Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3395 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26959 - http://www.securityfocus.com/bid/18756 - http://www.jaascois.com/exploits/18602017/ - http://www.vupen.com/english/advisories/2006/2639 - http://secunia.com/advisories/20923 - http://securitytracker.com/id?1016417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27503
CVE ID: CVE-2006-3396 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1197 - http://secunia.com/advisories/20949 - http://securitytracker.com/id?1016437 - http://www.securityfocus.com/archive/1/439624/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27528 -
://www.securityfocus.com/archive/1/439624/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27528 - http://www.vupen.com/english/advisories/2006/2666 - http://www.securityfocus.com/archive/1/439035/100/0/threaded - http://www.osvdb.org/27010 - https://www.exploit-db.com/exploits/1981 - http://www.securityfocus.com/bid/18808
CVE ID: CVE-2006-3397 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.816Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, including the (1) title and (2) description parameters when creating a task. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27533 - http://secunia.com/advisories/20912 - https://www.pkrinternet.com/taskjitsu/task/3313 - http://www.securityfocus.com/bid/18818 - http://www.pkrinternet.
912 - https://www.pkrinternet.com/taskjitsu/task/3313 - http://www.securityfocus.com/bid/18818 - http://www.pkrinternet.com/download/RELEASE-NOTES.txt - http://www.vupen.com/english/advisories/2006/2660
CVE ID: CVE-2006-3398 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.642Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "change password forms" in Taskjitsu before 2.0.1 includes password hashes in hidden form fields, which allows remote attackers to obtain sensitive information from the (1) Category Editor and (2) User Information editor. Additional Analyst Notes: - CVE Program Container: References: - http://www.pkrinternet.com/download/RELEASE-NOTES.txt - https://www.pkrinternet.com/taskjitsu/task/3400 - http://www.vupen.com/english/advisories/2006/2660
CVE ID: CVE-2006-3399 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to inject arbitrary Javascript via the URL, which is reflected back in an error message, a variant of CVE-2004-1632. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20909 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27491 - http://www.osvdb.org/26958 - http://www.securityfocus.com/archive/1/438808/100/0/threaded - http://www.securityfocus.com/archive/1/438952/10
/26958 - http://www.securityfocus.com/archive/1/438808/100/0/threaded - http://www.securityfocus.com/archive/1/438952/100/0/threaded - http://www.vupen.com/english/advisories/2006/2631 - http://securityreason.com/securityalert/1196
CVE ID: CVE-2006-3400 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27614 - https://www.exploit-db.com/exploits/1976 - http://secunia.com/advisories/20946 - http://www.securityfocus.com/bid/18777 - http://www.vupen.com/english/adv
s/1976 - http://secunia.com/advisories/20946 - http://www.securityfocus.com/bid/18777 - http://www.vupen.com/english/advisories/2006/2657
CVE ID: CVE-2006-3401 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.870Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long CS_ITEMS values. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20946 - http://secunia.com/advisories/20961 - https://www.exploit-db.com/exploits/1977 - http://www.securityfocus.com/bid/18777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27616 - http://www.vupen.com/english/advisories/2006/2657 - h
777 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27616 - http://www.vupen.com/english/advisories/2006/2657 - http://www.vupen.com/english/advisories/2006/2684
CVE ID: CVE-2006-3402 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the password parameter when logging in. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016421 - http://www.securityfocus.com/bid/18790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27534
CVE ID: CVE-2006-3403 State: PUBLISHED Published: 2006-07-12T19:00:00 Last Updated: 2024-08-07T18:30:32.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: The smdb daemon (smbd/service.c) in Samba 3.0.1 through 3.0.22 allows remote attackers to cause a denial of service (memory consumption) via a large number of share connection requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-314-1 - http://secunia.com/advisories/21187 - http://www.vupen.com/english/advisories/2006/4750 - http://www.novell.com/linux/security/advisories/2006_17_sr.html - http://securitytracker.com/id?1016459 - http://secunia.com/advisories/20983 - http://ww
ity/advisories/2006_17_sr.html - http://securitytracker.com/id?1016459 - http://secunia.com/advisories/20983 - http://www.vupen.com/english/advisories/2006/2745 - http://www.vupen.com/english/advisories/2006/4502 - http://securitydot.net/xpl/exploits/vulnerabilities/articles/1175/exploit.html - http://www.samba.org/samba/security/CAN-2006-3403.html - http://docs.info.apple.com/article.html?artnum=304829 - http://secunia.com/advisories/22875 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.416876 - http://www.vmware.com/download/esx/esx-202-200610-patch.html - http://secunia.com/advisories/21190 - http://secunia.com/advisories/21086 - http://www.secu
/esx-202-200610-patch.html - http://secunia.com/advisories/21190 - http://secunia.com/advisories/21086 - http://www.securityfocus.com/archive/1/451426/100/200/threaded - http://www.vmware.com/download/esx/esx-213-200610-patch.html - http://secunia.com/advisories/21262 - http://www.securityfocus.com/archive/1/439880/100/100/threaded - http://www.securityfocus.com/archive/1/439875/100/0/threaded - http://www.kb.cert.org/vuls/id/313836 - http://secunia.com/advisories/23155 - http://www.securityfocus.com/bid/18927 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27648 - http://secunia.com/advisories/21019 - http://secunia.com/advisories/20980 - http://www.securityfocus.com/archive/1/440836
ttp://secunia.com/advisories/21019 - http://secunia.com/advisories/20980 - http://www.securityfocus.com/archive/1/440836/100/0/threaded - http://www.redhat.com/support/errata/RHSA-2006-0591.html - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.securityfocus.com/archive/1/448957/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.securityfocus.com/archive/1/451404/100/0/threaded - http://secunia.com/advisories/21046 - http://secunia.com/advisories/21159 - http://www.securityfocus.com/archive/1/448957/100/0/threaded - http://www.securityfocus.com/archive/1/440767/100/0/threaded - http://www.debian.org/security/2006/dsa-1110
/threaded - http://www.securityfocus.com/archive/1/440767/100/0/threaded - http://www.debian.org/security/2006/dsa-1110 - http://www.securityfocus.com/archive/1/439757/100/0/threaded - http://security.gentoo.org/glsa/glsa-200607-10.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11355 - http://www.securityfocus.com/archive/1/451417/100/200/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:120 - http://secunia.com/advisories/21143 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc - http://secunia.com/advisories/21018
CVE ID: CVE-2006-3404 State: PUBLISHED Published: 2006-07-06T20:00:00 Last Updated: 2024-08-07T18:30:32.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XCF file with a large num_axes value in the VECTORS property. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016527 - http://www.osvdb.org/27037 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102720-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200070-
lve.sun.com/search/document.do?assetkey=1-26-102720-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200070-1 - http://www.securityfocus.com/archive/1/440987/100/0/threaded - http://secunia.com/advisories/21182 - http://www.securityfocus.com/archive/1/441012/100/0/threaded - http://www.securityfocus.com/bid/18877 - http://security.gentoo.org/glsa/glsa-200607-08.xml - https://issues.rpath.com/browse/RPL-522 - http://secunia.com/advisories/21459 - http://www.vupen.com/english/advisories/2006/2703 - http://www.novell.com/linux/security/advisories/2006_19_sr.html - http://www.redhat.com/support/errata/RHSA-2006-0598.html - http://bugzilla.gnome.org/show_bug.cgi?id=346742 - http://www
http://www.redhat.com/support/errata/RHSA-2006-0598.html - http://bugzilla.gnome.org/show_bug.cgi?id=346742 - http://www.vupen.com/english/advisories/2006/4634 - http://secunia.com/advisories/21170 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=377049 - http://secunia.com/advisories/23044 - http://www.debian.org/security/2006/dsa-1116 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5908 - http://secunia.com/advisories/21198 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:127 - http://www.ubuntu.com/usn/usn-312-1 - http://secunia.com/advisories/21069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Ade
ttp://secunia.com/advisories/21069 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11259 - http://secunia.com/advisories/20979 - http://secunia.com/advisories/20976 - http://www.securityfocus.com/archive/1/441030/100/0/threaded - http://secunia.com/advisories/21104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27687
CVE ID: CVE-2006-3405 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) delete, (2) pathext, and (3) edit parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438960/100/0/threaded - http://securityreason.com/securityalert/1199 - http://www.securityfocus.com/bid/18791 - http://securitytracker.com/id?1016427
CVE ID: CVE-2006-3406 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in qtofm.php in QTOFileManager 1.0 allows remote attackers to modify arbitrary files via a .. (dot dot) sequence in the edit parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438960/100/0/threaded - http://securityreason.com/securityalert/1199
CVE ID: CVE-2006-3407 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 allows remote attackers to spoof log entries or possibly execute shell code via strings with non-printable characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19795 - http://secunia.com/advisories/20277 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/26793
CVE ID: CVE-2006-3408 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the directory server (dirserver) in Tor before 0.1.1.20 allows remote attackers to cause an unspecified denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20277 - http://www.securityfocus.com/bid/18323 - http://www.osvdb.org/25883 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/2679
sa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/26794
CVE ID: CVE-2006-3409 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.902Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Tor before 0.1.1.20 allows remote attackers to execute arbitrary code via crafted large inputs, which result in a buffer overflow when elements are added to smartlists. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20277 - http://www.securityfocus.com/bid/18323 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/26795
CVE ID: CVE-2006-3410 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 creates "internal circuits" primarily consisting of nodes with "useful exit nodes," which allows remote attackers to conduct unspecified statistical attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25882 - http://secunia.com/advisories/20277 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26798 - http://www.securityfocus.com/bid/18323 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/Ch
http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3411 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-16T21:02:25.720Z Vendors: n/a Products: n/a Problem Types: n/a Description: TLS handshakes in Tor before 0.1.1.20 generate public-private keys based on TLS context rather than the connection, which makes it easier for remote attackers to conduct brute force attacks on the encryption keys. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25876 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3412 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T04:24:14.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 does not sufficiently obey certain firewall options, which allows remote attackers to bypass intended access restrictions for dirservers, direct connections, or proxy servers. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - http://www.osvdb.org/25874
CVE ID: CVE-2006-3413 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T01:35:51.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The privoxy configuration file in Tor before 0.1.1.20, when run on Apple OS X, logs all data via the "logfile", which allows attackers to obtain potentially sensitive information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25875 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3414 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-16T23:55:56.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 supports server descriptors that contain hostnames instead of IP addresses, which allows remote attackers to arbitrarily group users by providing preferential address resolution. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - http://www.osvdb.org/25877
CVE ID: CVE-2006-3415 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T01:21:18.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 uses improper logic to validate the "OR" destination, which allows remote attackers to perform a man-in-the-middle (MITM) attack via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog - http://www.osvdb.org/25878
CVE ID: CVE-2006-3416 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T04:18:47.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 kills the circuit when it receives an unrecognized relay command, which causes network circuits to be disbanded. NOTE: while this item is listed under the "Security fixes" section of the developer changelog, the developer clarified on 20060707 that this is only a self-DoS. Therefore this issue should not be included in CVE Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/Cha
ttp://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3417 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T03:49:22.492Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor client before 0.1.1.20 prefers entry points based on is_fast or is_stable flags, which could allow remote attackers to be preferred over nodes that are identified as more trustworthy "entry guard" (is_guard) systems by directory authorities. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25879 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3418 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T00:52:27.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 does not validate that a server descriptor's fingerprint line matches its identity key, which allows remote attackers to spoof the fingerprint line, which might be trusted by users or other applications. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25881 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3419 State: PUBLISHED Published: 2006-07-07T00:00:00Z Last Updated: 2024-09-17T00:51:25.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tor before 0.1.1.20 uses OpenSSL pseudo-random bytes (RAND_pseudo_bytes) instead of cryptographically strong RAND_bytes, and seeds the entropy value at start-up with 160-bit chunks without reseeding, which makes it easier for attackers to conduct brute force guessing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25880 - http://secunia.com/advisories/20514 - http://security.gentoo.org/glsa/glsa-200606-04.xml - http://tor.eff.org/cvs/tor/ChangeLog
CVE ID: CVE-2006-3420 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:32.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in editpost.php in MyBulletinBoard (MyBB) before 1.1.5 allows remote attackers to perform unauthorized actions as a logged in user and delete arbitrary forum posts via a bbcode IMG tag with a modified delete parameter in a deletepost action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27682 - h
nal Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27682 - http://secunia.com/advisories/20659 - http://www.osvdb.org/26807
CVE ID: CVE-2006-3421 State: PUBLISHED Published: 2006-07-07T00:00:00 Last Updated: 2024-08-07T18:30:33.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in SmartSiteCMS 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the root parameter in (1) comment.php, (2) admin/comedit.php, (3) admin/test.php, (4) admin/index.php, and (5) admin/include/inc_adminfoot.php, a different set of vectors than CVE-2006-3162. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26748 - http://securitytracker.com/id?1016411 - http://www.securityfocus.com/bid/18697 - h
ences: - http://www.osvdb.org/26748 - http://securitytracker.com/id?1016411 - http://www.securityfocus.com/bid/18697 - http://www.osvdb.org/26752 - http://www.osvdb.org/26750 - http://www.osvdb.org/26749 - http://www.securityfocus.com/archive/1/438581/100/100/threaded - http://securityreason.com/securityalert/1198 - http://www.osvdb.org/26751