Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
alyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431015/100/0/threaded - http://www.debian.org/security/2006/dsa-1066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25889 - http://www.securityfocus.com/archive/1/431387/100/0/threaded - http://securityreason.com/securityalert/715 - http://securityreason.com/securityalert/762 - http://secunia.com/advisories/20093 - http://secunia.com/advisories/20197
CVE ID: CVE-2006-1897 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.433Z Vendors: n/a Products: n/a Problem Types: n/a Description: Webplus (aka talentsoft) Web+Shop 5.3.6, when Redirect URL for "Script Not Found" Error is not configured, allows remote attackers to obtain sensitive information via a quote (') or possibly other invalid value in the storeid parameter in store.wml in webplus.exe, which reveals the path in a "Script Not Found" error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25802 - http://securityreason.com/securityalert/703 - http://www.securityfocus.com/arch
rce.ibmcloud.com/vulnerabilities/25802 - http://securityreason.com/securityalert/703 - http://www.securityfocus.com/archive/1/430880/100/0/threaded - http://securityreason.com/securityalert/761 - http://www.osvdb.org/24621 - http://secunia.com/advisories/19662
CVE ID: CVE-2006-1898 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Ralph Capper Tiny PHP Forum (TPF) 3.6 allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in a view action in profile.php and (2) a login name. NOTE: the "Access to hash password" issue is already covered by CVE-2006-0103. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25856 - http://securityreason.com/securityalert/728 - http://www.securityfocus.com/bid/17553 - htt
d.com/vulnerabilities/25856 - http://securityreason.com/securityalert/728 - http://www.securityfocus.com/bid/17553 - http://securityreason.com/securityalert/773 - http://www.securityfocus.com/archive/1/431133/100/0/threaded
CVE ID: CVE-2006-1899 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in dev Neuron Blog 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) website parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431131/100/0/threaded - http://securitytracker.com/id?1015960 - http://www.securityfocus.com/bid/17552 - http://secunia.com/advisories/19703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25913 - http://www.vupen.com/english/a
cunia.com/advisories/19703 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25913 - http://www.vupen.com/english/advisories/2006/1406
CVE ID: CVE-2006-1900 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x before 8.8.5, allow remote attackers to execute arbitrary code via a long value in (1) the COMPACT attribute of the COLGROUP element, (2) the ROWS attribute of the TEXTAREA element, and (3) the COLOR attribute of the LEGEND element; and via other unspecified attack vectors consisting of "dozens of possible snippets." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advis
possible snippets." Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1351 - http://www.securityfocus.com/archive/1/430877/100/0/threaded - http://morph3us.org/advisories/20060412-amaya-94.txt - http://secunia.com/advisories/19670 - http://www.securityfocus.com/bid/17507 - http://www.osvdb.org/24624 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25791 - http://www.securityfocus.com/archive/1/430879/100/0/threaded - http://www.osvdb.org/24623 - http://morph3us.org/advisories/20060412-amaya-94-2.txt
CVE ID: CVE-2006-1901 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Camino 1.0 and earlier allow remote attackers to cause a denial of service (null dereference and application crash or hang) via HTML with certain improperly nested elements. NOTE: this might be the same issue as CVE-2006-1724. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431004/100/0/threaded - http://securityreason.com/securityalert/772
CVE ID: CVE-2006-1902 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: fold_binary in fold-const.c in GNU Compiler Collection (gcc) 4.1 improperly handles pointer overflow when folding a certain expr comparison to a corresponding offset comparison in cases other than EQ_EXPR and NE_EXPR, which might introduce buffer overflow vulnerabilities into applications that could be exploited by context-dependent attackers.NOTE: the vendor states that the essence of the issue is "not correctly interpreting an offset to a pointer as a signed value." Additional Analyst Notes: - CVE Program Container: Referenc
ctly interpreting an offset to a pointer as a signed value." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431297/100/0/threaded - http://gcc.gnu.org/bugzilla/show_bug.cgi?id=26763 - http://www.securityfocus.com/archive/1/431245/100/0/threaded - http://www.securityfocus.com/archive/1/431319/100/0/threaded - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356896 - http://www.securityfocus.com/archive/1/431184/100/0/threaded - http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01297.html - http://gcc.gnu.org/viewcvs/branches/gcc-4_1-branch/gcc/fold-const.c?r1=110549&r2=112698&pathrev=112698&diff_format=h - http://gcc.gnu.org/ml/gcc-bugs/2006-04
cc-4_1-branch/gcc/fold-const.c?r1=110549&r2=112698&pathrev=112698&diff_format=h - http://gcc.gnu.org/ml/gcc-bugs/2006-04/msg01298.html
CVE ID: CVE-2006-1903 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila allow remote attackers to inject arbitrary web script or HTML (1) via the referer parameter in sendMail, and via attributes of (2) the A element and certain other HTML elements in web pages edited with the editInBrowser module. NOTE: the msgReader$1 mode attack vector is already covered by CVE-2006-1769. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17565 - http://www.securityfocus.com/bid/17563 - http://w
gram Container: References: - http://www.securityfocus.com/bid/17565 - http://www.securityfocus.com/bid/17563 - http://www.securityfocus.com/archive/1/431058/100/0/threaded
CVE ID: CVE-2006-1904 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in AnimeGenesis Gallery allows remote attackers to inject arbitrary web script or HTML via the cat parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431135/100/0/threaded - http://www.vupen.com/english/advisories/2006/1395
CVE ID: CVE-2006-1905 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary code via format string specifiers in a long filename on an EXTINFO line in a playlist file. Additional Analyst Notes: - CVE Program Container: References: - http://www.gentoo.org/security/en/glsa/glsa-200604-15.xml - http://open-security.org/advisories/16 - http://securitytracker.com/id?1015959 - http://secunia.com/advisories/19854 - http://www.securityfocus.com/archive/1/431251/100/0/threaded - http://secuni
959 - http://secunia.com/advisories/19854 - http://www.securityfocus.com/archive/1/431251/100/0/threaded - http://secunia.com/advisories/19671 - http://www.vupen.com/english/advisories/2006/1432 - http://www.osvdb.org/24747 - http://www.securityfocus.com/bid/17579 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:085 - http://secunia.com/advisories/20066 - http://www.novell.com/linux/security/advisories/2006_05_05.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25851 - http://sourceforge.net/mailarchive/message.php?msg_id=15429845
CVE ID: CVE-2006-1906 State: PUBLISHED Published: 2006-04-20T10:00:00 Last Updated: 2024-08-07T17:27:29.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431308/100/0/threaded - http://www.securityfocus.com/bid/17591 - http://advisory.patriotichackers.com/index.php?itemid=3 - http://securityreason.com/securityalert/770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25910 - http://securityreason.com/sec
eason.com/securityalert/770 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25910 - http://securityreason.com/securityalert/735
CVE ID: CVE-2006-1907 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the event_id parameter to (1) addevent.php or (2) del.php or (3) event_desc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24721 - http://secunia.com/advisories/19680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25886 - http://
b.org/24721 - http://secunia.com/advisories/19680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25886 - http://www.osvdb.org/24720 - http://www.vupen.com/english/advisories/2006/1384
CVE ID: CVE-2006-1908 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the event_desc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19680 - http://www.osvdb.org/24719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25885 - http://www.vupen.com/english/advisories/2006/1384
CVE ID: CVE-2006-1909 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dot dot slash) in the file parameter, which causes a regular expression to collapse the sequences into standard "../" sequences. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19665 - http://myimei.com/security/2006-04-14/copperminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html - http://www.securityfocus.com/archiv
rminephotogallery144-plugininclusionsystemindexphp-remotefileinclusion-attack.html - http://www.securityfocus.com/archive/1/431118/30/0/threaded - http://www.vupen.com/english/advisories/2006/1392 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25866 - http://www.securityfocus.com/archive/1/431062 - http://www.securityfocus.com/bid/17570
CVE ID: CVE-2006-1910 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: config.php in S9Y Serendipity 1.0 beta 2 allows remote attackers to inject arbitrary PHP code by editing values that are stored in config.php and later executed. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17566 - http://archives.neohapsis.com/archives/bugtraq/2006-04/0282.html
CVE ID: CVE-2006-1911 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.1 allows remote attackers to inject arbitrary web script or HTML via the attachment content disposition in an HTML attachment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25864 - http://secunia.com/advisories/19668 - http://www.vupen.com/english/advisories/2006/1381 - http://community.mybboard.net/showthread.php?tid=8232
CVE ID: CVE-2006-1912 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, which allows remote attackers to initialize arbitrary variables that are processed by an @extract command, which could then be leveraged to conduct cross-site scripting (XSS) or SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25865 - http://www.osvdb.org/24710 - http://secunia.com/advisories/19668 - http://www.vupen.com/e
ud.com/vulnerabilities/25865 - http://www.osvdb.org/24710 - http://secunia.com/advisories/19668 - http://www.vupen.com/english/advisories/2006/1381 - http://community.mybboard.net/showthread.php?tid=8232 - http://www.securityfocus.com/archive/1/431061/30/5580/threaded - http://www.osvdb.org/24711 - http://myimei.com/security/2006-04-14/mybb110globalphpparameterextracting.html
CVE ID: CVE-2006-1913 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://kiki91.altervista.org/exploit/jax.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/26448 - http://secunia.com/advisories/20110 - http://www.osvdb.org/24991 - http://secunia.com/advisories/16337 - http://secunia.com/advisories/19843 - http://lostmon.blogspot.com/20
b.org/24991 - http://secunia.com/advisories/16337 - http://secunia.com/advisories/19843 - http://lostmon.blogspot.com/2005/08/jax-php-scripts-multiple.html - http://www.vupen.com/english/advisories/2006/1800 - http://www.securityfocus.com/bid/17560
CVE ID: CVE-2006-1914 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: DbbS 2.0-alpha and earlier allows remote attackers to obtain sensitive information via an invalid (1) fcategoryid parameter to topics.php or (2) unavariabile, (3) GLOBALS, or (4) _SERVER[] parameters to script.php. NOTE: this information leak might be resultant from a global variable overwrite issue. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25922 - http://www.securityfocus.com/archive/1/431117 - http://securityreason.com/securityalert/771
CVE ID: CVE-2006-1915 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topics.php in DbbS 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the fcategoryid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/661 - http://www.securityfocus.com/archive/1/431117 - http://securityreason.com/securityalert/771
CVE ID: CVE-2006-1916 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ulocation or (2) uhobbies parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17559 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25923 - http://www.securityfocus.com/archive/1/431117 - http://securityreason.com/securityalert/771
CVE ID: CVE-2006-1917 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbitrary SQL commands via the userID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19678 - http://www.securityfocus.com/bid/17558 - http://www.vupen.com/english/advisories/2006/1405 - https://www.exploit-db.com/exploits/1683 - http://downloads.securityfocus.com/vulnerabilities/exploits/Blackorpheus_poc - https://exchange.xforce.ibmcloud.com/vulnerabilitie
nloads.securityfocus.com/vulnerabilities/exploits/Blackorpheus_poc - https://exchange.xforce.ibmcloud.com/vulnerabilities/25902
CVE ID: CVE-2006-1918 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.591Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web script or HTML via the menuid parameter to (1) index.php or (2) forum.php, or the (3) reporeid_print parameter to print.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431009/100/0/threaded - http://www.securityfocus.com/bid/17530 - http://securitytracker.com/id?1015939
CVE ID: CVE-2006-1919 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1694 - http://secunia.com/advisories/19726 - http://www.vupen.com/english/advisories/2006/1417 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25937 - http://www.securityfocus.com/bid/17620 - http://www.osvdb.org/24743
CVE ID: CVE-2006-1920 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via the order parameter in the include files (1) user.inc.php, (2) customer.inc.php, and (3) project.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1416 - http://www.osvdb.org/24782 - https://exchange.xforce.ibmcloud.com/vulnerabi
www.vupen.com/english/advisories/2006/1416 - http://www.osvdb.org/24782 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25877 - http://www.osvdb.org/24781 - http://secunia.com/advisories/19685 - http://www.osvdb.org/24780 - http://www.securityfocus.com/bid/17599
CVE ID: CVE-2006-1921 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the host parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25941 - http://www.attrition.org/pipermail/vim/2006-June/000839.html - http://www.securityfocus.com/bid/17601 - https://www.exploit-db.com/exploits/1695 - http://secunia.com/advisories/19694 - http://www.vupen.com/english/advisories/2006/1420
CVE ID: CVE-2006-1922 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP code via a URL in the inc_dir parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24751 - http://pridels0.blogspot.com/2006/04/totalcalendar-remote-code-execution.html - http://sweetphp.com/files/downloads/patches/TotalCalendar/Security_Patch.zip - http://www.securityfocus.com/bid/17618 - http://secunia.com/advisories/19730 - http://www.vupen.com
Security_Patch.zip - http://www.securityfocus.com/bid/17618 - http://secunia.com/advisories/19730 - http://www.vupen.com/english/advisories/2006/1418 - http://www.osvdb.org/24748
CVE ID: CVE-2006-1923 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary web script or HTML via (1) RSS/RSS.php and (2) possibly other vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24816 - http://www.securityfocus.com/bid/17619 - http://www.vupen.com/english/advisories/2006/1424 - http://attrition.org/pipermail/vim/2006-April/000709.html - http://secunia.com/advisories/19719 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26269
CVE ID: CVE-2006-1924 State: PUBLISHED Published: 2006-04-20T18:00:00 Last Updated: 2024-08-07T17:27:29.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL commands via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26268 - http://www.osvdb.org/24817 - http://www.securityfocus.com/bid/17619 - http://www.vupen.com/english/advisories/2006/1424 - http://attrition.org/pipermail/vim/2006-April/000709.html - http://secunia.com/advisories/19719