Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2707 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/207337 - http://www.kb.cert.org/vuls/id/WDON-6QAPAL - http://secunia.com/advisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - https://exchange.xforce.ibmcloud.com/vulnerabil
m/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26758
CVE ID: CVE-2006-2708 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read). Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/227929 - http://www.kb.cert.org/vuls/id/873409 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26778 - h
ps://exchange.xforce.ibmcloud.com/vulnerabilities/26745 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26778 - http://www.kb.cert.org/vuls/id/WDON-6QAK6D - http://secunia.com/advisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184
CVE ID: CVE-2006-2709 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.923Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-6Q6RYL - http://secunia.com/advisories/20378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26747 - http://www.kb.cert.org/vuls/id/WDON-6QANK7 - http://www.vupen.com/english/advisories/2006/2069 - http://securit
/26747 - http://www.kb.cert.org/vuls/id/WDON-6QANK7 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/919345 - http://www.kb.cert.org/vuls/id/288121
CVE ID: CVE-2006-2710 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-6QAQK9 - http://www.kb.cert.org/vuls/id/566553 - http://secunia.com/advisories/20378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26753 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184
CVE ID: CVE-2006-2711 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.859Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26740 - http://secunia.com/advisories/20377 - http://www.kb.cert.org/vuls/id/WDON-6QAQN6 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/
0377 - http://www.kb.cert.org/vuls/id/WDON-6QAQN6 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/346377 - http://www.vupen.com/english/advisories/2006/2068
CVE ID: CVE-2006-2712 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:52.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-6QAQFH - http://www.kb.cert.org/vuls/id/456729 - http://secunia.com/advisories/20378 - http://www.kb.cert.org/vuls/id/353769 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - https://exchange.xforce.ibmclo
tp://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26781 - http://www.kb.cert.org/vuls/id/WDON-6Q6S8D - https://exchange.xforce.ibmcloud.com/vulnerabilities/26765
CVE ID: CVE-2006-2713 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.782Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20378 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26767 - http://www.kb.cert.org/vuls/id/353945 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/v
5 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/MIMG-6JLSP7
CVE ID: CVE-2006-2714 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:52.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26783 - http://www.kb.cert.org/vuls/id/635721 - http://secunia.com/advisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/
78 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/WDON-6Q6SDL
CVE ID: CVE-2006-2715 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:52.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26760 - http://secunia.com/advisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/397417 - http://www.kb.cert.org/vuls/id/WDON-6QANYE
CVE ID: CVE-2006-2716 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.775Z Vendors: n/a Products: n/a Problem Types: n/a Description: Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26763 - http://secunia.com/advisories/20378 - http://www.kb.cert.org/vuls/id/584329 - http://www.vupen.com/english/advisories/2006/2069 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/WDON-6QAP4D
CVE ID: CVE-2006-2717 State: PUBLISHED Published: 2006-05-31T22:00:00 Last Updated: 2024-08-07T17:58:51.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/WDON-6QAPC5 - http://secunia.com/advisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
dvisories/20378 - http://www.vupen.com/english/advisories/2006/2069 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26771 - http://securitytracker.com/id?1016184 - http://www.kb.cert.org/vuls/id/WDON-6QAJFA - http://www.kb.cert.org/vuls/id/764025 - http://www.kb.cert.org/vuls/id/912217
CVE ID: CVE-2006-2718 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.793Z Vendors: n/a Products: n/a Problem Types: n/a Description: JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to a Crystal Reports .rpt file, which allows remote authenticated users to execute certain standard stored procedures by referencing them in a user-written .rpt file, as demonstrated by using a stored procedure that provides the username and cleartext password of every account. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016181 - http://www.securityfocus.com/ar
st Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016181 - http://www.securityfocus.com/archive/1/435352/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html - http://secunia.com/advisories/20342 - http://securityreason.com/securityalert/1000 - http://www.securityfocus.com/archive/1/435730/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26756
CVE ID: CVE-2006-2719 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft SQL Server, and sends the usernames and passwords in cleartext to the application's SQL Server ODBC driver, which might allow context-dependent attackers to obtain the passwords. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016181 - http://www.securityfocus.com/archive/1/435352/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398
w.securityfocus.com/archive/1/435352/100/0/threaded - http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046398.html - http://secunia.com/advisories/20342 - http://securityreason.com/securityalert/1000
CVE ID: CVE-2006-2720 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:52.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the subcat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/999 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26872 - http://www.securityfocus.com/archive/1/435290/100/0/threaded
CVE ID: CVE-2006-2721 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or web script via the subcat parameter. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26877 - http://securityreason.com/securityalert/999 - http://www.securityfocus.com/archive/1/435290/100/0/threaded
CVE ID: CVE-2006-2722 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18196 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27013
CVE ID: CVE-2006-2723 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that contains a large number of nested marquee tags. NOTE: a followup post indicated that the initial report could not be verified. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435411/100/0/threaded - http://www.securityfocus.com/archive/1/436268/100/0/threaded - http://www.securityfocus.com/bid/18165 - http://www.securityfocus.com/archive/1/435373/100/0/t
1/436268/100/0/threaded - http://www.securityfocus.com/bid/18165 - http://www.securityfocus.com/archive/1/435373/100/0/threaded - http://www.securityfocus.com/archive/1/435882/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26898
CVE ID: CVE-2006-2724 State: PUBLISHED Published: 2006-06-01T01:00:00 Last Updated: 2024-08-07T17:58:51.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary HTML or web script to other administrators via the "Admin note" feature, a different vulnerability than CVE-2006-2227. Additional Analyst Notes: - CVE Program Container: References: - http://www.neosecurityteam.net/advisories/Advisory-22.txt - http://securitytracker.com/id?1016157 - http://seclists.org/lists/bugtraq/2006/May/0408.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26616
CVE ID: CVE-2006-2725 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435284/100/0/threaded - http://www.nukedx.com/?viewdoc=36 - http://www.nukedx.com/?getxpl=36 - http://secunia.com/advisories/20352 - http://www.vupen.com/english/advisories/2006/2030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26832 - http://www.securityfocus.com/bid/1
h/advisories/2006/2030 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26832 - http://www.securityfocus.com/bid/18140 - http://www.securityfocus.com/archive/1/435300/100/0/threaded
CVE ID: CVE-2006-2726 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files via the config[fsBase] parameter in (1) drucken.php, (2) drucken2.php, (3) email_an_benutzer.php, (4) rechnung.php, (5) suche/search.php and (6) adminbereich/admin.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26897 - http://www.osvdb.org/26161 - http://www.osvdb.org/26158 - http://www.osvdb.org/26159 - https://www.exploit-db.com/explo
http://www.osvdb.org/26161 - http://www.osvdb.org/26158 - http://www.osvdb.org/26159 - https://www.exploit-db.com/exploits/1848 - http://www.securityfocus.com/bid/18163 - http://www.osvdb.org/26160 - http://www.vupen.com/english/advisories/2006/2043 - http://www.osvdb.org/26162 - http://www.osvdb.org/26157 - http://secunia.com/advisories/20346
CVE ID: CVE-2006-2727 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly other users via a modified username parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1005 - http://www.securityfocus.com/archive/1/435284/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26833 - http://www.nukedx.com/?viewdoc=36 - http://www.securityfocus.com/archive/1/435300/100/0/threaded
CVE ID: CVE-2006-2728 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.910Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2051 - http://securityreason.com/securityalert/1004 - http://www.securityfocus.com/bid/18142 - http://secunia.com/advisories/20336 - http://www.securityfocus.com/archive/1/435294/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/
6 - http://www.securityfocus.com/archive/1/435294/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26750
CVE ID: CVE-2006-2729 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.921Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2051 - http://secunia.com/advisories/20336 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26750
CVE ID: CVE-2006-2730 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when register_globals is enabled, allows remote attackers to include arbitrary files via the GLOBALS[CLASS_PATH] parameter. NOTE: this issue might be resultant from a global overwrite vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26934 - http://www.securityfocus.com/bid/18137 - http://www.v
835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26934 - http://www.securityfocus.com/bid/18137 - http://www.vupen.com/english/advisories/2006/2022 - http://secunia.com/advisories/20331
CVE ID: CVE-2006-2731 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) e_mesaj_yas.asp, (b) edi_haber.asp, and (c) haber_devam.asp; (2) hid parameter in (d) yazdir.asp and (e) yorum.asp, and the (3) e parameter in (f) arsiv.asp. NOTE: with administrator credentials, additional vectors exist including (4) yid parameter to (g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (
(g) admin/y_admin.asp, (5) bid parameter to (h) admin/reklam_detay.asp, hid parameter to (i) admin/detay_yorum.asp and (j) admin/haber_sil.asp, (6) kid parameter to (k) admin/kategori_d.asp, (7) tur parameter to (l) admin/haber_ekle.asp, (8) s parameter to (m) admin/e_mesaj_yaz.asp, and id parameter to (n) admin/admin_sil.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26109 - http://www.osvdb.org/26119 - http://www.osvdb.org/26115 - http://www.osvdb.org/26107 - http://www.securityfocus.com/archive/1/435282/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26837 - http://www.osvdb.org/26110 - http://www.osvdb.org/26108 - http://s
/exchange.xforce.ibmcloud.com/vulnerabilities/26837 - http://www.osvdb.org/26110 - http://www.osvdb.org/26108 - http://securitytracker.com/id?1016171 - http://www.vupen.com/english/advisories/2006/2032 - http://securityreason.com/securityalert/1003 - http://www.osvdb.org/26111 - http://www.nukedx.com/?getxpl=34 - http://www.osvdb.org/26112 - http://www.osvdb.org/26116 - http://www.osvdb.org/26117 - http://www.nukedx.com/?viewdoc=34 - http://www.securityfocus.com/bid/18148 - http://www.osvdb.org/26106 - http://www.osvdb.org/26114 - http://www.osvdb.org/26113 - http://www.osvdb.org/26118 - http://secunia.com/advisories/20357
CVE ID: CVE-2006-2732 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) yas_1, (2) yas_2, and (3) yas_3 parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016170 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26816 - http://secunia.com/advisories/20317 - http://www.securityfocus.com/bid/18126 - http://www.securityfocus.com/archive/1/435279/100/0/threaded - http://www.nukedx.com/?viewdoc=31
tyfocus.com/bid/18126 - http://www.securityfocus.com/archive/1/435279/100/0/threaded - http://www.nukedx.com/?viewdoc=31 - http://www.nukedx.com/?getxpl=31 - http://www.vupen.com/english/advisories/2006/2031 - http://securityreason.com/securityalert/1002
CVE ID: CVE-2006-2733 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:52.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20317 - http://www.securityfocus.com/archive/1/435279/100/0/threaded - http://www.nukedx.com/?viewdoc=31 - http://www.nukedx.com/?getxpl=31 - http://securityreason.com/securityalert/1002
CVE ID: CVE-2006-2734 State: PUBLISHED Published: 2006-06-01T10:00:00 Last Updated: 2024-08-07T17:58:51.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by the attacker. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435279/100/0/threaded - http://www.nukedx.com/?viewdoc=31 - http://www.nukedx.com/?getxpl=31 - http://securityreason.
/1/435279/100/0/threaded - http://www.nukedx.com/?viewdoc=31 - http://www.nukedx.com/?getxpl=31 - http://securityreason.com/securityalert/1002