.securityfocus.com/archive/1/445538/100/0/threaded - http://www.osvdb.org/28605 - http://blogcms.com/wiki/changelog - https://exchange.xforce.ibmcloud.com/vulnerabilities/28808 - http://www.securityfocus.com/bid/19909 - http://secunia.com/advisories/21808 - http://www.vupen.com/english/advisories/2006/3521 - http://www.osvdb.org/28604 - http://www.osvdb.org/28606 - http://securityreason.com/securityalert/1566
CVE ID: CVE-2006-4749 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attackers to execute arbitrary PHP code via the include_location parameter in (1) activate.php, (2) configure.php, (3) fileop.php, (4) getimg.php, (5) ipblocked.php, (6) register.php, (7) showrecent.php, (8) showtophits.php, (9) usrmanag.php, (10) viewer_bottom.php, (11) viewer_content.php, and (12) viewer_top.php. NOTE: The login.php and confirm.php vectors are already covered by CVE-2006-4594. Additional Analyst Not
viewer_top.php. NOTE: The login.php and confirm.php vectors are already covered by CVE-2006-4594. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/445742/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/28874
CVE ID: CVE-2006-4750 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the config[openi_dir] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3556 - https://www.exploit-db.com/exploits/2344 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28859 - http://www.securityfocus.com/bid/19952 - http://bb.domaindlx.com/bingung/shellcore/advisories.
m/vulnerabilities/28859 - http://www.securityfocus.com/bid/19952 - http://bb.domaindlx.com/bingung/shellcore/advisories.asp?bug_report=display&infamous_group=103 - http://secunia.com/advisories/21874
CVE ID: CVE-2006-4751 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.135Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the errcode parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28860 - http://www.securityfocus.com/bid/19948 - http://www.securityfocus.com/archive/1/445727/100/0/threaded - http://secunia.com/advisories/21877 - http://secur
9948 - http://www.securityfocus.com/archive/1/445727/100/0/threaded - http://secunia.com/advisories/21877 - http://securitytracker.com/id?1016823 - http://securityreason.com/securityalert/1565
CVE ID: CVE-2006-4752 State: PUBLISHED Published: 2006-09-13T22:00:00 Last Updated: 2024-08-07T19:23:41.073Z Vendors: n/a Products: n/a Problem Types: n/a Description: Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a query to the engine module, probably with an invalid action parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3560 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28862 - http://www.securityfocus.com/archive/1/445727/100/0/threaded - http://secunia.com/advisories/21877 - http://securitytracker.com/id?1016823 - http://securityreason.com/s
0/0/threaded - http://secunia.com/advisories/21877 - http://securitytracker.com/id?1016823 - http://securityreason.com/securityalert/1565