Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5120 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.034Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) index.php and (2) process_login.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447255/100/0/threaded - http://www.armorize.com/advisory.php?Keyword=Armorize-ADV-2006-0002 - http://www.securityfocus.com/bid/20243 - http://securityreason.com/securityalert/1668 - https://exchange.xforce.
-0002 - http://www.securityfocus.com/bid/20243 - http://securityreason.com/securityalert/1668 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29241
CVE ID: CVE-2006-5121 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29271 - http://securityreason.com/securityalert/1669 - http://community.postnuke.com/index.php?name=News&file=article&sid=2783 - http://secunia.com/advisories/22197 - http://www.securityfocus.com/bid/20317 - http://www.securityfocus.c
cle&sid=2783 - http://secunia.com/advisories/22197 - http://www.securityfocus.com/bid/20317 - http://www.securityfocus.com/archive/1/447361/100/0/threaded - http://www.vupen.com/english/advisories/2006/3886
CVE ID: CVE-2006-5122 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.278Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1670 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29295 - http://secunia.com/advisories/22215 - http://www.securityfocus.com/archive/1/447397/100/0/threaded -
rabilities/29295 - http://secunia.com/advisories/22215 - http://www.securityfocus.com/archive/1/447397/100/0/threaded - http://www.vupen.com/english/advisories/2006/3888 - http://www.securityfocus.com/bid/20275
CVE ID: CVE-2006-5123 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib_path or (2) lang_path parameter in unspecified files, related to code changes intended to fix inclusion, a different vulnerability than CVE-2002-0451, CVE-2006-4204, and CVE-2006-4609. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22167 - http://www.osvdb.org/29290 - http://www.hardened-php.net/advisory
r: References: - http://secunia.com/advisories/22167 - http://www.osvdb.org/29290 - http://www.hardened-php.net/advisory_062006.129.html - http://www.securityfocus.com/bid/20268 - http://www.securityfocus.com/archive/1/447360/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29262 - http://www.vupen.com/english/advisories/2006/3845 - http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=259 - http://securityreason.com/securityalert/1672
CVE ID: CVE-2006-5124 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) target and (2) action parameters in window.php, and possibly the (3) target parameter in home.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29258 - http://www.vupen.com/english/advisories/2006/3846 - http://www.securityfocus.com/bid/20264 - https://www.exploit-db.com/exploits/2451 - http://secuni
advisories/2006/3846 - http://www.securityfocus.com/bid/20264 - https://www.exploit-db.com/exploits/2451 - http://secunia.com/advisories/22178 - http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html
CVE ID: CVE-2006-5125 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3846 - http://www.securityfocus.com/bid/20264 - https://www.exploit-db.com/exploits/2451 - http://secunia.com/advisories/22178 - https://exchange.
focus.com/bid/20264 - https://www.exploit-db.com/exploits/2451 - http://secunia.com/advisories/22178 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29259 - http://kernel-32.blogspot.com/2006/09/php-mywebmin-10-remote-file-include.html
CVE ID: CVE-2006-5126 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22209 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29264 - http://www.securityfocus.com/bid/20262 - https://www.exploit-db.com/exploits/2454
CVE ID: CVE-2006-5127 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.882Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bartels Schoene ConPresso before 4.0.5a allow remote attackers to inject arbitrary web script or HTML via (1) the nr parameter in detail.php, (2) the msg parameter in db_mysql.inc.php, and (3) the pos parameter in index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22145 - http://www.securityfocus.com/archive/1/447358/100/0/threaded - http://www.securityfocus.com/bid/20273 - http://www.majorsecurity.de/index_2.php?major
archive/1/447358/100/0/threaded - http://www.securityfocus.com/bid/20273 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls28 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29272 - http://securityreason.com/securityalert/1671 - http://download.compresso.de/compresso-4.0.5a.zip - http://www.vupen.com/english/advisories/2006/3868
CVE ID: CVE-2006-5128 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22145 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29275 - http://www.securityfocus.com/archive/1/447358/100/0/threaded - http://www.securityfocus.com/bid/20273 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls28 - http://securityreason.com/securityal
cus.com/bid/20273 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls28 - http://securityreason.com/securityalert/1671 - http://download.compresso.de/compresso-4.0.5a.zip - http://www.vupen.com/english/advisories/2006/3868
CVE ID: CVE-2006-5129 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) the message parameter, and possibly other parameters, in module/shout/jafshout.php (aka the shoutbox); and (2) the message body in a forum post in module/forum/topicwin.php, related to the name, email, title, date, ldate, and lname variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20225 - http://s
bles. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20225 - http://securityreason.com/securityalert/1674 - http://secunia.com/advisories/22143 - http://www.securityfocus.com/archive/1/447081/100/0/threaded
CVE ID: CVE-2006-5130 State: PUBLISHED Published: 2006-10-02T20:00:00Z Last Updated: 2024-09-16T16:38:22.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) url, (3) title, and (4) about parameters in a forum post. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22143
CVE ID: CVE-2006-5131 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by "<?php" and "?>", possibly due to a static code injection vulnerability involving admin/data_inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1674 - http://secunia.com/advisories/22143 - http://www.securityfocus.com/archive/1/447081/100/0/threaded
CVE ID: CVE-2006-5132 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, and (4) agenda2.php3, different vectors than CVE-2006-2009. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29151 - http://www.osvdb.org/29150 - http://www.osvdb.org/29149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26062 - http://osvdb
osvdb.org/29150 - http://www.osvdb.org/29149 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26062 - http://osvdb.org/ref/29/2914x-phpmyagenda.txt - http://www.securityfocus.com/archive/1/433995 - http://sourceforge.net/forum/forum.php?forum_id=569237 - http://www.osvdb.org/29148
CVE ID: CVE-2006-5133 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.600Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars." Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25721 - http://forums.guildftpd.com/viewtopic.php?t=452 - http://securityreason.com/securityalert/1675 - http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-05-03 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0139.html
CVE ID: CVE-2006-5134 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the "new monitor description" field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1670 - http://www.securityfocus.com/archive/1/447397/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29298 - http://www.securityfocus.com/bid/20275
CVE ID: CVE-2006-5135 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.699Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) open_box, (2) middle_box, and (3) close_box parameters in (a) sources/myaccount.php; the (4) navigation_end parameter in (b) navigation/search.php and (c) navigation/donation.php; and the (6) navigation_start and (7) navigation_middle parameters in navigation/donation.php, (d) navigation/latestnews.php, and (e) navigation/links.php; different vectors than CVE-2006-5092. Additional Analyst Not
d) navigation/latestnews.php, and (e) navigation/links.php; different vectors than CVE-2006-5092. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20238 - https://www.exploit-db.com/exploits/2442 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29218
CVE ID: CVE-2006-5136 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29274 - http://securityreason.com/securityalert/1676 - http://www.securityfocus.com/bid/20266 - http://www.securityfocus.com/archive/1/447359/100/0/threaded
CVE ID: CVE-2006-5137 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other
in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29274 - http://securityreason.com/securityalert/1676 - http://www.securityfocus.com/bid/20266 - http://www.securityfocus.com/archive/1/447359/100/0/threaded
CVE ID: CVE-2006-5138 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1676 - http://www.securityfocus.com/bid/20266 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29273 - http://www.securityfocus.com/archive/1/447359/100/0/threaded
CVE ID: CVE-2006-5139 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:05.438Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/33469 - http://securityreason.com/securityalert/1673 - http://www.securityfocus.com/archive/1/447309/100/0/threaded
CVE ID: CVE-2006-5140 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29270 - https://www.exploit-db.com/exploits/2456 - http://www.securityfocus.com/bid/20270
CVE ID: CVE-2006-5141 State: PUBLISHED Published: 2006-10-02T20:00:00 Last Updated: 2024-08-07T19:41:04.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remote attackers to execute arbitrary PHP code via a URL in the anp_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/37969 - http://www.securityfocus.com/bid/20272
CVE ID: CVE-2006-5142 State: PUBLISHED Published: 2006-10-06T20:00:00 Last Updated: 2024-08-07T19:41:04.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29365 - http://www.tippingpoint.com/security/advisories/TSRT-06-12.html - http://www.securityfocus.com/bid/20364 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694 - http://www.securityfocus.com/archive/1/447853/100/100
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34694 - http://www.securityfocus.com/archive/1/447853/100/100/threaded - http://www.vupen.com/english/advisories/2006/3930 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744 - http://secunia.com/advisories/22283 - http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp - http://www.securityfocus.com/archive/1/447839/100/100/threaded
CVE ID: CVE-2006-5143 State: PUBLISHED Published: 2006-10-06T20:00:00 Last Updated: 2024-08-07T19:41:05.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.
2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447862/100/100/threaded - http://secunia.com/advisories/22285 - http://www.zerodayinitiative.com/advisories/ZDI-06-031.html - http://www.lssec.com/advisories/LS-20060330.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/29364 - http://www.securityfocus.com/a
advisories/LS-20060330.pdf - https://exchange.xforce.ibmcloud.com/vulnerabilities/29364 - http://www.securityfocus.com/archive/1/447930/100/200/threaded - http://www.lssec.com/advisories/LS-20060313.pdf - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34693 - http://www.kb.cert.org/vuls/id/361792 - http://www.securityfocus.com/archive/1/447926/100/200/threaded - http://securitytracker.com/id?1017004 - http://www.kb.cert.org/vuls/id/860048 - http://www.vupen.com/english/advisories/2006/3930 - http://www.lssec.com/advisories/LS-20060220.pdf - http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=93775&id=90744 - http://www.securityfocus.com/bid/20365 - http://www.zerodayinitiativ
rityadvisor/blogs/posting.aspx?pid=93775&id=90744 - http://www.securityfocus.com/bid/20365 - http://www.zerodayinitiative.com/advisories/ZDI-06-030.html - http://www.securityfocus.com/archive/1/447847/100/200/threaded - http://www.securityfocus.com/archive/1/447927/100/200/threaded - http://www.tippingpoint.com/security/advisories/TSRT-06-11.html - http://securitytracker.com/id?1017006 - http://securitytracker.com/id?1017003 - http://www3.ca.com/securityadvisor/blogs/posting.aspx?pid=94397&id=90744 - http://securitytracker.com/id?1017005 - http://supportconnectw.ca.com/public/storage/infodocs/basbr-secnotice.asp - http://www.securityfocus.com/archive/1/447839/100/100/threaded - http://www.se
ic/storage/infodocs/basbr-secnotice.asp - http://www.securityfocus.com/archive/1/447839/100/100/threaded - http://www.securityfocus.com/archive/1/447848/100/100/threaded
CVE ID: CVE-2006-5144 State: PUBLISHED Published: 2006-10-02T23:00:00 Last Updated: 2024-08-07T19:41:04.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1680 - http://www.securityfocus.com/archive/1/447424/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29292 - http://www.securityfocus.com/bid/20278 - http://secunia.com/advisories/22241
CVE ID: CVE-2006-5145 State: PUBLISHED Published: 2006-10-02T23:00:00 Last Updated: 2024-08-07T19:41:04.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1680 - http://www.securityfocus.com/archive/1/447424/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29294 - http://www.securityfocus.com/bid/20278 - http://secunia.com/advisories/22241
CVE ID: CVE-2006-5146 State: PUBLISHED Published: 2006-10-02T23:00:00 Last Updated: 2024-08-07T19:41:04.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1679 - http://www.securityfocus.com/archive/1/447427/100/0/threaded - http://www.attrition.org/pipermail/vim/2006-October/001065.html - http://www.securityfocus.com/bid/20280 - https://exchange.xforce.i
ttrition.org/pipermail/vim/2006-October/001065.html - http://www.securityfocus.com/bid/20280 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29291