Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5956 State: PUBLISHED Published: 2006-11-17T00:00:00 Last Updated: 2024-08-07T20:12:31.235Z Vendors: n/a Products: n/a Problem Types: n/a Description: XLineSoft PHPRunner 3.1 stores the (1) database server name, (2) database names, (3) usernames, and (4) passwords in plaintext in %WINDIR%\PHPRunner.ini, which allows local users to obtain sensitive information by reading the file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22863 - http://www.securityfocus.com/bid/21054 - http://securitytracker.com/id?1017218 - http://www.osvdb.org/30363 - http://lostmon.blogspot.com/2006/11/phprunner-database-credentials.html
CVE ID: CVE-2006-5957 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:31.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in INFINICART allow remote attackers to execute arbitrary SQL commands via the (1) groupid parameter in (a) browse_group.asp, (2) productid parameter in (b) added_to_cart.asp, and (3) catid and (4) subid parameter in (c) browsesubcat.asp. NOTE: the vendor has disputed this report, saying "The vulnerabilities mentioned were never present in our official released products but only in the unofficial demo version. However we do appreciate the information. We have update our demo version and m
but only in the unofficial demo version. However we do appreciate the information. We have update our demo version and made sure all those vulnerabilities are fixed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21043 - http://www.securityfocus.com/archive/1/451322/100/0/threaded - http://www.vupen.com/english/advisories/2006/4501 - http://secunia.com/advisories/22865 - http://www.attrition.org/pipermail/vim/2006-December/001162.html - http://securityreason.com/securityalert/1881
CVE ID: CVE-2006-5958 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:31.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in INFINICART allow remote attackers to inject arbitrary web script or HTML via the (1) username and (2) password fields in (a) login.asp, (3) search field in (b) search.asp, and (4) email field in (c) sendpassword.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21043 - http://www.securityfocus.com/archive/1/451322/100/0/threaded - http://www.vupen.com/english/advisories/2006/4501 - http://secunia.com/advisories/22865 - h
ve/1/451322/100/0/threaded - http://www.vupen.com/english/advisories/2006/4501 - http://secunia.com/advisories/22865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30233 - http://securityreason.com/securityalert/1881
CVE ID: CVE-2006-5959 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:30.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in browse.asp in A+ Store E-Commerce allows remote attackers to execute arbitrary SQL commands via the ParentID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21092 - http://securityreason.com/securityalert/1880 - http://secunia.com/advisories/22918/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/30283 - http://archives.neohapsis.com/archives/bugtraq/2006-11/0248.html - http://www.osvdb.org/30417
CVE ID: CVE-2006-5960 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:31.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in account_login.asp in A+ Store E-Commerce allow remote attackers to inject arbitrary web script or HTML via the (1) username (txtUserName) and (2) password (txtPassword) parameters. NOTE: portions of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30284 - http://securityreason.com/securityalert/1880 - http://
92 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30284 - http://securityreason.com/securityalert/1880 - http://secunia.com/advisories/22918/ - http://archives.neohapsis.com/archives/bugtraq/2006-11/0248.html - http://www.osvdb.org/30418
CVE ID: CVE-2006-5961 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:30.845Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Mercury Mail Transport System 4.01b for Windows has unknown impact and attack vectors, as originally reported in a GLEG VulnDisco pack. NOTE: the provenance of this information is unknown; the details are obtained from third party information. The original researcher is reliable. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21110 - http://secunia.com/advisories/22857
CVE ID: CVE-2006-5962 State: PUBLISHED Published: 2006-11-17T01:00:00 Last Updated: 2024-08-07T20:12:31.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Hpecs Shopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields in the (a) login screen, and (3) searchstring parameter in (b) insearch_list.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22904 - https://www.exploit-db.com/exploits/2782 - http://www.securityfocus.com/archive/1/451595/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30287 - http://www.vupen
ocus.com/archive/1/451595/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30287 - http://www.vupen.com/english/advisories/2006/4535 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30288 - http://securityreason.com/securityalert/1879
CVE ID: CVE-2006-5963 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T20:12:31.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0235 - http://secunia.com/advisories/21458 - http://osvdb.org/32864 - http://secunia.com/secunia_research/2006-72/advisory/ - http://www.securityfocus.com/bid/22104 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
esearch/2006-72/advisory/ - http://www.securityfocus.com/bid/22104 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31581
CVE ID: CVE-2006-5964 State: PUBLISHED Published: 2007-01-19T01:00:00 Last Updated: 2024-08-07T20:12:31.251Z Vendors: n/a Products: n/a Problem Types: n/a Description: choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers to cause a denial of service (system crash) by right clicking on a file with a long filename. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0235 - http://secunia.com/advisories/21458 - http://secunia.com/secunia_research/2006-72/advisory/ - http://www.securityfocus.com/bid/22104 - http://osvdb.org/32865 - https://exchange.xforce.ibmcloud.com/vulne
advisory/ - http://www.securityfocus.com/bid/22104 - http://osvdb.org/32865 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31583
CVE ID: CVE-2006-5965 State: PUBLISHED Published: 2006-11-26T23:00:00 Last Updated: 2024-08-07T20:12:31.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: PassGo SSO Plus 2.1.0.32, and probably earlier versions, uses insecure permissions (Everyone/Full Control) for the PassGo Technologies directory, which allows local users to gain privileges by modifying critical programs. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22301 - http://www.vupen.com/english/advisories/2006/4660 - http://www.securityfocus.com/archive/1/452325/100/0/threaded - http://secunia.com/secunia_research/2006-68/advisory - http://securitytracker.com/id?1017272
e/1/452325/100/0/threaded - http://secunia.com/secunia_research/2006-68/advisory - http://securitytracker.com/id?1017272 - http://www.securityfocus.com/bid/21244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30475
CVE ID: CVE-2006-5966 State: PUBLISHED Published: 2006-11-17T22:00:00 Last Updated: 2024-08-07T20:12:31.012Z Vendors: n/a Products: n/a Problem Types: n/a Description: Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to (1) reboot the system using the Reinicializar method in the ActiveScan.1 ActiveX control, or (2) determine arbitrary file existence and size via the ObtenerTamano method in the PAVPZ.SOS.1 ActiveX control. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30318 - http://secunia.com/advisories/21763 - http://www.securityfocus.com/bid/21132 - http://secunia.com/secunia_resear
30318 - http://secunia.com/advisories/21763 - http://www.securityfocus.com/bid/21132 - http://secunia.com/secunia_research/2006-64/advisory/ - http://www.vupen.com/english/advisories/2006/4536 - http://www.securityfocus.com/archive/1/451864/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30317
CVE ID: CVE-2006-5967 State: PUBLISHED Published: 2006-11-17T22:00:00 Last Updated: 2024-08-07T20:12:31.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in Panda ActiveScan 5.53.00, and other versions before 5.54.01, allows remote attackers to cause memory corruption and execute arbitrary code via unknown vectors related to multiple invocations of the Analizar method in the ActiveScan.1 ActiveX control, which is not thread safe. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21763 - http://www.securityfocus.com/bid/21132 - http://secunia.com/secunia_research/2006-64/advisory/ - http://www.vupen.com/english/advisori
urityfocus.com/bid/21132 - http://secunia.com/secunia_research/2006-64/advisory/ - http://www.vupen.com/english/advisories/2006/4536 - http://www.securityfocus.com/archive/1/451864/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30319
CVE ID: CVE-2006-5968 State: PUBLISHED Published: 2006-11-17T22:00:00 Last Updated: 2024-08-07T20:12:31.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: MDaemon 9.0.5, 9.0.6, 9.51, and 9.53, and possibly other versions, installs the MDaemon application folder with insecure permissions (Users create files/directories), which allows local users to execute arbitrary code by creating malicious RASAPI32.DLL or MPRAPI.DLL libraries in the MDaemon\APP folder, which is an untrusted search path element due to insecure permissions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-67/advisory/ - http://www.vupen.com/english/advisor
am Container: References: - http://secunia.com/secunia_research/2006-67/advisory/ - http://www.vupen.com/english/advisories/2006/4538 - http://www.securityfocus.com/archive/1/451821/100/100/threaded - http://secunia.com/advisories/21554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30331 - http://securityreason.com/securityalert/1890 - http://securitytracker.com/id?1017238
CVE ID: CVE-2006-5969 State: PUBLISHED Published: 2006-11-17T23:00:00 Last Updated: 2024-08-07T20:12:31.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the evalFolderLine function in fvwm 2.5.18 and earlier allows local users to execute arbitrary commands via carriage returns in a directory name, which is not properly handled by fvwm-menu-directory, a variant of CVE-2003-1308. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30452 - http://www.gentoo-portage.com/x11-wm/fvwm/ChangeLog - http://thread.gmane.org/gmane.comp.window-managers.fvwm.devel/2419/focus=2419 - http://secun
com/x11-wm/fvwm/ChangeLog - http://thread.gmane.org/gmane.comp.window-managers.fvwm.devel/2419/focus=2419 - http://secunia.com/advisories/22961 - http://www.gentoo.org/security/en/glsa/glsa-200611-17.xml - http://secunia.com/advisories/23089
CVE ID: CVE-2006-5970 State: PUBLISHED Published: 2006-11-18T00:00:00 Last Updated: 2024-08-07T20:12:31.195Z Vendors: n/a Products: n/a Problem Types: n/a Description: Verity Ultraseek before 5.7 allows remote attackers to obtain sensitive information via direct requests with (1) a null ("%00") terminated url parameter to help/urlstatusgo.html; or missing parameters to (2) help/header.html, (3) help/footer.html, (4) spell.html, (5) coreforma.html, (6) daterange.html, (7) hits.html, (8) hitsnavbottom.html, (9) indexform.html, (10) indexforma.html, (11) languages.html, (12) nohits.html, (13) onehit1.html, (14) onehit2.html, (15) query.html, (16) queryform0.html, (17) queryform0a.html, (18) que
ohits.html, (13) onehit1.html, (14) onehit2.html, (15) query.html, (16) queryform0.html, (17) queryform0a.html, (18) queryform1.html, (19) queryform1a.html, (20) queryform2.html, (21) queryform2a.html, (22) quicklinks.html, (23) relatedtopics.html, (24) signin.html, (25) subtopics.html, (26) thesaurus.html, (27) topics.html, (28) hitspagebar.html, (29) highlight/highlight.html, (30) highlight/highlight_one.html, and (31) highlight/topnav.html, which leaks the installation path in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.ultraseek.com/support/docs/RELNOTES.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/30314 - http://
ttp://www.ultraseek.com/support/docs/RELNOTES.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/30314 - http://www.osvdb.org/30288 - http://secunia.com/advisories/22892 - http://www.securityfocus.com/archive/1/451847/100/0/threaded - http://www.osvdb.org/30287 - http://securitytracker.com/id?1017235 - http://www.zerodayinitiative.com/advisories/ZDI-06-042.html
CVE ID: CVE-2006-5971 State: PUBLISHED Published: 2006-11-18T00:00:00 Last Updated: 2024-08-07T20:12:31.332Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in admin/logfile.txt in Verity Ultraseek before 5.6.2 allows remote attackers to read arbitrary files via the name variable. Additional Analyst Notes: - CVE Program Container: References: - http://www.ultraseek.com/support/docs/RELNOTES.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/30321 - http://www.ultraseek.com/support/docs/release_notes/ultraseek.5.6.2.txt - http://www.osvdb.org/30289 - http://secunia.com/advisories/22892 - http://www.securityfocus.com/archive/1/451847/100
t - http://www.osvdb.org/30289 - http://secunia.com/advisories/22892 - http://www.securityfocus.com/archive/1/451847/100/0/threaded - http://www.zerodayinitiative.com/advisories/ZDI-06-042.html
CVE ID: CVE-2006-5972 State: PUBLISHED Published: 2006-11-18T01:00:00 Last Updated: 2024-08-07T20:12:31.331Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in WG111v2.SYS in NetGear WG111v2 wireless adapter (USB) allows remote attackers to execute arbitrary code via a long 802.11 beacon request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30370 - http://securitytracker.com/id?1017245 - http://projects.info-pull.com/mokb/MOKB-16-11-2006.html - http://secunia.com/advisories/22962 - http://www.securityfocus.com/bid/21126 - http://www.vupen.com/english/advisories/2006/4560 - http://w
advisories/22962 - http://www.securityfocus.com/bid/21126 - http://www.vupen.com/english/advisories/2006/4560 - http://www.kb.cert.org/vuls/id/445753
CVE ID: CVE-2006-5973 State: PUBLISHED Published: 2006-11-20T19:00:00 Last Updated: 2024-08-07T20:12:31.341Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one buffer overflow in Dovecot 1.0test53 through 1.0.rc14, and possibly other versions, when index files are used and mmap_disable is set to "yes," allows remote authenticated IMAP or POP3 users to cause a denial of service (crash) via unspecified vectors involving the cache file. Additional Analyst Notes: - CVE Program Container: References: - http://dovecot.org/pipermail/dovecot-news/2006-November/000024.html - http://www.ubuntu.com/usn/usn-387-1 - http://secunia.com/advisories/23150 - http://www.novell.com/linux/secu
0024.html - http://www.ubuntu.com/usn/usn-387-1 - http://secunia.com/advisories/23150 - http://www.novell.com/linux/security/advisories/2006_73_mono.html - http://secunia.com/advisories/23007 - http://secunia.com/advisories/23172 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30433 - http://www.securityfocus.com/archive/1/452081/100/0/threaded - http://dovecot.org/list/dovecot-news/2006-November/000023.html - http://secunia.com/advisories/23213 - http://securitytracker.com/id?1017288 - http://www.vupen.com/english/advisories/2006/4614 - http://www.securityfocus.com/bid/21183/info - https://issues.rpath.com/browse/RPL-802
CVE ID: CVE-2006-5974 State: PUBLISHED Published: 2007-01-09T00:00:00 Last Updated: 2024-08-07T20:12:31.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: fetchmail 6.3.5 and 6.3.6 before 6.3.6-rc4, when refusing a message delivered via the mda option, allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger a NULL pointer dereference when calling the (1) ferror or (2) fflush functions. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017479 - http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.517995 - http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt - h
r.php?l=slackware-security&y=2007&m=slackware-security.517995 - http://fetchmail.berlios.de/fetchmail-SA-2006-03.txt - http://secunia.com/advisories/23838 - http://secunia.com/advisories/24151 - http://www.securityfocus.com/archive/1/456114/100/0/threaded - http://secunia.com/advisories/23631 - http://secunia.com/advisories/23804 - http://www.vupen.com/english/advisories/2007/0088 - http://www.novell.com/linux/security/advisories/2007_4_sr.html - http://fedoranews.org/cms/node/2429 - http://secunia.com/advisories/23923 - http://osvdb.org/31836 - http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.004.html - http://www.trustix.org/errata/2007/0007 - http://security.gentoo.org/glsa/glsa
ity/advisories/OpenPKG-SA-2007.004.html - http://www.trustix.org/errata/2007/0007 - http://security.gentoo.org/glsa/glsa-200701-13.xml - http://www.vupen.com/english/advisories/2007/0087 - http://www.securityfocus.com/bid/21902
CVE ID: CVE-2006-5975 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in comments.asp in BlogMe 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) URL, or (3) Comments field. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1882 - http://secunia.com/advisories/22902 - https://www.exploit-db.com/exploits/2781 - http://www.securityfocus.com/archive/1/451563/100/0/threaded - http://www.securityfocus.com/bid/21071 - https://exchange.xforce.ibmcloud.com/vuln
com/archive/1/451563/100/0/threaded - http://www.securityfocus.com/bid/21071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30286
CVE ID: CVE-2006-5976 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.050Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in admin_login.asp in BlogMe 3.0 allow remote attackers to execute arbitrary SQL commands via the (1) Username or (2) Password field. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1882 - http://secunia.com/advisories/22902 - https://www.exploit-db.com/exploits/2781 - http://www.securityfocus.com/archive/1/451563/100/0/threaded - http://www.securityfocus.com/bid
t-db.com/exploits/2781 - http://www.securityfocus.com/archive/1/451563/100/0/threaded - http://www.securityfocus.com/bid/21071 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30285
CVE ID: CVE-2006-5977 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MultiCalendars allow remote attackers to execute arbitrary SQL commands via the (1) M or (2) Y parameter to rss_out.asp, or the (3) cate parameter to all_calendars.asp. NOTE: the all_calendars.asp/calsids vector is already covered by CVE-2006-2293. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1883 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30301 - http://www.securityfocus.com/archive/1/451642/100/0/threaded
CVE ID: CVE-2006-5978 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in E-Xoopport before 2.2.0 has unknown impact and attack vectors, as addressed by "Some security fix." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21052 - http://www.vupen.com/english/advisories/2006/4494 - http://sourceforge.net/project/shownotes.php?release_id=463210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30269
CVE ID: CVE-2006-5979 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Renasoft NetJetServer 2.5.3.939, and possibly earlier, uses insecure permissions for Global.asa, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; details are obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30338 - http://secunia.com/advisories/22859 - http://www.vupen.com/english/advisories/2006/4559
CVE ID: CVE-2006-5980 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: adm_lgn_admin.asp in Renasoft NetJetServer 2.5.3.939, and possibly earlier, does not properly perform login authentication, which allows remote attackers to obtain administrative privileges. NOTE: the provenance of this information is unknown; details are obtained from third party sources. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30337 - http://secunia.com/advisories/22859 - http://www.vupen.com/english/advisories/2006/4559
CVE ID: CVE-2006-5981 State: PUBLISHED Published: 2006-11-20T21:00:00 Last Updated: 2024-08-07T20:12:31.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in SeleniumServer FTP Server 1.0, and possibly earlier, allow remote attackers to list arbitrary directories, read arbitrary files, and upload arbitrary files via directory traversal sequences in the (1) DIR (LIST or NLST), (2) GET (RETR), and (3) PUT (STOR) commands. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22928 - http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html - http://www.osvdb.org/30448 - https://e
28 - http://whitestar.linuxbox.org/pipermail/exploits/2006-November/000037.html - http://www.osvdb.org/30448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30332 - http://www.vupen.com/english/advisories/2006/4540