Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
vdb.org/24295 - http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html - http://secunia.com/advisories/19483 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25574
CVE ID: CVE-2006-1575 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/699 - http://evuln.com/vulns/113/description.html - http://www.securityfocus.com/bid/17335 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25546 - http://secunia.com/advisories/19479 - http://www.securityfocus.com/archive/1/430741/100/
oud.com/vulnerabilities/25546 - http://secunia.com/advisories/19479 - http://www.securityfocus.com/archive/1/430741/100/0/threaded - http://www.osvdb.org/24290
CVE ID: CVE-2006-1576 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.355Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24291 - http://evuln.com/vulns/113/description.html - http://www.securityfocus.com/bid/17335 - http://secunia.com/advisories/19479 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25548 - http://www.securityfocus.com/archive/1/430741/100/0/threaded
CVE ID: CVE-2006-1577 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.700Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19471 - http://www.securityfocus.com/bid/17326 - http://www.osvdb.org/24292 - http://secunia.com/advisories/21400 - http://www.debian.org/security/2006/dsa-1133 - http://www.vupen.com/english/a
92 - http://secunia.com/advisories/21400 - http://www.debian.org/security/2006/dsa-1133 - http://www.vupen.com/english/advisories/2006/1184 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25579 - http://pridels0.blogspot.com/2006/03/mantis-xss-vuln.html
CVE ID: CVE-2006-1578 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Keystone Digital Library Suite (DLS) 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subject_type_id parameter in (1) the index page and (2) the search module. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25571 - http://pridels0.blogspot.com/2006/03/keystone-dls-sql-vuln.html
CVE ID: CVE-2006-1579 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the limite parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25584 - http://www.securityfocus.com/archive/1/429512/100/0/threaded - http://www.securityfocus.com/bid/17338
CVE ID: CVE-2006-1580 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in query.jsp and (2) entryId parameter in edit.jsp. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17351 - http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25601 - http://www.vupen.com/english/advisories/2006/1195 - http://secunia.com/advis
xforce.ibmcloud.com/vulnerabilities/25601 - http://www.vupen.com/english/advisories/2006/1195 - http://secunia.com/advisories/19492 - http://www.osvdb.org/24328 - http://www.osvdb.org/24329
CVE ID: CVE-2006-1581 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.361Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the _path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25617 - http://www.silitix.com/bnb.php - http://securitytracker.com/id?1015854 - http://www.securityfocus.com/bid/17345 - http://secunia.com/advisories/19520 - http://www.osvdb.org/24373
CVE ID: CVE-2006-1582 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter. NOTE: this might be resultant from the directory traversal issue. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24374 - http://www.silitix.com/bnb.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/25618 - http://securitytracker.com/id?1015854 - http://secunia.com/advisories/19520 - http://www.securityfocus.com/bid/17346
CVE ID: CVE-2006-1583 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429535/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25685 - http://www.secu
focus.com/archive/1/429535/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25685 - http://www.securityfocus.com/bid/17334
CVE ID: CVE-2006-1584 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429535/100/0/threaded - https://exchange.xforce.ibmcloud.
ontainer: References: - http://www.securityfocus.com/archive/1/429535/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25686 - http://www.securityfocus.com/bid/17334
CVE ID: CVE-2006-1585 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429475/100/0/threaded - http://www.vupen.com/english/advisories/2006/1206 - http://www.bash-x.net/undef/adv/monalbum.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25572 -
2006/1206 - http://www.bash-x.net/undef/adv/monalbum.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25572 - http://www.securityfocus.com/bid/17327 - http://secunia.com/advisories/19503 - http://securityreason.com/securityalert/660
CVE ID: CVE-2006-1586 State: PUBLISHED Published: 2006-04-02T21:00:00 Last Updated: 2024-08-07T17:19:48.730Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24362 - http://secunia.com/advisories/19500 - http://www.vupen.com/english/advisories/2006/1190 - http://www.securityfocus.com/bid/17347 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25595 - http://www.securityfocus.com/archive/1/429607/100/0/threaded
CVE ID: CVE-2006-1587 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc - http://secunia.com/advisories/19465 - http://securitytracker.com/id?1015847 - http://www.osvdb.org/24258 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25581
CVE ID: CVE-2006-1588 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17312 - http://www.osvdb.org/24262 - http://secunia.com/advisories/19464 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25582 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc - http://s
oud.com/vulnerabilities/25582 - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc - http://securitytracker.com/id?1015846
CVE ID: CVE-2006-1589 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.374Z Vendors: n/a Products: n/a Problem Types: n/a Description: The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference. Additional Analyst Notes: - CVE Program Container: References: - ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-008.txt.asc - https://exchange.xforce.ibmcloud.com/vulnerabilities/25690 - http://securitytracker.com/id?1015848 - http://www.osvdb.org/24576
CVE ID: CVE-2006-1590 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, or (c) submit parameter to base_qry_alert.php within BASE, or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into
or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into a refresh operation. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17391 - http://www.vupen.com/english/advisories/2006/1264 - http://www.osvdb.org/20835 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25671 - http://sourceforge.net/mailarchive/forum.php?thread_id=10064470&forum_id=42223 - http://www.osvdb.org/24307 - http://secunia.com/advisories/19544
CVE ID: CVE-2006-1591 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25573 - http://www.open-security.org/advisories/15 - http://www.securityfocus.com/archive/1/430871/100/0/threaded - http://securityreason.com/securityalert/700 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html - http:
securityreason.com/securityalert/700 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html - http://www.securityfocus.com/bid/17325
CVE ID: CVE-2006-1592 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.580Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429521/100/0/threaded - http://www.vupen.com/english/advisories/2006/1198 - http://www.vupen.com/english/advisories/2006/1199 - http://www.securityfocus.com/bid/17340 - http://aluigi.altervista.org/adv/zdaebof-adv.txt - http://lists.grok.org.uk/pi
http://www.securityfocus.com/bid/17340 - http://aluigi.altervista.org/adv/zdaebof-adv.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html - http://secunia.com/advisories/19509 - http://secunia.com/advisories/19496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25592
CVE ID: CVE-2006-1593 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.579Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429521/100/0/threaded - http://www.vupen.com/english/advisories/2006/1198 - http://www.vupen.com/english/advi
/archive/1/429521/100/0/threaded - http://www.vupen.com/english/advisories/2006/1198 - http://www.vupen.com/english/advisories/2006/1199 - http://www.securityfocus.com/bid/17340 - http://securityreason.com/securityalert/662 - http://aluigi.altervista.org/adv/zdaebof-adv.txt - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html - http://secunia.com/advisories/19509 - http://secunia.com/advisories/19496 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25593
CVE ID: CVE-2006-1594 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." (dot dot) sequences to (1) read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or (2) execute arbitrary code via the includePath parameter to learnPath/include/scormExport.inc.php. Additional Analyst Notes: - CVE Program Container: References: - http://retrogod.altervista.org/claroline_174_incl_xpl.html - http://secunia.com/advisories/19461 - http://www
erences: - http://retrogod.altervista.org/claroline_174_incl_xpl.html - http://secunia.com/advisories/19461 - http://www.securityfocus.com/bid/17343 - http://www.vupen.com/english/advisories/2006/1187 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25561 - https://www.exploit-db.com/exploits/1627
CVE ID: CVE-2006-1595 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17344 - http://retrogod.altervista.org/claroline_174_incl_xpl.html - http://secunia.com/advisories/19461 - http://www.osvdb.org/24284 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1905.html - http://www.vu
1 - http://www.osvdb.org/24284 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1905.html - http://www.vupen.com/english/advisories/2006/1187 - http://www.osvdb.org/24285 - https://www.exploit-db.com/exploits/1627 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25562
CVE ID: CVE-2006-1596 State: PUBLISHED Published: 2006-04-03T10:00:00 Last Updated: 2024-08-07T17:19:48.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25563 - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1888.html - http://retrogod.altervista.org/claroline_174_incl_xpl.html - http://secunia.com/advisories/19461 - http://www.securityfocus.com/bid/173
.altervista.org/claroline_174_incl_xpl.html - http://secunia.com/advisories/19461 - http://www.securityfocus.com/bid/17341 - http://www.vupen.com/english/advisories/2006/1187 - http://www.osvdb.org/24286 - https://www.exploit-db.com/exploits/1627
CVE ID: CVE-2006-1598 State: PUBLISHED Published: 2006-04-03T17:00:00 Last Updated: 2024-08-07T17:19:48.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24323 - http://www.securityfocus.com/archive/1/429667/100/0/threaded - http://secunia.com/advisories/19326 - http://securitytracker.com/id?1015858 - http://secunia.com/secunia_research/2006-21/advisory - https://exchange.xforce.ibmcloud.com/vulnerab
er.com/id?1015858 - http://secunia.com/secunia_research/2006-21/advisory - https://exchange.xforce.ibmcloud.com/vulnerabilities/25591 - http://www.vupen.com/english/advisories/2006/1200 - http://www.securityfocus.com/bid/17350
CVE ID: CVE-2006-1599 State: PUBLISHED Published: 2006-04-03T17:00:00 Last Updated: 2024-08-07T17:19:49.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the (1) encrypt and (2) decrypt functions. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25560 - http://sourceforge.net/forum/forum.php?forum_id=557129 - http://www.securityfocus.com/bid/17328 - http://secunia.com/advisories/19453 - http://www.osvdb.org/24304
m_id=557129 - http://www.securityfocus.com/bid/17328 - http://secunia.com/advisories/19453 - http://www.osvdb.org/24304 - https://sourceforge.net/p/vcreator/news/2006/03/v-creator-v13-pre3-released/ - http://www.vupen.com/english/advisories/2006/1189
CVE ID: CVE-2006-1600 State: PUBLISHED Published: 2006-04-03T17:00:00 Last Updated: 2024-08-07T17:19:48.741Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/669 - http://www.securityfocus.com/archive/1/429665/100/0/threaded
CVE ID: CVE-2006-1601 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:48.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17313 - http://securitytracker.com/id?1015849 - http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25543 - http://secunia.com/advisories/19444 - http://www.vupen.com/english/advisories/200
e.ibmcloud.com/vulnerabilities/25543 - http://secunia.com/advisories/19444 - http://www.vupen.com/english/advisories/2006/1175
CVE ID: CVE-2006-1602 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:49.436Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in PHPNuke Clan 3.0.1 allows remote attackers to include arbitrary files via a URL in the vwar_root2 parameter. NOTE: it is possible that this issue stems from a problem in VWar itself, but this is not clear. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25609 - http://www.securityfocus.com/archive/1/429615/100/0/threaded - http://secunia.com/
.ibmcloud.com/vulnerabilities/25609 - http://www.securityfocus.com/archive/1/429615/100/0/threaded - http://secunia.com/advisories/19501 - http://www.vupen.com/english/advisories/2006/1202 - http://www.securityfocus.com/bid/17356 - http://www.osvdb.org/24481
CVE ID: CVE-2006-1603 State: PUBLISHED Published: 2006-04-04T10:00:00 Last Updated: 2024-08-07T17:19:49.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1191 - http://www.securityfocus.com/bid/17355 - http://osvdb.org/ref/24/24353-phpbb.txt - https://exchange.xforce.ibmcloud.com/vulnerabiliti
curityfocus.com/bid/17355 - http://osvdb.org/ref/24/24353-phpbb.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/25599 - http://www.osvdb.org/24353 - http://secunia.com/advisories/19494