Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1136 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows attackers to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23724 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25172 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.
ww.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - http://www.securityfocus.com/bid/17014 - http://securitytracker.com/id?1015738
CVE ID: CVE-2006-1137 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports". Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23726 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english
- http://www.osvdb.org/23726 - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - http://www.securityfocus.com/bid/17014 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25174 - http://www.osvdb.org/23725 - http://securitytracker.com/id?1015738 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25173
CVE ID: CVE-2006-1138 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows remote attackers to cause a denial of service (memory corruption) via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - https://exchange.xforce.ibmcloud.com/vulnerabili
om/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25175 - http://www.osvdb.org/23727 - http://www.securityfocus.com/bid/17014 - http://securitytracker.com/id?1015738
CVE ID: CVE-2006-1139 State: PUBLISHED Published: 2006-03-10T02:00:00 Last Updated: 2024-08-07T17:03:27.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, causes the Immediate Image Overwrite feature to fail after a power loss, which could leave data exposed to attack. Additional Analyst Notes: - CVE Program Container: References: - http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - https://exchange.xf
_002.pdf - http://www.vupen.com/english/advisories/2006/0857 - http://secunia.com/advisories/19146 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25176 - http://www.osvdb.org/23728 - http://securitytracker.com/id?1015738
CVE ID: CVE-2006-1140 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:28.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25122 - http://www.securityfocus.com/bid/17041 - http://www.vupen.com/english/advisories/2006/0894 - http://www.x128.net/redblog-05-remote-sql-injection.txt
CVE ID: CVE-2006-1141 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:28.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=6691&release_id=395211 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25065 - http://security.gentoo.org/glsa/glsa-200611-15.xml - http://www.osvdb.org/23705 - http://secunia.com/advisories/23019 - http://secunia.com/advisories/19262 - http://www.secur
ttp://www.osvdb.org/23705 - http://secunia.com/advisories/23019 - http://secunia.com/advisories/19262 - http://www.securityfocus.com/bid/16994 - http://www.vupen.com/english/advisories/2006/0852 - http://cvs.sourceforge.net/viewcvs.py/qmailadmin/qmailadmin/qmailadmin.c?r1=1.6.2.10&r2=1.6.2.11
CVE ID: CVE-2006-1142 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Ravenous Web Server before 0.7.1 allows remote attackers to access arbitrary rvplg files, with unknown impact. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?group_id=131871&release_id=399092 - http://www.osvdb.org/23706 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25191 - http://www.vupen.com/english/advisories/2006/0859 - http://www.securityfocus.com/bid/17013
CVE ID: CVE-2006-1143 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:28.199Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in FTPoed Blog Engine 1.1 allows remote attackers to inject arbitrary web script or HTML via the comment_body parameter, as used by the comment field, when posting a comment. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25138 - http://securitytracker.com/id?1015725 - http://www.securityfocus.com/archive/1/426828/100/0/threaded
CVE ID: CVE-2006-1144 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in HitHost 1.0.0 allows remote attackers to inject arbitrary web script or HTML via (1) the user parameter in deleteuser.php and (2) the hits parameter in viewuser.php. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25105 - http://www.osvdb.org/23758 - http://www.securityfocus.com/bid/17025 - http://secunia.com/advisories/19155 - http://www.securityfocus.com/archive/1/426931/100/0/threaded - http://www.osvdb.org/2375
/secunia.com/advisories/19155 - http://www.securityfocus.com/archive/1/426931/100/0/threaded - http://www.osvdb.org/23757 - http://www.vupen.com/english/advisories/2006/0886
CVE ID: CVE-2006-1145 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426984/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25199 - http://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/englis
force.ibmcloud.com/vulnerabilities/25199 - http://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/english/advisories/2006/0882 - http://secunia.com/advisories/19144 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html - http://www.securityfocus.com/bid/17028 - http://www.osvdb.org/23747
CVE ID: CVE-2006-1146 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:28.263Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code by sending a long message to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426984/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25200 - http://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/english/advisories/2006/0882 - http://www.osvdb.org/
p://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/english/advisories/2006/0882 - http://www.osvdb.org/23748 - http://secunia.com/advisories/19144 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html - http://www.securityfocus.com/bid/17028
CVE ID: CVE-2006-1147 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.635Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23749 - http://www.securityfocus.com/archive/1/426984/100/0/threaded - http://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/english/advisories/2006/0882
984/100/0/threaded - http://aluigi.altervista.org/adv/aa2k6x-adv.txt - http://www.vupen.com/english/advisories/2006/0882 - http://secunia.com/advisories/19144 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0147.html - http://www.securityfocus.com/bid/17028 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25201
CVE ID: CVE-2006-1148 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17040 - http://security.gentoo.org/glsa/glsa-200603-17.xml - http://www.vupen.com/english/advisories/2006/0900 - http://www.in
- http://security.gentoo.org/glsa/glsa-200603-17.xml - http://www.vupen.com/english/advisories/2006/0900 - http://www.infigo.hr/in_focus/INFIGO-2006-03-01 - http://www.securityfocus.com/archive/1/427160/100/0/threaded - http://www.osvdb.org/23777 - http://secunia.com/advisories/19291 - http://secunia.com/advisories/19169 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25113 - http://www.peercast.org/forum/viewtopic.php?t=3346
CVE ID: CVE-2006-1149 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:28.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in lib/OWL_API.php in OWL Intranet Engine 0.82, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the xrms_file_root parameter, which is not initialized before use. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/1561 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25082 - http://www.securityfocus.com/bid/17021 - http://www.osvdb.org/23734 - http://secunia.com/advisories/19142 - ht
s/25082 - http://www.securityfocus.com/bid/17021 - http://www.osvdb.org/23734 - http://secunia.com/advisories/19142 - http://www.vupen.com/english/advisories/2006/0868
CVE ID: CVE-2006-1150 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tenes Empanadas Graciela (TEG) 0.11.1, automatically appends an _ (underscore) to the end of duplicate nicknames, which allows remote attackers to cause a denial of service (application crash) by creating multiple users with long, identical nicknames, which triggers an off-by-one error. Additional Analyst Notes: - CVE Program Container: References: - http://aluigi.altervista.org/adv/tegob1-adv.txt - http://www.vupen.com/english/advisories/2006/0846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25165
adv.txt - http://www.vupen.com/english/advisories/2006/0846 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25165 - http://secunia.com/advisories/19134 - http://www.securityfocus.com/bid/16982
CVE ID: CVE-2006-1151 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.773Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script or HTML via the go parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427165/100/0/threaded - http://www.osvdb.org/23951 - http://biyosecurity.be/bugs/mphorum.txt - http://www.securityfocus.com/archive/1/477253/100/0/threaded - http://www.securityfocus.com/bid/25394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25312 - http://secunia.com/
ttp://www.securityfocus.com/bid/25394 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25312 - http://secunia.com/advisories/19121 - http://securityvulns.com/source13951.html - http://securityvulns.com/Ldocument750.html
CVE ID: CVE-2006-1152 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in M-Phorum 0.2 allows remote attackers to include arbitrary files via the go parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16977 - http://www.vupen.com/english/advisories/2006/0827 - http://secunia.com/advisories/19121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25102 - http://www.osvdb.o
- http://secunia.com/advisories/19121 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25102 - http://www.osvdb.org/23740
CVE ID: CVE-2006-1153 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in D2-Shoutbox 4.2 allows remote attackers to execute arbitrary SQL commands via the load parameter, when performing a Shoutbox action through Invision Power Board (IPB). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19132 - http://www.vupen.com/english/advisories/2006/0865 - http://www.securityfocus.com/bid/16984 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25074 - https://www.exploit-db.com/exploits/1556
CVE ID: CVE-2006-1154 State: PUBLISHED Published: 2006-03-10T11:00:00 Last Updated: 2024-08-07T17:03:27.518Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21807 - http://www.vupen.com/english/advisories/2006/3513 - http://secunia.com/advisories/23519 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31121 - http://www.vupen.com/english/advisories/2006/0826 - https://ex
ps://exchange.xforce.ibmcloud.com/vulnerabilities/31121 - http://www.vupen.com/english/advisories/2006/0826 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25064 - https://www.exploit-db.com/exploits/3027 - http://sx02.coresec.de/advisories/152.txt - http://www.securityfocus.com/bid/21796 - http://www.securityfocus.com/bid/16985
CVE ID: CVE-2006-1155 State: PUBLISHED Published: 2006-03-12T20:00:00 Last Updated: 2024-08-07T17:03:27.599Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to inject arbitrary web script or HTML via the Error parameter in (1) login.asp and (2) default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23754 - http://secunia.com/advisories/19156 - http://www.manastungare.com/projects/site-membership/ - http://www.securityfocus.com/bid/17045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25109 - http://www.vupe
- http://www.securityfocus.com/bid/17045 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25109 - http://www.vupen.com/english/advisories/2006/0884 - http://www.osvdb.org/23753
CVE ID: CVE-2006-1156 State: PUBLISHED Published: 2006-03-12T20:00:00 Last Updated: 2024-08-07T17:03:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in manas tungare Site Membership Script before 8 March, 2006 allows remote attackers to execute arbitrary SQL commands via the Username parameter in login.asp. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19156 - http://www.osvdb.org/23755 - http://www.manastungare.com/projects/site-membership/ - http://www.securityfocus.com/bid/17045 - http://www.vupen.com/english/advisories/2006/0884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25110
CVE ID: CVE-2006-1157 State: PUBLISHED Published: 2006-03-12T20:00:00 Last Updated: 2024-08-07T17:03:27.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Vz Scripts ADP Forum 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Subject field (possibly messaggio parameter) when posting a new message in post.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0901 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25189 - http://biyosecurity.be/bugs/adpforum2.txt - http://www.securityfocus.com/bid/17047 - http://www.osvdb.org/23961 - h
89 - http://biyosecurity.be/bugs/adpforum2.txt - http://www.securityfocus.com/bid/17047 - http://www.osvdb.org/23961 - http://www.securityfocus.com/archive/1/427171/100/0/threaded
CVE ID: CVE-2006-1158 State: PUBLISHED Published: 2006-03-12T20:00:00 Last Updated: 2024-08-07T17:03:27.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kerio MailServer before 6.1.3 Patch 1 allows remote attackers to cause a denial of service (application crash) via a crafted IMAP LOGIN command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23772 - http://secunia.com/advisories/19150 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25150 - http://www.vupen.com/english/advisories/2006/0898 - http://securitytracker.com/id?1015748 - http://www.kerio.com/kms_history.html - http://www.securityfocus.com/bid/17043 - http://www.securityfo
.com/id?1015748 - http://www.kerio.com/kms_history.html - http://www.securityfocus.com/bid/17043 - http://www.securityfocus.com/archive/1/427471/100/0/threaded
CVE ID: CVE-2006-1159 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.500Z Vendors: n/a Products: n/a Problem Types: n/a Description: Format string vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the query string argument in an HTTP GET request. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23792 - http://www.vupen.com/english/advisories/2006/0912 - http://www.securityfocus.com/bid/17046 - http://secunia.com/advisories/19178 - http://www.securityfocus.com/archive/1/427158/100/0
.securityfocus.com/bid/17046 - http://secunia.com/advisories/19178 - http://www.securityfocus.com/archive/1/427158/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25135
CVE ID: CVE-2006-1160 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.232Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote attackers to inject arbitrary web script or HTML via the Description field in creating a folder or uploading a file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25136 - http://www.vupen.com/english/advisories/2006/0912 - http://www.securityfocus.com/bid/17046 - http://secunia.com/advisories/19178 - http://www.securityfocus.com/archive/1/427158/100/0/threaded
ocus.com/bid/17046 - http://secunia.com/advisories/19178 - http://www.securityfocus.com/archive/1/427158/100/0/threaded - http://www.osvdb.org/23793
CVE ID: CVE-2006-1161 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:27.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Absolute path traversal vulnerability in Easy File Sharing (EFS) Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/39994 - http://www.osvdb.org/23791 - http://www.securityfocus.com/bid/17046 - http://www.securityfocus.com/archive/1/427158/100/0/threaded
CVE ID: CVE-2006-1162 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Nodez 4.6.1.1 and earlier allows remote attackers to read or include arbitrary PHP files via a .. (dot dot) in the op parameter, as demonstrated by inserting malicious Email parameters into list.gtdat, then accessing list.gtdat using the op parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19165 - http://www.securityfocus.com/bid/17066 - http://hamid.ir/security/nodez.txt - http://www.osvdb.org/23774 - http://www.vupen.com/english/advi
ocus.com/bid/17066 - http://hamid.ir/security/nodez.txt - http://www.osvdb.org/23774 - http://www.vupen.com/english/advisories/2006/0899 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25119 - http://securitytracker.com/id?1015747
CVE ID: CVE-2006-1163 State: PUBLISHED Published: 2006-03-12T21:00:00 Last Updated: 2024-08-07T17:03:28.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nodez 4.6.1.1 allows remote attackers to inject arbitrary web script or HTML via the op parameter. NOTE: it is possible that this issue is resultant from the directory traversal vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19165 - http://www.securityfocus.com/bid/17066 - http://hamid.ir/security/nodez.txt - http://www.vupen.com/english/advisories/2006/0899 - http://securitytracker.com/id?1015747 - https://exchange.xforc