Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2502 State: PUBLISHED Published: 2006-05-22T16:00:00 Last Updated: 2024-08-07T17:51:04.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in pop3d in Cyrus IMAPD (cyrus-imapd) 2.3.2, when the popsubfolders option is enabled, allows remote attackers to execute arbitrary code via a long USER command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26578 - http://securitytracker.com/id?1016131 - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0527.html - http://www.vupen.com/english/advisories/2006/1891
CVE ID: CVE-2006-2503 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.705Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in DeluxeBB 1.06 allows remote attackers to execute arbitrary SQL commands via the name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26469 - http://www.vupen.com/english/advisories/2006/1823 - http://secunia.com/advisories/20104 - http://www.securityfocus.com/bid/17989 - http://www.securityfocus.com/archive/1/434040/100/0/threaded - http://securityreason.com/securityalert/935 - http://www.osvdb.org/25529
CVE ID: CVE-2006-2504 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.685Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in mono AZBOARD 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) search and (2) cate parameters to (a) list.asp, and the (3) id and cate parameters to (b) admin_ok.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1827 - http://www.osvdb.org/25528 - http://www.securityfocus.com/bid/17990 - http://www.osvdb.org/25527 - http://secunia.com/advisories/20112 - https://exchange.xforce.ibmcloud.c
us.com/bid/17990 - http://www.osvdb.org/25527 - http://secunia.com/advisories/20112 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26495 - http://www.securityfocus.com/archive/1/434010/100/0/threaded - http://user.chol.com/~jyj9782/sec/azboard_advisory.txt - http://securityreason.com/securityalert/928
CVE ID: CVE-2006-2505 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.732Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Database Server 10g Release 2 allows local users to execute arbitrary SQL queries via a reference to a malicious package in the TYPE_NAME argument in the (1) GET_DOMAIN_INDEX_TABLES or (2) GET_V2_DOMAIN_INDEX_TABLES function in the DBMS_EXPORT_EXTENSION package. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/432078/100/0/threaded - http://www.securityfocus.com/archive/1/432354/100/0/threaded - http://www.kb.cert.org/vuls/id/932124 - http://secunia.com/advisories/1
urityfocus.com/archive/1/432354/100/0/threaded - http://www.kb.cert.org/vuls/id/932124 - http://secunia.com/advisories/19860 - http://www.securityfocus.com/bid/17699 - http://www.securityfocus.com/archive/1/432355/100/0/threaded
CVE ID: CVE-2006-2506 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO and (2) the category parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434119/100/0/threaded - http://www.osvdb.org/25573 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26482 - http://www.vupen.com/english/advisories/2006/1845 - http://soot.shabgard.org/bugs/Sphider.txt - http://www.securityfocus.
ttp://www.vupen.com/english/advisories/2006/1845 - http://soot.shabgard.org/bugs/Sphider.txt - http://www.securityfocus.com/bid/17997 - http://securityreason.com/securityalert/930
CVE ID: CVE-2006-2507 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing 0.2.0 through 0.7.0, as used with phpBB, allow remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter in (1) index.php, (2) song.php, (3) faq.php, (4) list.php, (5) gen_m3u.php, and (6) playlist.php. Additional Analyst Notes: - CVE Program Container: References: - http://kurdishsecurity.blogspot.com/2006/05/kurdish-security-7-foing-remote-file.html - http://secunia.com/advisories/20092 - https://exchange.xforce.ibmcloud.c
/05/kurdish-security-7-foing-remote-file.html - http://secunia.com/advisories/20092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26425 - http://www.securityfocus.com/archive/1/433824/100/0/threaded - http://securityreason.com/securityalert/932 - http://www.securityfocus.com/bid/17963 - http://www.osvdb.org/25564 - http://www.securityfocus.com/archive/1/435302/100/0/threaded - http://www.vupen.com/english/advisories/2006/1793
CVE ID: CVE-2006-2508 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in tr1.php in YourFreeWorld.com Stylish Text Ads Script allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly involving an attack vector using advertise.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25692 - http://www.vupen.com/english/advisories/2006/1897 - http://www.osvdb.org/25691 - http://www.securityfocus.com/archive/1/434527/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26569 - https://exch
ityfocus.com/archive/1/434527/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26570 - http://secunia.com/advisories/20213 - http://securityreason.com/securityalert/931 - http://www.securityfocus.com/bid/18044
CVE ID: CVE-2006-2509 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in login.php in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434530/100/0/threaded - http://www.securityfocus.com/bid/18046
CVE ID: CVE-2006-2510 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.623Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the URL submission form in YourFreeWorld.com Short Url & Url Tracker Script allows remote attackers to inject arbitrary web script or HTML via an unspecified form for submitting URLs. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26574 - http://www.securityfocus.com/archive/1/434530/100/0/threaded - http://www.securityfocus.com/bid/18046
CVE ID: CVE-2006-2511 State: PUBLISHED Published: 2006-05-22T19:00:00 Last Updated: 2024-08-07T17:51:04.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveX version of FrontRange iHEAT allows remote authenticated users to run arbitrary programs or access arbitrary files on the host machine by uploading a file with an extension that is not associated with an application, and selecting a file from the "Open With..." dialog. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016124 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26711 - http://secunia.com/advisories/20165 - http://www.securityfocus.com/archive/1/434400/1
mcloud.com/vulnerabilities/26711 - http://secunia.com/advisories/20165 - http://www.securityfocus.com/archive/1/434400/100/0/threaded
CVE ID: CVE-2006-2512 State: PUBLISHED Published: 2006-05-22T21:00:00 Last Updated: 2024-08-07T17:51:04.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Hitachi EUR Professional Edition, EUR Viewer, EUR Print Service, and EUR Print Service for ILF allows remote authenticated users to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25558 - http://secunia.com/advisories/20106 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26483 - http://www.securityfocus.com/bid/18015 - http://www.hitachi-support.com/security_e/vuls_e/HS06-010_e/index-e.html - h
- http://www.securityfocus.com/bid/18015 - http://www.hitachi-support.com/security_e/vuls_e/HS06-010_e/index-e.html - http://www.vupen.com/english/advisories/2006/1841
CVE ID: CVE-2006-2513 State: PUBLISHED Published: 2006-05-22T21:00:00 Last Updated: 2024-08-07T17:51:04.762Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the installation process in Sun Java System Directory Server 5.2 causes wrong user data to be written to a file created by the installation, which allows remote attackers or local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016112 - http://www.vupen.com/english/advisories/2006/1832 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26477 - http://www.securityfocus.com/bid/18018 - http://sunsolve.sun.com/search/documen
rce.ibmcloud.com/vulnerabilities/26477 - http://www.securityfocus.com/bid/18018 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102345-1 - http://secunia.com/advisories/20144
CVE ID: CVE-2006-2514 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.774Z Vendors: n/a Products: n/a Problem Types: n/a Description: Coppermine galleries before 1.4.6, when running on Apache with mod_mime installed, allows remote attackers to upload arbitrary files via a filename with multiple file extensions. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=89658&release_id=418266 - http://www.vupen.com/english/advisories/2006/1892 - http://secunia.com/advisories/20211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26588
CVE ID: CVE-2006-2515 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.646Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Hiox Guestbook 3.1 allows remote attackers to inject arbitrary web script or HTML via the input forms for signing the guestbook. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434686/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26620 - http://www.vupen.com/english/advisories/2006/1929 - http://www.osvdb.org/25712 - http://securityreason.com/securityalert/938 - http://secunia.com/advisories/
es/2006/1929 - http://www.osvdb.org/25712 - http://securityreason.com/securityalert/938 - http://secunia.com/advisories/20252
CVE ID: CVE-2006-2516 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: mainfile.php in XOOPS 2.0.13.2 and earlier, when register_globals is enabled, allows remote attackers to overwrite variables such as $xoopsOption['nocommon'] and conduct directory traversal attacks or include PHP files via (1) xoopsConfig[language] to misc.php or (2) xoopsConfig[theme_set] to index.php, as demonstrated by injecting PHP sequences into a log file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434698/100/0/threaded - http://www.osvdb.org/25683 - http://sec
er: References: - http://www.securityfocus.com/archive/1/434698/100/0/threaded - http://www.osvdb.org/25683 - http://secunia.com/advisories/20176 - http://www.securityfocus.com/bid/18061 - https://www.exploit-db.com/exploits/1811 - http://www.vupen.com/english/advisories/2006/1895 - http://securityreason.com/securityalert/934
CVE ID: CVE-2006-2517 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in MyWeb Portal Office, Standard Edition, Public Edition, Medical Edition, Citizen Edition, School Edition, and Light Edition allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016133 - http://www.vupen.com/english/advisories/2006/1898 - http://secunia.com/advisories/20178 - http://www.myweb-jp.com/support/tech/tech_common_013.html - https://exchange.xforce.ibmcloud.com/
com/advisories/20178 - http://www.myweb-jp.com/support/tech/tech_common_013.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26622
CVE ID: CVE-2006-2518 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in phpwcms 1.2.5-DEV allows remote attackers to inject arbitrary web script or HTML via the BL[be_cnt_plainhtml] parameter to include/inc_tmpl/content/cnt6.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18063 - http://secunia.com/advisories/20239 - http://www.vupen.com/english/advisories/2006/1934 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26638 - http://www.kapda.ir/advisory-331.html - http://securityreason.com/sec
change.xforce.ibmcloud.com/vulnerabilities/26638 - http://www.kapda.ir/advisory-331.html - http://securityreason.com/securityalert/939 - http://www.securityfocus.com/archive/1/434706/100/0/threaded
CVE ID: CVE-2006-2519 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in include/inc_ext/spaw/spaw_control.class.php in phpwcms 1.2.5-DEV allows remote attackers to include arbitrary local files via .. (dot dot) sequences in the spaw_root parameter. NOTE: CVE analysis suggests that this issue is actually in SPAW Editor PHP Edition. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20239 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26639 - http://www.vupen.com/english/advisories/2006/1934 - http://www.kapda.i
hange.xforce.ibmcloud.com/vulnerabilities/26639 - http://www.vupen.com/english/advisories/2006/1934 - http://www.kapda.ir/advisory-331.html - http://securityreason.com/securityalert/939 - http://www.securityfocus.com/bid/18062 - http://www.securityfocus.com/archive/1/434706/100/0/threaded - http://www.osvdb.org/25756
CVE ID: CVE-2006-2520 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. (dot dot) in the filename of a file that is stored in a (1) RAR (.rar), (2) TAR (.tar), (3) ZIP (.zip), (4) GZ (.gz), or (5) JAR (.jar) archive. Additional Analyst Notes: - CVE Program Container: References: - http://hamid.ir/security/bitzipper.txt - http://www.vupen.com/english/advisories/2006/1907 - http://www.securityfocus.com/archive/1/434713/100/0/threaded - http://www.osvdb.org/2
com/english/advisories/2006/1907 - http://www.securityfocus.com/archive/1/434713/100/0/threaded - http://www.osvdb.org/25693 - http://www.securityfocus.com/bid/18065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26626 - http://securitytracker.com/id?1016132 - http://secunia.com/advisories/20207
CVE ID: CVE-2006-2521 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.778Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in cron.php in phpMyDirectory 10.4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1896 - http://secunia.com/advisories/20209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26625 - https://www.exploit-db.com/exploits/1808
CVE ID: CVE-2006-2522 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dayfox Blog 2.0 and earlier stores user credentials in edit/slog_users.txt under the web document root with insufficient access control, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25689 - http://securitytracker.com/id?1016163 - http://www.vupen.com/english/advisories/2006/1904 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26623 - http://colander.altervista.org/advisory/DayfoxBlog.txt - http://secunia.com/advisories/20216
CVE ID: CVE-2006-2523 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1894 - https://www.exploit-db.com/exploits/1805 - http://www.osvdb.org/25694 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26621 - http://secunia.com/advisories/20220
CVE ID: CVE-2006-2524 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when processing the user date format. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1900 - http://www.usebb.net/community/topic.php?id=1130 - http://secunia.com/advisories/20187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26600 - http://www.osvdb.org/25684 - http://sourceforge.net/project/shownotes.
hange.xforce.ibmcloud.com/vulnerabilities/26600 - http://www.osvdb.org/25684 - http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103
CVE ID: CVE-2006-2525 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in UseBB 1.0 RC1 and earlier allows remote attackers to execute arbitrary SQL commands via the member list search module. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1900 - http://www.osvdb.org/25685 - http://www.usebb.net/community/topic.php?id=1130 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26598 - http://secunia.com/advisories/20187 - http://sourceforge.net/project/shownotes.php?release_id=418462&group_id=93103
CVE ID: CVE-2006-2526 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in PHP Easy Galerie 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20245 - http://www.vupen.com/english/advisories/2006/1932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26602 - http://securityreason.com/securityalert/936 - http://www.securityfocus.com/bid/18060 - http://www.securityfocus.com/archive/1/434695/100/0/thread
/securityalert/936 - http://www.securityfocus.com/bid/18060 - http://www.securityfocus.com/archive/1/434695/100/0/threaded
CVE ID: CVE-2006-2527 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: Admin/admin.php in phpBazar 2.1.0 and earlier allows remote attackers to bypass the authentication process and gain unauthorized access to the administrative section by setting the action parameter to edit_member and the value parameter to 1. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26617 - http://www.vupen.com/english/advisories/2006/1890 - http://secunia.com/advisories/20198 - http://www.securityfocus.com/bid/18053 - http://www.securityfocus.com/arc
6/1890 - http://secunia.com/advisories/20198 - http://www.securityfocus.com/bid/18053 - http://www.securityfocus.com/archive/1/434558/100/0/threaded - http://www.osvdb.org/25701
CVE ID: CVE-2006-2528 State: PUBLISHED Published: 2006-05-22T22:00:00 Last Updated: 2024-08-07T17:51:04.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in classified_right.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the language_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26618 - http://www.securityfocus.com/archive/1/434558 - http://www.securityfocus.com/bid/18052 - http://secunia.com/advisories/20198 - http://securityreason.com/securityalert/933
CVE ID: CVE-2006-2529 State: PUBLISHED Published: 2006-05-22T23:00:00 Last Updated: 2024-08-07T17:51:04.780Z Vendors: n/a Products: n/a Problem Types: n/a Description: editor/filemanager/upload/php/upload.php in FCKeditor before 2.3 Beta, when the upload feature is enabled, does not verify the Type parameter, which allows remote attackers to upload arbitrary file types. NOTE: It is not clear whether this is related to CVE-2006-0658. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25631 - http://secunia.com/advisories/20122 - http://www.fckeditor.net/whatsnew/default.html - http://www.vupen.com/english/advisories/2006/1856 - http://www.securityfocus.com/b
fckeditor.net/whatsnew/default.html - http://www.vupen.com/english/advisories/2006/1856 - http://www.securityfocus.com/bid/18029
CVE ID: CVE-2006-2530 State: PUBLISHED Published: 2006-05-22T23:00:00 Last Updated: 2024-08-07T17:51:04.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1854 - http://www.securityfocus.com/bid/18014 - http://www.securityfocus.com/archive/1/434366/100/0/threaded - http://secunia.com/advisories/20148 - http://www.security-assessment.com/
ityfocus.com/archive/1/434366/100/0/threaded - http://secunia.com/advisories/20148 - http://www.security-assessment.com/Whitepapers/0x00_vs_ASP_File_Uploads.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/26546 - http://www.codescan.com/Advisories/CodeScanLabs_AvatarMod.html