Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-3582 State: PUBLISHED Published: 2006-07-13T19:00:00 Last Updated: 2024-08-07T18:30:34.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in Audacious AdPlug 2.0 and earlier allow remote user-assisted attackers to execute arbitrary code via the size specified in the package header of (1) CFF, (2) MTK, (3) DMO, and (4) U6M files. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/2697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27670 - http://secunia.com/advisories/21238 - http://www.osvdb.org/27043 - http://www.osvdb.org/27044 - https://exchange.xforce.ibmc
://secunia.com/advisories/21238 - http://www.osvdb.org/27043 - http://www.osvdb.org/27044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27677 - http://secunia.com/advisories/21295 - http://www.osvdb.org/27042 - http://www.securityfocus.com/bid/18859 - http://www.osvdb.org/27047 - http://security.gentoo.org/glsa/glsa-200609-06.xml - http://secunia.com/advisories/21869 - http://adplug.cvs.sourceforge.net/adplug/adplug/src/cff.cpp?r1=1.16&r2=1.17 - http://aluigi.altervista.org/adv/adplugbof-adv.txt - http://security.gentoo.org/glsa/glsa-200607-13.xml - http://www.securityfocus.com/archive/1/439432/100/100/threaded - http://secunia.com/advisories/20972
CVE ID: CVE-2006-3583 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:30:34.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to hijack web sessions via a crafted link and the administrator section. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19303 - http://www.securityfocus.com/archive/1/441980/100/0/threaded - http://securityreason.com/securityalert/1339 - http://www.osvdb.org/27710 - http://secunia.com/secunia_research/2006-57/advisory/ - http://secunia.com/advisories/20889
CVE ID: CVE-2006-3584 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:30:34.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19303 - http://www.securityfocus.com/archive/1/441980/100/0/threaded - http://securityreason.com/securityalert/1339 - http://secunia.com/secunia_research/2006-57/advisory/ - http://secunia.com/advisories/20889
CVE ID: CVE-2006-3585 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:30:34.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS 2.1 SR1 allow remote attackers to inject arbitrary web script or HTML via the (1) login parameter in admin/cms/index.php, (2) unspecified parameters in the "Supply news" page in formmail.php, (3) the URL in the "Site statistics" page, and the (5) query_string parameter when performing a search. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27714 - http://www.osvdb.org/27713 - http://www.securityfocus.com/bid/19303 - http:/
References: - http://www.osvdb.org/27714 - http://www.osvdb.org/27713 - http://www.securityfocus.com/bid/19303 - http://www.osvdb.org/27712 - http://www.securityfocus.com/archive/1/441980/100/0/threaded - http://securityreason.com/securityalert/1339 - http://secunia.com/secunia_research/2006-57/advisory/ - http://secunia.com/advisories/20889 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28164
CVE ID: CVE-2006-3586 State: PUBLISHED Published: 2006-08-08T23:00:00 Last Updated: 2024-08-07T18:30:34.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Jetbox CMS 2.1 SR1 allows remote attackers to execute arbitrary SQL commands via the (1) frontsession COOKIE parameter and (2) view parameter in index.php, and the (3) login parameter in admin/cms/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/28168 - http://www.securityfocus.com/bid/19303 - http://www.securityfocus.com/archive/1/441980/100/0/threaded - http://securityreason.com/securityalert/1339 - http://secunia.c
/www.securityfocus.com/archive/1/441980/100/0/threaded - http://securityreason.com/securityalert/1339 - http://secunia.com/secunia_research/2006-57/advisory/ - http://secunia.com/advisories/20889
CVE ID: CVE-2006-3587 State: PUBLISHED Published: 2006-07-13T21:00:00 Last Updated: 2024-08-07T18:30:34.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to execute arbitrary commands via a malformed .swf file that results in "multiple improper memory access" errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3573 - http://secunia.com/advisories/22054 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27601 - http://www.securityfocus.com/bid/18894 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://secun
ies/27601 - http://www.securityfocus.com/bid/18894 - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://secunia.com/advisories/22268 - http://www.vupen.com/english/advisories/2006/4507 - http://www.securityfocus.com/bid/19980 - http://secunia.com/advisories/22187 - http://secunia.com/advisories/20971 - http://www.vupen.com/english/advisories/2006/2702 - http://www.vupen.com/english/advisories/2006/3852 - http://secunia.com/advisories/22882 - http://www.kb.cert.org/vuls/id/474593 - http://secunia.com/advisories/21865 - http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html - http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html - http://security
unce/2006/Sep/msg00002.html - http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html - http://securitytracker.com/id?1016829 - http://secunia.com/advisories/21901 - http://www.adobe.com/support/security/bulletins/apsb06-11.html - http://www.redhat.com/support/errata/RHSA-2006-0674.html - http://www.vupen.com/english/advisories/2006/3577 - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A709 - http://securitytracker.com/id?1016448 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1050 - https://docs.microsoft.com/en-us/security-upda
ity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1050 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 - http://security.gentoo.org/glsa/glsa-200610-02.xml
CVE ID: CVE-2006-3588 State: PUBLISHED Published: 2006-07-13T21:00:00 Last Updated: 2024-08-07T18:30:34.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Adobe (Macromedia) Flash Player 8.0.24.0 allows remote attackers to cause a denial of service (browser crash) via a malformed, compressed .swf file, a different issue than CVE-2006-3587. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3573 - http://secunia.com/advisories/22054 - http://www.securityfocus.com/bid/18894 - http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-21.html - http://www.us-cert.gov/cas/techalerts/TA06-318A.html
http://www.fortinet.com/FortiGuardCenter/advisory/FG-2006-21.html - http://www.us-cert.gov/cas/techalerts/TA06-318A.html - http://securitytracker.com/id?1016449 - http://www.osvdb.org/28733 - http://secunia.com/advisories/22268 - http://www.vupen.com/english/advisories/2006/4507 - http://www.securityfocus.com/bid/19980 - http://secunia.com/advisories/22187 - http://www.vupen.com/english/advisories/2006/2702 - http://www.vupen.com/english/advisories/2006/3852 - http://secunia.com/advisories/22882 - http://secunia.com/advisories/21865 - http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27602 - https://oval.cisecurity
y-announce/2006/Sep/msg00002.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/27602 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A432 - http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html - http://securitytracker.com/id?1016829 - http://secunia.com/advisories/21901 - http://www.adobe.com/support/security/bulletins/apsb06-11.html - http://www.redhat.com/support/errata/RHSA-2006-0674.html - http://www.vupen.com/english/advisories/2006/3577 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069 - http://security.gentoo.org/glsa/glsa-200610-02.xml
CVE ID: CVE-2006-3589 State: PUBLISHED Published: 2006-07-19T23:00:00 Last Updated: 2024-08-07T18:30:34.466Z Vendors: n/a Products: n/a Problem Types: n/a Description: vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be created with an unsafe umask that allows local users to read or modify the SSL key. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/support/esx21/doc/esx-213-200612-patch.html - http://www.securityfocus.com/bid/19060 - http://secunia.com/advisories/23680 - http://secunia.com/advisories/21120 - http://securitytrac
ityfocus.com/bid/19060 - http://secunia.com/advisories/23680 - http://secunia.com/advisories/21120 - http://securitytracker.com/id?1016536 - http://www.vmware.com/support/esx2/doc/esx-202-200612-patch.html - http://www.vmware.com/support/esx25/doc/esx-254-200612-patch.html - http://www.securityfocus.com/archive/1/440583/100/0/threaded - http://www.vupen.com/english/advisories/2006/2880 - http://www.securityfocus.com/bid/19062 - http://www.securityfocus.com/archive/1/456546/100/200/threaded - http://www.osvdb.org/27418 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27881 - http://kb.vmware.com/kb/2467205 - http://www.securityfocus.com/archive/1/441082/100/0/threaded - http://www.vmwar
7881 - http://kb.vmware.com/kb/2467205 - http://www.securityfocus.com/archive/1/441082/100/0/threaded - http://www.vmware.com/support/esx25/doc/esx-253-200612-patch.html
CVE ID: CVE-2006-3590 State: PUBLISHED Published: 2006-07-14T18:00:00 Last Updated: 2024-08-07T18:30:34.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: mso.dll, as used by Microsoft PowerPoint 2000 through 2003, allows user-assisted attackers to execute arbitrary commands via a malformed shape container in a PPT file that leads to memory corruption, as exploited by Trojan.PPDropper.B, a different issue than CVE-2006-1540 and CVE-2006-3493. Additional Analyst Notes: - CVE Program Container: References: - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-048 - http://secunia.com/advisories/21040 - http://isc.sans.org/diary.php?storyid=1484 - http://s
itybulletins/2006/ms06-048 - http://secunia.com/advisories/21040 - http://isc.sans.org/diary.php?storyid=1484 - http://securityresponse.symantec.com/avcenter/venc/data/trojan.ppdropper.b.html - http://blogs.securiteam.com/?p=508 - http://www.securityfocus.com/archive/1/440532/100/0/threaded - http://www.securityfocus.com/archive/1/440255/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27781 - http://www.securityfocus.com/archive/1/440137/100/0/threaded - http://www.us-cert.gov/cas/techalerts/TA06-220A.html - http://www.vupen.com/english/advisories/2006/2795 - http://securitytracker.com/id?1016496 - http://www.kb.cert.org/vuls/id/936945 - http://www.osvdb.org/27324 - htt
/2795 - http://securitytracker.com/id?1016496 - http://www.kb.cert.org/vuls/id/936945 - http://www.osvdb.org/27324 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27740 - http://www.securityfocus.com/bid/18957 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A399
CVE ID: CVE-2006-3591 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.377Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (application crash) by accessing the URL property of a TriEditDocument.TriEditDocument object before it has been initialized, which triggers a NULL pointer dereference. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27675 - http://www.vupen.com/english/advisories/2006/2765 - http://browserfun.blogspot.com/2006/07/mobb-12-trieditdocument-url.html - http://www.osvdb.org/27056 -
ories/2006/2765 - http://browserfun.blogspot.com/2006/07/mobb-12-trieditdocument-url.html - http://www.osvdb.org/27056 - http://www.securityfocus.com/bid/18946
CVE ID: CVE-2006-3592 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.506Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to execute arbitrary commands with elevated privileges via unspecified vectors, involving "certain CLI commands," aka bug CSCse11005. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/27160 - http://securitytracker.com/id?1016475 - http://www.securityfocus.com/bid/18952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27689 - http://www.cisco.com/w
://www.securityfocus.com/bid/18952 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27689 - http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml - http://www.vupen.com/english/advisories/2006/2774 - http://secunia.com/advisories/21030
CVE ID: CVE-2006-3593 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.465Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command line interface (CLI) in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows local users to overwrite arbitrary files by redirecting a command's output to a file or folder, aka bug CSCse31704. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016475 - http://www.securityfocus.com/bid/18952 - http://www.cisco.com/en/US/products/products_security_advisory09186a00806e0b9f.shtml - http://www.vupen.com/english/advisories/2006/2774 - http://www.osvdb.org/27161 - htt
ty_advisory09186a00806e0b9f.shtml - http://www.vupen.com/english/advisories/2006/2774 - http://www.osvdb.org/27161 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27690 - http://secunia.com/advisories/21030
CVE ID: CVE-2006-3594 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Cisco Unified CallManager (CUCM) 5.0(1) through 5.0(3a) allows remote attackers to execute arbitrary code via a long hostname in a SIP request, aka bug CSCsd96542. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016475 - http://www.securityfocus.com/bid/18952 - http://www.osvdb.org/27162 - http://www.cisco.com/warp/public/707/cisco-sa-20060712-cucm.shtml - http://www.vupen.com/english/advisories/2006/2774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2
-cucm.shtml - http://www.vupen.com/english/advisories/2006/2774 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27691 - http://secunia.com/advisories/21030
CVE ID: CVE-2006-3595 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/205225 - http://securitytracker.com/id?1016476 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27688 - http://www.securityfocus.com/bid/18953 - http://www.osvdb.org/27159 - http://secunia.com/adv
com/vulnerabilities/27688 - http://www.securityfocus.com/bid/18953 - http://www.osvdb.org/27159 - http://secunia.com/advisories/21028 - http://www.vupen.com/english/advisories/2006/2773 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5826 - http://www.cisco.com/warp/public/707/cisco-sa-20060712-crws.shtml
CVE ID: CVE-2006-3596 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:30:34.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: The device driver for Intel-based gigabit network adapters in Cisco Intrusion Prevention System (IPS) 5.1(1) through 5.1(p1), as installed on various Cisco Intrusion Prevention System 42xx appliances, allows remote attackers to cause a denial of service (kernel panic and possibly network outage) via a crafted IP packet. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016474 - http://secunia.com/advisories/21029 - http://www.securityfocus.com/bid/18955 - https://exchange.xforce.ib
m/id?1016474 - http://secunia.com/advisories/21029 - http://www.securityfocus.com/bid/18955 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27692 - http://www.vupen.com/english/advisories/2006/2772 - http://www.cisco.com/warp/public/707/cisco-sa-20060712-ips.shtml - http://www.osvdb.org/27163
CVE ID: CVE-2006-3597 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: passwd before 1:4.0.13 on Ubuntu 6.06 LTS leaves the root password blank instead of locking it when the administrator selects the "Go Back" option after the final "Installation complete" message and uses the main menu, which causes the password to be zeroed out in the installer's memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.ubuntu.com/usn/usn-316-1 - http://www.osvdb.org/27091 - http://secunia.com/advisories/21022
CVE ID: CVE-2006-3598 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438596/100/200/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27501 - http://www.securityfocus.com/bid/27879 - https://www.exploit-db.com/exploits/5154
CVE ID: CVE-2006-3599 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads parameter in an EditAds op. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/438817/100/100/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27501
CVE ID: CVE-2006-3600 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.584Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the LookupTRM::lookup function in libtunepimp (TunePimp) 0.4.2 allow remote user-assisted attackers to cause a denial of service (application crash) and possibly execute code via a long (1) Album release date (MBE_ReleaseGetDate), (2) data, or (3) error strings. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/27728 - http://bugs.musicbrainz.org/ticket/1764 - http://secunia.com/advisories/21277 - http://www.debian.org/
abilities/27728 - http://bugs.musicbrainz.org/ticket/1764 - http://secunia.com/advisories/21277 - http://www.debian.org/security/2006/dsa-1135 - http://securitytracker.com/id?1016539 - http://secunia.com/advisories/21323 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:126 - http://secunia.com/advisories/21106 - http://secunia.com/advisories/21027 - http://security.gentoo.org/glsa/glsa-200607-11.xml - http://www.osvdb.org/27094 - http://secunia.com/advisories/21026 - http://www.securityfocus.com/bid/18961 - http://www.ubuntu.com/usn/usn-318-1 - http://www.vupen.com/english/advisories/2006/2785
CVE ID: CVE-2006-3601 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** UNVERIFIABLE ** Unspecified vulnerability in an unspecified DNN Modules module for DotNetNuke (.net nuke) allows remote attackers to gain privileges via unspecified vectors, as used in an attack against the Microsoft France web site. NOTE: due to the lack of details and uncertainty about which product is affected, this claim is not independently verifiable. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016332 - http://www.securityfocus.com/bid/18522 - http://www.zone-h.org/c
: References: - http://securitytracker.com/id?1016332 - http://www.securityfocus.com/bid/18522 - http://www.zone-h.org/content/view/4770/31/
CVE ID: CVE-2006-3602 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in jscripts/tiny_mce/tiny_mce_gzip.php in FarsiNews 3.0 BETA 1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the language parameter in the advanced theme. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1016464 - http://forum.farsinewsteam.com/showthread.php?p=16 - http://www.securityfocus.com/archive/1/440757/100/0/threaded - http://www.securityfocus.com/bid/18925 - https://exchange
http://www.securityfocus.com/archive/1/440757/100/0/threaded - http://www.securityfocus.com/bid/18925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/27650 - http://www.securityfocus.com/archive/1/439664/100/0/threaded
CVE ID: CVE-2006-3603 State: PUBLISHED Published: 2006-07-14T20:00:00 Last Updated: 2024-08-07T18:39:52.961Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.digitalarmaments.com/2006300687985463.html - http://www.securityfocus.com/archive/1/439648/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27655 - http://www.securityfocus.com/bid/18936 - http://secunia.com/advisories/20994 - http://www.securityfocus.com/archi
7655 - http://www.securityfocus.com/bid/18936 - http://secunia.com/advisories/20994 - http://www.securityfocus.com/archive/1/450478/100/0/threaded - http://www.securityfocus.com/archive/1/440893/100/100/threaded