Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
com/browse/RPL-820 - http://secunia.com/advisories/23170 - http://securitytracker.com/id?1017166 - http://www.trustix.org/errata/2006/0066/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:208 - http://www.vupen.com/english/advisories/2006/4379 - http://www.securityfocus.com/bid/20939 - http://www.ubuntu.com/usn/usn-384-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30076 - http://www.openldap.org/its/index.cgi/Software%20Bugs?id=4740 - http://secunia.com/advisories/23152 - http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz - http://secunia.com/advisories/22996 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.033-openldap.html - http://secunia.com/advisor
sories/22996 - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.033-openldap.html - http://secunia.com/advisories/22953 - http://secunia.com/advisories/23125 - http://www.securityfocus.com/archive/1/450728/100/0/threaded - http://securityreason.com/securityalert/1831 - http://security.gentoo.org/glsa/glsa-200611-25.xml - http://secunia.com/advisories/22750
CVE ID: CVE-2006-5780 State: PUBLISHED Published: 2006-11-07T18:00:00 Last Updated: 2024-08-07T20:04:55.533Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 (nfsd), as demonstrated by vd_xlink.pm. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - http://secunia.com/advisories/22751 - http://www.securityfocus.com/bid/20941 - https://www.exploit-db.com/exploits/2729 - http://www.vupen.com/english/advisories/2006/4380 - http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz - ht
its/2729 - http://www.vupen.com/english/advisories/2006/4380 - http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz - http://securitytracker.com/id?1017172 - http://www.securityfocus.com/archive/1/450728/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30083 - http://securityreason.com/securityalert/1831
CVE ID: CVE-2006-5781 State: PUBLISHED Published: 2006-11-07T20:00:00 Last Updated: 2024-08-07T20:04:55.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450399/100/0/threaded - http://www.securityfocus.com/bid/20883 - http://www.osvdb.org/30182 - http://secunia.com/advisories/22674 - http://www.vupen.com/english/advisories/2006/4333 - http://securitytracker.com/id?1017155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/299
/advisories/2006/4333 - http://securitytracker.com/id?1017155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29995 - http://code.kryo.se/iodine/CHANGELOG.txt
CVE ID: CVE-2006-5782 State: PUBLISHED Published: 2006-11-09T00:00:00 Last Updated: 2024-08-07T20:04:55.573Z Vendors: n/a Products: n/a Problem Types: n/a Description: radexecd.exe in HP OpenView Client Configuraton Manager (CCM) does not require authentication before executing commands in the installation directory, which allows remote attackers to cause a denial of service (reboot) by calling radbootw.exe or create arbitrary files by calling radcrecv. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450942/100/0/threaded - http://secunia.com/advisories/22780 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c0079
ded - http://secunia.com/advisories/22780 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00795552 - http://securityreason.com/securityalert/1842 - http://www.vupen.com/english/advisories/2006/4410 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30138 - http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00795552 - http://securitytracker.com/id?1017197
CVE ID: CVE-2006-5783 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A tag. NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not related to Firefox. Due to this impact, CVE concurs with the dispute Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/450424/100/0/threaded - http://www.securityfocus.com/archive/
iner: References: - http://www.securityfocus.com/archive/1/450424/100/0/threaded - http://www.securityfocus.com/archive/1/450730/100/0/threaded - http://www.securityfocus.com/archive/1/450476/100/0/threaded - http://www.securityfocus.com/archive/1/450398/100/0/threaded
CVE ID: CVE-2006-5784 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29982 - http://securityreason.com/securityalert/1828 - http://www.vupen.c
//exchange.xforce.ibmcloud.com/vulnerabilities/29982 - http://securityreason.com/securityalert/1828 - http://www.vupen.com/english/advisories/2006/4318 - http://www.securityfocus.com/bid/20877 - http://www.securityfocus.com/archive/1/459499/100/0/threaded - http://www.securityfocus.com/archive/1/450394/100/0/threaded - https://www.exploit-db.com/exploits/3291 - http://secunia.com/advisories/22677 - http://www.securitytracker.com/id?1017628
CVE ID: CVE-2006-5785 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1828 - http://www.vupen.com/english/advisories/2006/4318 - http://www.securityfocus.com/archive/1/459499/100/0/threaded - http://www.securityfocus.com/archive/1/450394/100/0/threaded - http://www.securityfocus
rchive/1/459499/100/0/threaded - http://www.securityfocus.com/archive/1/450394/100/0/threaded - http://www.securityfocus.com/bid/20873 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29981 - http://secunia.com/advisories/22677 - http://www.securitytracker.com/id?1017628
CVE ID: CVE-2006-5786 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30030 - http://www.securityfocus.com/bid/20913 - https://www.exploit-db.com/exploits/2711
CVE ID: CVE-2006-5787 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chk_admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20951 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30073 - http://secunia.com/advisories/22757 - http://www.vupen.com/english/advisories/2006/4383 - https://www.exploit-db.com/exploits/2731
CVE ID: CVE-2006-5788 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.574Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2739 - http://www.osvdb.org/30228 - http://www.securityfocus.com/bid/20966 - http://www.securityfocus.com/archive/1/452137/100/200/threaded - http://secunia.com/advisories/22757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/
/1/452137/100/200/threaded - http://secunia.com/advisories/22757 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30074 - http://www.vupen.com/english/advisories/2006/4383
CVE ID: CVE-2006-5789 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands. NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4398 - http://securityreason.com/securityalert/1832 - http://securitytracker.com/id?1017174
com/english/advisories/2006/4398 - http://securityreason.com/securityalert/1832 - http://securitytracker.com/id?1017174 - http://www.securityfocus.com/bid/20944 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30077 - http://www.securityfocus.com/archive/1/450804/100/0/threaded - http://secunia.com/advisories/22755
CVE ID: CVE-2006-5790 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23580 - http://
unctions. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23580 - http://www.debian.org/security/2006/dsa-1242 - http://www.securityfocus.com/bid/20876 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29987 - http://secunia.com/advisories/22638 - http://www.vupen.com/english/advisories/2006/4315 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016
CVE ID: CVE-2006-5791 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23580 - https://exchange.xforce.ibmcloud.co
Notes: - CVE Program Container: References: - http://secunia.com/advisories/23580 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29986 - http://www.securityfocus.com/bid/20881 - http://www.debian.org/security/2006/dsa-1242 - http://secunia.com/advisories/22638 - http://www.vupen.com/english/advisories/2006/4315 - http://www.securityfocus.com/bid/20882 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016
CVE ID: CVE-2006-5792 State: PUBLISHED Published: 2006-11-07T23:00:00 Last Updated: 2024-08-07T20:04:55.552Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by vd_xlink2.pm, an "Omni-NFS Enterprise remote exploit." NOTE: this is probably a different vulnerability than CVE-2006-5780. As of 20061107, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulnd
identifier for tracking purposes. Additional Analyst Notes: - CVE Program Container: References: - http://gleg.net/vulndisco_meta.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/30143
CVE ID: CVE-2006-5793 State: PUBLISHED Published: 2006-11-17T23:00:00 Last Updated: 2024-08-07T20:04:55.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sPLT chunk handling code (png_set_sPLT function in pngset.c) in libpng 1.0.6 through 1.2.12 uses a sizeof operator on the wrong data type, which allows context-dependent attackers to cause a denial of service (crash) via malformed sPLT chunks that trigger an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - http://support.avaya.com/elmodocs2/security/ASA-2007-254.htm - http://www.mandriva.com/security/advisories?name=MDKSA-2006:209 - http://secunia.com/advisories/22941 - https://oval.cise
ttp://www.mandriva.com/security/advisories?name=MDKSA-2006:209 - http://secunia.com/advisories/22941 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10324 - http://secunia.com/advisories/22956 - https://issues.rpath.com/browse/RPL-824 - http://secunia.com/advisories/22958 - http://www.coresecurity.com/?action=item&id=2148 - http://bugs.gentoo.org/show_bug.cgi?id=154380 - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://www.vupen.com/english/advisories/2008/0924/references - http://www.securityfocus.com/bid/21078 - http://secunia.com/advisories/22951 - https://issues.rpath.com/browse/RPL-790 - http://security.gentoo.org/glsa/gls
78 - http://secunia.com/advisories/22951 - https://issues.rpath.com/browse/RPL-790 - http://security.gentoo.org/glsa/glsa-200611-09.xml - http://secunia.com/advisories/23335 - http://secunia.com/advisories/25329 - http://www.vupen.com/english/advisories/2006/4521 - http://secunia.com/advisories/29420 - http://securitytracker.com/id?1017244 - http://sourceforge.net/project/shownotes.php?release_id=464278 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.securityfocus.com/archive/1/453484/100/100/threaded - http://www.mandriva.com/security/advisories?name=MDKSA-2006:210 - http://secunia.com/advisories/23208 - http://android-developers.blogspot.com/2008/03/
y/advisories?name=MDKSA-2006:210 - http://secunia.com/advisories/23208 - http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - http://secunia.com/advisories/22889 - http://bugs.gentoo.org/attachment.cgi?id=101400&action=view - http://www.securityfocus.com/archive/1/451874/100/200/threaded - http://www.redhat.com/support/errata/RHSA-2007-0356.html - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.036.html - http://www.ubuntu.com/usn/usn-383-1 - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/22950 - https://exchange.xforce.ibmcloud.com/vulnerab
ple.com/article.html?artnum=307562 - http://secunia.com/advisories/22950 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30290 - http://secunia.com/advisories/22900 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:211 - http://www.vupen.com/english/advisories/2006/4568 - http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.465035 - http://secunia.com/advisories/25742 - http://www.trustix.org/errata/2006/0065/ - http://www.securityfocus.com/archive/1/489135/100/0/threaded
CVE ID: CVE-2006-5794 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has been successful, which might allow attackers to bypass authentication. NOTE: as of 20061108, it is believed that this issue is only exploitable by leveraging vulnerabilities in the unprivileged process, which are not known to exist. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017183 - http://sourceforge.net/project/shownotes.php?release_i
Container: References: - http://securitytracker.com/id?1017183 - http://sourceforge.net/project/shownotes.php?release_id=461854&group_id=69227 - http://secunia.com/advisories/22932 - http://secunia.com/advisories/22773 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://sourceforge.net/project/shownotes.php?release_id=461863&group_id=69227 - https://issues.rpath.com/browse/RPL-766 - http://secunia.com/advisories/22872 - http://secunia.com/advisories/22772 - http://www.vupen.com/english/advisories/2006/4399 - http://secunia.com/advisories/23513 - http://secunia.com/advisories/23680 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://secunia.com/advi
secunia.com/advisories/23680 - http://www.novell.com/linux/security/advisories/2006_26_sr.html - http://secunia.com/advisories/24055 - http://secunia.com/advisories/22771 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30120 - http://support.avaya.com/elmodocs2/security/ASA-2007-048.htm - http://www.vupen.com/english/advisories/2006/4400 - http://www.securityfocus.com/archive/1/451100/100/0/threaded - http://secunia.com/advisories/22778 - http://secunia.com/advisories/22814 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11840 - http://www.securityfocus.com/bid/20956 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:204 - http://www
- http://www.securityfocus.com/bid/20956 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:204 - http://www.openssh.org/txt/release-4.5 - ftp://patches.sgi.com/support/free/security/advisories/20061201-01-P.asc - http://www.openpkg.org/security/advisories/OpenPKG-SA-2006.032-openssh.html - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - http://rhn.redhat.com/errata/RHSA-2006-0738.html
CVE ID: CVE-2006-5795 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the srcdir parameter to (a) billing_process.php, (b) billing_report.php, (c) billing_report_xml.php, and (d) print_billing_report.php in interface/billing/; (e) login.php; (f) interface/batchcom/batchcom.php; (g) interface/login/login.php; (h) main_info.php and (i) main.php in interface/main/; (j) interface/new/new_patient_save.php; (k) interface/pr
gin.php; (h) main_info.php and (i) main.php in interface/main/; (j) interface/new/new_patient_save.php; (k) interface/practice/ins_search.php; (l) interface/logout.php; (m) custom_report_range.php, (n) players_report.php, and (o) front_receipts_report.php in interface/reports/; (p) facility_admin.php, (q) usergroup_admin.php, and (r) user_info.php in interface/usergroup/; or (s) custom/import_xml.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2727 - http://www.securityfocus.com/archive/1/450698/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30036 - http://advisories.echo.or.id/adv/adv60-theday-2006.txt - http:/
s://exchange.xforce.ibmcloud.com/vulnerabilities/30036 - http://advisories.echo.or.id/adv/adv60-theday-2006.txt - http://securityreason.com/securityalert/1834 - http://www.vupen.com/english/advisories/2006/4382 - http://secunia.com/advisories/22695
CVE ID: CVE-2006-5796 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the _SESSION[docroot_path] parameter to (1) includes/shared_functions.php or (2) client_files/shopping_cart/pgm-shopping_css.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22735 - http://www.osvdb.org/displayvuln.php?osvdb_id=30237 - https://exchange.xforce.ibmcloud.com/vulner
com/advisories/22735 - http://www.osvdb.org/displayvuln.php?osvdb_id=30237 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30032 - http://www.vupen.com/english/advisories/2006/4377 - https://www.exploit-db.com/exploits/2724 - http://www.osvdb.org/30238 - http://advisories.echo.or.id/adv/adv57-theday-2006.txt - http://marc.info/?l=bugtraq&m=116283614914510&w=2
CVE ID: CVE-2006-5797 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in default.asp in Xenis.creator CMS allow remote attackers to execute arbitrary SQL commands via the (1) nav, (2) s, or (3) print parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22716 - http://www.securityfocus.com/bid/20908 - http://marc.info/?l=bugtraq&m=116266150514762&w=2 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls31 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30017 - http://marc.info/?l=bugtraq&m=
.php?major_rls=major_rls31 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30017 - http://marc.info/?l=bugtraq&m=116267021732120&w=2 - http://www.vupen.com/english/advisories/2006/4470 - http://securitytracker.com/id?1017162
CVE ID: CVE-2006-5798 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in default.asp in Xenis.creator CMS allows remote attackers to execute arbitrary SQL commands via the contid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30017 - http://marc.info/?l=bugtraq&m=116267021732120&w=2 - http://securitytracker.com/id?1017162
CVE ID: CVE-2006-5799 State: PUBLISHED Published: 2006-11-08T20:00:00 Last Updated: 2024-08-07T20:04:55.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in default.asp in xenis.creator CMS allow remote attackers to inject arbitrary web script or HTML via the (1) contid or (2) search parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22716 - http://www.securityfocus.com/bid/20908 - http://marc.info/?l=bugtraq&m=116266150514762&w=2 - http://www.majorsecurity.de/index_2.php?major_rls=major_rls31 - http://www.vupen.com/english/advisories/2006/4470 - http://securitytracker.co
ity.de/index_2.php?major_rls=major_rls31 - http://www.vupen.com/english/advisories/2006/4470 - http://securitytracker.com/id?1017162 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30019