Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-2583 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[DIR_LIBS] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20219 - http://securityreason.com/securityalert/951 - http://www.nucleuscms.org/item/3038 - http://www.securityfocus.com/archive/1/434837/100/0/threaded - http://retrogod.altervista.org/nucleus_322_incl_xpl.html - https://exchange.xforce
com/archive/1/434837/100/0/threaded - http://retrogod.altervista.org/nucleus_322_incl_xpl.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26606 - http://securitytracker.com/id?1016146 - http://www.vupen.com/english/advisories/2006/1936 - http://www.securityfocus.com/bid/18097 - http://forum.nucleuscms.org/viewtopic.php?t=12304 - http://www.osvdb.org/25749
CVE ID: CVE-2006-2584 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in post.php in SkyeBox 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) message parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it was likely prompted by a vague announcement from a researcher who incorrectly referred to the product as "SkyeShoutbox." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securi
uct as "SkyeShoutbox." Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/950 - http://www.vupen.com/english/advisories/2006/1959 - http://www.securityfocus.com/archive/1/434826/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26657 - http://secunia.com/advisories/20234
CVE ID: CVE-2006-2585 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Destiney Links Script 2.1.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20248 - http://www.vupen.com/english/advisories/2006/1933 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28514
CVE ID: CVE-2006-2586 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IpLogger 1.7 and earlier allows remote attackers to inject arbitrary HTML or web script via the HTTP_REFERER header in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26643 - http://www.vupen.com/english/advisories/2006/1937
CVE ID: CVE-2006-2587 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products including (2) America's Army 1.228 and earlier, (3) Battlefield 1942 1.158 and earlier, (4) Battlefield 2 1.184 and earlier, (5) Battlefield Vietnam 1.150 and earlier, (6) Call of Duty 1.173 and earlier, (7) Call of Duty 2 1.108 and earlier, (8) DOOM 3 1.159 and earlier, (9) Enemy Territory 1.167 and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (
and earlier, (10) Far Cry 1.150 and earlier, (11) F.E.A.R. 1.093 and earlier, (12) Joint Operations 1.187 and earlier, (13) Quake III Arena 1.150 and earlier, (14) Quake 4 1.181 and earlier, (15) Rainbow Six 3: Raven Shield 1.169 and earlier, (16) Rainbow Six 4: Lockdown 1.093 and earlier, (17) Return to Castle Wolfenstein 1.175 and earlier, and (18) Soldier of Fortune II 1.183 and earlier allows remote attackers to cause a denial of service (application crash) via a long webkey parameter. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/fulldisclosure/2006-05/0607.html - http://secunia.com/advisories/20257 - http://www.securityfocus.com
apsis.com/archives/fulldisclosure/2006-05/0607.html - http://secunia.com/advisories/20257 - http://www.securityfocus.com/bid/18106 - http://www.securityfocus.com/archive/1/434909/100/0/threaded - http://securitytracker.com/id?1016155 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26608 - http://www.evenbalance.com/index.php?page=support-all.php - http://www.osvdb.org/25738 - http://www.vupen.com/english/advisories/2006/1940 - http://aluigi.altervista.org/adv/pbwebbof-adv.txt
CVE ID: CVE-2006-2588 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Russcom PHPImages allows remote attackers to upload files of arbitrary types by uploading a file with a .gif extension. NOTE: due to lack of specific information about attack vectors do not depend on the existence of another vulnerability, it is not clear whether this is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/434824/100/0/threaded - http://securityreason.com/securityalert/953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26649 - http://w
ed - http://securityreason.com/securityalert/953 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26649 - http://www.securityfocus.com/bid/18089
CVE ID: CVE-2006-2589 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in MyBB (aka MyBulletinBoard) 1.1.1 allows remote attackers to execute arbitrary SQL commands via the comma parameter. NOTE: it is not clear from the original report how this attack can succeed, since the demonstration URL uses a variable that is overwritten with static data in the extracted source code. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28520 - http://securityreason.com/securityalert/952 - http://www.secu
tps://exchange.xforce.ibmcloud.com/vulnerabilities/28520 - http://securityreason.com/securityalert/952 - http://www.securityfocus.com/archive/1/434728/100/0/threaded
CVE ID: CVE-2006-2590 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in e107 before 0.7.5 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20262 - http://e107.org/comment.php?comment.news.788 - http://www.vupen.com/english/advisories/2006/1963 - http://www.osvdb.org/25739
CVE ID: CVE-2006-2591 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in e107 before 0.7.5 has unknown impact and remote attack vectors related to an "emailing exploit". Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20262 - http://e107.org/comment.php?comment.news.788 - http://www.vupen.com/english/advisories/2006/1963 - http://www.osvdb.org/25740
CVE ID: CVE-2006-2592 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.031Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in DSChat 1.0 allows remote attackers to execute arbitrary PHP code via the Nickname field, which is not sanitized before creating a file in a user directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26642 - http://www.vupen.com/english/advisories/2006/1961 - http://www.osvdb
xchange.xforce.ibmcloud.com/vulnerabilities/26642 - http://www.vupen.com/english/advisories/2006/1961 - http://www.osvdb.org/25735
CVE ID: CVE-2006-2593 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T19:40:12.471Z Description: No description available.
CVE ID: CVE-2006-2594 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T22:36:24.280Z Description: No description available.
CVE ID: CVE-2006-2595 State: REJECTED Published: 2006-05-25T10:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2006-2596 State: REJECTED Published: 2006-05-25T10:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2006-2597 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T19:25:08.561Z Description: No description available.
CVE ID: CVE-2006-2598 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-17T03:49:06.832Z Description: No description available.
CVE ID: CVE-2006-2599 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T23:31:56.247Z Description: No description available.
CVE ID: CVE-2006-2600 State: REJECTED Published: 2006-05-25T10:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2006-2601 State: REJECTED Published: 2006-05-25T10:00:00 Last Updated: 2007-08-22T09:00:00 Description: No description available.
CVE ID: CVE-2006-2602 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T20:07:42.199Z Description: No description available.
CVE ID: CVE-2006-2603 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-17T01:15:55.759Z Description: No description available.
CVE ID: CVE-2006-2604 State: REJECTED Published: 2006-05-25T10:00:00Z Last Updated: 2024-09-16T22:45:40.598Z Description: No description available.
CVE ID: CVE-2006-2605 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in DSChat 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the chatbox, probably involving the ctext parameter to send.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20258 - http://www.securityfocus.com/archive/1/434821/100/0/threaded - http://securityreason.com/securityalert/958 - http://www.osvdb.org/25734 - http://www.vupen.com/english/advisories/2006/1961 - http://www.securityfocus.com/bid/18084 -
ttp://www.osvdb.org/25734 - http://www.vupen.com/english/advisories/2006/1961 - http://www.securityfocus.com/bid/18084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26641 - http://securitytracker.com/id?1016148
CVE ID: CVE-2006-2606 State: PUBLISHED Published: 2006-05-25T10:00:00 Last Updated: 2024-08-07T17:58:51.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Chatty, possibly 1.0.2 and other versions, allows remote attackers to inject arbitrary web script or HTML via the username. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016152 - http://www.securityfocus.com/archive/1/434819/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26631 - http://www.securityfocus.com/bid/18082 - http://www.vupen.com/english/advisories/2006/1962 - http://secunia.com/advisories/20259 - http
rityfocus.com/bid/18082 - http://www.vupen.com/english/advisories/2006/1962 - http://secunia.com/advisories/20259 - http://securityreason.com/securityalert/963
CVE ID: CVE-2006-2607 State: PUBLISHED Published: 2006-05-25T20:00:00 Last Updated: 2024-08-07T17:58:51.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: do_command.c in Vixie cron (vixie-cron) 4.1 does not check the return code of a setuid call, which might allow local users to gain root privileges if setuid fails in cases such as PAM failures or resource limits, as originally demonstrated by a program that exceeds the process limits as defined in /etc/security/limits.conf. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435033/100/0/threaded - http://www.vupen.com/english/advisories/2006/2075 - https://bugzilla.redhat.co
cus.com/archive/1/435033/100/0/threaded - http://www.vupen.com/english/advisories/2006/2075 - https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=178431 - http://support.avaya.com/elmodocs2/security/ASA-2006-168.htm - http://www.securityfocus.com/bid/18108 - http://bugs.gentoo.org/show_bug.cgi?id=134194 - http://secunia.com/advisories/20388 - http://securitytracker.com/id?1016480 - https://usn.ubuntu.com/778-1/ - http://www.novell.com/linux/security/advisories/2006-05-32.html - http://secunia.com/advisories/35318 - http://secunia.com/advisories/21032 - http://security.gentoo.org/glsa/glsa-200606-07.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A
oo.org/glsa/glsa-200606-07.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10213 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26691 - http://www.redhat.com/support/errata/RHSA-2006-0539.html - http://secunia.com/advisories/20616 - http://secunia.com/advisories/21702 - http://secunia.com/advisories/20380
CVE ID: CVE-2006-2608 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.133Z Vendors: n/a Products: n/a Problem Types: n/a Description: artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the logfile parameter in a direct request to log.php, which causes the $logfile variable to be redefined to an attacker-controlled value, as demonstrated by injecting PHP code into info.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1930 - http://securityreason.com/securityalert/957 - https:
: References: - http://www.vupen.com/english/advisories/2006/1930 - http://securityreason.com/securityalert/957 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26597 - http://www.securityfocus.com/bid/18047 - http://www.securityfocus.com/archive/1/434738/100/0/threaded - http://secunia.com/advisories/20204
CVE ID: CVE-2006-2609 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.085Z Vendors: n/a Products: n/a Problem Types: n/a Description: artmedic newsletter 4.1.2 and possibly other versions, when register_globals is enabled, allows remote attackers to modify arbitrary files and execute arbitrary PHP code via the email parameter to newsletter_log.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1930 - http://secunia.com/advisories/20204
CVE ID: CVE-2006-2610 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in view.php in phpRaid 2.9.5 allows remote attackers to inject arbitrary web script or HTML via the (1) URL query string and the (2) Sort parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/962 - http://www.securityfocus.com/bid/18042 - http://www.securityfocus.com/archive/1/434736/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26599
CVE ID: CVE-2006-2611 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in includes/Sanitizer.php in the variable handler in MediaWiki 1.6.x before r14349 allows remote attackers to inject arbitrary Javascript via unspecified vectors, possibly involving the usage of the | (pipe) character. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25713 - http://nickj.org/MediaWiki - http://bugzilla.wikimedia.org/show_bug.cgi?id=6055 - http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html - https://exchange.xforce.ib
/show_bug.cgi?id=6055 - http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035812.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26646 - http://svn.wikimedia.org/viewvc/mediawiki?view=rev&revision=14349 - http://www.vupen.com/english/advisories/2006/1926 - http://svn.wikimedia.org/viewvc/mediawiki/trunk/phase3/includes/Sanitizer.php?r1=14349&r2=14348&pathrev=14349 - http://mail.wikipedia.org/pipermail/wikitech-l/2006-May/035814.html - http://secunia.com/advisories/20189
CVE ID: CVE-2006-2612 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: Novell Client for Windows 4.8 and 4.9 does not restrict access to the clipboard contents while a machine is locked, which allows users with physical access to read the current clipboard contents by pasting them into the "User Name" field on the login prompt. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20194 - http://www.securityfocus.com/archive/1/434704/100/0/threaded - http://www.osvdb.org/25760 - http://securityreason.com/securityalert/961 - http://www.securityfocus.com/arc
0/threaded - http://www.osvdb.org/25760 - http://securityreason.com/securityalert/961 - http://www.securityfocus.com/archive/1/434724/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26595
CVE ID: CVE-2006-2613 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://secunia.com/advisories/20244 - https://exchange.xforce.ibmcloud.com/vul
security/advisories?name=MDKSA-2006:145 - http://secunia.com/advisories/20244 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26667 - http://secunia.com/advisories/20255 - http://secunia.com/advisories/21532 - http://www.securityfocus.com/archive/1/434696/100/0/threaded - http://secunia.com/advisories/20256 - https://bugzilla.mozilla.org/show_bug.cgi?id=267645 - https://bugzilla.mozilla.org/attachment.cgi?id=164547 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://securityreason.com/securityalert/960
CVE ID: CVE-2006-2614 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sun N1 System Manager 1.1 for Solaris 10 before patch 121161-01 records system passwords in the world-readable scripts (1) /cr/hd_jobs_db.sh, (2) /cr/hd_plan_checkin.sh, and (3) /cr/oracle_plan_checkin.sh, which allows local users to obtain System Manager passwords. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20127 - http://securitytracker.com/id?1016119 - http://www.securityfocus.com/bid/18023 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1 - http://www.vu
tp://www.securityfocus.com/bid/18023 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102024-1 - http://www.vupen.com/english/advisories/2006/1851 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26521
CVE ID: CVE-2006-2615 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: ping.php in Russcom.Ping allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18090 - http://securityreason.com/securityalert/956 - http://secunia.com/advisories/20236 - http://www.vupen.com/english/advisories/2006/1938 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26651 - http://www.securityfocus.com/archive/1/434825/100/0/threaded
CVE ID: CVE-2006-2616 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search script in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to execute arbitrary SQL commands via the uri parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26653 - http://securityreason.com/securityalert/955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26658 - http://www.vupen.com/english/advisories/2006/1972 - http://www.securityfocus.com/archi
cloud.com/vulnerabilities/26658 - http://www.vupen.com/english/advisories/2006/1972 - http://www.securityfocus.com/archive/1/434912/100/0/threaded - http://secunia.com/advisories/20276 - http://secunia.com/advisories/20278 - http://www.vupen.com/english/advisories/2006/1973
CVE ID: CVE-2006-2617 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26656 - http://securityreason.com/securityal
ulnerabilities/26661 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26656 - http://securityreason.com/securityalert/955 - http://www.sitepoint.com/forums/showthread.php?t=311969 - http://www.vupen.com/english/advisories/2006/1972 - http://www.securityfocus.com/archive/1/434912/100/0/threaded - http://secunia.com/advisories/20276 - http://secunia.com/advisories/20278 - http://www.vupen.com/english/advisories/2006/1973
CVE ID: CVE-2006-2618 State: PUBLISHED Published: 2006-05-26T01:00:00 Last Updated: 2024-08-07T17:58:51.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an auto-approve mechanism exists, this issue is a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/955 - http://www.sitepoint.com/forums/showthread.php?t=311969 - https:
rences: - http://securityreason.com/securityalert/955 - http://www.sitepoint.com/forums/showthread.php?t=311969 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26666 - http://www.securityfocus.com/archive/1/434912/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26665