Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
/advisories/2006/1676 - http://www.securityfocus.com/bid/17857 - http://www.gentoo.org/security/en/glsa/glsa-200605-12.xml - http://secunia.com/advisories/20065 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26264 - https://www.exploit-db.com/exploits/1750 - http://www.osvdb.org/25279
CVE ID: CVE-2006-2237 State: PUBLISHED Published: 2006-05-08T23:00:00 Last Updated: 2024-08-07T17:43:28.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface for AWStats 6.4 and 6.5, when statistics updates are enabled, allows remote attackers to execute arbitrary code via shell metacharacters in the migrate parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20710 - http://secunia.com/advisories/20186 - http://awstats.sourceforge.net/awstats_security_news.php - http://www.debian.org/security/2006/dsa-1058 - http://secunia.com/advisories/20496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26287 - http:
2006/dsa-1058 - http://secunia.com/advisories/20496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26287 - http://www.vupen.com/english/advisories/2006/1678 - http://www.osreviews.net/reviews/comm/awstats - http://secunia.com/advisories/20170 - http://www.osvdb.org/25284 - https://usn.ubuntu.com/285-1/ - http://www.vuxml.org/freebsd/2df297a2-dc74-11da-a22b-000c6ec775d9.html - http://secunia.com/advisories/19969 - http://security.gentoo.org/glsa/glsa-200606-06.xml - http://www.novell.com/linux/security/advisories/2006_33_awstats.html - http://www.securityfocus.com/bid/17844
CVE ID: CVE-2006-2238 State: PUBLISHED Published: 2006-05-12T21:00:00 Last Updated: 2024-08-07T17:43:28.744Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20069 - http://www.osvdb.org/24820 - http://lists.apple.com/archives/security-announce/2006/May/msg00002.html
dvisories/20069 - http://www.osvdb.org/24820 - http://lists.apple.com/archives/security-announce/2006/May/msg00002.html - http://securitytracker.com/id?1016067 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26402 - http://www.us-cert.gov/cas/techalerts/TA06-132B.html - http://www.security-protocols.com/sp-x27-advisory.php - http://www.securityfocus.com/bid/17953 - http://www.vupen.com/english/advisories/2006/1778
CVE ID: CVE-2006-2239 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in readarticle.php in Newsadmin 1.1 allows remote attackers to execute arbitrary SQL commands via the nid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1669 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26247 - http://secunia.com/advisories/19972 - http://www.osvdb.org/25276 - http://www.securityfocus.com/bid/17854 - http://evuln.com/vulns/133/summary.html
CVE ID: CVE-2006-2240 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the (1) web cache or (2) web proxy in Fujitsu NetShelter/FW allows remote attackers to cause a denial of service (device unresponsiveness) via certain DNS packets, as demonstrated by the OUSPG PROTOS DNS test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26081 - http://www.kb.cert.org/vuls/id/955777 - http://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.h
ttp://www.niscc.gov.uk/niscc/docs/re-20060425-00312.pdf?lang=en - http://www.niscc.gov.uk/niscc/docs/br-20060425-00311.html?lang=en - http://secunia.com/advisories/19894 - http://www.securityfocus.com/bid/17791
CVE ID: CVE-2006-2241 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in show.php in Fast Click SQL Lite 1.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: This is a different vulnerability than CVE-2006-2175. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016022 - http://www.osvdb.org/25275 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26235 - http://www.securityfocus.com/archive/1/432962/100/0/threaded - http://securityreason.com/security
ulnerabilities/26235 - http://www.securityfocus.com/archive/1/432962/100/0/threaded - http://securityreason.com/securityalert/846 - http://www.aria-security.net/advisory/fc/fastclicksqllite.txt - http://www.securityfocus.com/bid/17819 - http://www.vupen.com/english/advisories/2006/1672 - http://secunia.com/advisories/19976
CVE ID: CVE-2006-2242 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: acFTP 1.4 allows remote attackers to cause a denial of service (application crash) via a long string with "{" (brace) characters to the USER command. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19978 - http://www.vupen.com/english/advisories/2006/1674 - http://www.securityfocus.com/bid/17855 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26258 - http://www.osvdb.org/25278 - https://www.exploit-db.com/exploits/1749
CVE ID: CVE-2006-2243 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Web4Future News Portal allow remote attackers to inject arbitrary web script or HTML via the ID parameter to (1) comentarii.php or (2) view.php. NOTE: this issue might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25288 - http://securitytracker.com/id?1016027 - http://www.osvdb.org/25287 - http://secunia.com/advisories/17880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26259
CVE ID: CVE-2006-2244 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Web4Future News Portal allow remote attackers to execute arbitrary SQL commands via the ID parameter to (1) comentarii.php or (2) view.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26260 - http://www.osvdb.org/25286 - http://securitytracker.com/id?1016027 - http://www.osvdb.org/25285 - http://secunia.com/advisories/17880
CVE ID: CVE-2006-2245 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in auction\auction_common.php in Auction mod 1.3m for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1641 - http://secunia.com/advisories/19944 - http://www.osvdb.org/25263 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26192 - http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html - http://www.secu
ud.com/vulnerabilities/26192 - http://pridels0.blogspot.com/2006/05/phpbb-auction-mod-remote-file.html - http://www.securityfocus.com/bid/17822
CVE ID: CVE-2006-2246 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in UBlog 1.6 Access Edition allows remote attackers to inject arbitrary web script or HTML via text fields when adding a blog entry. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26267 - http://www.vupen.com/english/advisories/2006/1671 - http://secunia.com/advisories/19981 - http://colander.altervista.org/advisory/UBlog.txt - http://www.securityfocus.com/archive/1/433557/100/0/threaded - http://www.osvdb.org/25274
ista.org/advisory/UBlog.txt - http://www.securityfocus.com/archive/1/433557/100/0/threaded - http://www.osvdb.org/25274 - http://www.securityfocus.com/bid/17856
CVE ID: CVE-2006-2247 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebCalendar 1.0.1 to 1.0.3 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17853 - http://www.osvdb.org/25280 - http://www.debian.org/security/2006/dsa-1056 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26262 - http://secunia.com/advisories/20108 - http://www.securityfocus.com/archive/1/433077/100/0/threaded - http://secunia.co
- http://secunia.com/advisories/20108 - http://www.securityfocus.com/archive/1/433077/100/0/threaded - http://secunia.com/advisories/19974 - http://www.securityfocus.com/archive/1/433053/100/0/threaded
CVE ID: CVE-2006-2248 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: Xeneo Web Server 2.2.22.0 allows remote attackers to obtain the source code of script files via crafted requests containing dot, space, and slash characters in the file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1682 - http://secunia.com/secunia_research/2006-20/advisory/ - http://secunia.com/advisories/19325 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26294 - http://www.securityfocus.com/bid/17858 - http://www.osvdb.org/25283
CVE ID: CVE-2006-2249 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in search.php in CuteNews 1.4.1 and earlier, and possibly 1.4.5, allow remote attackers to inject arbitrary web script or HTML via the (1) user, (2) story, or (3) title parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1683 - http://securityreason.com/securityalert/860 - http://secunia.com/advisories/20026 - http://www.securityfocus.com/archive/1/433058/100/0/threaded - http://www.osvdb.org/25304 - http:/
om/advisories/20026 - http://www.securityfocus.com/archive/1/433058/100/0/threaded - http://www.osvdb.org/25304 - http://neosecurityteam.net/index.php?action=advisories&id=21 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26270 - http://www.securityfocus.com/bid/17850
CVE ID: CVE-2006-2250 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.735Z Vendors: n/a Products: n/a Problem Types: n/a Description: CuteNews 1.4.1 allows remote attackers to obtain sensitive information via a direct request to (1) /inc/show.inc.php or (2) /inc/functions.inc.php, which reveal the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25306 - http://securityreason.com/securityalert/860 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26271 - http://www.securityfocus.com/archive/1/433058/100/0/threaded - http://www.osvdb.org/25305
CVE ID: CVE-2006-2251 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17851 - http://archives.neohapsis.com/archives/bugtraq/2006-05/0142.html - http://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost - http://secunia.com/advisories/19973 - https://
p://forums.invisionpower.com/index.php?showtopic=214248&view=getnewpost - http://secunia.com/advisories/19973 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26290 - http://www.osvdb.org/25252 - http://www.securityfocus.com/archive/1/433076
CVE ID: CVE-2006-2252 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in submit.php in OpenFAQ 0.4.0 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/850 - http://www.vupen.com/english/advisories/2006/1684 - http://www.osvdb.org/25350 - http://www.securityfocus.com/archive/1/433120/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26286 - http://www.securityfocus.com/bid/17860 - http://secunia.com/adviso
/exchange.xforce.ibmcloud.com/vulnerabilities/26286 - http://www.securityfocus.com/bid/17860 - http://secunia.com/advisories/20018
CVE ID: CVE-2006-2253 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.905Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25448 - http://www.vupen.com/english/advisories/2006/1685 - https://www.exploit-db.com/exploits/1752 - http://www.securityfocus.com/bid/17887 - http://secunia.com/advisories/20031 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26276
CVE ID: CVE-2006-2254 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in filecpnt.exe in FileCOPA 1.01 allows remote attackers to cause a denial of service (application crash) via a username with a large number of newline characters. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25436 - http://blacksecurity.org/exploits/38/FILECOPA_V1.01_and_Below_Pre_Authentication_Remote_Overflow/111.html - http://www.vupen.com/english/advisories/2006/1679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26300 - http://www.securityfocus.com/bid/1788
dvisories/2006/1679 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26300 - http://www.securityfocus.com/bid/17881 - http://secunia.com/advisories/20033
CVE ID: CVE-2006-2255 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.193Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Creative Community Portal 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter to (a) ArticleView.php, (2) forum_id parameter to (b) DiscView.php or (c) Discussions.php, (3) event_id parameter to (d) EventView.php, (4) AddVote and (5) answer_id parameter to (e) PollResults.php, or (7) mid parameter to (f) DiscReply.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25308 - http://pridels0.blogs
php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25308 - http://pridels0.blogspot.com/2006/05/creative-community-portal-vuln.html - http://secunia.com/advisories/19999 - http://www.osvdb.org/25307 - http://www.securityfocus.com/bid/17890 - http://www.osvdb.org/25309 - http://www.osvdb.org/25312 - http://www.osvdb.org/25311 - http://www.vupen.com/english/advisories/2006/1688 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26313 - http://www.osvdb.org/25310
CVE ID: CVE-2006-2256 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.027Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/dbal.php in EQdkp 1.3.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the eqdkp_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26357 - http://www.vupen.com/english/advisories/2006/1693 - https://www.exploit-db.com/exploits/1764 - http://www.osvdb.org/25339 - http://www.securityfocus.com/bid/17888
CVE ID: CVE-2006-2257 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in easyEvent 1.2 allows remote attackers to inject arbitrary web script or HTML via the curr_year parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/26332 - http://secunia.com/advisories/20038 - http://www.securityfocus.com/bid/17891 - http://securitytracker.com/id?1016105 - http://www.vupen.com/english/advisories/2006/1695 - http://www.osvdb.org/25341
CVE ID: CVE-2006-2258 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:29.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to inject arbitrary web script or HTML via the Error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1700 - http://www.securityfocus.com/bid/17892 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26310 - http://www.osvdb.org/25446 - http://secunia.com/advisories/20039 - http://securitytracker.com/id?1016093
CVE ID: CVE-2006-2259 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Logon.asp in MaxxSchedule 1.0 allows remote attackers to execute arbitrary SQL commands via the txtLogon parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1700 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26309 - http://www.securityfocus.com/bid/17892 - http://secunia.com/advisories/20039 - http://securitytracker.com/id?1016093 - http://www.osvdb.org/25447
CVE ID: CVE-2006-2260 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the project module (project.module) in Drupal 4.5 and 4.6 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17885 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26358 - http://www.vupen.com/english/advisories/2006/1697 - http://secunia.com/advisories/19997 - http://drupal.org/node/62406
CVE ID: CVE-2006-2261 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in day.php in ACal 2.2.6 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1763 - http://www.vupen.com/english/advisories/2006/1692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26278 - http://secunia.com/advisories/20041 - http://www.securityfocus.com/bid/17886 - http://www.osvdb.org/25340
CVE ID: CVE-2006-2262 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.899Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in singapore 0.9.7 allows remote attackers to inject arbitrary web script or HTML via the image parameter. Additional Analyst Notes: - CVE Program Container: References: - http://downloads.securityfocus.com/vulnerabilities/exploits/singapore-0.9.7-xss.txt - http://www.osvdb.org/25706 - http://www.securityfocus.com/archive/1/433250/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/26352 - http://securityreason.com/securityalert/854 - http://securitytracke
exchange.xforce.ibmcloud.com/vulnerabilities/26352 - http://securityreason.com/securityalert/854 - http://securitytracker.com/id?1016055 - http://www.sgal.org/files/download/20060512-xss-patch.zip - http://www.securityfocus.com/bid/17874
CVE ID: CVE-2006-2263 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.740Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in shopcurrency.asp in VP-ASP 6.00 allows remote attackers to execute arbitrary SQL commands via the cid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17882 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26337 - http://secunia.com/advisories/20004 - http://www.vupen.com/english/advisories/2006/1703 - https://www.exploit-db.com/exploits/1759 - http://www.osvdb.org/25449
CVE ID: CVE-2006-2264 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Ocean12 Calendar Manager Pro 1.00 allow remote attackers to execute arbitrary SQL commands via the (1) date parameter to admin/main.asp, (2) SearchFor parameter to admin/view.asp, or (3) ID parameter to admin/edit.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/25345 - http://www.vupen.com/english/advisories/2006/1705 - http://sec
ram Container: References: - http://www.osvdb.org/25345 - http://www.vupen.com/english/advisories/2006/1705 - http://secunia.com/advisories/20036 - http://www.osvdb.org/25346 - http://www.osvdb.org/25344 - http://www.securityfocus.com/bid/17877 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26334
CVE ID: CVE-2006-2265 State: PUBLISHED Published: 2006-05-09T10:00:00 Last Updated: 2024-08-07T17:43:28.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in admin/main.asp in Ocean12 Calendar Manager Pro 1.00 allows remote attackers to inject arbitrary web script or HTML via the date parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1705 - http://secunia.com/advisories/20036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26335 - http://www.osvdb.org/253
p://secunia.com/advisories/20036 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26335 - http://www.osvdb.org/25347 - http://www.securityfocus.com/bid/17877