Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
unia.com/advisories/21358 - https://issues.rpath.com/browse/RPL-536 - https://issues.rpath.com/browse/RPL-537 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://security.gentoo.org/glsa/glsa-200608-04.xml - http://secunia.com/advisories/21343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065 - http://www.ubuntu.com/usn/usn-354-1 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/27991 - http://www.debian.org/security/2006/dsa-1159
CVE ID: CVE-2006-3811 State: PUBLISHED Published: 2006-07-27T20:00:00 Last Updated: 2024-08-07T18:48:38.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javascript that leads to memory corruption, including (1) nsListControlFrame::FireMenuItemActiveEvent, (2) buffer overflows in the string class in out-of-memory conditions, (3) table row and column groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) runni
groups, (4) "anonymous box selectors outside of UA stylesheets," (5) stale references to "removed nodes," and (6) running the crypto.generateCRMFRequest callback on deleted context. Additional Analyst Notes: - CVE Program Container: References: - http://www.debian.org/security/2006/dsa-1161 - http://secunia.com/advisories/21243 - http://www.redhat.com/support/errata/RHSA-2006-0608.html - http://security.gentoo.org/glsa/glsa-200608-02.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - http://www.mozilla.org/security/announce/2006/mfsa2006-55.html - http://www.securityfocus.com/bid/19181 - http://www.us-cert.gov/cas/tech
a.org/security/announce/2006/mfsa2006-55.html - http://www.securityfocus.com/bid/19181 - http://www.us-cert.gov/cas/techalerts/TA06-208A.html - http://secunia.com/advisories/22055 - http://www.vupen.com/english/advisories/2006/2998 - http://www.ubuntu.com/usn/usn-361-1 - http://www.securityfocus.com/archive/1/441333/100/0/threaded - http://secunia.com/advisories/21529 - http://secunia.com/advisories/21216 - http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.vupen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://securitytracke
upen.com/english/advisories/2006/3749 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - http://securitytracker.com/id?1016588 - https://usn.ubuntu.com/329-1/ - http://www.vupen.com/english/advisories/2007/2350 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/22210 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27992 - http://secunia.com/advisories/21607 - http://securitytracker.com/id?1016586 - http://secunia.com/advisories/19873 - http://secunia.com/advisories/21262 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/ad
ries/21262 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - https://usn.ubuntu.com/327-1/ - http://secunia.com/advisories/21361 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://secunia.com/advisories/21275 - http://secunia.com/advisories/21246 - http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html - http://secunia.com/advisories/21229 - http://secunia.com/advisories/21675 - http://securitytracker.com/id?1016587 - http://www.securityfocus.com/archive/1/446658/100/200/th
.com/advisories/21675 - http://securitytracker.com/id?1016587 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.redhat.com/support/errata/RHSA-2006-0611.html - http://secunia.com/advisories/21228 - http://secunia.com/advisories/21250 - http://www.ubuntu.com/usn/usn-350-1 - http://www.securityfocus.com/archive/1/446657/100/200/threaded - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102971-1 - http://secunia.com/advisories/22342 - http://secunia.com/advisories/21358 - https://issues.rpath.com/browse/RPL-536 - https://issues.rpath.com/browse/RPL-537 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://security.gentoo.org/gl
owse/RPL-537 - http://secunia.com/advisories/22066 - http://secunia.com/advisories/21269 - http://security.gentoo.org/glsa/glsa-200608-04.xml - http://secunia.com/advisories/21343 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9934 - http://secunia.com/advisories/25839 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://secunia.com/advisories/22065 - http://www.kb.cert.org/vuls/id/527676 - http://www.ubuntu.com/usn/usn-354-1 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
CVE ID: CVE-2006-3812 State: PUBLISHED Published: 2006-07-29T00:00:00 Last Updated: 2024-08-07T18:48:38.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21243 - http://www.redhat.com/support/errata/RHSA-2006-0608.html - http://security.gentoo.org/glsa/glsa-200608-02.xml - http://www.kb.cert.org/vuls/id/398492 - http://www.mandriva.com/security/advisories?name=MDKSA-2
sa/glsa-200608-02.xml - http://www.kb.cert.org/vuls/id/398492 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:145 - http://www.vupen.com/english/advisories/2006/3748 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11013 - http://www.securityfocus.com/bid/19181 - http://secunia.com/advisories/22055 - http://www.securityfocus.com/archive/1/441333/100/0/threaded - http://secunia.com/advisories/21529 - http://secunia.com/advisories/21216 - http://www.gentoo.org/security/en/glsa/glsa-200608-03.xml - http://www.redhat.com/support/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.redhat.com/support/errata/RHSA-2006-0
port/errata/RHSA-2006-0594.html - http://secunia.com/advisories/21336 - http://www.redhat.com/support/errata/RHSA-2006-0610.html - https://usn.ubuntu.com/329-1/ - http://www.mandriva.com/security/advisories?name=MDKSA-2006:146 - http://rhn.redhat.com/errata/RHSA-2006-0609.html - http://secunia.com/advisories/22210 - http://secunia.com/advisories/21607 - http://securitytracker.com/id?1016586 - http://secunia.com/advisories/19873 - http://secunia.com/advisories/21262 - http://secunia.com/advisories/21532 - http://secunia.com/advisories/21270 - http://www.vupen.com/english/advisories/2008/0083 - https://usn.ubuntu.com/327-1/ - http://secunia.com/advisories/21361 - http://secunia.com/advisories/
isories/2008/0083 - https://usn.ubuntu.com/327-1/ - http://secunia.com/advisories/21361 - http://secunia.com/advisories/21631 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27993 - http://secunia.com/advisories/21275 - http://secunia.com/advisories/21246 - http://www.novell.com/linux/security/advisories/2006_48_seamonkey.html - http://secunia.com/advisories/21229 - http://securitytracker.com/id?1016587 - http://www.securityfocus.com/archive/1/446658/100/200/threaded - http://www.mozilla.org/security/announce/2006/mfsa2006-56.html - http://www.ubuntu.com/usn/usn-350-1 - https://issues.rpath.com/browse/RPL-536 - http://se
nounce/2006/mfsa2006-56.html - http://www.ubuntu.com/usn/usn-350-1 - https://issues.rpath.com/browse/RPL-536 - http://secunia.com/advisories/22066 - http://security.gentoo.org/glsa/glsa-200608-04.xml - http://secunia.com/advisories/21343 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:143 - http://www.ubuntu.com/usn/usn-354-1 - ftp://patches.sgi.com/support/free/security/advisories/20060703-01-U.asc
CVE ID: CVE-2006-3813 State: PUBLISHED Published: 2006-08-11T21:00:00 Last Updated: 2024-08-07T18:48:37.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE-2005-0155, which allows local users to overwrite arbitrary files with debugging information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21646 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9456 - http://rhn.redhat.com/errata/RHSA-2006-0605.html - http://support.avaya.com/elmodocs2/security/ASA-2006-163.htm
CVE ID: CVE-2006-3814 State: PUBLISHED Published: 2006-07-24T22:00:00 Last Updated: 2024-08-07T18:48:38.636Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Loader_XM::load_instrument_internal function in loader_xm.cpp for Cheese Tracker 0.9.9 and earlier allows user-assisted attackers to execute arbitrary code via a crafted file with a large amount of extra data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19115 - http://securityreason.com/securityalert/1291 - http://aluigi.altervista.org/adv/cheesebof-adv.txt - http://secunia.com/advisories/21759 - http://www.gentoo.org/security/en/glsa/glsa-200610-13.x
rg/adv/cheesebof-adv.txt - http://secunia.com/advisories/21759 - http://www.gentoo.org/security/en/glsa/glsa-200610-13.xml - http://www.securityfocus.com/archive/1/440962/100/0/threaded - http://www.debian.org/security/2006/dsa-1166 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27957 - http://secunia.com/advisories/22643
CVE ID: CVE-2006-3815 State: PUBLISHED Published: 2006-07-24T22:00:00 Last Updated: 2024-08-07T18:48:39.154Z Vendors: n/a Products: n/a Problem Types: n/a Description: heartbeat.c in heartbeat before 2.0.6 sets insecure permissions in a shmget call for shared memory, which allows local users to cause an unspecified denial of service via unknown vectors, possibly during a short time window on startup. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21231 - http://www.vupen.com/english/advisories/2006/2994 - http://security.gentoo.org/glsa/glsa-200608-23.xml - http://secunia.com/advisories/21629 - http://www.debian.org/security/2006/dsa-1128 - htt
o.org/glsa/glsa-200608-23.xml - http://secunia.com/advisories/21629 - http://www.debian.org/security/2006/dsa-1128 - http://www.mail-archive.com/linux-ha-cvs%40lists.linux-ha.org/msg00753.html - http://www.linux-ha.org/_cache/SecurityIssues__sec03.txt - http://www.mandriva.com/security/advisories?name=MDKSA-2006:142 - http://securitytracker.com/id?1016602 - http://secunia.com/advisories/21162 - http://www.securityfocus.com/bid/19186 - http://www.ubuntu.com/usn/usn-326-1 - http://secunia.com/advisories/21240 - http://secunia.com/advisories/21521 - http://cvs.linux-ha.org/viewcvs/viewcvs.cgi/linux-ha/heartbeat/heartbeat.c?r1=1.513&r2=1.514
CVE ID: CVE-2006-3816 State: PUBLISHED Published: 2006-07-24T22:00:00 Last Updated: 2024-08-07T18:48:37.980Z Vendors: n/a Products: n/a Problem Types: n/a Description: Krusader 1.50-beta1 up to 1.70.0 stores passwords for remote connections in cleartext in the bookmark file (krbookmarks.xml), which allows attackers to steal passwords by obtaining the file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19194 - http://groups.google.com/group/krusader-news/browse_thread/thread/ec719041ed4a1a14 - http://www.vupen.com/english/advisories/2006/2992 - http://krusader.sourceforge.net/phpBB/viewtopic.php?p=7965
CVE ID: CVE-2006-3817 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:48:39.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Novell GroupWise WebAccess 6.5 and 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via an encoded SCRIPT element in an e-mail message with the UTF-7 character set, as demonstrated by the "+ADw-SCRIPT+AD4-" sequence. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/442719/100/100/threaded - http://www.securityfocus.com/bid/19297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28211 - http://
threaded - http://www.securityfocus.com/bid/19297 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28211 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm - http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048593.html - http://secunia.com/advisories/21411 - http://www.novell.com/support/search.do?cmd=displayKC&externalId=3701584&sliceId=SAL_Public - http://www.vupen.com/english/advisories/2006/3098 - http://www.infobyte.com.ar/adv/ISR-14.html - http://securitytracker.com/id?1016648
CVE ID: CVE-2006-3818 State: PUBLISHED Published: 2006-08-11T10:00:00 Last Updated: 2024-08-07T18:48:38.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the login page in Novell GroupWise WebAccess 6.5 before 20060721 and WebAccess 7 before 20060727 allows remote attackers to inject arbitrary web script or HTML via the GWAP.version parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19297 - http://support.novell.com/cgi-bin/search/searchtid.cgi?/2974176.htm - https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.html - http://secunia.com/advisorie
https://secure-support.novell.com/KanisaPlatform/Publishing/228/3574517_f.SAL_Public.html - http://secunia.com/advisories/21411 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28210 - http://www.vupen.com/english/advisories/2006/3098 - http://securitytracker.com/id?1016648
CVE ID: CVE-2006-3819 State: PUBLISHED Published: 2006-07-27T01:00:00 Last Updated: 2024-08-07T18:48:38.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in the configure script in TWiki 4.0.0 through 4.0.4 allows remote attackers to execute arbitrary Perl code via an HTTP POST request containing a parameter name starting with "TYPEOF". Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28049 - http://securitytracker.com/id?1016603 - http://secunia.com/advisories/21235 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertCmdExecWithConfigure - http://www.securityfocus.com/bid/19188 - h
235 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertCmdExecWithConfigure - http://www.securityfocus.com/bid/19188 - http://www.osvdb.org/displayvuln.php?osvdb_id=27556 - http://www.vupen.com/english/advisories/2006/2995
CVE ID: CVE-2006-3820 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.726Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in loudblog/index.php in Loudblog before 0.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27849 - http://www.securityfocus.com/bid/19082 - http://www.vupen.com/english/advisories/2006/2901 - http://loudblog.de/forum/viewtopic.php?id=756 - http://secunia.com/advisories/21098 - http://www.securesky-tech.com/
CVE ID: CVE-2006-3821 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in ATutor 1.5.3 allow remote attackers to inject arbitrary web script or HTML via the (1) lang parameter in (a) index_list.php and (2) year, (3) month, and (4) day parameter in (b) registration.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/displayvuln.php?osvdb_id=28187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27619 - http://www.securityfocus.com/archive/1/439873/100/100/threaded - http://www.securityfocus.com/archive
rabilities/27619 - http://www.securityfocus.com/archive/1/439873/100/100/threaded - http://www.securityfocus.com/archive/1/439522 - http://secunia.com/advisories/21008 - http://www.osvdb.org/28186
CVE ID: CVE-2006-3822 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.415Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in GeodesicSolutions GeoAuctions Enterprise 1.0.6 allows remote attackers to execute arbitrary SQL commands via the d parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3133 - http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt - http://secunia.com/advisories/21325 - http://www.securityfocus.com/bid/19093
CVE ID: CVE-2006-3823 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in GeodesicSolutions (1) GeoAuctions Premier 2.0.3 and (2) GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/106367 - http://secunia.com/advisories/21340 - http://www.vupen.com/english/advisories/2006/3132 - http://www.packetstormsecurity.org/0607-exploits/geoauctionsSQL.txt - http://www.securityfocus.com/bid/67078 - http://secunia.com/advi
ketstormsecurity.org/0607-exploits/geoauctionsSQL.txt - http://www.securityfocus.com/bid/67078 - http://secunia.com/advisories/58308 - http://packetstormsecurity.com/files/126329/GeoCore-MAX-DB-7.3.3-Blind-SQL-Injection.html - http://www.exploit-db.com/exploits/33075 - http://www.securityfocus.com/bid/19093
CVE ID: CVE-2006-3824 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016555 - http://www.securityfocus.com/archive/1/440849/100/100/threaded - http://www.vupen.com/english/advisori
.com/id?1016555 - http://www.securityfocus.com/archive/1/440849/100/100/threaded - http://www.vupen.com/english/advisories/2006/2936 - http://secunia.com/advisories/21148 - http://www.idefense.com/intelligence/vulnerabilities/display.php?id=410 - http://www.securityfocus.com/bid/19104 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102343-1 - http://www.securityfocus.com/archive/1/440986/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27901
CVE ID: CVE-2006-3825 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:37.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly facilitating firewall bypass or unauthorized network communication. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102509-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27935 - http://www.securityfocus.com/bid/19108 - http://secunia.com/advisories/21163 - http://www.vupen.com/english/advisories/2006/2937
CVE ID: CVE-2006-3826 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) user_login, (2) full_name, and (3) URL parameters in register.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via the (4) cat_list and (5) key parameters in a certain portion of the admin interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066
he admin interface. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27771 - http://securitytracker.com/id?1016515 - http://www.vupen.com/english/advisories/2006/2849 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://www.acid-root.new.fr/advisories/boastmachine.txt - http://securityreason.com/securityalert/1252
CVE ID: CVE-2006-3827 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:37.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bmc/Inc/core/admin/search.inc.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to execute arbitrary SQL commands via the blog parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27769 - http://securitytracker.com/id?1016515 - http://www.vupen.com/english/advisories/2006/2849 - http://www.securityfocus.com/archive/1/440306
acker.com/id?1016515 - http://www.vupen.com/english/advisories/2006/2849 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://www.acid-root.new.fr/advisories/boastmachine.txt - http://securityreason.com/securityalert/1252
CVE ID: CVE-2006-3828 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:38.683Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incomplete blacklist vulnerability in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote authenticated administrators to bypass SQL injection protection mechanisms by using commas, quote characters, pound sign (#) characters, "UNION," and "SELECT," which are not filtered by the product, which only checks for "insert," "delete," "update," and "replace." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - http://securitytracker.com/id?1016515 - http://ww
Program Container: References: - http://secunia.com/advisories/21066 - http://securitytracker.com/id?1016515 - http://www.vupen.com/english/advisories/2006/2849 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://www.acid-root.new.fr/advisories/boastmachine.txt - http://securityreason.com/securityalert/1252
CVE ID: CVE-2006-3829 State: PUBLISHED Published: 2006-07-25T00:00:00 Last Updated: 2024-08-07T18:48:39.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in bmc/admin.php in Kailash Nadh boastMachine (formerly bMachine) 3.1 and earlier allows remote attackers to perform unauthorized actions as an administrator and delete arbitrary user accounts via a delete_user action. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21066 - http://securitytracker.com/id?1016515 - http://www.securityfocus.com/archive/1/440306/100/0/threaded - http://www.acid-root.new.fr/advisories/boastmachine.txt - h