Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3292 State: PUBLISHED Published: 2006-06-28T23:00:00 Last Updated: 2024-08-07T18:23:21.124Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter (search field). Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/JAWS_062_sql.html - http://secunia.com/advisories/20842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27334 - http://www.jaws-project.com/index.php?blog/show/29 - http://securityreason.com/securityalert/1165 - http://www.secur
4 - http://www.jaws-project.com/index.php?blog/show/29 - http://securityreason.com/securityalert/1165 - http://www.securityfocus.com/archive/1/438434/100/0/threaded - http://www.vupen.com/english/advisories/2006/2546 - http://www.securityfocus.com/bid/18665
CVE ID: CVE-2006-3293 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) via empty IRC CTCP NOTICE messages. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20837 - http://www.vupen.com/english/advisories/2006/2543 - http://secunia.com/advisories/20805 - http://www.gentoo.org/security/en/glsa/glsa-200606-26.xml - http://www.securityfocus.com/bid/18664 - http://www.energymech.net/versions-3.0.html - https://exchange.xforce.ibmcloud.com/vu
/www.securityfocus.com/bid/18664 - http://www.energymech.net/versions-3.0.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27424
CVE ID: CVE-2006-3294 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27374 - http://www.osvdb.org/26862 - http://www.securityfocus.com/bid/18660 - https://www.exploit-db.com/exploits/1955 - http://www.vupen.com/english/advisories/2006/252
ecurityfocus.com/bid/18660 - https://www.exploit-db.com/exploits/1955 - http://www.vupen.com/english/advisories/2006/2528 - http://secunia.com/advisories/20823
CVE ID: CVE-2006-3295 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrary web script or HTML via the title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27397 - http://www.vupen.com/english/advisories/2006/2545 - http://secunia.com/advisories/20796 - http://www.securityfocus.com/bid/18666 - http://securityreason.com/securityalert/1166 - http://www.securityfocus.com/archive/1/438381/100/0/threaded
CVE ID: CVE-2006-3296 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands via the offset parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27400 - http://www.vupen.com/english/advisories/2006/2545 - http://secunia.com/advisories/20796 - http://www.securityfocus.com/bid/18666 - http://securityreason.com/securityalert/1166 - http://www.securityfocus.com/archive/1/438381/100/0/threaded
CVE ID: CVE-2006-3297 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the icq parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27371 - http://www.vupen.com/english/advisories/2006/2513
CVE ID: CVE-2006-3298 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, which triggers the crash in jscript.dll. Additional Analyst Notes: - CVE Program Container: References: - http://www.security.nnov.ru/Gnews281.html - http://www.securityfocus.com/bid/18622 - http://secunia.com/advisories/20773 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27319
CVE ID: CVE-2006-3299 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:20.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary web script or HTML via the group parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27406 - http://www.vupen.com/english/advisories/2006/2572 - http://secunia.com/advisories/20872 - http://www.securityfocus.com/archive/1/438443/100/0/threaded - http://securityreason.com/securityalert/1170 - http://www.securityfocus.com/bid/18662
CVE ID: CVE-2006-3300 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.181Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ROOT_PATH parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26885 - http://secunia.com/advisories/20799 - http://www.vupen.com/english/advisories/2006/2590 - https://www.exploit-db.com/exploits/1948 - http://www.securityfocus.com/bid/18633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27372
CVE ID: CVE-2006-3301 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the domain parameter in (1) user_add.php or (2) unit_add.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20788 - http://www.vupen.com/english/advisories/2006/2532 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27364 - http://www.securityfocus.com/bid/18658 - http://pridels0.blogspot.com/2006/06/phpqladmin-vuln.html
CVE ID: CVE-2006-3302 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosC_a_path parameter. NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27374 - http://www.vupen.com/english/advisories/2006/2528
CVE ID: CVE-2006-3303 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) subject or (2) to parameters. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/deluxebb-107-xss-vuln.html - http://secunia.com/advisories/20813 - http://www.vupen.com/english/advisories/2006/2530 - http://securitytracker.com/id?1016380 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27359
CVE ID: CVE-2006-3304 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL commands via the xmsn parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016384 - http://secunia.com/advisories/20813 - http://www.vupen.com/english/advisories/2006/2530 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27443 - https://www.exploit-db.com/exploits/1953 - http://www.securityfocus.com/bid/18648 - http://www.securityfocus.com/archive/1/4383
/www.exploit-db.com/exploits/1953 - http://www.securityfocus.com/bid/18648 - http://www.securityfocus.com/archive/1/438342/100/0/threaded - http://securityreason.com/securityalert/1180
CVE ID: CVE-2006-3305 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.191Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) f_user parameter in index.php, the (2) pag parameter in messages.php, or the (3) lid, (4) tid, and (5) sid parameters in error.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27371 - http://www.securityfocus.com/bid/18643 - http://secunia.com/advisories/20804 - http://pridels0.blo
lnerabilities/27371 - http://www.securityfocus.com/bid/18643 - http://secunia.com/advisories/20804 - http://pridels0.blogspot.com/2006/06/uebimiau-webmail-xss-vuln.html - http://www.vupen.com/english/advisories/2006/2513 - http://www.securityfocus.com/bid/22375
CVE ID: CVE-2006-3306 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.231Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine before 20060501-0142-jam, and possibly earlier versions dating back to 2006-02-23, might allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20760 - http://www.vupen.com/english/advisories/2006/2503 - http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog - https://exchange.xforce.ibm
nglish/advisories/2006/2503 - http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog - https://exchange.xforce.ibmcloud.com/vulnerabilities/27407 - http://www.securityfocus.com/bid/18627
CVE ID: CVE-2006-3307 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.188Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attackers to execute arbitrary SQL commands via (1) unspecified parameters in the php/comment.php and (2) the getpartialmatches method in php/aolbonics.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20760 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27408 - http://www.vupen.com/english/advisories/2006/2503 - http://www.zoidtechnologies.com/projects/bbsen
lnerabilities/27408 - http://www.vupen.com/english/advisories/2006/2503 - http://www.zoidtechnologies.com/projects/bbsengine/ChangeLog - http://www.securityfocus.com/bid/18627
CVE ID: CVE-2006-3308 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and remote attack vectors via [img] tags, possibly cross-site scripting (XSS). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27488 - http://secunia.com/advisories/20760 - http://sourceforge.net/project/shownotes.php?release_id=427430&group_id=86388 - http://www.vupen.com/english/advisories/2006/2503 - http://www.securityfocus.com/bid/18627
CVE ID: CVE-2006-3309 State: PUBLISHED Published: 2006-06-29T01:00:00 Last Updated: 2024-08-07T18:23:21.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18688 - http://www.vupen.com/english/advisories/2006/2560 - https://www.exploit-db.com/exploits/1957 - http://secunia.com/advisories/20857 - http://www.osvdb.org/26870 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27401
CVE ID: CVE-2006-3311 State: PUBLISHED Published: 2006-09-12T23:00:00 Last Updated: 2024-08-07T18:23:21.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3573 - http://secunia.com/advisories/22054 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://secunia.com/advisories/22268 - http://www.vupen.com/english/advisories/2006/4507 - htt
echalerts/TA06-318A.html - http://secunia.com/advisories/22268 - http://www.vupen.com/english/advisories/2006/4507 - http://www.kb.cert.org/vuls/id/451380 - http://www.securityfocus.com/bid/19980 - http://www.computerterrorism.com/research/ct12-09-2006.htm - http://secunia.com/advisories/22187 - http://www.vupen.com/english/advisories/2006/3852 - http://secunia.com/advisories/22882 - http://secunia.com/advisories/21865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28886 - http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394 - http://securityreason.com/securityalert/1546 -
rity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394 - http://securityreason.com/securityalert/1546 - http://www.securityfocus.com/archive/1/445825/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html - http://securitytracker.com/id?1016829 - http://secunia.com/advisories/21901 - http://www.adobe.com/support/security/bulletins/apsb06-11.html - http://www.redhat.com/support/errata/RHSA-2006-0674.html - http://www.vupen.com/english/advisories/2006/3577 - http://www.us-cert.gov/cas/techalerts/TA06-275A.html - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 - http://security.gentoo.org/glsa/glsa-200610-02.x
.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 - http://security.gentoo.org/glsa/glsa-200610-02.xml
CVE ID: CVE-2006-3312 State: PUBLISHED Published: 2006-06-29T19:00:00 Last Updated: 2024-08-07T18:23:21.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) link_print, (2) link_upgrade, (3) link_sql, (4) link_next, (5) link_prev, and (6) link_list parameters in top.inc as included by queries_view_search.php; the (7) msg, (8) component_name, and (9) component_desc parameters in (a) components_copy_content.php, (b) components_modify_content.php, and (c) components_new_content.php; the (10) title, (11) vers
nents_copy_content.php, (b) components_modify_content.php, and (c) components_new_content.php; the (10) title, (11) version, and (12) content parameters in design_copy_content.php; the (13) plan_title and (14) plan_content parameters in design_copy_plan_search.php; the (15) title, (16) minor_version, (17) new_version, and (18) content parameters in design_modify_content.php; the (19) title, (20) version, and (21) content parameters in design_new_content.php; the (22) plan_name and (23) plan_desc parameters in design_new_search.php; the (24) file_name parameter in download.php; the (25) username and (26) password parameters in login.php; the (27) title, (28) version, and (29) content paramete
hp; the (25) username and (26) password parameters in login.php; the (27) title, (28) version, and (29) content parameters in phase_copy_content.php; the (30) content parameter in phase_delete_search.php; the (31) title, (32) minor_version, (33) new_version, and (34) content parameters in phase_modify_content.php; the (35) content, (36) title, (37) version, and (38) content parameters in phase_modify_search.php; the (39) content parameter in phase_view_search.php; the (40) msg, (41) product_name, and (42) product_desc parameters in products_copy_content.php; and possibly the (43) product_name and (44) product_desc parameters in (d) products_copy_search.php, and a large number of additional p
e (43) product_name and (44) product_desc parameters in (d) products_copy_search.php, and a large number of additional parameters and executables. NOTE: the vendor notified CVE via e-mail that this issue has been fixed in the 6.8 RC release. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27603 - http://www.attrition.org/pipermail/vim/2006-August/000969.html - http://www.testmanagement.com/ - http://www.osvdb.org/27611 - http://www.osvdb.org/27614 - http://seclab.tuwien.ac.at/advisories/TUVSA-0606-001.txt - http://www.osvdb.org/27602 - http://www.osvdb.org/27610 - http://securitytracker.com/id?1016381 - http://www.osvdb.org/27612 - http://www.osvdb.org/2
http://www.osvdb.org/27610 - http://securitytracker.com/id?1016381 - http://www.osvdb.org/27612 - http://www.osvdb.org/27607 - http://www.osvdb.org/27606 - http://www.securityfocus.com/bid/18620 - http://www.osvdb.org/27609 - http://www.osvdb.org/27608 - http://www.osvdb.org/27599 - http://www.osvdb.org/27613 - http://www.osvdb.org/27615 - http://www.osvdb.org/27605 - http://securityreason.com/securityalert/1169 - http://www.osvdb.org/27616 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27355 - http://www.osvdb.org/27600 - http://www.osvdb.org/27601 - http://www.osvdb.org/27604 - http://www.securityfocus.com/archive/1/438151/100/0/threaded
CVE ID: CVE-2006-3313 State: PUBLISHED Published: 2006-06-29T19:00:00 Last Updated: 2024-08-07T18:23:21.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitrary web script or HTML via the keyWord parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.kil13r.info/sa/xss/smartnetxss.jpg - http://www.kil13r.info/sa/Kil13r-SA-20060622-1.txt - http://securitytracker.com/id?1016367 - http://www.securityfocus.com/bid/18600 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27411 - http://www.securityfocus.com/archive/1/438164/100/0/thr
0 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27411 - http://www.securityfocus.com/archive/1/438164/100/0/threaded - http://securityreason.com/securityalert/1168
CVE ID: CVE-2006-3314 State: PUBLISHED Published: 2006-06-29T19:00:00 Last Updated: 2024-08-07T18:23:21.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the pageid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1167 - http://www.securityfocus.com/archive/1/437836/100/0/threaded - http://www.securityfocus.com/bid/18490 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27365 - http://securitytracker.com/id?1016346
CVE ID: CVE-2006-3315 State: PUBLISHED Published: 2006-06-29T19:00:00 Last Updated: 2024-08-07T18:23:21.209Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows remote attackers to execute arbitrary PHP code via a URL in the osCsid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1176 - http://www.securityfocus.com/bid/18435 - http://archives.neohapsis.com/archives/bugtraq/2006-06/0387.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27365
CVE ID: CVE-2006-3316 State: PUBLISHED Published: 2006-06-29T21:00:00 Last Updated: 2024-08-07T18:23:21.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) logs.php and (2) users.php, a different set of vectors than CVE-2006-3116. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-47/advisory/ - http://www.securityfocus.com/bid/18719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27465 - http://www.osvdb.org/26903 - http://www.osvdb.org/26904 - http://secuni
ange.xforce.ibmcloud.com/vulnerabilities/27465 - http://www.osvdb.org/26903 - http://www.osvdb.org/26904 - http://secunia.com/advisories/20200
CVE ID: CVE-2006-3317 State: PUBLISHED Published: 2006-06-29T21:00:00 Last Updated: 2024-08-07T18:23:20.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) announcements.php and (2) rss.php, a different set of vectors and affected versions than CVE-2006-3316 and CVE-2006-3116. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26889 - http://secunia.com/secunia_research/2006-47/advisory/ - http://www.securityfocus.com/bid/18719 - http://www.securityfocus.com/bid/23066 - http://www.vupen.com/engl
/advisory/ - http://www.securityfocus.com/bid/18719 - http://www.securityfocus.com/bid/23066 - http://www.vupen.com/english/advisories/2006/2593 - http://archives.neohapsis.com/archives/fulldisclosure/2006-06/0824.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27462 - http://www.securityfocus.com/archive/1/438706/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/33100 - http://www.phpraider.com/index.php?action=tpmod%3Bdl=item10 - https://www.exploit-db.com/exploits/3528 - http://securityreason.com/securityalert/1173 - http://www.osvdb.org/26888 - http://secunia.com/advisories/20865