Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3318 State: PUBLISHED Published: 2006-06-29T21:00:00 Last Updated: 2024-08-07T18:23:21.106Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type is phpraid, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) email parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-47/advisory/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/27459 - http://www.vupen.com/english/advisories/2006/2593 - http://www.securityfocus.com/archive/1/438706/100/0/threaded -
459 - http://www.vupen.com/english/advisories/2006/2593 - http://www.securityfocus.com/archive/1/438706/100/0/threaded - http://securityreason.com/securityalert/1173 - http://secunia.com/advisories/20865
CVE ID: CVE-2006-3319 State: PUBLISHED Published: 2006-06-30T01:00:00 Last Updated: 2024-08-07T18:23:21.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in rss/index.php in PHP iCalendar 2.22 and earlier allows remote attackers to inject arbitrary web script or HTML via the cal parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438621/100/0/threaded - http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-12-php-icalendar.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27448 - http://secunia.com/advisories/20883 - http://www.vupen.com/english/advisories/20
ce.ibmcloud.com/vulnerabilities/27448 - http://secunia.com/advisories/20883 - http://www.vupen.com/english/advisories/2006/2597 - http://securitytracker.com/id?1016402 - http://securityreason.com/securityalert/1175
CVE ID: CVE-2006-3320 State: PUBLISHED Published: 2006-06-30T01:00:00 Last Updated: 2024-08-07T18:23:21.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the command parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2568 - http://www.securityfocus.com/archive/1/482499/100/0/threaded - http://securityreason.com/securityalert/1174 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27421 - http://www.debian.org/security/2006/dsa-1130 - http://teamforge.net/v
change.xforce.ibmcloud.com/vulnerabilities/27421 - http://www.debian.org/security/2006/dsa-1130 - http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup - http://www.securityfocus.com/archive/1/438464/100/0/threaded - http://www.securityfocus.com/bid/26126 - http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-11-sitebar-cross-site.html - http://www.securityfocus.com/bid/18680 - http://secunia.com/advisories/21248 - http://www.osvdb.org/26869 - http://secunia.com/advisories/20841
CVE ID: CVE-2006-3321 State: PUBLISHED Published: 2006-06-30T10:00:00 Last Updated: 2024-08-07T18:23:21.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ofdisp and (2) ofmsgid parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27361 - http://pridels0.blogspot.com/2006/06/openforum-xss-vuln.html - http://www.osvdb.org/27623 - http://www.securityfocus.com/bid/19266
CVE ID: CVE-2006-3322 State: PUBLISHED Published: 2006-06-30T20:00:00 Last Updated: 2024-08-07T18:23:21.149Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in includes/functions_logging.php in phpRaid 3.0.5, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the log_hack function. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/secunia_research/2006-47/advisory/ - http://www.vupen.com/english/advisories/2006/2592 - http://www.securityfocus.com/archive/1/438706/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27458 - http://www.securityfocus.com/bid/18720 -
/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27458 - http://www.securityfocus.com/bid/18720 - http://securityreason.com/securityalert/1173 - http://secunia.com/advisories/20200
CVE ID: CVE-2006-3323 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:20.940Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrary PHP code via the page parameter. NOTE: the same vector can be used for cross-site scripting, but CVE analysis suggests that this is resultant from file inclusion of HTML or script. Additional Analyst Notes: - CVE Program Container: References: - http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-10-mf-piadas-10.html - http://www.osvdb.org/26867 - http://www.securityfocus.com/archive/1/438496/100/0/
urdish-security-10-mf-piadas-10.html - http://www.osvdb.org/26867 - http://www.securityfocus.com/archive/1/438496/100/0/threaded - http://secunia.com/advisories/20847 - http://www.vupen.com/english/advisories/2006/2567 - http://www.securityfocus.com/bid/18676 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27415 - http://www.osvdb.org/26868 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27412 - http://securityreason.com/securityalert/1172 - http://www.securityfocus.com/bid/18679
CVE ID: CVE-2006-3324 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer. Additional Analyst Notes: - CVE Program Container: References: - http://svn.icculus.org/quake3?rev=804&view=rev - http://www.securityfocus.com/archive/1/438660/100/0/threaded - http://www.securityfocus.com/archive/1/438515/100/0/threaded - http
.securityfocus.com/archive/1/438660/100/0/threaded - http://www.securityfocus.com/archive/1/438515/100/0/threaded - http://aluigi.altervista.org/adv/q3cfilevar-adv.txt - http://www.securityfocus.com/bid/18685 - http://secunia.com/advisories/20851 - http://securityreason.com/securityalert/1171 - http://secunia.com/advisories/20401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27486 - http://www.vupen.com/english/advisories/2006/2569
CVE ID: CVE-2006-3325 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server. NOTE: this can be combined with another vulnerability to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.secur
rability to overwrite arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438660/100/0/threaded - http://www.securityfocus.com/archive/1/438515/100/0/threaded - http://aluigi.altervista.org/adv/q3cfilevar-adv.txt - http://www.securityfocus.com/bid/18685 - http://secunia.com/advisories/20851 - http://securityreason.com/securityalert/1171 - http://secunia.com/advisories/20401 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27486 - http://www.vupen.com/english/advisories/2006/2569 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26889
CVE ID: CVE-2006-3326 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in QuickZip 3.06.3 allows remote user-assisted attackers to overwrite arbitrary files or directories via .. (dot dot) sequences in filenames within (1) TAR,(2) GZ, and (3) JAR archives. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26908 - http://www.vupen.com/english/advisories/2006/2599 - https://exchange.xforce.ibmcloud.com/vulnerabilitie
svdb.org/26908 - http://www.vupen.com/english/advisories/2006/2599 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27474 - http://www.securityfocus.com/bid/18722 - http://secunia.com/advisories/20864
CVE ID: CVE-2006-3327 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.186Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Custom dating biz dating script 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) sn20_special_cases parameter ("Special Cases" field) in profile/mini.php, (2) tyxx01_album_name parameter ("Album Name" field) in profile/photo_create.php, and the (3) u parameter in admin/user_view.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27398 - https://exchange.xforce.ibmcloud.com/vulnerabil
ferences: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27398 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27399 - http://www.vupen.com/english/advisories/2006/2534 - http://secunia.com/advisories/20839 - http://www.securityfocus.com/bid/18626 - http://marc.info/?l=bugtraq&m=115109990800428&w=2
CVE ID: CVE-2006-3328 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: new_ticket.cgi in Hostflow 2.2.1-15 allows remote attackers to steal and replay authentication credentials via an IMG tag in the desc parameter ("Ticket Description" field) that points to a URL that captures referer URLs, possibly due to a cross-site scripting (XSS) vulnerability or a leak of credentials in referer URLs. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/hostflow-vuln.html - http://www.osvdb.org/26872 - http://www.vupen.com/english/advisories/2006/2570 - http:
.com/2006/06/hostflow-vuln.html - http://www.osvdb.org/26872 - http://www.vupen.com/english/advisories/2006/2570 - http://www.securityfocus.com/bid/18695 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27426 - http://secunia.com/advisories/20863
CVE ID: CVE-2006-3329 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the rate parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18713 - http://www.securityfocus.com/archive/1/438667/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27453 - http://securitytracker.com/id?1016407 - http://securityreason.com/securityalert/1179
CVE ID: CVE-2006-3330 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in AddAsset1.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute arbitrary SQL commands via the (1) ProductName ("Title" field), (2) url, and (3) Description parameters, possibly related to issues in add1.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18717 - http://secunia.com/advisories/20880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27454 - http://www.securityfocus.com/bid/18713 - http:
ries/20880 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27454 - http://www.securityfocus.com/bid/18713 - http://www.securityfocus.com/archive/1/438667/100/0/threaded - http://www.vupen.com/english/advisories/2006/2589 - http://securitytracker.com/id?1016407 - http://securityreason.com/securityalert/1179
CVE ID: CVE-2006-3331 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera before 9.0 does not reset the SSL security bar after displaying a download dialog from an SSL-enabled website, which allows remote attackers to spoof a trusted SSL certificate from an untrusted website and facilitates phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016406 - http://www.novell.com/linux/security/advisories/2006_38_opera.html - http://secunia.com/advisories/20897 - http://www.securityfocus.com/bid/18692 - http://secunia.com/secunia_research/2
l - http://secunia.com/advisories/20897 - http://www.securityfocus.com/bid/18692 - http://secunia.com/secunia_research/2006-49/advisory/ - http://secunia.com/advisories/19480 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27449 - http://securityreason.com/securityalert/1177 - http://www.vupen.com/english/advisories/2006/2571 - http://www.securityfocus.com/archive/1/438634/100/0/threaded
CVE ID: CVE-2006-3332 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.107Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid, (4) sortby, (5) fromfrommethod, and (6) fromfromlist parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18681 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24372 - http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html - http://securitytracker.com/id?1016386
CVE ID: CVE-2006-3333 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.220Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified parameters, including the (1) frommethod, (2) list, and (3) method, which are reflected in an error message. NOTE: some of these vectors might be resultant from SQL injection. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/zorum-forum-35-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/19598
CVE ID: CVE-2006-3334 State: PUBLISHED Published: 2006-06-30T23:00:00 Last Updated: 2024-08-07T18:23:21.185Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the png_decompress_chunk function in pngrutil.c in libpng before 1.2.12 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors related to "chunk error processing," possibly involving the "chunk_name". Additional Analyst Notes: - CVE Program Container: References: - http://security.gentoo.org/glsa/glsa-200607-06.xml - http://www.securityfocus.com/bid/18698 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:209 - http://secunia.com
//www.securityfocus.com/bid/18698 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:209 - http://secunia.com/advisories/22956 - http://secunia.com/advisories/22958 - http://www.securityfocus.com/archive/1/440594/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_28_sr.html - http://www.vupen.com/english/advisories/2006/2585 - http://www.vupen.com/english/advisories/2008/0924/references - http://secunia.com/advisories/23335 - http://secunia.com/advisories/29420 - http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html - http://www.mandriva.com/security/advisories?name=MDKSA-2006:210 - http://security.gentoo.org/glsa/glsa-200812-15.xml - http://w
www.mandriva.com/security/advisories?name=MDKSA-2006:210 - http://security.gentoo.org/glsa/glsa-200812-15.xml - http://www.mandriva.com/security/advisories?name=MDKSA-2006:213 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:212 - http://sourceforge.net/project/shownotes.php?group_id=5624&release_id=428123 - http://www.novell.com/linux/security/advisories/2006_16_sr.html - http://docs.info.apple.com/article.html?artnum=307562 - http://secunia.com/advisories/33137 - https://issues.rpath.com/browse/RPL-517 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:211 - http://secunia.com/advisories/20960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27468 - http://sec
2006:211 - http://secunia.com/advisories/20960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27468 - http://secunia.com/advisories/22957
CVE ID: CVE-2006-3335 State: PUBLISHED Published: 2006-07-03T01:00:00 Last Updated: 2024-08-07T18:23:21.178Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5676 - http://www.vupen.com/english/advisories/2006/2614 - http://www.securityfocus.com/archive/1/438866/100/0/threaded - http://www.securityfocus.com/bid/18748 - http://www.securityfocus.com/archive/1/438866/100/0/threaded - http:
threaded - http://www.securityfocus.com/bid/18748 - http://www.securityfocus.com/archive/1/438866/100/0/threaded - http://securitytracker.com/id?1016410 - http://secunia.com/advisories/20934 - http://support.avaya.com/elmodocs2/security/ASA-2006-138.htm - https://exchange.xforce.ibmcloud.com/vulnerabilities/27583 - http://securityreason.com/securityalert/1178 - http://secunia.com/advisories/21514
CVE ID: CVE-2006-3336 State: PUBLISHED Published: 2006-07-05T20:00:00 Last Updated: 2024-08-07T18:23:21.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: TWiki 01-Dec-2000 up to 4.0.3 allows remote attackers to bypass the upload filter and execute arbitrary code via filenames with double extensions such as ".php.en", ".php.1", and other allowed extensions that are not .txt. NOTE: this is only a vulnerability when the server allows script execution in the pub directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2677 - http://secunia.com/advisories/20992 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFi
h/advisories/2006/2677 - http://secunia.com/advisories/20992 - http://twiki.org/cgi-bin/view/Codev/SecurityAlertSecureFileUploads - http://www.securityfocus.com/bid/18854 - http://securitytracker.com/id?1016458
CVE ID: CVE-2006-3337 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.182Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allows remote attackers to inject arbitrary web script or HTML via the file parameter. Additional Analyst Notes: - CVE Program Container: References: - http://bugzilla.cpanel.net/show_bug.cgi?id=4282 - http://www.securityfocus.com/archive/1/438477/100/0/threaded - http://www.vupen.com/english/advisories/2006/2547 - http://www.securityfocus.com/archive/1/438355/100/0/threaded - https://exchange.xforce.ibmcloud.com/v
sories/2006/2547 - http://www.securityfocus.com/archive/1/438355/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27403 - http://secunia.com/advisories/20840 - http://securitytracker.com/id?1016383 - http://www.securityfocus.com/bid/18655
CVE ID: CVE-2006-3338 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Atlassian JIRA 3.6.2-#156 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a direct request to secure/ConfigureReleaseNote.jspa, which are not sanitized before being returned in an error page. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2472 - http://www.securityfocus.com/bid/18575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27588 - http://secunia.com/advisories/20767
tyfocus.com/bid/18575 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27588 - http://secunia.com/advisories/20767 - http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html - http://www.osvdb.org/26744
CVE ID: CVE-2006-3339 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2472 - http://pridels0.blogspot.com/2006/06/atlassian-jira-information-disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27235 - http://ww
6/06/atlassian-jira-information-disclosure.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27235 - http://www.osvdb.org/26745 - http://jira.atlassian.com/browse/JRA-10542
CVE ID: CVE-2006-3340 State: PUBLISHED Published: 2006-07-03T18:00:00 Last Updated: 2024-08-07T18:23:21.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the (1) phpbb_root_path parameter in (a) includes/functions_cms.php and the (2) GlobalSettings[templatesDirectory] parameter in multiple files in the "includes" directory including (b) adminSensored.php, (c) adminBoards.php, (d) adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) a
adminAttachments.php, (e) adminAvatars.php, (f) adminBackupdatabase.php, (g) adminBanned.php, (h) adminForums.php, (i) adminPolls.php, (j) adminSmileys.php, (k) poll.php, and (l) move.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27169 - http://www.osvdb.org/27171 - https://www.exploit-db.com/exploits/1956 - http://www.osvdb.org/27173 - http://www.osvdb.org/27175 - http://www.osvdb.org/27168 - http://www.osvdb.org/27170 - http://www.osvdb.org/27174 - http://www.securityfocus.com/bid/18690 - http://www.osvdb.org/27177 - http://www.osvdb.org/27172 - http://secunia.com/advisories/20819 - http://www.osvdb.org/27178 - http://www.vupen.com/english/advis
.osvdb.org/27172 - http://secunia.com/advisories/20819 - http://www.osvdb.org/27178 - http://www.vupen.com/english/advisories/2006/2561 - http://www.osvdb.org/27176