Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-5538 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request. Additional Analyst Notes: - CVE Program Container: References: - http://www.eazel.es/advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html - http://www.securityfocus.com/archive/1/449486/100/0/threaded
CVE ID: CVE-2006-5539 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.298Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cfg[homepath] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22565 - https://www.exploit-db.com/exploits/2640 - http://www.securityfocus.com/bid/20719 - http://www.osvdb.org/30015 - http://www.vupen.com/english/advisories/2006/4186 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29775
CVE ID: CVE-2006-5540 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization." Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 - http://www.ubuntu.com/usn/usn-369-2 - http://securitytracker.com/id?1017115 - http://projects.commandprompt.com/public/pgsql/changeset/2550
om/usn/usn-369-2 - http://securitytracker.com/id?1017115 - http://projects.commandprompt.com/public/pgsql/changeset/25504 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - http://www.vupen.com/english/advisories/2006/4182 - http://secunia.com/advisories/22606 - http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html - http://www.postgresql.org/about/news.664 - http://secunia.com/advisories/24284 - http://secunia.com/advisories/23048 - http://secunia.com/advisories/24577 - http://www.novell.com/linux/security/advisories/2006_27_sr.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425 - http://support.avaya.com/el
tps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11425 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://secunia.com/advisories/23132 - http://www.ubuntu.com/usn/usn-369-1 - http://secunia.com/advisories/22636 - http://www.redhat.com/support/errata/RHSA-2007-0064.html - http://www.redhat.com/support/errata/RHSA-2007-0067.html - ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc - http://www.trustix.org/errata/2006/0059/ - http://secunia.com/advisories/22562 - http://secunia.com/advisories/22584 - http://www.securityfocus.com/bid/20717 - http://secunia.com/advisories/24094
CVE ID: CVE-2006-5541 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: backend/parser/parse_coerce.c in PostgreSQL 7.4.1 through 7.4.14, 8.0.x before 8.0.9, and 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) via a coercion of an unknown element to ANYARRAY. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 - http://www.ubuntu.com/usn/usn-369-2 - http://securitytracker.com/id?1017115 - http://projects.commandprompt.com/public/pgsql/changeset/26457 - http://www.redhat.com
/securitytracker.com/id?1017115 - http://projects.commandprompt.com/public/pgsql/changeset/26457 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - http://www.vupen.com/english/advisories/2006/4182 - http://secunia.com/advisories/22606 - http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html - http://www.postgresql.org/about/news.664 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10905 - http://secunia.com/advisories/23048 - http://secunia.com/advisories/24577 - http://www.novell.com/linux/security/advisories/2006_27_sr.html - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://secunia.com/advisori
/advisories/2006_27_sr.html - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://secunia.com/advisories/23132 - http://www.ubuntu.com/usn/usn-369-1 - http://secunia.com/advisories/22636 - http://www.redhat.com/support/errata/RHSA-2007-0067.html - http://www.trustix.org/errata/2006/0059/ - http://secunia.com/advisories/22562 - http://secunia.com/advisories/22584 - http://www.securityfocus.com/bid/20717
CVE ID: CVE-2006-5542 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: backend/tcop/postgres.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service (daemon crash) related to duration logging of V3-protocol Execute messages for (1) COMMIT and (2) ROLLBACK SQL statements. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:194 - http://www.ubuntu.com/usn/usn-369-2 - http://securitytracker.com/id?1017115 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - http://www.vupen.com/
http://securitytracker.com/id?1017115 - http://www.redhat.com/support/errata/RHSA-2007-0068.html - http://www.vupen.com/english/advisories/2006/4182 - http://secunia.com/advisories/22606 - http://support.novell.com/techcenter/psdb/59650c03a8bc5ae310cd7898bd106ad2.html - http://www.postgresql.org/about/news.664 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10122 - http://secunia.com/advisories/23048 - http://secunia.com/advisories/24577 - http://www.novell.com/linux/security/advisories/2006_27_sr.html - http://projects.commandprompt.com/public/pgsql/changeset/25953 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://secunia.com/ad
.com/public/pgsql/changeset/25953 - http://support.avaya.com/elmodocs2/security/ASA-2007-117.htm - http://secunia.com/advisories/23132 - http://www.ubuntu.com/usn/usn-369-1 - http://secunia.com/advisories/22636 - http://www.redhat.com/support/errata/RHSA-2007-0067.html - http://www.trustix.org/errata/2006/0059/ - http://secunia.com/advisories/22562 - http://secunia.com/advisories/22584 - http://www.securityfocus.com/bid/20717
CVE ID: CVE-2006-5543 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD), when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20668 - https://www.exploit-db.com/exploits/2612 - http://www.securityfocus.com/bid/20677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29696 - http://www.attrition.org/pipermail/vim/2006-Octob
d/20677 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29696 - http://www.attrition.org/pipermail/vim/2006-October/001097.html - http://securityreason.com/securityalert/1783 - http://www.securityfocus.com/archive/1/449475/100/0/threaded
CVE ID: CVE-2006-5544 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0), which causes the address bar to omit some characters from the URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20728 - http://www.securityfocus.com/archive/1/449917/100/0/threaded - http://www.kb.cert.org/vuls/id/347188 - http://blogs.technet.com/msrc/archive/2006/10/
archive/1/449917/100/0/threaded - http://www.kb.cert.org/vuls/id/347188 - http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx - http://securitytracker.com/id?1017122 - http://secunia.com/advisories/22542 - http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/ - http://www.osvdb.org/30022 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29827
CVE ID: CVE-2006-5545 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/19866 - http://securitytracker.com/id?1017094 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29676 - http://secunia.com/advisories/22490 - http://securityresponse.symantec.com/avcenter/security/Content/2006.10.19.html - http://www.
unia.com/advisories/22490 - http://securityresponse.symantec.com/avcenter/security/Content/2006.10.19.html - http://www.osvdb.org/29895 - http://www.vupen.com/english/advisories/2006/4118
CVE ID: CVE-2006-5546 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.3.0 through 1.4.1 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][classes] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29719 - http://www.securityfocus.com/bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - http://secunia.com/advisories/22577 -
cus.com/bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - http://secunia.com/advisories/22577 - https://www.exploit-db.com/exploits/2622 - http://www.vupen.com/english/advisories/2006/4180
CVE ID: CVE-2006-5547 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.0.0 through 1.0.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][otscms][directories][includes] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29719 - http://www.securityfocus.com/bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - http://secunia.com/advisories/22577 -
ocus.com/bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - http://secunia.com/advisories/22577 - https://www.exploit-db.com/exploits/2622 - http://www.vupen.com/english/advisories/2006/4180
CVE ID: CVE-2006-5548 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 2.0.0 through 2.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config][directories][classes] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29719 - http://www.securityfocus.com/bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - https://www.exploit-db.com/exploits/2622 - htt
bid/20694 - http://attrition.org/pipermail/vim/2006-October/001096.html - https://www.exploit-db.com/exploits/2622 - http://secunia.com/advisories/22548 - http://www.vupen.com/english/advisories/2006/4180
CVE ID: CVE-2006-5549 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.176Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libraries/amfphp/amf-core/custom/CachedGateway.php in Adobe PHP SDK allows remote attackers to execute arbitrary PHP code via the AMFPHP_BASE parameter. NOTE: this issue has been disputed by a third-party researcher who states that AMFPHP_BASE is a constant Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/449576/100/0/threaded - http://www.securityfocus.com/archive/1/449616/100/0/threaded - https://exchange.xforce.ibmcloud.com/vul
100/0/threaded - http://www.securityfocus.com/archive/1/449616/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29776 - http://securityreason.com/securityalert/1784
CVE ID: CVE-2006-5550 State: PUBLISHED Published: 2006-10-26T17:00:00Z Last Updated: 2024-09-16T20:58:33.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The kernel in FreeBSD 6.1 and OpenBSD 4.0 allows local users to cause a denial of service via unspecified vectors involving certain ioctl requests to /dev/crypto. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20713 - http://elegerov.blogspot.com/2006/10/here-is-lame-proof-of-concept-code-for.html - http://secunia.com/advisories/22543
CVE ID: CVE-2006-5551 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in QK SMTP 3.01 and earlier might allow remote attackers to execute arbitrary code via a long argument to the RCPT TO command. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017114 - http://www.securityfocus.com/bid/20681 - https://www.exploit-db.com/exploits/2625 - http://secunia.com/advisories/22563 - http://www.vupen.com/english/advisories/2006/4169
CVE ID: CVE-2006-5552 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial of service (CPU consumption or application crash) or execute arbitrary code via a long argument to the (1) MAIL FROM or (2) RCPT TO command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20709 - http://secunia.com/advisories/22559 - http://www.vupen.com/english/advisories/2006/4181 - https://www.exploit-db.com/exploits/2650 - https://exchange.xforce.ibmcloud.c
w.vupen.com/english/advisories/2006/4181 - https://www.exploit-db.com/exploits/2650 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29803
CVE ID: CVE-2006-5553 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Security Agent (CSA) for Linux 4.5 before 4.5.1.657 and 5.0 before 5.0.0.193, as used by Unified CallManager (CUCM) and Unified Presence Server (CUPS), allows remote attackers to cause a denial of service (resource consumption) via a port scan with certain options. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017118 - http://www.securityfocus.com/bid/20737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29829 - http://www.osvdb.org/30055 - http://www.cisco.com/en/
737 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29829 - http://www.osvdb.org/30055 - http://www.cisco.com/en/US/products/products_security_advisory09186a00807693c7.shtml - http://www.vupen.com/english/advisories/2006/4198 - http://secunia.com/advisories/22574
CVE ID: CVE-2006-5554 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Imageview 5 allows remote attackers to read or execute arbitrary local files via a .. (dot dot) in the user_settings cookie, as demonstrated by using the MyFile parameter in albumview.php to upload a text/plain .gif file containing PHP code, which is executed by index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2647 - http://www.vupen.com/english/advisories/2006/4188 - http://www.securityfocus.com/bid/20731 - http://
com/exploits/2647 - http://www.vupen.com/english/advisories/2006/4188 - http://www.securityfocus.com/bid/20731 - http://secunia.com/advisories/22552
CVE ID: CVE-2006-5555 State: PUBLISHED Published: 2006-10-26T17:00:00 Last Updated: 2024-08-07T19:55:53.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to execute arbitrary PHP code via the langage parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2596 - http://secunia.com/advisories/22508 - http://www.securityfocus.com/bid/20624 - http://www.vupen.com/english/advisories/2006/4167 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29671 - http://www.attrition.org/pipermail/vim/2006-October/001098.html
CVE ID: CVE-2006-5556 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long TZ environment variable. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2636 - http://blogs.23.nu/prdelka/stories/13144/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/29777 - http://www.securityfocus.com/bid/20718
CVE ID: CVE-2006-5557 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via a long -S argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33993 - http://www.securityfocus.com/bid/20706 - https://www.exploit-db.com/exploits/2633 - http://blogs.23.nu/prdelka/stories/13144/ - http
ecurityfocus.com/bid/20706 - https://www.exploit-db.com/exploits/2633 - http://blogs.23.nu/prdelka/stories/13144/ - http://www.securityfocus.com/bid/20735 - http://osvdb.org/33994 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5035 - https://www.exploit-db.com/exploits/2634
CVE ID: CVE-2006-5558 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to execute arbitrary code via format string specifiers in the -s argument. NOTE: this might be a duplicate of CVE-2006-2574, but the details relating to CVE-2006-2574 are too vague to be certain. Additional Analyst Notes: - CVE Program Container: References: - http://blogs.23.nu/prdelka/stories/13144/ - http://www.securityfocus.com/bid/20726 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
44/ - http://www.securityfocus.com/bid/20726 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5804 - https://www.exploit-db.com/exploits/2635
CVE ID: CVE-2006-5559 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connection.2.8) in the Microsoft Data Access Components (MDAC) 2.5 SP3, 2.7 SP1, 2.8, and 2.8 SP1 does not properly track freed memory when the second argument is a BSTR, which allows remote attackers to cause a denial of service (Internet Explorer crash) and possibly execute arbitrary code via certain strings in the second and third arguments. Additional Analyst Notes: - CVE Program Container: References: - http://se
in strings in the second and third arguments. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1017127 - https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-009 - http://www.securityfocus.com/bid/20704 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A214 - http://secunia.com/advisories/22452 - http://www.us-cert.gov/cas/techalerts/TA07-044A.html - http://research.eeye.com/html/alerts/zeroday/20061027.html - http://www.kb.cert.org/vuls/id/589272 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29837 - http://www.osvdb.org/31882 - http://blogs.technet.com/msrc/archive/2006/10/2
xforce.ibmcloud.com/vulnerabilities/29837 - http://www.osvdb.org/31882 - http://blogs.technet.com/msrc/archive/2006/10/27/adodb-connection-poc-published.aspx - http://www.vupen.com/english/advisories/2007/0578
CVE ID: CVE-2006-5560 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in heading.php in Boesch ProgSys 0.151 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin/index.php, and unspecified vectors related to certain other files. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29770 - http://www.securityfocus.com/archive/1/449571
m/bid/20720 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29770 - http://www.securityfocus.com/archive/1/449571/100/0/threaded - http://securityreason.com/securityalert/1782 - http://www.vigilon.com/advisories/vg-progsys-24-10-2006.txt - http://www.vupen.com/english/advisories/2006/4194 - http://secunia.com/advisories/22532
CVE ID: CVE-2006-5561 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL commands via the cdb_auth cookie. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22534 - https://www.exploit-db.com/exploits/2644 - http://www.vupen.com/english/advisories/2006/4210 - http://www.securityfocus.com/bid/20734
CVE ID: CVE-2006-5562 State: PUBLISHED Published: 2006-10-27T16:00:00 Last Updated: 2024-08-07T19:55:53.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote attackers to execute arbitrary PHP code via the sys_dbtype parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29751 - https://www.exploit-db.com/exploits/2623 - http://www.securityfocus.com/bid/20692