Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
22545 - http://securitytracker.com/id?1017522 - http://secunia.com/advisories/22948 - http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html - http://secunia.com/advisories/23841 - http://www.vupen.com/english/advisories/2006/4205 - http://www.vupen.com/english/advisories/2007/2783 - http://secunia.com/advisories/22259 - http://secunia.com/advisories/22036 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-200708-1 - http://www.vupen.com/english/advisories/2006/4586 - http://secunia.com/advisories/21927 - http://www.novell.com/linux/security/advisories/2006_55_ssl.html - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.h
w.novell.com/linux/security/advisories/2006_55_ssl.html - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - http://www.vupen.com/english/advisories/2006/5146 - http://secunia.com/advisories/21870 - http://www.vupen.com/english/advisories/2006/4216 - http://www.vupen.com/english/advisories/2006/3793 - http://www.securityfocus.com/bid/28276 - http://secunia.com/advisories/21709 - http://www.kb.cert.org/vuls/id/845620 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.605306 - http://security.gentoo.org/glsa/glsa-200609-18.xml - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://sunsolve.sun.com/search/documen
9-18.xml - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102686-1 - http://secunia.com/advisories/24950 - http://www.securityfocus.com/bid/19849
CVE ID: CVE-2006-4340 State: PUBLISHED Published: 2006-09-15T18:00:00 Last Updated: 2024-08-07T19:06:07.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly handle extra data in a signature, which allows remote attackers to forge signatures for SSL/TLS and email certificates, a similar vulnerability to CVE-2006-4339. NOTE: on 20061107, Mozilla released an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are
sed an advisory stating that these versions were not completely patched by MFSA2006-60. The newer fixes for 1.5.0.7 are covered by CVE-2006-5462. Additional Analyst Notes: - CVE Program Container: References: - http://www.matasano.com/log/469/many-rsa-signatures-may-be-forgeable-in-openssl-and-elsewhere/ - http://securitytracker.com/id?1016858 - http://secunia.com/advisories/22992 - http://www.vupen.com/english/advisories/2006/3748 - http://securitytracker.com/id?1016859 - http://www.redhat.com/support/errata/RHSA-2006-0676.html - http://secunia.com/advisories/23883 - http://www.vupen.com/english/advisories/2006/3899 - http://secunia.com/advisories/22044 - http://secunia.com/advisories/22055
//www.vupen.com/english/advisories/2006/3899 - http://secunia.com/advisories/22044 - http://secunia.com/advisories/22055 - http://secunia.com/advisories/22195 - http://www.ubuntu.com/usn/usn-361-1 - http://www.ubuntu.com/usn/usn-352-1 - http://secunia.com/advisories/22446 - http://secunia.com/advisories/21950 - http://www.ubuntu.com/usn/usn-351-1 - http://secunia.com/advisories/22025 - http://secunia.com/advisories/22056 - http://www.imc.org/ietf-openpgp/mail-archive/msg14307.html - http://www.us-cert.gov/cas/techalerts/TA06-312A.html - http://secunia.com/advisories/22247 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 - http://www.us.debian.org/security/2006/dsa-1191 - htt
http://www.mandriva.com/security/advisories?name=MDKSA-2006:168 - http://www.us.debian.org/security/2006/dsa-1191 - http://www.vupen.com/english/advisories/2007/0293 - http://secunia.com/advisories/22210 - http://www.debian.org/security/2006/dsa-1210 - http://secunia.com/advisories/24711 - http://www.vupen.com/english/advisories/2006/3622 - http://www.mozilla.org/security/announce/2006/mfsa2006-60.html - http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm - http://securitytracker.com/id?1016860 - http://secunia.com/advisories/22849 - http://www.vupen.com/english/advisories/2008/0083 - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://secunia.com/advi
dvisories/2008/0083 - ftp://patches.sgi.com/support/free/security/advisories/20060901-01-P.asc - http://secunia.com/advisories/21939 - http://www.vupen.com/english/advisories/2006/3617 - http://www.gentoo.org/security/en/glsa/glsa-200610-06.xml - http://secunia.com/advisories/21915 - http://www.vupen.com/english/advisories/2007/1198 - http://www.redhat.com/support/errata/RHSA-2006-0677.html - http://www.debian.org/security/2006/dsa-1192 - http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm - http://security.gentoo.org/glsa/glsa-200609-19.xml - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 - http://secunia.com/advisories/22274 - http://www.redhat.com/support/errat
om/service/cki/docDisplay.do?docId=c00771742 - http://secunia.com/advisories/22274 - http://www.redhat.com/support/errata/RHSA-2006-0675.html - http://secunia.com/advisories/21940 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30098 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1 - http://secunia.com/advisories/22001 - http://www.securityfocus.com/archive/1/446140/100/0/threaded - http://secunia.com/advisories/21903 - http://www.ubuntu.com/usn/usn-350-1 - http://secunia.com/advisories/21906 - http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 - http://secunia.com/advisories/22342 - http://security.gentoo.org/glsa/glsa-200610-01.xml - http://secunia.
d=c00771742 - http://secunia.com/advisories/22342 - http://security.gentoo.org/glsa/glsa-200610-01.xml - http://secunia.com/advisories/22074 - http://secunia.com/advisories/22226 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/22088 - http://secunia.com/advisories/21949 - http://www.novell.com/linux/security/advisories/2006_54_mozilla.html - https://issues.rpath.com/browse/RPL-640 - http://www.mozilla.org/security/announce/2006/mfsa2006-66.html - http://secunia.com/advisories/22036 - http://www.novell.com/linux/security/advisories/2006_55_ssl.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007 - http://www.ubuntu.com/usn/u
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11007 - http://www.ubuntu.com/usn/usn-354-1 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102781-1 - http://secunia.com/advisories/22422 - http://secunia.com/advisories/22299 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 - http://secunia.com/advisories/21916
CVE ID: CVE-2006-4341 State: REJECTED Published: 2006-09-11T19:00:00 Last Updated: 2006-10-05T09:00:00 Description: No description available.
CVE ID: CVE-2006-4342 State: PUBLISHED Published: 2006-10-17T17:00:00 Last Updated: 2024-08-07T19:06:07.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in Red Hat Enterprise Linux 3, when running on SMP systems, allows local users to cause a denial of service (deadlock) by running the shmat function on an shm at the same time that shmctl is removing that shm (IPC_RMID), which prevents a spinlock from being unlocked. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/245984 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=2
repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9649 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=205618 - http://secunia.com/advisories/23064 - http://support.avaya.com/elmodocs2/security/ASA-2006-254.htm - http://secunia.com/advisories/22497 - http://www.redhat.com/support/errata/RHSA-2006-0710.html
CVE ID: CVE-2006-4343 State: PUBLISHED Published: 2006-09-28T18:00:00 Last Updated: 2024-08-07T19:06:07.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows remote servers to cause a denial of service (client crash) via unknown vectors that trigger a null pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:172 - http://secunia.com/advisories/22212 - http://www.vupen.com/english/advisories/2006/4750 - https://www.exploit-db.com/exploits/4773 - http://www.v
ries/22212 - http://www.vupen.com/english/advisories/2006/4750 - https://www.exploit-db.com/exploits/4773 - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://secunia.com/advisories/23915 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://securitytracker.com/id?1016943 - http://secunia.com/advisories/23038 - http://www.trustix.org/errata/2006/0054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29240 - http://www.debian.org/security/2006/dsa-1195 - http://secunia.com/advisories/23309 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://www.ubuntu.com/
.com/support/vi3/doc/esx-3069097-patch.html - http://www.vupen.com/english/advisories/2006/4401 - http://www.ubuntu.com/usn/usn-353-1 - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - http://secunia.com/advisories/22116 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://support.avaya.com/elmodocs2/security/ASA-2006-260.htm - http://www.gentoo.org/security/en/glsa/glsa-200612-11.xml - http://secunia.com/advisories/22166 - http://www.redhat.com/support/errata/RHSA-2006-0695.html - http://secunia.com/advisories/23340 - http://secunia.com/advisories/22385 - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.
http://secunia.com/advisories/22385 - http://www.novell.com/linux/security/advisories/2006_24_sr.html - http://secunia.com/advisories/22758 - http://secunia.com/advisories/22487 - http://www.novell.com/linux/security/advisories/2006_58_openssl.html - http://secunia.com/advisories/22772 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://security.freebsd.org/advisories/FreeBSD-SA-06:23.openssl.asc - http://secunia.com/advisories/22165 - http://docs.info.apple.com/article.html?artnum=304829 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-September/049715.html - http://secunia.com/advisories/23794 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secuni
er/049715.html - http://secunia.com/advisories/23794 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://secunia.com/advisories/22220 - http://secunia.com/advisories/23680 - http://openvpn.net/changelog.html - http://www.vmware.com/support/server/doc/releasenotes_server.html - http://secunia.com/advisories/25889 - http://www.vupen.com/english/advisories/2006/4036 - http://openbsd.org/errata.html#openssl2 - http://www.vmware.com/support/ace2/doc/releasenotes_ace2.html - http://secunia.com/advisories/30124 - http://www.ingate.com/relnote-452.php - http://secunia.com/advisories/22626 - http://www.osvdb.org/29263 - http://www.securityfocus.com/bid/22083 - http://www.mandriva.com/securit
advisories/22626 - http://www.osvdb.org/29263 - http://www.securityfocus.com/bid/22083 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:178 - http://www.vupen.com/english/advisories/2006/3869 - http://secunia.com/advisories/22544 - http://secunia.com/advisories/22298 - http://www.vmware.com/support/player2/doc/releasenotes_player2.html - http://secunia.com/advisories/22130 - http://secunia.com/advisories/25420 - http://secunia.com/advisories/31492 - http://www.vupen.com/english/advisories/2007/1973 - http://secunia.com/advisories/22284 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356 - http://www.redhat.com/support/errata/RHSA-2008-06
.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4356 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://security.gentoo.org/glsa/glsa-200610-11.xml - http://issues.rpath.com/browse/RPL-613 - http://secunia.com/advisories/26329 - http://secunia.com/advisories/22260 - http://www.xerox.com/downloads/usa/en/c/cert_ESSNetwork_XRX07001_v1.pdf - http://www.vupen.com/english/advisories/2007/0343 - http://www.vupen.com/english/advisories/2006/3860 - http://secunia.com/advisories/23280 - http://www.securityfocus.com/archive/1/447318/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207 - https://www2.itrc.hp.com/s
ttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10207 - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.vmware.com/support/player/doc/releasenotes_player.html - http://support.avaya.com/elmodocs2/security/ASA-2006-220.htm - http://www.vupen.com/english/advisories/2006/4264 - http://www.vmware.com/support/ws6/doc/releasenotes_ws6.html - http://secunia.com/advisories/22193 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html - http://secunia.com/advisories/23155 - http://secunia.com/advisories/22799 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - http://www.v
/22799 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.676946 - http://www.vupen.com/english/advisories/2006/4417 - http://www.kb.cert.org/vuls/id/386964 - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00849540 - http://marc.info/?l=bugtraq&m=130497311408250&w=2 - http://www.serv-u.com/releasenotes/ - http://www.vupen.com/english/advisories/2006/4443 - http://www.oracle.com/technetwork/topics/security/cpujan2007-101493.html - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - http://secunia.com/advisories/22094 - http://secunia.com/advisories/22186 - http://www.openssl.org/news/secadv_20060928.txt - http://kolab.org/security/
094 - http://secunia.com/advisories/22186 - http://www.openssl.org/news/secadv_20060928.txt - http://kolab.org/security/kolab-vendor-notice-11.txt - http://secunia.com/advisories/22500 - http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html - http://www.us-cert.gov/cas/techalerts/TA06-333A.html - http://www.securityfocus.com/archive/1/489739/100/0/threaded - http://secunia.com/advisories/22216 - http://www.vupen.com/english/advisories/2006/3820 - http://lists.vmware.com/pipermail/security-announce/2008/000008.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html - http://www.vmware.
ay.do?docId=c00805100 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.021-openssl.html - http://www.vmware.com/support/ws55/doc/releasenotes_ws55.html - http://www.vupen.com/english/advisories/2008/0905/references - http://www.vupen.com/english/advisories/2007/1401 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102711-1 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-007.txt.asc - http://www.vmware.com/security/advisories/VMSA-2008-0005.html - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01118771 - http://www.securityfocus.com/archive/1/456546/100/200/threaded - http://www.securityfocus.com/archive/1/447393/100/0/threade
://www.securityfocus.com/archive/1/456546/100/200/threaded - http://www.securityfocus.com/archive/1/447393/100/0/threaded - http://www.vupen.com/english/advisories/2006/3936 - http://secunia.com/advisories/22240 - http://secunia.com/advisories/22330 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - https://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00967144 - http://www.debian.org/security/2006/dsa-1185 - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://secunia.com/advisories/22207 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:177 - http://securitytracker.com/id?1017522 - http://www.cisco.com/en/US/products/hw/contnetw/ps
isories?name=MDKSA-2006:177 - http://securitytracker.com/id?1017522 - http://www.cisco.com/en/US/products/hw/contnetw/ps4162/tsd_products_security_response09186a008077af1b.html - http://www.vupen.com/english/advisories/2006/3902 - http://www.vupen.com/english/advisories/2007/2783 - http://secunia.com/advisories/22259 - http://secunia.com/advisories/22460 - http://secunia.com/advisories/22791 - http://secunia.com/advisories/22172 - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html - http://itrc.hp.com/service/cki/docDisplay.do?docId=c00805100 - http://www.securityfocus.com/bid/28276 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 - http://www.securityfocus.
urityfocus.com/bid/28276 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102668-1 - http://www.securityfocus.com/bid/20246 - http://www.cisco.com/warp/public/707/cisco-sr-20061108-openssl.shtml - http://secunia.com/advisories/24950 - http://sunsolve.sun.com/search/document.do?assetkey=1-66-201531-1
CVE ID: CVE-2006-4344 State: PUBLISHED Published: 2006-08-24T20:00:00 Last Updated: 2024-08-07T19:06:07.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in CGI-Rescue Mail F/W System (formd) before 8.3 allows remote attackers to spoof e-mails and inject e-mail headers via unspecified vectors in (1) mail.cgi and (2) query.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19676 - http://www.osvdb.org/28131 - http://secunia.com/advisories/21543 - http://jvn.jp/jp/JVN%2311048526/index.html - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 - http://www.vupen.com/english/advisories/2
ex.html - http://www.rescue.ne.jp/whatsnew/blog.cgi/permalink/20060822210549 - http://www.vupen.com/english/advisories/2006/3359
CVE ID: CVE-2006-4345 State: PUBLISHED Published: 2006-08-24T20:00:00 Last Updated: 2024-08-07T19:06:07.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP) response. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3372 - http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml - http://labs.musecurity.com/advisories/MU-200608-01.txt - http://secunia.com/advisories/22651 - http://www.securityfocus.com/bid/19683 - http://securitytracker.com/id?10
01.txt - http://secunia.com/advisories/22651 - http://www.securityfocus.com/bid/19683 - http://securitytracker.com/id?1016742 - http://www.securityfocus.com/archive/1/444322/100/0/threaded - http://ftp.digium.com/pub/asterisk/ChangeLog-1.2.11 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28542 - http://www.sineapps.com/news.php?rssid=1448 - http://secunia.com/advisories/21600
CVE ID: CVE-2006-4346 State: PUBLISHED Published: 2006-08-24T20:00:00 Last Updated: 2024-08-07T19:06:07.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string specifiers or (2) overwrite files via directory traversals involving unspecified vectors, as demonstrated by the CALLERIDNAME variable. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28544 - http://www.vupen.com/english/advisories/2006/3372 - http://www.gentoo.org/security/en/glsa/
.com/vulnerabilities/28544 - http://www.vupen.com/english/advisories/2006/3372 - http://www.gentoo.org/security/en/glsa/glsa-200610-15.xml - https://exchange.xforce.ibmcloud.com/vulnerabilities/28564 - http://labs.musecurity.com/advisories/MU-200608-01.txt - http://secunia.com/advisories/22651 - http://www.securityfocus.com/bid/19683 - http://securitytracker.com/id?1016742 - http://www.securityfocus.com/archive/1/444322/100/0/threaded - http://www.sineapps.com/news.php?rssid=1448
CVE ID: CVE-2006-4347 State: PUBLISHED Published: 2006-08-24T21:00:00 Last Updated: 2024-08-07T19:06:07.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in user logon authentication request handling in Cool_CoolD.exe in Cool Manager 5.0 (5,60,90,28) and Cool Messenger Office/School Server 5.5 (5,65,12,13) allows remote attackers to execute arbitrary SQL commands via the username field. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0605.html - http://www.securityfocus.com/bid/19669 - http://secunia.com/advisories/21569 - http://www.osvdb.org/28117 - http://www.vupen.com/
w.securityfocus.com/bid/19669 - http://secunia.com/advisories/21569 - http://www.osvdb.org/28117 - http://www.vupen.com/english/advisories/2006/3362 - http://vuln.sg/coolmessenger55-en.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/28531
CVE ID: CVE-2006-4348 State: PUBLISHED Published: 2006-08-24T21:00:00 Last Updated: 2024-08-07T19:06:07.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in config.kochsuite.php in the Kochsuite (com_kochsuite) 0.9.4 component for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2215 - http://www.osvdb.org/28098 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28457 - http://www.securityfocus.com/bid/19590 - http://www.securityfocus.com/archive/1/443703/100/0/
om/vulnerabilities/28457 - http://www.securityfocus.com/bid/19590 - http://www.securityfocus.com/archive/1/443703/100/0/threaded - http://securityreason.com/securityalert/1447
CVE ID: CVE-2006-4349 State: PUBLISHED Published: 2006-08-24T21:00:00 Last Updated: 2024-08-07T19:06:07.537Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in ToendaCMS 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tcms_administer_site parameter to an unspecified script, probably index.php. NOTE: this issue has been disputed by a third party, who states that $tcms_administer_site is initialized to a constant value within index.php Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28491 - htt
References: - http://www.securityfocus.com/bid/19626 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28491 - http://www.osvdb.org/29358 - http://www.securityfocus.com/archive/1/443918/100/0/threaded - http://www.securityfocus.com/archive/1/444236/100/0/threaded
CVE ID: CVE-2006-4350 State: PUBLISHED Published: 2006-08-24T21:00:00 Last Updated: 2024-08-07T19:06:07.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443631/100/0/threaded - http://securityreason.com/securityalert/1448 - http://securityreason.com/securityalert/1460
CVE ID: CVE-2006-4351 State: PUBLISHED Published: 2006-08-24T21:00:00 Last Updated: 2024-08-07T19:06:07.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in OneOrZero 1.6.4.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/443631/100/0/threaded - http://securityreason.com/securityalert/1448