Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
//www.securityfocus.com/bid/17111 - http://securityreason.com/securityalert/623 - http://www.osvdb.org/23883 - http://evuln.com/vulns/97/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25188 - http://securitytracker.com/id?1015757 - http://www.securityfocus.com/archive/1/428664/100/0/threaded - http://www.osvdb.org/23885 - http://www.osvdb.org/23884
CVE ID: CVE-2006-1238 State: PUBLISHED Published: 2006-03-15T16:00:00 Last Updated: 2024-08-07T17:03:28.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0953 - http://securitytracker.com/id?1015754 - http://www.securityfocus.com/bid/17262 - http://www.osvdb.org/23896 - http://www.securityfocus.com/archive/1/428902/100/0/threaded - http://secu
.com/bid/17262 - http://www.osvdb.org/23896 - http://www.securityfocus.com/archive/1/428902/100/0/threaded - http://securityreason.com/securityalert/637 - http://evuln.com/vulns/100/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25194 - http://secunia.com/advisories/19201
CVE ID: CVE-2006-1239 State: PUBLISHED Published: 2006-03-15T16:00:00 Last Updated: 2024-08-07T17:03:28.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25195 - http://www.osvdb.org/23907 - http://www.securityfocus.com/bid/17092 - http://secunia.com/advisories/19049
ities/25195 - http://www.osvdb.org/23907 - http://www.securityfocus.com/bid/17092 - http://secunia.com/advisories/19049 - http://www.vupen.com/english/advisories/2006/0954
CVE ID: CVE-2006-1240 State: PUBLISHED Published: 2006-03-15T17:00:00 Last Updated: 2024-08-07T17:03:28.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427480/100/0/threaded - http://www.securityfocus.com/bid/17077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25282 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html
CVE ID: CVE-2006-1241 State: PUBLISHED Published: 2006-03-15T17:00:00 Last Updated: 2024-08-07T17:03:28.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427480/100/0/threaded - http://www.securityfocus.com/bid/17077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25282 - http://lists.grok.org.uk/pipermail/full-disclos
bid/17077 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25282 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html
CVE ID: CVE-2006-1242 State: PUBLISHED Published: 2006-03-15T17:00:00 Last Updated: 2024-08-07T17:03:28.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2006-0437.html - http://www.vupen.com/english/advisories/2006/2554 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2
-0437.html - http://www.vupen.com/english/advisories/2006/2554 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1 - http://www.securityfocus.com/archive/1/427753/100/0/threaded - https://usn.ubuntu.com/281-1/ - http://secunia.com/advisories/21136 - http://secunia.com/advisories/19402 - http://www.securityfocus.com/archive/1/427893/100/0/threaded - http://secunia.com/advisories/21983 - http://www.securityfocus.com/bid/17109 - http://www.debian.org/security/2006/dsa-1097 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://www.securityfocus.com/archive/1/427622/100/0/threaded - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://secunia.com/adv
chive/1/427622/100/0/threaded - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://secunia.com/advisories/19955 - http://www.securityfocus.com/archive/1/428605/30/6210/threaded - http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21465 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317 - http://www.vupen.com/english/advisories/2006/1140 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/20398 - http://secunia.com/advisories/22417 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 -
visories/20398 - http://secunia.com/advisories/22417 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:086 - http://secunia.com/advisories/20671 - http://secunia.com/advisories/20157 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-1243 State: PUBLISHED Published: 2006-03-15T17:00:00 Last Updated: 2024-08-07T17:03:28.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.attrition.org/pipermail/vim/2006-November/001138.html - https://exchange.xforce.
ram Container: References: - http://www.attrition.org/pipermail/vim/2006-November/001138.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25322 - http://secunia.com/advisories/19270 - https://www.exploit-db.com/exploits/1581 - http://www.securityfocus.com/bid/17102 - http://sourceforge.net/forum/forum.php?forum_id=564904 - http://www.vupen.com/english/advisories/2006/1007
CVE ID: CVE-2006-1244 State: PUBLISHED Published: 2006-03-15T19:00:00 Last Updated: 2024-08-07T17:03:28.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through C
, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19644 - http://www.debian.org/security/2006/dsa-979 - http://www.debian.org/security/2006/dsa-998 - http://secunia.com/advisories/19164 - http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz - http://secunia.com/advisories/19364 - http://www.debian.org/security/2006/dsa-98
/pdfkit.framework_0.8-2sarge3.diff.gz - http://secunia.com/advisories/19364 - http://www.debian.org/security/2006/dsa-983 - http://www.debian.org/security/2006/dsa-982 - http://secunia.com/advisories/19091 - http://secunia.com/advisories/19065 - http://www.osvdb.org/23834 - http://www.debian.org/security/2006/dsa-1019 - http://www.securityfocus.com/bid/16748 - http://secunia.com/advisories/18948 - http://www.debian.org/security/2006/dsa-984 - http://secunia.com/advisories/19021 - https://usn.ubuntu.com/270-1/
CVE ID: CVE-2006-1245 State: PUBLISHED Published: 2006-03-17T01:00:00 Last Updated: 2024-08-07T17:03:28.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability." Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015794 - http://www.securityfocus.com/archive/1/453554/100/0/threaded - http://secunia.com
ttp://securitytracker.com/id?1015794 - http://www.securityfocus.com/archive/1/453554/100/0/threaded - http://secunia.com/advisories/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569 - http://secunia.com/advisories/19269 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1451 - http://www.securityfocus.com/archive/1/428810/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-101A.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1632 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25292 - http://www.securityfocus.com/bid/17131 - http://archives.neoh
tps://exchange.xforce.ibmcloud.com/vulnerabilities/25292 - http://www.securityfocus.com/bid/17131 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1599 - http://www.securityfocus.com/archive/1/453436/100/0/threaded - http://www.kb.cert.org/vuls/id/984473 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1766 - http://www.vupen.com/english/advisories/2006/1318 - http://www.osvdb.org/23964
CVE ID: CVE-2006-1246 State: PUBLISHED Published: 2006-03-17T11:00:00 Last Updated: 2024-08-07T17:03:28.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015786 - http://www.vupen.com/english/advisories/2006/0957 - http://www.securityfocus.com/bid/17115 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25849 - http://www.osvdb.org/23921 - https://exchange.xforce.ibmcloud
tps://exchange.xforce.ibmcloud.com/vulnerabilities/25849 - http://www.osvdb.org/23921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25299 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739 - http://attrition.org/pipermail/vim/2006-March/000641.html - http://secunia.com/advisories/19235 - http://www.nsfocus.com/english/homepage/research/0602.htm
CVE ID: CVE-2006-1247 State: PUBLISHED Published: 2006-04-19T16:00:00 Last Updated: 2024-08-07T17:03:28.825Z Vendors: n/a Products: n/a Problem Types: n/a Description: rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015952 - http://secunia.com/advisories/19656 - http://www.nsfocus.com/english/homepage/research/0603.htm - http://www.vupen.com/english/advisories/2006/1389 - http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25848 - http:/
/www-1.ibm.com/support/docview.wss?uid=isg1IY82357 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25848 - http://www.securityfocus.com/archive/1/431846/100/0/threaded - http://www.osvdb.org/24706 - http://www.securityfocus.com/bid/17576 - http://www.securityfocus.com/archive/1/431848/100/0/threaded
CVE ID: CVE-2006-1248 State: PUBLISHED Published: 2006-03-17T19:00:00 Last Updated: 2024-08-07T17:03:28.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended. Additional Analyst Notes: - CVE Program Container: References: - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838 - http://www.securityfocus.com/bid/17143 - http://securitytracker.com/i
rt/Document.jsp?lang=en&cc=us&objectID=c00614838 - http://www.securityfocus.com/bid/17143 - http://securitytracker.com/id?1015782 - http://securitytracker.com/id?1015834 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25311 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A785 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1098 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A772 - http://www.vupen.com/english/advisories/2006/0997 - http://secunia.com/advisories/19305 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838
CVE ID: CVE-2006-1249 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20069 - http://lists.apple.com/archives/security-announce/2006/May/msg00002.html - http://securitytracker.com/id?1016067 - http://www.us-cert.gov/cas/techalerts/TA06-132B.html - http://www.kb.cert.org/vuls/id/57
ecuritytracker.com/id?1016067 - http://www.us-cert.gov/cas/techalerts/TA06-132B.html - http://www.kb.cert.org/vuls/id/570689 - http://www.securityfocus.com/bid/17074 - http://www.eeye.com/html/research/upcoming/20060307b.html - http://www.vupen.com/english/advisories/2006/1778 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26398 - http://www.securityfocus.com/archive/1/433831/100/0/threaded - http://www.securityfocus.com/archive/1/433850/100/0/threaded
CVE ID: CVE-2006-1250 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.magicwinmail.net/changelog.asp - http://www.vupen.com/english/advisories/2006/0858 - http://www.securityfocus.com/bid/17009
CVE ID: CVE-2006-1251 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19225 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25286 - http://www.securityfocus.com/bid/17110 - http://marc.merlins.org/linux/exim/files/sa
bmcloud.com/vulnerabilities/25286 - http://www.securityfocus.com/bid/17110 - http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071 - http://www.vupen.com/english/advisories/2006/0941
CVE ID: CVE-2006-1252 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:29.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://attrition.org/pipermail/vim/2006-March/000612.html - https://www.exploit-db.com/exploits/1570 - http://www.securityfocus.com/bid/17059
CVE ID: CVE-2006-1253 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.748Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17118 - http://secunia.com/advisories/19221 - http://www.glftpd.com/files/docs/changelog
CVE ID: CVE-2006-1254 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015787 - http://www.osvdb.org/23939 - http://www.vupen.com/english/advisories/2006/0972 - http://secunia.com/advisories/19223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25
ish/advisories/2006/0972 - http://secunia.com/advisories/19223 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25325 - http://www.securityfocus.com/bid/17140
CVE ID: CVE-2006-1255 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0977 - http://www.osvdb.org/23950 - https://exchange.xforce.ibmcloud.com/v
http://www.vupen.com/english/advisories/2006/0977 - http://www.osvdb.org/23950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25290 - http://seclists.org/fulldisclosure/2006/Mar/1111 - http://seclists.org/fulldisclosure/2006/Mar/1167 - http://secunia.com/advisories/19267 - http://www.securityfocus.com/bid/17138
CVE ID: CVE-2006-1256 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.736Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/650 - http://evuln.com/vulns/104/summary.html - http://www.osvdb.org/23941 - http://www.vupen.com/english/advisories/2006/0974 - http://attrition.org/pipermail/vim/2006-March/000613.html - http://www.boysen.be/en/ - http://www.securi
ies/2006/0974 - http://attrition.org/pipermail/vim/2006-March/000613.html - http://www.boysen.be/en/ - http://www.securityfocus.com/archive/1/429254/100/0/threaded - http://secunia.com/advisories/19268 - http://www.securityfocus.com/bid/17136 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25293
CVE ID: CVE-2006-1257 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25330 - http://securityreason.com/securityalert/594 - http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp -
rt/594 - http://msdn.microsoft.com/library/default.asp?url=/library/en-us/csvr2002/htm/cs_se_securityconcepts_cbgw.asp - http://www.osvdb.org/24121 - http://www.securityfocus.com/bid/17134 - http://www.securityfocus.com/archive/1/427974/100/0/threaded
CVE ID: CVE-2006-1258 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the set_theme parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/downloads.php?relnotes=0 - http://www.securityfocus.com/bid/17142 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25305 - http://www.vupen.com/english/advisories/2006/0991 - http://securitytracker.com/id?1015776 - http://secunia.com/advisories/19277 - http://www.osvdb.
h/advisories/2006/0991 - http://securitytracker.com/id?1015776 - http://secunia.com/advisories/19277 - http://www.osvdb.org/23943
CVE ID: CVE-2006-1259 State: PUBLISHED Published: 2006-03-19T01:00:00 Last Updated: 2024-08-07T17:03:28.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to admin/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25300 - http://www.osvdb.org/23944 - http://www.securityfocus.com/archive/1/429098/100/0/threaded - http://securityreason.com/securityalert/645 - http://evuln.com/vulns/103/summary.html - http://www.vupen.com/english/advisories/2006/0992
ason.com/securityalert/645 - http://evuln.com/vulns/103/summary.html - http://www.vupen.com/english/advisories/2006/0992 - http://secunia.com/advisories/19275