Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5016 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to upload arbitrary files to the /imagebank directory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21969 - http://securityreason.com/securityalert/1642 - http://www.securityfocus.com/archive/1/446706/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29124 - http://www.vupen.com/english/advisories/2006/3764 - http://w
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/29124 - http://www.vupen.com/english/advisories/2006/3764 - http://www.securityfocus.com/bid/21047
CVE ID: CVE-2006-5017 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows remote attackers to execute arbitrary SQL commands via the from parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21969 - http://securityreason.com/securityalert/1642 - http://www.securityfocus.com/archive/1/446706/100/0/threaded - http://www.securityfocus.com/bid/20147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29123 - http://www.vupen.com/engl
www.securityfocus.com/bid/20147 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29123 - http://www.vupen.com/english/advisories/2006/3764
CVE ID: CVE-2006-5018 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: ContentKeeper 123.25 and earlier places passwords in cleartext in an INPUT element in cgi-bin/ck/changepw.cgi, which allows remote authenticated users to obtain passwords via this URI. Additional Analyst Notes: - CVE Program Container: References: - http://www.aushack.com/advisories/200606-contentkeeper.txt - http://www.securityfocus.com/bid/20152 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29113 - http://securitytracker.com/id?1016915 - http://securityreason.com/securityalert/1639 - http://www.securityfocus.com/arc
http://securitytracker.com/id?1016915 - http://securityreason.com/securityalert/1639 - http://www.securityfocus.com/archive/1/446719/100/0/threaded
CVE ID: CVE-2006-5019 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /search with an invalid client parameter, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1637 - http://users.tpg.com.au/adsl2dvp/advisories/200609-googlemini.txt - http://www.securityfocus.com/archive/1/446728/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29111 - http://www.securityfocus
/archive/1/446728/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29111 - http://www.securityfocus.com/bid/20149 - http://secunia.com/advisories/22059
CVE ID: CVE-2006-5020 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the base_path parameter in manager/pages/ scripts including (1) AccountsPage.class.php, (2) AddInvoicePage.class.php, (3) AddIPAddressPage.class.php, (4) AddPaymentPage.class.php, (5) AddTaxRulePage.class.php, (6) AssignDomainPage.class.php, (7) AssignHostingPage.class.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAcco
lass.php, (8) AssignProductPage.class.php, (9) BillingPage.class.php, (10) BillingPaymentPage.class.php, (11) BrowseAccountsPage.class.php, (12) BrowseInvoicesPage.class.php, (13) ConfigureEditUserPage.class.php, (14) ConfigureNewUserPage.class.php, (15) ConfigureNewUserReceiptPage.class.php, (16) ConfigureUsersPage.class.php, (17) DeleteAccountPage.class.php, (18) DeleteDomainServicePage.class.php, (19) DeleteHostingServicePage.class.php, (20) DeleteInvoicePage.class.php, (21) DeleteProductPage.class.php, (22) DeleteServerPage.class.php, (23) DomainServicesPage.class.php, (24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.cl
(24) DomainsPage.class.php, (25) EditAccountPage.class.php, (26) EditDomainPage.class.php, (27) EditDomainServicePage.class.php, (28) EditHostingServicePage.class.php, (29) EditPaymentPage.class.php, (30) EditProductPage.class.php, (31) EditServerPage.class.php, (32) EmailInvoicePage.class.php, (33) ExecuteOrderPage.class.php, (34) ExpiredDomainsPage.class.php, (35) FulfilledOrdersPage.class.php, (36) GenerateInvoicesPage.class.php, (37) HomePage.class.php, (38) InactiveAccountsPage.class.php, (39) IPManagerPage.class.php, (40) LoginPage.class.php, (41) LogPage.class.php, (42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class
42) ModulesPage.class.php, (43) NewAccountPage.class.php, (44) NewDomainServicePage.class.php, (45) NewProductPage.class.php, (46) OutstandingInvoicesPage.class.php, (47) PendingAccountsPage.class.php, (48) PendingOrdersPage.class.php, (49) PrintInvoicePage.class.php, (50) ProductsPage.class.php, (51) RegisterDomainPage.class.php, (52) RegisteredDomainsPage.class.php, (53) ServersPage.class.php, (54) ServicesHostingServicesPage.class.php, (55) ServicesNewHostingPage.class.php, (56) ServicesPage.class.php, (57) ServicesWebHostingPage.class.php, (58) SettingsPage.class.php, (59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.c
59) TaxesPage.class.php, (60) TransferDomainPage.class.php, (61) ViewAccountPage.class.php, (62) ViewDomainServicePage.class.php, (63) ViewHostingServicePage.class.php, (64) ViewInvoicePage.class.php, (65) ViewLogMessagePage.class.php, (66) ViewOrderPage.class.php, (67) ViewProductPage.class.php, (68) ViewServerPage.class.php, (69) WelcomeEmailPage.class.php; and (70) modules/RegistrarModule.class.php, (71) modules/SolidStateModule.class.php, (72) modules/authorizeaim/authorizeaim.class.php, and (73) modules/authorizeaim/pages/AAIMConfigPage.class.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29095 - http://www.osvd
tes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29095 - http://www.osvdb.org/31120 - http://www.osvdb.org/31147 - http://www.osvdb.org/31141 - http://www.osvdb.org/31139 - http://www.osvdb.org/31192 - http://www.osvdb.org/31106 - http://www.osvdb.org/31135 - http://www.osvdb.org/31117 - http://attrition.org/pipermail/vim/2007-January/001210.html - http://www.osvdb.org/31144 - http://www.securityfocus.com/bid/21934 - http://www.osvdb.org/31100 - http://www.osvdb.org/31112 - http://www.osvdb.org/31109 - http://www.osvdb.org/31193 - http://www.osvdb.org/31115 - http://www.osvdb.org/31131 - http://www.osvdb.org/31203 - http://www.osvdb.org/31194 -
93 - http://www.osvdb.org/31115 - http://www.osvdb.org/31131 - http://www.osvdb.org/31203 - http://www.osvdb.org/31194 - http://www.osvdb.org/31146 - http://www.osvdb.org/31191 - http://www.osvdb.org/31105 - http://www.osvdb.org/31119 - http://www.osvdb.org/31197 - http://www.osvdb.org/31136 - http://www.osvdb.org/31116 - http://www.osvdb.org/31099 - http://www.osvdb.org/31114 - http://www.osvdb.org/31134 - http://www.osvdb.org/31190 - http://www.osvdb.org/31145 - http://www.osvdb.org/31122 - http://www.osvdb.org/31111 - http://www.osvdb.org/31104 - http://www.osvdb.org/31113 - http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1 - http://www.osvdb.org/31199 - http://www.
13 - http://www.solid-state.org/index.php?name=PNphpBB2&file=portal&article=1 - http://www.osvdb.org/31199 - http://www.osvdb.org/31128 - https://www.exploit-db.com/exploits/2413 - http://www.osvdb.org/31125 - http://www.osvdb.org/31107 - http://www.osvdb.org/31098 - http://www.osvdb.org/31137 - http://www.osvdb.org/31200 - http://www.osvdb.org/31143 - http://www.osvdb.org/31198 - http://www.osvdb.org/31123 - http://www.osvdb.org/31126 - http://www.osvdb.org/31124 - http://www.osvdb.org/31201 - http://www.osvdb.org/31097 - http://www.osvdb.org/31110 - http://www.osvdb.org/31121 - http://www.osvdb.org/31133 - http://www.osvdb.org/31138 - http://www.osvdb.org/31130 - http://www.osvdb.org/31127
1121 - http://www.osvdb.org/31133 - http://www.osvdb.org/31138 - http://www.osvdb.org/31130 - http://www.osvdb.org/31127 - http://www.osvdb.org/31202 - http://www.osvdb.org/31108 - http://www.osvdb.org/31129 - http://www.osvdb.org/31132 - http://www.osvdb.org/31118 - http://www.osvdb.org/31142
CVE ID: CVE-2006-5021 State: PUBLISHED Published: 2006-09-27T23:00:00.000Z Last Updated: 2025-04-03T15:18:24.691Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the root parameter in imgen.php, and the root_path parameter in (2) admin/config.php, (3) common.php, and (4) admin/index.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/20115
CVE ID: CVE-2006-5022 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allows remote attackers to execute arbitrary PHP code via a URL in the nbs parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2407 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29080 - http://www.securityfocus.com/bid/20140 - http://www.securityfocus.com/archive/1/446929/100/0/threaded
CVE ID: CVE-2006-5023 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3762 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29103 - http://secunia.com/advisories/22052 - https://www.exploit-db.com/exploits/2416 - http://www.securityfocus.com/bid/20145
CVE ID: CVE-2006-5024 State: PUBLISHED Published: 2006-09-27T23:00:00.000Z Last Updated: 2025-04-03T15:16:27.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812 - http://secunia.com/advisories/21952 - http://www.securityfocus.com/bid/20151
CVE ID: CVE-2006-5025 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T02:27:39.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812
CVE ID: CVE-2006-5026 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T02:11:07.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=447952&group_id=173812
CVE ID: CVE-2006-5027 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct request for php/main/phplib files (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysql.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, and (7) db_pgsql.inc; and (8) db_sybase.inc, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29126 - http://securityreason.com/securityalert/1638 - http://w
: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29126 - http://securityreason.com/securityalert/1638 - http://www.securityfocus.com/archive/1/446741/100/0/threaded
CVE ID: CVE-2006-5028 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22058 - http://www.securityfocus.com/bid/20155 - http://www.securityfocus.com/archive/1/446730/100/0/threaded - http://securityreason.com/securityalert/1643 - https://exchange.xforce.ibmcl
focus.com/archive/1/446730/100/0/threaded - http://securityreason.com/securityalert/1643 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29134 - http://www.securityfocus.com/archive/1/470509/100/0/threaded
CVE ID: CVE-2006-5029 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter. NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/447069/100/100/threaded - http://www.securityfocus.com/archive/1/446937/100/0/threaded - http://www.securityfocus.com/archive
9/100/100/threaded - http://www.securityfocus.com/archive/1/446937/100/0/threaded - http://www.securityfocus.com/archive/1/446743/100/0/threaded - http://www.securityfocus.com/archive/1/446938/100/100/threaded
CVE ID: CVE-2006-5030 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20143 - http://secunia.com/advisories/22045 - https://www.exploit-db.com/exploits/2406 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29079
CVE ID: CVE-2006-5031 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29115 - http://secunia.com/advisories/22040 - http://www.gulftech.org/?node=research&article_id=00114-09212006 - http://cakeforge.org/frs/shownot
m/advisories/22040 - http://www.gulftech.org/?node=research&article_id=00114-09212006 - http://cakeforge.org/frs/shownotes.php?release_id=134 - http://www.securityfocus.com/bid/20150
CVE ID: CVE-2006-5032 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.948Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the url_phpartenaire parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22053 - http://www.securityfocus.com/bid/20182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29082 - https://www.exploit-db.com/exploits/2409 - http://www.vupen.com/english/advisories/2006/3759
CVE ID: CVE-2006-5033 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28872 - http://www.morx.org/vcap.txt - http://secunia.com/advisories/21862 - http://www.vupen.com/english/advisories/2006/3569 - http://archives.n
g/vcap.txt - http://secunia.com/advisories/21862 - http://www.vupen.com/english/advisories/2006/3569 - http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html - http://securitytracker.com/id?1016822 - http://www.osvdb.org/28807 - http://www.securityfocus.com/bid/19959
CVE ID: CVE-2006-5034 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:23.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URI. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28873 - http://www.morx.org/vcap.txt - http://secunia.com/advisories/21862 - http://www.vupen.com/english/advisories/2006/3569 - http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html - http://www.osvdb.org/28808 - http://se
/3569 - http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0187.html - http://www.osvdb.org/28808 - http://securitytracker.com/id?1016822 - http://www.securityfocus.com/bid/19958
CVE ID: CVE-2006-5035 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the statusmsg parameter in RegisterPage.cgi or (2) a URI corresponding to a nonexistent file. NOTE: the provenance of this information is unknown; the details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21862 - http://www.osvdb.org/28809 - http://www.vupen.com/english/advi
iner: References: - http://secunia.com/advisories/21862 - http://www.osvdb.org/28809 - http://www.vupen.com/english/advisories/2006/3569 - http://www.osvdb.org/28810
CVE ID: CVE-2006-5036 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.aushack.com/advisories/200607-mysourcematrix.txt - http://www.securityfocus.com/archive/1/446722/100/0/thread
http://www.aushack.com/advisories/200607-mysourcematrix.txt - http://www.securityfocus.com/archive/1/446722/100/0/threaded - http://securityreason.com/securityalert/1635 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29112 - http://secunia.com/advisories/22060
CVE ID: CVE-2006-5037 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.920Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.aushack.com/advisories/200607-mysourcematrix.txt - http://www.securityfocus.com/archive/1/446722/100/0/threaded - h
/www.aushack.com/advisories/200607-mysourcematrix.txt - http://www.securityfocus.com/archive/1/446722/100/0/threaded - http://securityreason.com/securityalert/1635 - http://secunia.com/advisories/22060
CVE ID: CVE-2006-5038 State: PUBLISHED Published: 2006-09-27T23:00:00 Last Updated: 2024-08-07T19:32:22.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 01_02_07, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20154 - http://www.osnews.com/story.php/15923/Review-FiWin-SS28S-WiFi-VoIP-SIPSkype-Phone/ - http://secunia.com/advisories/22041 - http://archives.neohapsis.com/archives/fulldisclosure/2006-09/0391.html - https://exchange.xforce.ibmcloud.com/vulnerabil
ttp://archives.neohapsis.com/archives/fulldisclosure/2006-09/0391.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/29114
CVE ID: CVE-2006-5039 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T03:58:50.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Events 1.3 beta module (com_events) for Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C80411.0.html - http://forum.joomla.org/index.php/topic%2C79477.0.html
CVE ID: CVE-2006-5040 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-17T02:10:54.766Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C79477.0.html
CVE ID: CVE-2006-5041 State: PUBLISHED Published: 2006-09-27T23:00:00Z Last Updated: 2024-09-16T17:48:13.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for Joomla! has unspecified impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://forum.joomla.org/index.php/topic%2C79477.0.html