Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3341 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arbitrary SQL commands via the lid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18718 - https://www.exploit-db.com/exploits/1961 - http://secunia.com/advisories/20882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27455 - http://www.vupen.com/english/advisories/2006/2591
CVE ID: CVE-2006-3342 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Arctic 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search cmd. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2436 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27285 - http://www.osvdb.org/26668 - http://pridels0.blogspot.com/2006/06/arctic-xss.html - http://secunia.com/advisories/20663 - http://www.securityfocus.com/bid/18536 - http:
gspot.com/2006/06/arctic-xss.html - http://secunia.com/advisories/20663 - http://www.securityfocus.com/bid/18536 - http://www.olate.co.uk/forums/index.php?showtopic=1698
CVE ID: CVE-2006-3343 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.285Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to execute arbitrary PHP code via a URL in the crisoftricette parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27472 - http://securityreason.com/securityalert/1184 - http://www.securityfocus.com/archive/1/438459/100/0/threaded - http://www.securityfocus.com/bid/18674
CVE ID: CVE-2006-3344 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Speedstream Wireless Router 2624 allows local users to bypass authentication and access protected files by using the Universal Plug and Play UPnP/1.0 component. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2610 - http://www.securityfocus.com/archive/1/438708/100/0/threaded - http://secunia.com/advisories/20896 - http://www.securityfocus.com/bid/18843 - http://www.digitalarmaments.com/2006290674551938.html - http://securitytracker.com/id?1016412 - https://
com/bid/18843 - http://www.digitalarmaments.com/2006290674551938.html - http://securitytracker.com/id?1016412 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27582 - http://securityreason.com/securityalert/1183
CVE ID: CVE-2006-3345 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AliPAGER, possibly 1.5 and earlier, allows remote attackers to inject arbitrary web script or HTML via a chat line. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27269 - http://www.securityfocus.com/archive/1/437508/100/200/threaded
CVE ID: CVE-2006-3346 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tree.php in MyNewsGroups 0.6 allows remote attackers to execute arbitrary SQL commands via the grp_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2629 - http://securityreason.com/securityalert/1182 - http://www.securityfocus.com/archive/1/438814/100/0/threaded - http://www.securityfocus.com/bid/18757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27492 - http://secunia.com/advisories/20915
CVE ID: CVE-2006-3347 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2628 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27495 - http://secunia.com/advisories/20927 - https://www.exploit-db.com/exploits/1968 - http://www.osvdb.org/26952 - http://www.securityfocus.com/bid/18762
CVE ID: CVE-2006-3348 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in HSPcomplete 3.2.2 and 3.3 Beta and earlier allow remote attackers to execute arbitrary SQL commands via the (1) type parameter in report.php and (2) level parameter in custom_buttons.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27379 - http://pridels0.blogspot.com/2006/06/hspcomplete-vuln.html
CVE ID: CVE-2006-3349 State: PUBLISHED Published: 2006-07-03T19:00:00 Last Updated: 2024-08-07T18:23:21.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SmS Script allow remote attackers to execute arbitrary SQL commands via the CatID parameter in (1) cat.php and (2) add.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438874/100/0/threaded - http://securityreason.com/securityalert/1181
CVE ID: CVE-2006-3350 State: PUBLISHED Published: 2006-07-28T00:00:00 Last Updated: 2024-08-07T18:23:21.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a (1) ARJ, (2) RAR, or (3) ZIP archive. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27968 - http://www.osvdb.org/27516 - http://www.securityfocus.com/bid/19170 - http://secunia.com/secunia_research/2006-56/advisory/ - http://secunia.com/advisories/20852 - http://www.securityf
170 - http://secunia.com/secunia_research/2006-56/advisory/ - http://secunia.com/advisories/20852 - http://www.securityfocus.com/archive/1/441173/100/0/threaded - http://www.vupen.com/english/advisories/2006/2979
CVE ID: CVE-2006-3351 State: PUBLISHED Published: 2006-07-06T01:00:00 Last Updated: 2024-08-07T18:23:21.215Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Windows Explorer (explorer.exe) on Windows XP and 2003 allows user-assisted attackers to cause a denial of service (repeated crash) and possibly execute arbitrary code via a .url file with an InternetShortcut tag containing a long URL and a large number of "file:" specifiers. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1186 - http://www.securityfocus.com/archive/1/439660/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27567
://www.securityfocus.com/archive/1/439660/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27567 - http://www.securityfocus.com/archive/1/439153/100/0/threaded - http://www.securityfocus.com/bid/18838
CVE ID: CVE-2006-3352 State: PUBLISHED Published: 2006-07-06T01:00:00 Last Updated: 2024-08-07T18:23:21.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Mozilla Firefox allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object. NOTE: this description was based on a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other t
n a report that has since been retracted by the original authors. The authors misinterpreted their test results. Other third parties also disputed the original report. Therefore, this is not a vulnerability. It is being assigned a candidate number to provide a clear indication of its status Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438863/100/0/threaded - http://www.securityfocus.com/bid/18734 - http://isc.sans.org/diary.php?storyid=1448 - http://www.securityfocus.com/archive/1/439146/100/0/threaded - http://www.securityfocus.com/archive/1/438785/100/0/threaded - http://www.securityfocus.com/archive/1/438864/100/0/threaded - http:
securityfocus.com/archive/1/438785/100/0/threaded - http://www.securityfocus.com/archive/1/438864/100/0/threaded - http://www.securityfocus.com/archive/1/438811/100/0/threaded - http://www.securityfocus.com/archive/1/438788/100/0/threaded
CVE ID: CVE-2006-3353 State: PUBLISHED Published: 2006-07-06T01:00:00 Last Updated: 2024-08-07T18:23:21.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bounds memory access, related to an iframe and JavaScript that accesses certain style sheets properties. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1185 - http://www.securityfocus.com/archive/1/438872/100/0/threaded - http://www.securityfocus.com/bid/18758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27531 - http://www.osvdb.org/27511 - http:
ityfocus.com/bid/18758 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27531 - http://www.osvdb.org/27511 - http://echo.or.id/adv/adv35-y3dips-2006.txt - https://www.exploit-db.com/exploits/1972
CVE ID: CVE-2006-3354 State: PUBLISHED Published: 2006-07-06T01:00:00 Last Updated: 2024-08-07T18:23:21.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter property of an ADODB.Recordset ActiveX object to certain values multiple times, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - http://browserfun.blogspot.com/2006/07/mobb-1-adodbrecordset-filter-property.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27596 - http://www.securityfocus.com/bid/18773 - http://www.osvdb.org/26834
CVE ID: CVE-2006-3355 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code via a long URL, which is not properly terminated before being used with the strncpy function. NOTE: This appears to be the result of an incomplete patch for CVE-2004-0982. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18794 - http://security.gentoo.org/glsa/glsa-200607-01.xml - http://bugs.gentoo.org/show_bug.cgi?id=133988 - http://secunia.com/advisories/20937
CVE ID: CVE-2006-3356 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TIFFFetchAnyArray function in ImageIO in Apple OS X 10.4.7 and earlier allows remote user-assisted attackers to cause a denial of service (application crash) via an invalid tag value in a TIFF image, possibly triggering a null dereference. NOTE: This is a different issue than CVE-2006-1469. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2606 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27482 - http://www.security-protocols.com/sp-x31-advisory.php
CVE ID: CVE-2006-3357 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code by repeatedly setting the Image field of an Internet.HHCtrl.1 object to certain values, possibly related to improper escaping and long strings. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016434 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/20
rences: - http://securitytracker.com/id?1016434 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-046 - http://www.kb.cert.org/vuls/id/159220 - http://www.vupen.com/english/advisories/2006/2634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27573 - http://www.securityfocus.com/archive/1/442733/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13 - http://www.osvdb.org/26835 - http://www.vupen.com/english/advisories/2006/2635 - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.tippingpoint.com/security/advisories/TSRT-06-08.html - http://secunia.com/advisories/20906 - http://browserfun.
tp://www.tippingpoint.com/security/advisories/TSRT-06-08.html - http://secunia.com/advisories/20906 - http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-image-property.html - http://www.securityfocus.com/bid/18769
CVE ID: CVE-2006-3358 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) cat_id, and (4) tim parameters, which are not sanitized before being returned in an error page. NOTE: it is possible that some of these vectors are resultant from an SQL injection issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26976 - http://secunia.com/advisories/20943 - http://www.securityfocus.com/bid/18
er: References: - http://www.osvdb.org/26976 - http://secunia.com/advisories/20943 - http://www.securityfocus.com/bid/18726 - http://securityreason.com/securityalert/1188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27508 - http://www.osvdb.org/26977 - http://www.securityfocus.com/archive/1/438858/100/0/threaded - http://www.vupen.com/english/advisories/2006/2640
CVE ID: CVE-2006-3359 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web script or HTML via the (1) words, (2) id, (3) topmenuitem, and (4) cat_id parameters in (a) index.php; and the (5) category parameter in (b) inc/rss_feed.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27509 - http://www.securityfocus.com/bid/18726 - http://securityreason.com/securityalert/1188 - http://www.securityfocus.com/archive/1/4
ww.securityfocus.com/bid/18726 - http://securityreason.com/securityalert/1188 - http://www.securityfocus.com/archive/1/438858/100/0/threaded - http://www.osvdb.org/26978
CVE ID: CVE-2006-3360 State: PUBLISHED Published: 2006-07-06T00:00:00 Last Updated: 2024-08-07T18:23:21.270Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016440 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27527 - http://www.vupen.com/english/advisories/2006/2668 - http://www.osvdb.org/27015 - ht
ibmcloud.com/vulnerabilities/27527 - http://www.vupen.com/english/advisories/2006/2668 - http://www.osvdb.org/27015 - http://secunia.com/advisories/20939 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html - http://www.securityfocus.com/bid/18868 - http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html - https://github.com/advisories/GHSA-2wxv-3g4v-p76p - https://github.com/phpsysinfo/phpsysinfo/issues/368#issuecomment-1380842745
CVE ID: CVE-2006-3361 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) _PHPLIB[libdir] parameter in studip-phplib/oohforms.inc and (2) ABSOLUTE_PATH_STUDIP parameter in studip-htdocs/archiv_assi.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27487 - http://www.vupen.com/english/advisories/2006/2618 - http://www.securityfocus.com/bid/18741 - http://secur
lities/27487 - http://www.vupen.com/english/advisories/2006/2618 - http://www.securityfocus.com/bid/18741 - http://securitytracker.com/id?1016418 - http://hamid.ir/security/studip.txt
CVE ID: CVE-2006-3362 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) Geeklog 1.4.0 through 1.4.0sr3, (2) toendaCMS 1.0.0 Shizouka Stable and earlier, (3) WeBid 0.5.4, and possibly other products, when installed on Apache with mod_mime, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension and a trailing extension that is allowed, such as .zip. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocu
that is allowed, such as .zip. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19072 - http://www.securityfocus.com/bid/18767 - http://www.securityfocus.com/bid/30950 - http://www.geeklog.net/article.php/geeklog-1.4.0sr4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27469 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27799 - http://www.geeklog.net/article.php/exploit-for-fckeditor-filemanager - http://www.vupen.com/english/advisories/2006/2868 - https://www.exploit-db.com/exploits/6344 - https://www.exploit-db.com/exploits/2035 - https://www.exploit-db.com/exploits/1964 - http://secunia.com/advisories/20886 - https://exchan
t-db.com/exploits/2035 - https://www.exploit-db.com/exploits/1964 - http://secunia.com/advisories/20886 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27494 - http://www.securityfocus.com/archive/1/440423/100/0/threaded - http://secunia.com/advisories/21117 - http://retrogod.altervista.org/toenda_100_shizouka_xpl.html - http://www.vupen.com/english/advisories/2006/2611
CVE ID: CVE-2006-3363 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the pa parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18792 - http://www.securityfocus.com/archive/1/438939/100/0/threaded - http://securityreason.com/securityalert/1195 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27543 - http://securitytracker.com/id?1016425
CVE ID: CVE-2006-3364 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2582 - http://retrogod.altervista.org/blogcms_400k_sql.html - http://www.osvdb.org/26877 - http://securityreason.com/securityalert/1193 - http://blogcms.com/wiki/changelog - http://www.securityfocus.com/archive/1/438603/100/100/threaded - http://secunia.c
- http://blogcms.com/wiki/changelog - http://www.securityfocus.com/archive/1/438603/100/100/threaded - http://secunia.com/advisories/20859 - http://securitytracker.com/id?1016408 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27435
CVE ID: CVE-2006-3365 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27395 - http://www.securityfocus.com/bid/18543 - http://securitytracker.com/id?1016340 - http://www.securityfocus.com/archive/1/437755/100/200/threaded - http://www.vupen.
tp://securitytracker.com/id?1016340 - http://www.securityfocus.com/archive/1/437755/100/200/threaded - http://www.vupen.com/english/advisories/2006/2474 - http://www.securityfocus.com/archive/1/438069/100/200/threaded
CVE ID: CVE-2006-3366 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:23:21.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or HTML via crafted HTML tags, as demonstrated by the IMG tag, in the (1) id parameter in (a) mail/index.php and (b) mail/reply.php; (2) login_id parameter in (c) members/is_online.php; (3) site_id parameter in (d) messenger/online.php, (e) messenger/search.php, and (f) messenger/profile.php; (4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspec
4) contact_name parameter in messenger/search.php; (5) membername parameter in (g) messenger/profileview.php; (6) unspecified parameters used when "editing a profile"; and (7) cust_name parameter in (h) messenger/expire.php. NOTE: The vendor disputes the vectors involving files in the messenger directory, stating "... the referenced folder 'messenger' was never available to the general public...". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18543 - http://securitytracker.com/id?1016340 - http://www.securityfocus.com/archive/1/437755/100/200/threaded - http://www.vupen.com/english/advisories/2006/2474 - http://www.securityfocus.com/archive
ive/1/437755/100/200/threaded - http://www.vupen.com/english/advisories/2006/2474 - http://www.securityfocus.com/archive/1/438069/100/200/threaded