Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6020 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in announce.php in Blog Torrent Preview 0.92 allows remote attackers to inject arbitrary web script or HTML via the left parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21125 - http://www.securityfocus.com/archive/1/451856/100/0/threaded - http://securityreason.com/securityalert/1895 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30350
CVE ID: CVE-2006-6021 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.330Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login component in BestWebApp Dating Site allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1898 - http://www.securityfocus.com/archive/1/488647/100/100/threaded - http://secunia.com/advisories/23017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30394 - http://www.securityfocus.com/bid/21158 - http://www.securityfocus.com/arc
ge.xforce.ibmcloud.com/vulnerabilities/30394 - http://www.securityfocus.com/bid/21158 - http://www.securityfocus.com/archive/1/451963/100/0/threaded
CVE ID: CVE-2006-6022 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login_form.asp in BestWebApp Dating Site allows remote attackers to inject arbitrary web script or HTML via the msg parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1898 - http://secunia.com/advisories/23017 - http://www.securityfocus.com/bid/21158 - http://www.securityfocus.com/archive/1/451963/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30396
CVE ID: CVE-2006-6023 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter. NOTE: this issue is disputed by CVE since $descriptorFileList is used in a function definition within phoo.base.php Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30336 - http://www.attrition.org/pipermail/vim/2006-November/001137.html - http://www.securityfocus.com/archive/1/4
ties/30336 - http://www.attrition.org/pipermail/vim/2006-November/001137.html - http://www.securityfocus.com/archive/1/451818/100/0/threaded - http://securityreason.com/securityalert/1893
CVE ID: CVE-2006-6024 State: PUBLISHED Published: 2006-11-21T23:00:00.000Z Last Updated: 2025-04-03T15:54:05.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the (1) "Eudora WorldMail stack overflow" and (2) "Eudora WorldMail heap overflow" modules in VulnDisco Pack. NOTE: Some of these details are obtained from third party information. As of 20061118, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. A
he VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/21095 - http://web.archive.org/web/20060502082657/http://www.gleg.net/vulndisco_pack_standard.shtml - http://secunia.com/advisories/22832
CVE ID: CVE-2006-6025 State: PUBLISHED Published: 2006-11-21T23:00:00.000Z Last Updated: 2025-04-03T15:51:45.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: QUALCOMM Eudora WorldMail 4.0 allows remote attackers to cause a denial of service, as demonstrated by a certain module in VulnDisco Pack. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. As of 20061118, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichmen
signed a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml - http://secunia.com/advisories/22836 - http://www.securityfocus.com/bid/21099
CVE ID: CVE-2006-6026 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.381Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Real Networks Helix Server and Helix Mobile Server before 11.1.3, and Helix DNA Server 11.0 and 11.1, allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/helix.txt - https://www.exploit-db.com/exploits/3531 - http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html - http://www.se
oit-db.com/exploits/3531 - http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html - http://www.securityfocus.com/archive/1/463333/100/0/threaded - http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml - http://docs.real.com/docs/security/SecurityUpdate032107Server.pdf - http://www.securityfocus.com/bid/23068 - http://www.securityfocus.com/bid/21141 - http://secunia.com/advisories/22944 - http://www.vupen.com/english/advisories/2007/1056 - http://www.attrition.org/pipermail/vim/2007-March/001459.html - http://www.attrition.org/pipermail/vim/2007-March/001468.html
CVE ID: CVE-2006-6027 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: Adobe Reader (Adobe Acrobat Reader) 7.0 through 7.0.8 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument string to the LoadFile method in an AcroPDF ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - http://research.eeye.com/html/alerts/zeroday/20061128.html - http://www.vupen.com/english/advisories/2006/4751 - http://secunia.com/advisories/23138 - http://www.kb.cert.org/vuls/id/198908 - http://downloads.securityfocus.com/vulnerabilities/e
unia.com/advisories/23138 - http://www.kb.cert.org/vuls/id/198908 - http://downloads.securityfocus.com/vulnerabilities/exploits/21155-AcroPDF_DoS.html - http://www.adobe.com/support/security/advisories/apsa06-02.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30574 - http://securitytracker.com/id?1017297 - http://www.securityfocus.com/archive/1/453579/100/0/threaded - http://www.securityfocus.com/bid/21155
CVE ID: CVE-2006-6028 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in textview.php in Anton Vlasov DoSePa 1.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) sequence or absolute file path in the file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30349 - https://www.exploit-db.com/exploits/2795 - http://www.vupen.com/english/advisories/2006/4576 - http://www.securityfocus.com/bid/21149 - http://secunia.com/advisories/22960 - http://www.craigheffner.com/secu
6/4576 - http://www.securityfocus.com/bid/21149 - http://secunia.com/advisories/22960 - http://www.craigheffner.com/security/exploits/dosepa.txt
CVE ID: CVE-2006-6029 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.311Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vir_Login.asp in Property Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the UserName field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/474321/100/0/threaded - http://www.securityfocus.com/bid/24992 - http://securityreason.com/securityalert/1894 - http://www.securityfocus.com/archive/1/451364/100/100/threaded
CVE ID: CVE-2006-6030 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.345Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in E-Calendar Pro 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) passwd (Password) fields in (a) admin/default.asp; or the (3) Event Title, (4) Location, or (5) Description field when making a search engine query in (b) search.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30305 - http://secunia.com/ad
CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30305 - http://secunia.com/advisories/22897 - http://www.securityfocus.com/archive/1/451729/100/0/threaded - http://securityreason.com/securityalert/1897 - http://www.vupen.com/english/advisories/2006/4534
CVE ID: CVE-2006-6031 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Greater Cincinnati Internet Solutions (GCIS) ASPCart allow remote attackers to execute arbitrary SQL commands via (1) the prodid parameter in (a) prodetails.asp; (2) the page parameter in (b) display.asp; the (3) custid, (4) item, (5) price, (6) custom, (7) department, (8) start, (9) quantity, (10) submit, (11) custom1, (12) custom2, or (13) custom3 parameters in (c) addcart.asp; or the (14) customerid parameter in (d) payment.asp. Additional Analyst Notes: - CVE Program Container: Ref
addcart.asp; or the (14) customerid parameter in (d) payment.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21152 - http://secunia.com/advisories/22946 - http://www.securityfocus.com/archive/1/451858/100/0/threaded - http://securityreason.com/securityalert/1899 - http://www.vupen.com/english/advisories/2006/4580
CVE ID: CVE-2006-6032 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter in add_block.php or (2) the entry parameter in index.php, different vectors than CVE-2005-1135. NOTE: this has been reported to affect 0.8, but as of 20061121, the most recent version is only 0.4.9. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30362 - http://securityre
s: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30362 - http://securityreason.com/securityalert/1896 - http://www.securityfocus.com/archive/1/451855/100/0/threaded
CVE ID: CVE-2006-6033 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in Simple PHP Blog (SPHPBlog), probably 0.4.8, allow remote attackers to read arbitrary files and possibly include arbitrary PHP code via a .. (dot dot) sequence in the blog_theme parameter in (1) index.php, (2) add_cgi.php, (3) add_link.php, (4) login.php, (5) template.php, or (6) contact.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30383 - http://securityreason.com/securityalert/1892 - http://www.securit
//exchange.xforce.ibmcloud.com/vulnerabilities/30383 - http://securityreason.com/securityalert/1892 - http://www.securityfocus.com/archive/1/451954/100/0/threaded
CVE ID: CVE-2006-6034 State: PUBLISHED Published: 2006-11-21T23:00:00 Last Updated: 2024-08-07T20:12:31.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SitesOutlet E-commerce Kit-1 PayPal Edition allow remote attackers to execute arbitrary SQL commands via the (1) keyword or (2) cid parameter in (a) catalogue.asp, or the (3) pid parameter in (b) viewDetail.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21056 - http://securityreason.com/securityalert/1900 - http://secunia.com/advisories/22975 - http://www.vupen.com/english/advisories/2006/4571 - http://www.securityfocus.com/archiv
//secunia.com/advisories/22975 - http://www.vupen.com/english/advisories/2006/4571 - http://www.securityfocus.com/archive/1/451771/100/0/threaded
CVE ID: CVE-2006-6035 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in list.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the FADDR parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017250 - http://www.securityfocus.com/bid/21173 - http://secunia.com/advisories/23025 - http://www.vupen.com/english/advisories/2006/4598 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30385 - http://marc.info/?l=bugtraq&m=116387287216907&w=2
CVE ID: CVE-2006-6036 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in OpenHuman before 1.0 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4574 - http://www.osvdb.org/30337 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30358 - http://freshmeat.net/projects/openhuman/?branch_id=67092&release_id=240896
CVE ID: CVE-2006-6037 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.451Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dan Jensen Travelsized CMS 0.4.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) page, (2) page_id, or (3) language parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4609 - http://secunia.com/advisories/23021 - http://marc.info/?l=bugtraq&m=116387632908248&w=2 - http://www.securityfocus.com/archive/1/452007/100/200/threaded - http://www.securityfocus.com/bi
m=116387632908248&w=2 - http://www.securityfocus.com/archive/1/452007/100/200/threaded - http://www.securityfocus.com/bid/21169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30392 - http://securitytracker.com/id?1017251 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls35
CVE ID: CVE-2006-6038 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in editpoll.php in Powie's PHP Forum (pForum) 1.29a and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21144 - https://www.exploit-db.com/exploits/2797 - http://www.vupen.com/english/advisories/2006/4607 - http://secunia.com/advisories/22964 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30359
CVE ID: CVE-2006-6039 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in matchdetail.php in Powie's PHP MatchMaker 4.05 and earlier allows remote attackers to execute arbitrary SQL commands via the edit parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30360 - http://www.vupen.com/english/advisories/2006/4611 - http://secunia.com/advisories/22966 - http://www.securityfocus.com/bid/21145 - https://www.exploit-db.com/exploits/2798
CVE ID: CVE-2006-6040 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in admincp/index.php in Jelsoft vBulletin 3.6.x allow remote attackers to inject arbitrary web script or HTML via (1) the prefs parameter in a buildnavprefs action or (2) the navprefs parameter in a savenavprefs action. Additional Analyst Notes: - CVE Program Container: References: - http://www.vbulletin.com/forum/showthread.php?postid=1256434 - http://secunia.com/advisories/23011 - http://www.securityfocus.com/bid/21157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
ia.com/advisories/23011 - http://www.securityfocus.com/bid/21157 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30408 - http://www.vupen.com/english/advisories/2006/4599 - http://securityreason.com/securityalert/1903 - http://www.securityfocus.com/archive/1/451959/100/0/threaded
CVE ID: CVE-2006-6041 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the g_include parameter to (1) index.php, (2) module/forum/forum.php, (3) unspecified files under module/, and (4) unspecified files under administration/module/. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30199 - http://secunia.com/advisories/22963 -
tainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30199 - http://secunia.com/advisories/22963 - https://www.exploit-db.com/exploits/2752 - http://www.vupen.com/english/advisories/2006/4582 - http://securitytracker.com/id?1017249 - http://www.securityfocus.com/archive/1/451860/100/200/threaded - http://www.securityfocus.com/archive/1/454269/100/0/threaded
CVE ID: CVE-2006-6042 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the editor_insert_bottom parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2811 - http://www.securityfocus.com/archive/1/470794/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30401 - http://www.securityfocus.com/bid/21178 - http://secunia.com/advisorie
change.xforce.ibmcloud.com/vulnerabilities/30401 - http://www.securityfocus.com/bid/21178 - http://secunia.com/advisories/23001 - http://www.vupen.com/english/advisories/2006/4596
CVE ID: CVE-2006-6043 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP file inclusion vulnerability in loginform-inc.php in Oliver (formerly Webshare) 1.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the conf[motdfile] parameter, which is accessed by the file_exists function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4608 - http://secunia.com/advisories/23031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/304
sh/advisories/2006/4608 - http://secunia.com/advisories/23031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30415 - http://www.securityfocus.com/bid/21202/info
CVE ID: CVE-2006-6044 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in gallery_top.inc.php in PHPQuickGallery 1.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the textFile parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30391 - http://securitytracker.com/id?1017256 - http://secunia.com/advisories/22989 - http://www.securityfocus.com/archive/1/452104/100/100/threaded - http://www.securityfocus.com/bid/21181 - https://www.exploit-db.com/exploi
focus.com/archive/1/452104/100/100/threaded - http://www.securityfocus.com/bid/21181 - https://www.exploit-db.com/exploits/2814 - http://www.vupen.com/english/advisories/2006/4597
CVE ID: CVE-2006-6045 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.327Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote attackers to execute arbitrary PHP code via a URL in the path[skin] parameter to (1) adminfoot.php, (2) adminhead.php, or (3) adminlogin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/451857/100/0/threaded - http://www.vupen.com/english/advisories/2006/4581 - http://secunia.com/advisories/22947 - http://securityreason.com/securityalert/1902 - http://securitytracker.com/id?101
- http://secunia.com/advisories/22947 - http://securityreason.com/securityalert/1902 - http://securitytracker.com/id?1017247 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30367
CVE ID: CVE-2006-6046 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in eggblog 3.1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) edit parameter to (a) admin/articles.php or (b) admin/comments.php, or the (2) add parameter to admin/users.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017246 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30351 - http://marc.info/?l=bugtraq&m=116373125308955&w=2 - http://www.securityfocus.com/bid/21134
CVE ID: CVE-2006-6047 State: PUBLISHED Published: 2006-11-22T00:00:00 Last Updated: 2024-08-07T20:12:31.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in manager/index.php in Etomite 0.6.1.2 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the f parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22885 - https://www.exploit-db.com/exploits/2790 - http://www.securityfocus.com/archive/1/451930/100/0/threaded - http: