Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6728 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:34:00.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the info request mechanism in LAN Messenger before 1.5.1.2 allows remote attackers to cause a denial of service (application crash) or transmit spam via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=471428 - http://www.securityfocus.com/bid/21715 - http://osvdb.org/37369 - http://www.vupen.com/english/advisories/2006/5132
CVE ID: CVE-2006-6729 State: PUBLISHED Published: 2006-12-26T21:00:00 Last Updated: 2024-08-07T20:34:00.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a-blog 1.51 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5129 - http://secunia.com/advisories/23444 - http://www.osvdb.org/32402 - http://jvn.jp/jp/JVN%2378520316/index.html - http://www.securityfocus.com/bid/21716 - http://www.a-blog.jp/news/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/31038
CVE ID: CVE-2006-6730 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenBSD and NetBSD permit usermode code to kill the display server and write to the X.Org /dev/xf86 device, which allows local users with root privileges to reduce securelevel by replacing the System Management Mode (SMM) handler via a write to an SMRAM address within /dev/xf86 (aka the video card memory-mapped I/O range), and then launching the new handler via a System Management Interrupt (SMI), as demonstrated by a write to Programmed I/O port 0xB2. Additional Analyst Notes: - CVE Program Container: References: - http://www
ated by a write to Programmed I/O port 0xB2. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/454510/100/0/threaded - http://lists.freedesktop.org/archives/xorg/2004-June/000927.html - http://www.securityfocus.com/archive/1/454706/100/0/threaded - http://www.ssi.gouv.fr/fr/sciences/fichiers/lti/cansecwest2006-duflot-paper.pdf - http://www.cansecwest.com/slides06/csw06-duflot.ppt - http://www.securityfocus.com/archive/1/454379/100/0/threaded
CVE ID: CVE-2006-6731 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allow attackers to develop Java applets that read, write, or execute local files, possibly related to (1) integer overflows in the Java_sun_awt_image_ImagingLib_convolveBI, awt_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRa
t_parseRaster, and awt_parseColorModel functions; (2) a stack overflow in the Java_sun_awt_image_ImagingLib_lookupByteRaster function; and (3) improper handling of certain negative values in the Java_sun_font_SunLayoutEngine_nativeLayout function. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21675 - http://docs.info.apple.com/article.html?artnum=307177 - http://www.vupen.com/english/advisories/2006/5073 - http://secunia.com/advisories/24468 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://sunsolve.sun.com/search/d
0000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102729-1 - http://www.redhat.com/support/errata/RHSA-2007-0062.html - http://www.vupen.com/english/advisories/2007/1814 - http://scary.beasts.org/security/CESA-2005-008.txt - http://secunia.com/advisories/25283 - http://secunia.com/advisories/24099 - http://secunia.com/advisories/25404 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10134 - http://secunia.com/advisories/24189 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://lists.apple.com/archives/Secu
.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html - http://www.kb.cert.org/vuls/id/939609 - http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html - http://www.redhat.com/support/errata/RHSA-2007-0072.html - http://secunia.com/advisories/23445 - http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/23650 - http://secunia.com/advisories/23835 - http://securitytracker.com/id?1017425 - http://www.redhat.com/support/errata/RHSA-2007-0073.html - http://www.kb.cert.org/vuls/id/1
ritytracker.com/id?1017425 - http://www.redhat.com/support/errata/RHSA-2007-0073.html - http://www.kb.cert.org/vuls/id/149457 - http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml - http://secunia.com/advisories/28115 - http://www.vupen.com/english/advisories/2007/0936 - http://security.gentoo.org/glsa/glsa-200702-08.xml - http://www.us-cert.gov/cas/techalerts/TA07-022A.html - http://security.gentoo.org/glsa/glsa-200701-15.xml - http://dev2dev.bea.com/pub/advisory/243
CVE ID: CVE-2006-6732 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:33:59.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the abs parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30966 - https://www.exploit-db.com/exploits/2958 - http://www.vupen.com/english/advisories/2006/5084 - http://www.securityfocus.com/bid/21670 - http://secunia.com/advisories/23434
CVE ID: CVE-2006-6733 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.180Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in support/view.php in Support Cards 1 (osTicket) allows remote attackers to inject arbitrary web script or HTML via the e parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21669 - http://securityreason.com/securityalert/2076 - http://www.securityfocus.com/archive/1/454856/100/0/threaded
CVE ID: CVE-2006-6734 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to inject arbitrary web script or HTML via the catname parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2072 - http://www.securityfocus.com/bid/21677 - http://secunia.com/advisories/23449 - http://www.vupen.com/english/advisories/2006/5096 - http://www.attrition.org/pipermail/vim/2006-December/001197.html - http://ww
ww.vupen.com/english/advisories/2006/5096 - http://www.attrition.org/pipermail/vim/2006-December/001197.html - http://www.securityfocus.com/archive/1/454864/100/0/threaded
CVE ID: CVE-2006-6735 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.119Z Vendors: n/a Products: n/a Problem Types: n/a Description: modules/viewcategory.php in Minh Nguyen Duong Obie Website Mini Web Shop 2.1.c allows remote attackers to obtain sensitive information via a request with an arbitrary catname parameter but no itemsdb parameter, which reveals the path in an error message. NOTE: CVE analysis suggests that this error might be resultant from a more serious issue such as directory traversal. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2072 - http://www.securityfocus.com/bid/21677 - http:/
Container: References: - http://securityreason.com/securityalert/2072 - http://www.securityfocus.com/bid/21677 - http://www.attrition.org/pipermail/vim/2006-December/001197.html - http://www.securityfocus.com/archive/1/454864/100/0/threaded
CVE ID: CVE-2006-6736 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue." Additional Analyst Notes: - CVE Program Container: References: - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/26049 - http://www.redhat.com/support/errat
cs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/26049 - http://www.redhat.com/support/errata/RHSA-2007-0062.html - http://secunia.com/advisories/24099 - http://secunia.com/advisories/25404 - http://securitytracker.com/id?1017427 - http://secunia.com/advisories/24189 - http://www.vupen.com/english/advisories/2006/5075 - http://www.novell.com/linux/security/advisories/2007_45_java.html - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9729 - http://support.novell.com/techcenter/ps
cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9729 - http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html - http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html - http://secunia.com/advisories/26119 - http://www.redhat.com/support/errata/RHSA-2007-0072.html - http://www.securityfocus.com/bid/21674 - http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/23650 - http://secunia.com/advisories/23835 - http://www.redhat.com/support/errata/RHSA-2007-0073.html - http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml - http://secunia.com/advisories/28115 - http://security.gentoo.org/glsa/glsa-200702
/security/en/glsa/glsa-200705-20.xml - http://secunia.com/advisories/28115 - http://security.gentoo.org/glsa/glsa-200702-08.xml - http://secunia.com/advisories/23398 - http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1 - http://security.gentoo.org/glsa/glsa-200701-15.xml
CVE ID: CVE-2006-6737 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The first issue." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/26049 - http://www.redhat.com/support/errata/RHSA-2007-0062.html - https://oval.cisecurity.org/repos
unia.com/advisories/26049 - http://www.redhat.com/support/errata/RHSA-2007-0062.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11087 - http://secunia.com/advisories/24099 - http://secunia.com/advisories/25404 - http://securitytracker.com/id?1017427 - http://secunia.com/advisories/24189 - http://www.vupen.com/english/advisories/2006/5075 - http://www.novell.com/linux/security/advisories/2007_45_java.html - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html - http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html - http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html - http://secunia.co
2b871db609de64ec70f0089c.html - http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html - http://secunia.com/advisories/26119 - http://www.redhat.com/support/errata/RHSA-2007-0072.html - http://www.securityfocus.com/bid/21674 - http://secunia.com/advisories/23650 - http://secunia.com/advisories/23835 - http://www.redhat.com/support/errata/RHSA-2007-0073.html - http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml - http://security.gentoo.org/glsa/glsa-200702-08.xml - http://secunia.com/advisories/23398 - http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1 - http://security.gentoo.
cd81ae4a268bb5edfe918.html - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102732-1 - http://security.gentoo.org/glsa/glsa-200701-15.xml
CVE ID: CVE-2006-6738 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:33:59.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in statistic.php in cwmCounter 5.1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5083 - http://www.securityfocus.com/bid/21671 - https://www.exploit-db.com/exploits/2960 - http://secunia.com/advisories/23442
CVE ID: CVE-2006-6739 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in buycd.php in Paristemi 0.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the HTTP_DOCUMENT_ROOT parameter, a different vector than CVE-2006-6689. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21665 - https://www.exploit-db.com/exploits/2955
CVE ID: CVE-2006-6740 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpProfiles 3.1.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the menu parameter to (1) include/body.inc.php or (2) include/body_admin.inc.php; or a URL in the incpath parameter to (3) index.inc.php, (4) account.inc.php, (5) admin_newcomm.inc.php, (6) header_admin.inc.php, (7) header.inc.php, (8) friends.inc.php, (9) menu_u.inc.php, (10) notify.inc.php, (11) body.inc.php, (12) body_admin.inc.php, (13) commrecc.inc.php, (14) do_reg.inc.php,
_u.inc.php, (10) notify.inc.php, (11) body.inc.php, (12) body_admin.inc.php, (13) commrecc.inc.php, (14) do_reg.inc.php, (15) comm_post.inc.php, or (16) menu_v.inc.php in include/, different vectors than CVE-2006-5634. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://linuxwebshop.com/forum/viewtopic.php?t=40 - http://www.osvdb.org/32375 - http://www.osvdb.org/32363 - http://www.osvdb.org/32372 - http://www.osvdb.org/32374 - http://www.vupen.com/english/advisories/2006/5087 - http://www.osvdb.org/32376 - http://www.osvdb.org/32365 - http://www.osvdb.org/323
en.com/english/advisories/2006/5087 - http://www.osvdb.org/32376 - http://www.osvdb.org/32365 - http://www.osvdb.org/32370 - http://www.osvdb.org/32366 - http://www.osvdb.org/32368 - http://secunia.com/advisories/23423 - http://www.osvdb.org/32369 - http://www.osvdb.org/32364 - http://www.osvdb.org/32371 - http://www.attrition.org/pipermail/vim/2007-March/001401.html - http://www.osvdb.org/32367 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30997 - http://www.securityfocus.com/bid/21667 - http://www.osvdb.org/32373 - https://www.exploit-db.com/exploits/2956
CVE ID: CVE-2006-6741 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in urlobox in MKPortal allows remote attackers to delete arbitrary messages as an administrator via a delete operation in an img BBcode tag. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23431 - http://www.vupen.com/english/advisories/2006/5115 - http://www.securityfocus.com/archive/1/454868/100/0/threaded
CVE ID: CVE-2006-6742 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in FTP Print Server 2.4 and 2.4.5 in HP LaserJet 5000 Series printers with firmware R.25.15 or R.25.47, and HP LaserJet 5100 Series printers with firmware V.29.12, allow remote attackers to cause a denial of service (device crash) via a long string in the (1) LIST or (2) NLST command. Additional Analyst Notes: - CVE Program Container: References: - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051367.html - http://securityreason.com/securityalert/2074 - http://secunia.com/advisories
full-disclosure/2006-December/051367.html - http://securityreason.com/securityalert/2074 - http://secunia.com/advisories/23396 - http://www.securityfocus.com/archive/1/454817/100/0/threaded - http://www.vupen.com/english/advisories/2006/5081
CVE ID: CVE-2006-6743 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:34:00.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpProfiles before 2.1.1 uses world writable permissions for certain profile files and directories, which allows local users to modify or delete files, related to (1) users/include/do_makeprofile.inc.php and (2) users/include/copy.inc.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30171 - http://secunia.com/advisories/22728 - http://www.vupen.com/english/advisories/2006/4446 - http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=1763
ww.vupen.com/english/advisories/2006/4446 - http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=176310
CVE ID: CVE-2006-6744 State: PUBLISHED Published: 2006-12-26T23:00:00Z Last Updated: 2024-09-17T00:36:22.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpProfiles before 2.1.1 does not have an index.php or other index file in the (1) image_data, (2) graphics/comm, or (3) users read/write directories, which might allow remote attackers to list directory contents or have other unknown impacts. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=460858&group_id=176310
CVE ID: CVE-2006-6745 State: PUBLISHED Published: 2006-12-26T23:00:00 Last Updated: 2024-08-07T20:42:06.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges, related to serialization in JRE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21673 - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/24
w.securityfocus.com/bid/21673 - http://docs.info.apple.com/article.html?artnum=307177 - http://secunia.com/advisories/24468 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://secunia.com/advisories/26049 - http://www.redhat.com/support/errata/RHSA-2007-0062.html - http://www.vupen.com/english/advisories/2007/1814 - http://secunia.com/advisories/25283 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9621 - http://secunia.com/advisories/24099 - http://secunia.com/advisories/25404 - http://secunia.com/advisories/24189 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&object
http://secunia.com/advisories/24189 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00876579 - http://www.novell.com/linux/security/advisories/2007_45_java.html - http://lists.apple.com/archives/Security-announce/2007/Dec/msg00001.html - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0003.html - http://support.novell.com/techcenter/psdb/4f850d1e2b871db609de64ec70f0089c.html - http://www.novell.com/linux/security/advisories/2007_10_ibmjava.html - http://secunia.com/advisories/26119 - http://secunia.com/advisories/23445 - http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/23650 - http://secunia.com/advisories
http://www.vupen.com/english/advisories/2007/4224 - http://secunia.com/advisories/23650 - http://secunia.com/advisories/23835 - http://securitytracker.com/id?1017426 - http://www.redhat.com/support/errata/RHSA-2007-0073.html - http://www.kb.cert.org/vuls/id/102289 - http://www.gentoo.org/security/en/glsa/glsa-200705-20.xml - http://secunia.com/advisories/28115 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102731-1 - http://dev2dev.bea.com/pub/advisory/240 - http://www.vupen.com/english/advisories/2006/5074 - http://www.vupen.com/english/advisories/2007/0936 - http://security.gentoo.org/glsa/glsa-200702-08.xml - http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5
http://security.gentoo.org/glsa/glsa-200702-08.xml - http://support.novell.com/techcenter/psdb/d2f549cc040cd81ae4a268bb5edfe918.html - http://www.us-cert.gov/cas/techalerts/TA07-022A.html - http://security.gentoo.org/glsa/glsa-200701-15.xml
CVE ID: CVE-2006-6746 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-07T20:42:06.745Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Xt-News 0.1 allow remote attackers to inject arbitrary web script or HTML via the id_news parameter to (1) add_comment.php or (2) show_news.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5145 - http://www.securityfocus.com/archive/1/455144/100/0/threaded - http://secunia.com/advisories/23456 - http://www.securityfocus.com/bid/21719 - http://securityreason.com/securityalert/2058 - https://exchange.xforce.ib
456 - http://www.securityfocus.com/bid/21719 - http://securityreason.com/securityalert/2058 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31145
CVE ID: CVE-2006-6747 State: PUBLISHED Published: 2006-12-27T00:00:00 Last Updated: 2024-08-07T20:42:06.369Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in show_news.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the id_news parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/5145 - http://www.securityfocus.com/archive/1/455144/100/0/threaded - http://secunia.com/advisories/23456 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31147 - http://www.securityfocus.com/bid/21719 - http://securityreason.com/securityalert/2058