Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n footer.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015671 - http://www.osvdb.org/23426 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html - http://www.osvdb.org/23427 - http://www.osvdb.org/23423 - http://secunia.com/advisories/16921 - http://www.osvdb.org/23425 - http://retrogod.altervista.org/noccw_10_incl_xpl.html - http://www.securityfocus.com/bid/16793 - http://www.osvdb.org/23424
CVE ID: CVE-2006-0895 State: PUBLISHED Published: 2006-02-25T11:00:00 Last Updated: 2024-08-07T16:48:56.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/478 - http://securitytracker.com/id?1015671 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0418.html - http://secunia.com/advisories/16921 - http://retrogod.altervista.org/noccw_10_incl_xpl.html - http://www.securityfocus.com/bid/16793
CVE ID: CVE-2006-0896 State: PUBLISHED Published: 2006-02-25T11:00:00 Last Updated: 2024-08-07T16:48:56.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For HTTP header field. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0726 - http://securityreason.com/securityalert/545 - http://evuln.com/vulns/86/summary.html - http://secunia.com/advisories/19004 - http://www.osvdb.org/23480 - http://attrition.org/pipermail/vim/2006-April/000682.h
ttp://secunia.com/advisories/19004 - http://www.osvdb.org/23480 - http://attrition.org/pipermail/vim/2006-April/000682.html - http://www.simplemachines.org/community/index.php?topic=78841.0 - http://www.securityfocus.com/bid/16841 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24915 - http://www.securityfocus.com/archive/1/426824/100/0/threaded
CVE ID: CVE-2006-0897 State: PUBLISHED Published: 2006-02-25T11:00:00 Last Updated: 2024-08-07T16:48:56.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to execute arbitrary SQL commands via the UpdateID0 parameter to Service_Requests.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: the vendor has disputed this issue, saying that "[we] have a behind the scenes complex state management system that uses a combination of keys placed in JavaScript and Session State (server side) that protec
state management system that uses a combination of keys placed in JavaScript and Session State (server side) that protects against the type of SQL injection you describe. We have tested for many of the cases and have not found it to be an issue." Further investigation suggests that the original researcher might have triggered errors using invalid field values, which is not proof of SQL injection; however, the vendor did not receive a response from the original researcher Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16798 - http://secunia.com/advisories/18842 - http://www.attrition.org/pipermail/vim/2006-March/000599.html - https://exchange
- http://secunia.com/advisories/18842 - http://www.attrition.org/pipermail/vim/2006-March/000599.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24885 - http://www.osvdb.org/23479 - http://www.vupen.com/english/advisories/2006/0725 - http://www.attrition.org/pipermail/vim/2006-March/000598.html
CVE ID: CVE-2006-0898 State: PUBLISHED Published: 2006-02-25T11:00:00 Last Updated: 2024-08-07T16:48:56.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, which results in weaker encryption when used with a cipher that requires a larger block size than 8 bytes, such as Rijndael. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/20899 - http://rhn.redhat.com/errata/RHSA-2008-0630.html - http://secunia.com/advisories/31493 - http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml - http://secunia.com/advisories/19187
.com/advisories/31493 - http://www.gentoo.org/security/en/glsa/glsa-200603-15.xml - http://secunia.com/advisories/19187 - http://securityreason.com/securityalert/488 - http://www.debian.org/security/2006/dsa-996 - http://www.securityfocus.com/archive/1/425966/100/0/threaded - http://www.novell.com/linux/security/advisories/2006_38_security.html - http://secunia.com/advisories/19303 - http://secunia.com/advisories/18755 - http://www.securityfocus.com/bid/16802 - http://www.redhat.com/support/errata/RHSA-2008-0261.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24954
CVE ID: CVE-2006-0899 State: PUBLISHED Published: 2006-02-27T19:00:00 Last Updated: 2024-08-07T16:48:56.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include arbitrary files via ".." (dot dot) sequences in the template parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19026 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24938 - https://www.exploit-db.com/exploits/1533 - http://securityreason.com/securityalert/518 - http://retrogod.altervista.org/4images_171_adv.html - http://www.securityfocus.com/arch
tyreason.com/securityalert/518 - http://retrogod.altervista.org/4images_171_adv.html - http://www.securityfocus.com/archive/1/426468/100/0/threaded - http://www.osvdb.org/23529 - http://www.vupen.com/english/advisories/2006/0754 - http://www.securityfocus.com/bid/16855
CVE ID: CVE-2006-0900 State: PUBLISHED Published: 2006-02-27T19:00:00 Last Updated: 2024-08-07T16:48:56.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as demonstrated by the ProtoVer NFS test suite. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23511 - http://www.securityfocus.com/bid/16838 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002982.html - http://secunia.com/advisories/19017 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24918 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA
ttps://exchange.xforce.ibmcloud.com/vulnerabilities/24918 - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:10.nfs.asc - http://securityreason.com/securityalert/521
CVE ID: CVE-2006-0901 State: PUBLISHED Published: 2006-02-27T19:00:00 Last Updated: 2024-08-07T16:48:56.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial of service (panic) or execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102161-1 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1628 - http://securitytracker.com/id?1015680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24911 - http://www.securityfocus.com/bid/16826
ker.com/id?1015680 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24911 - http://www.securityfocus.com/bid/16826 - http://www.vupen.com/english/advisories/2006/0756 - http://secunia.com/advisories/19042
CVE ID: CVE-2006-0903 State: PUBLISHED Published: 2006-02-27T23:00:00 Last Updated: 2024-08-07T16:48:56.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL character, which are not properly handled by the mysql_real_query function. NOTE: this issue was originally reported for the mysql_query function, but the vendor states that since mysql_query expects a null character, this is not an issue for mysql_query. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:064 - http://bugs.mysql.com/bug.php?id=1
iner: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:064 - http://bugs.mysql.com/bug.php?id=17667 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9915 - http://www.debian.org/security/2006/dsa-1079 - http://secunia.com/advisories/19034 - http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0653.html - http://rst.void.ru/papers/advisory39.txt - http://www.ubuntu.com/usn/usn-274-2 - http://www.securityfocus.com/bid/16850 - http://secunia.com/advisories/20241 - https://usn.ubuntu.com/274-1/ - http://securitytracker.com/id?1015693 - http://secunia.com/advisories/20333 - http://secunia.com/advisories/19502 - http://secun
ecuritytracker.com/id?1015693 - http://secunia.com/advisories/20333 - http://secunia.com/advisories/19502 - http://secunia.com/advisories/30351 - http://www.debian.org/security/2006/dsa-1071 - http://www.redhat.com/support/errata/RHSA-2007-0083.html - http://www.vupen.com/english/advisories/2006/0752 - http://secunia.com/advisories/20253 - http://secunia.com/advisories/19814 - http://www.debian.org/security/2006/dsa-1073 - http://www.redhat.com/support/errata/RHSA-2008-0364.html - http://secunia.com/advisories/20625 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24966 - http://www.redhat.com/support/errata/RHSA-2006-0544.html
CVE ID: CVE-2006-0904 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2006-0905 State: PUBLISHED Published: 2006-03-23T11:00:00 Last Updated: 2024-08-07T16:48:56.997Z Vendors: n/a Products: n/a Problem Types: n/a Description: A "programming error" in fast_ipsec in FreeBSD 4.8-RELEASE through 6.1-STABLE and NetBSD 2 through 3 does not properly update the sequence number associated with a Security Association, which allows packets to pass sequence number checks and allows remote attackers to capture IPSec packets and conduct replay attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24068 - http://securitytracker.com/id?1015809 - http://www.securityfocus.com/bid/17191 - http://secunia.com/advisories/19366 -
http://securitytracker.com/id?1015809 - http://www.securityfocus.com/bid/17191 - http://secunia.com/advisories/19366 - ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-011.txt.asc - ftp://ftp.freebsd.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-06:11.ipsec.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/25398
CVE ID: CVE-2006-0906 State: PUBLISHED Published: 2006-02-28T02:00:00 Last Updated: 2024-08-07T16:48:56.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid parameter in (1) fastlinks.php and (2) catogary.php. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015687 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24941 - http://www.securityfocus.com/archive/1/426197/100/0/threaded - http://secunia.com/advisories/19062 - http://www.securityfocus.com/bid/16853 - http://www.vupen.com/english/advisories/2006/0757
CVE ID: CVE-2006-0907 State: PUBLISHED Published: 2006-02-28T02:00:00 Last Updated: 2024-08-07T16:48:56.619Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, which bypasses regular expressions that are intended to protect against SQL injection, as demonstrated via the kala parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426083/100/0/threaded - http://www.waraxe.us/advisory-47.html
CVE ID: CVE-2006-0908 State: PUBLISHED Published: 2006-02-28T02:00:00 Last Updated: 2024-08-07T16:48:56.633Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) sequences with the "ad_click" word in the query string, as demonstrated via the kala parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426083/100/0/threaded - http://securityreason.com/securityalert/497 - http://www.waraxe.us/advisory-47.html
CVE ID: CVE-2006-0909 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:48:56.995Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including (1) PEAR/Text/Diff/Renderer/inline.php, (2) PEAR/Text/Diff/Renderer/unified.php, (3) PEAR/Text/Diff3.php, (4) class_db.php, (5) class_db_mysql.php, and (6) class_xml.php in the ips_kernel/ directory; (7) mysql_admin_queries.php, (8) mysql_extra_queries.php, (9) mysql_queries.php, and (10) mysql_subsm_queries.php in the sources/sql
min_queries.php, (8) mysql_extra_queries.php, (9) mysql_queries.php, and (10) mysql_subsm_queries.php in the sources/sql directory; (11) sources/acp_loaders/acp_pages_components.php; (12) sources/action_admin/member.php and (13) sources/action_admin/paysubscriptions.php; (14) login.php, (15) messenger.php, (16) moderate.php, (17) paysubscriptions.php, (18) register.php, (19) search.php, (20) topics.php, (21) and usercp.php in the sources/action_public directory; (22) bbcode/class_bbcode.php, (23) bbcode/class_bbcode_legacy.php, (24) editor/class_editor_rte.php, (25) editor/class_editor_std.php, (26) post/class_post.php, (27) post/class_post_edit.php, (28) post/class_post_new.php, (29) and po
class_editor_std.php, (26) post/class_post.php, (27) post/class_post_edit.php, (28) post/class_post_new.php, (29) and post/class_post_reply.php in the sources/classes directory; (30) sources/components_acp/registration_DEPR.php; (31) sources/handlers/han_paysubscriptions.php; (32) func_usercp.php; (33) search_mysql_ftext.php, and (34) search_mysql_man.php in the sources/lib/ directory; and (35) convert/auth.php.bak, (36) external/auth.php, and (37) ldap/auth.php in the sources/loginauth directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24840 - http://www.securityfocus.com/archive/1/425713/100/0/threaded - http://n
ange.xforce.ibmcloud.com/vulnerabilities/24840 - http://www.securityfocus.com/archive/1/425713/100/0/threaded - http://neosecurityteam.net/index.php?action=advisories&id=16 - http://www.securityfocus.com/archive/1/466275/100/0/threaded - http://neosecurityteam.net/advisories/Advisory-16.txt
CVE ID: CVE-2006-0910 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:48:56.804Z Vendors: n/a Products: n/a Problem Types: n/a Description: Invision Power Board (IPB) 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including (1) sources/loginauth/convert/, (2) sources/portal_plugins/, (3) cache/skin_cache/cacheid_2/, (4) ips_kernel/PEAR/, (5) ips_kernel/PEAR/Text/, (6) ips_kernel/PEAR/Text/Diff/, (7) ips_kernel/PEAR/Text/Diff/Renderer/, (8) style_images/1/folder_rte_files/, (9) style_images/1/folder_js_skin/, (10) style_images/1/folder_rte_images/, and (11) upgrade/ and its subdirectories. Addition
yle_images/1/folder_js_skin/, (10) style_images/1/folder_rte_images/, and (11) upgrade/ and its subdirectories. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24840 - http://www.securityfocus.com/archive/1/425713/100/0/threaded - http://neosecurityteam.net/index.php?action=advisories&id=16 - http://neosecurityteam.net/advisories/Advisory-16.txt
CVE ID: CVE-2006-0911 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:48:56.993Z Vendors: n/a Products: n/a Problem Types: n/a Description: NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) "In]" and (2) "b;tnLogIn" parameters, or (3) malformed btnLogIn parameters, possibly involving missing "[" (open bracket) or "[" (closing bracket) characters, as demonstrated by "&btnLogIn=[Log&In]=&" or "&b;tnLogIn=[Log&In]=&" in the URL. NOTE: due to the lack of diagnosis by the original researcher, the precise nature of the vulnerability is u
in the URL. NOTE: due to the lack of diagnosis by the original researcher, the precise nature of the vulnerability is unclear. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0704 - http://www.securityfocus.com/bid/16771 - http://securityreason.com/securityalert/472 - http://zur.homelinux.com/Advisories/ipswitch_dos.txt - http://www.osvdb.org/23494 - http://www.securityfocus.com/archive/1/425780/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24864
CVE ID: CVE-2006-0912 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:48:56.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oreka before 0.5 allows remote attackers to cause a denial of service (application crash) via a "certain RTP sequence." Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19095 - http://www.vupen.com/english/advisories/2006/0812 - http://oreka.sourceforge.net/ - http://www.securityfocus.com/bid/16937 - http://www.osvdb.org/23300
CVE ID: CVE-2006-0913 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:48:57.010Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in whineatnews.pl in Bugzilla 2.17 through 2.18.4 and 2.20 allows remote authenticated users with administrative privileges to execute arbitrary SQL commands via the whinedays parameter, as accessible from editparams.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24819 - http://secunia.com/advisories/18979 - http://www.vupen.com/english/advisories/2006/0692 - https://bugzilla.mozilla.org/show_bug.cgi?id=312498 - http://www.s
- http://www.vupen.com/english/advisories/2006/0692 - https://bugzilla.mozilla.org/show_bug.cgi?id=312498 - http://www.securityfocus.com/archive/1/425584/100/0/threaded - http://www.securityfocus.com/bid/16738 - http://www.osvdb.org/23378
CVE ID: CVE-2006-0914 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0692 - https://exchange.xforce.ibmcloud.com/vulnerabilities/42802 - https://bugzilla.mozilla.org/show_bug.cgi?id=312498 - http://www.securityfocus.com/archive/1/425584/100/0/threaded
CVE ID: CVE-2006-0915 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.000Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.16.10 does not properly handle certain characters in the (1) maxpatchsize and (2) maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0692 - https://bugzilla.mozilla.org/show_bug.cgi?id=313441
CVE ID: CVE-2006-0916 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bugzilla 2.19.3 through 2.20 does not properly handle "//" sequences in URLs when redirecting a user from the login form, which could cause it to generate a partial URL in a form action that causes the user's browser to send the form data to another domain. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/464 - http://secunia.com/advisories/18979 - http://www.vupen.com/english/advisories/2006/0692 - http://www.securityfocus.com/archive/1/425584/100/0/threaded - https://ex
//www.vupen.com/english/advisories/2006/0692 - http://www.securityfocus.com/archive/1/425584/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24821 - https://bugzilla.mozilla.org/show_bug.cgi?id=325079 - http://www.securityfocus.com/bid/16745
CVE ID: CVE-2006-0917 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:14.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Melange Chat Server (aka M-Chat), when accessed via a web browser, automatically sends cookies and other sensitive information for a server to any port specified in the associated link, which allows local users on that server to read the cookies from HTTP headers and possibly gain sensitive information, such as credentials, by setting up a listening port and reading the credentials when the victim clicks on the link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16747 - http:
he link. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16747 - http://www.oh2600.com/forum/viewtopic.php?t=43 - http://securityreason.com/securityalert/463 - http://secunia.com/advisories/18984 - http://www.securityfocus.com/archive/1/425589/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24868
CVE ID: CVE-2006-0918 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:13.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in RITLabs The Bat! 3.60.07 allows remote attackers to execute arbitrary code via a long Subject field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/425936/100/0/threaded - http://securityreason.com/securityalert/485 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24882 - http://www.securityfocus.com/bid/16797 - http://secunia.com/advisories/18989 - http://www.nsag.ru/vuln/953.html - http://www.vupen.com/english/advisories/2006/0717
CVE ID: CVE-2006-0919 State: PUBLISHED Published: 2006-02-28T11:00:00 Last Updated: 2024-08-07T16:56:15.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php (aka the login page) in Oi! Email Marketing System 3.0 (aka Oi! 3) allows remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23462 - http://www.h4cky0u.org/advisories/HYSA-2006-003-oi-email.txt - http://www.securityfocus.com/archive/1/425924/100/0/threaded - http://secunia.com/advisories/18993 - http://www.vupen.com/english/advisories/2006/0718