Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6536 State: PUBLISHED Published: 2006-12-14T02:00:00Z Last Updated: 2024-09-17T03:49:03.976Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in hata.asp in Cilem Haber Free Edition allows remote attackers to inject arbitrary web script or HTML via the hata parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21511
CVE ID: CVE-2006-6537 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: IBM WebSphere Host On-Demand 6.0, 7.0, 8.0, 9.0, and possibly 10, allows remote attackers to bypass authentication via a modified pnl parameter, related to hod/HODAdmin.html and hod/frameset.html. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30826 - http://secunia.com/advisories/22652 - http://www.securityfocus.com/archive/1/454050/100/0/threaded - http://securityreason.com/securityalert/2030 - http://www.vupen.com/english/advisories/2006/4943
CVE ID: CVE-2006-6538 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-LINK DWL-2000AP+ firmware 2.11 allows remote attackers to cause (1) a denial of service (device reset) via a flood of ARP replies on the wired or wireless (radio) link and (2) a denial of service (device crash) via a flood of ARP requests on the wireless link. Additional Analyst Notes: - CVE Program Container: References: - http://tripp.dynalias.org/arpflood.c - https://exchange.xforce.ibmcloud.com/vulnerabilities/30837 - http://www.securityfocus.com/archive/1/454047/100/0/threaded - http://secunia.com/advisories/23332 - htt
ilities/30837 - http://www.securityfocus.com/archive/1/454047/100/0/threaded - http://secunia.com/advisories/23332 - http://securityreason.com/securityalert/2029 - https://www.exploit-db.com/exploits/2915 - http://www.vupen.com/english/advisories/2006/4965
CVE ID: CVE-2006-6539 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Winamp Web Interface (Wawi) 7.5.13 and earlier (1) allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an (a) long username or a (b) crafted packet to the FindBasicAuth function in security.cpp, related to the /browse URI; and allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long path string in the (2) Browse, (3) CControl::Download, and (4) CControl::Load functions
xecute arbitrary code via a long path string in the (2) Browse, (3) CControl::Download, and (4) CControl::Load functions, related to the file parameter in the /dl URI. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30824 - http://www.securityfocus.com/archive/1/454059/100/0/threaded - http://secunia.com/advisories/23292 - http://securitytracker.com/id?1017362 - http://www.securityfocus.com/bid/21539 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html - http://www.vupen.com/english/advisories/2006/4935 - https://exchange.xforc
l/full-disclosure/2006-December/051217.html - http://www.vupen.com/english/advisories/2006/4935 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30825 - http://securityreason.com/securityalert/2032 - http://aluigi.altervista.org/adv/wawix-adv.txt
CVE ID: CVE-2006-6540 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in bt-trackback.php in Bluetrait before 1.2.0, when trackback is enabled, allows remote attackers to execute arbitrary SQL commands via unspecified parameters. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30842 - http://www.bluetrait.org/weblog/changelog.txt - http://secunia.com/advisories/23316 - http://www.vupen.com/english/advisories/2006/4960
CVE ID: CVE-2006-6541 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.604Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in signer/final.php in warez distributions of Animated Smiley Generator allows remote attackers to execute arbitrary PHP code via a URL in the smiley parameter. NOTE: the vendor disputes this issue, stating that only Warez versions of Animated Smiley Generator were affected, not the developer-provided software: "Legitimately purchased applications do not allow this exploit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453934/100/
oit. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/453934/100/0/threaded - http://www.smileygenerator.us/sales/index.php?act=viewProd&productId=8 - http://securityreason.com/securityalert/2031 - http://www.attrition.org/pipermail/vim/2006-December/001195.html - http://www.smileygenerator.us/sales/index.php - https://exchange.xforce.ibmcloud.com/vulnerabilities/30794
CVE ID: CVE-2006-6542 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Fantastic News 2.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2906 - http://www.vupen.com/english/advisories/2006/4931 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30834
CVE ID: CVE-2006-6543 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:26:46.781Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) login (UserName) and possibly (2) password parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2907 - http://www.vupen.com/english/advisories/2006/4932 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30835
CVE ID: CVE-2006-6544 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:33:58.458Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CM68 News allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4911 - http://cm68.de/?cm68news_download
CVE ID: CVE-2006-6545 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:33:58.485Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in the ErrorDocs 1.0.0 and earlier module for mxBB (mx_errordocs) allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30820 - http://www.vupen.com/english/advisories/2006/4947 - https://www.exploit-db.com/exploits/2917 - http://secunia.com/advisories/23298
CVE ID: CVE-2006-6546 State: PUBLISHED Published: 2006-12-14T02:00:00 Last Updated: 2024-08-07T20:33:58.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in inc/shows.inc.php in cutenews aj-fork (CN:AJ) 167f and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cutepath parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30689 - https://www.exploit-db.com/exploits/2891 - http://www.securityfocus.com/bid/21432 - http://www.vupen.com/english/advisories/2006/4858 - http://secunia.com/advisories/23425
CVE ID: CVE-2006-6547 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readAA function in read_aa.cpp in Winamp iPod Plugin (ml_ipod) 2.00 p19 and earlier allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long tag in an audible.com audiobook (aa) file. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23354 - http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp?r1=1.3.6.1&r2=1.3.6.2 - http://www.securityfocus.com/bid/21569 - http://mlipod.cvs.sourceforge.net/mlipod/ml
read_aa.cpp?r1=1.3.6.1&r2=1.3.6.2 - http://www.securityfocus.com/bid/21569 - http://mlipod.cvs.sourceforge.net/mlipod/ml_ipod/read_aa.cpp - http://www.osvdb.org/32266 - http://www.vupen.com/english/advisories/2006/4986 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30866 - http://aluigi.altervista.org/adv/mlipodbof-adv.txt
CVE ID: CVE-2006-6548 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated users to inject arbitrary web script or HTML via the domain parameter to (1) scripts2/changeemail, (2) scripts2/limitbw, or (3) scripts/rearrangeacct. NOTE: the feature parameter to scripts2/dofeaturemanager is already covered by CVE-2006-6198. Additional Analyst Notes: - CVE Program Container: References: - http://www.aria-security.com/forum/showthread.php?t=44 - https://exchange.xforce.ibmcloud.com/vulnerabili
References: - http://www.aria-security.com/forum/showthread.php?t=44 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30792 - http://www.securityfocus.com/archive/1/453885/100/0/threaded - http://securityreason.com/securityalert/2027
CVE ID: CVE-2006-6549 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upload.php in Rad Upload 3.02 allows remote attackers to execute arbitrary PHP code via a URL in the save_path parameter. NOTE: CVE disputes this vulnerability because save_path is originally defined as "" before use, and the nearby instructions say "SET THE SAVE PATH by editing the line below. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30864 - http://www.securityfocus.com/archive/1/454175/100/0/threaded - http
exchange.xforce.ibmcloud.com/vulnerabilities/30864 - http://www.securityfocus.com/archive/1/454175/100/0/threaded - http://securityreason.com/securityalert/2034
CVE ID: CVE-2006-6550 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the db_file parameter. NOTE: CVE disputes this vulnerability because db_file is defined before use Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2894 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30741
CVE ID: CVE-2006-6551 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:59.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tucows Client Code Suite (CCS) 1.2.1015 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _ENV[TCA_HOME] parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30789
CVE ID: CVE-2006-6552 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIR_ADMIN parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4984 - http://securitytracker.com/id?1017375 - https://www.exploit-db.com/exploits/2923 - http://marc.info/?l=bugtraq&m=116595444801459&w=2 - http://secunia.com/advisories/23345 - https://exchange.xforce.ibmcloud.com/vulnera
fo/?l=bugtraq&m=116595444801459&w=2 - http://secunia.com/advisories/23345 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30854
CVE ID: CVE-2006-6553 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2925 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30855 - http://www.securityfocus.com/bid/21573 - http://www.vupen.com/english/advisories/2006/4981 - http://secunia.com/advisories/23358
CVE ID: CVE-2006-6554 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Kerio MailServer before 6.3.1 allows remote attackers to cause a denial of service (segmentation fault and service stop) via certain long LDAP queries, as demonstrated by vd_kms6.pm. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30872 - http://secunia.com/advisories/23364 - http://www.securityfocus.com/archive/1/454455/100/0/threaded - http://www.kerio.com/kms_history.html - http://www.vupen.com/english/advisories/2006/4993
CVE ID: CVE-2006-6555 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in EasyFill before 0.5.1 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30843 - http://www.vupen.com/english/advisories/2006/4961 - http://sourceforge.net/forum/forum.php?forum_id=642711
CVE ID: CVE-2006-6556 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:59.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows remote attackers to upload and execute arbitrary code via dangerous file extensions that are not all lowercase, which bypasses a cleansing operation. Additional Analyst Notes: - CVE Program Container: References: - http://eyeos.blogspot.com/2006/12/eyeos-093-4-released-webmail-eyeapp.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/30844 - http://www.securityfocus.com/bid/21639 - http://prdownloads.sourceforge.net/eyeos/eyeOS-0.9.3-
m/vulnerabilities/30844 - http://www.securityfocus.com/bid/21639 - http://prdownloads.sourceforge.net/eyeos/eyeOS-0.9.3-4.tar.gz?download - http://secunia.com/advisories/23388 - http://www.vupen.com/english/advisories/2006/4962
CVE ID: CVE-2006-6557 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Skulls! before 0.2.6 have unknown impact and attack vectors, as addressed by "Many security fixes." Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/project/shownotes.php?release_id=470092 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30846 - http://www.vupen.com/english/advisories/2006/4963
CVE ID: CVE-2006-6558 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in the (1) LIST and possibly (2) NLST command. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/13848 - https://www.exploit-db.com/exploits/2926 - http://www.vupen.com/english/advisories/2006/4994 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30867 - http://secunia.com/advisories/23365
CVE ID: CVE-2006-6559 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:59.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute arbitrary SQL commands via the PID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4933 - https://www.exploit-db.com/exploits/2908 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30836
CVE ID: CVE-2006-6560 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:58.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) Portal allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2921 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30858 - http://www.vupen.com/english/advisories/2006/4983 - http://secunia.com/advisories/23331
CVE ID: CVE-2006-6561 State: PUBLISHED Published: 2006-12-14T18:00:00 Last Updated: 2024-08-07T20:33:59.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted DOC file that triggers memory corruption, as demonstrated via the 12122006-djtest.doc file, a different issue than CVE-2006-5994 and CVE-2006-6456. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21589 - http://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx - http://securitytracker
p://blogs.technet.com/msrc/archive/2006/12/15/update-on-current-word-vulnerability-reports.aspx - http://securitytracker.com/id?1017390 - http://www.infoworld.com/article/06/12/13/HNthirdword_1.html - http://www.milw0rm.com/sploits/12122006-djtest.doc - http://www.securityfocus.com/archive/1/454219/30/0/threaded - http://research.eeye.com/html/alerts/zeroday/20061212.html - http://www.kb.cert.org/vuls/id/996892 - http://www.vupen.com/english/advisories/2006/4997 - http://blogs.securiteam.com/?p=763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30885 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A332
CVE ID: CVE-2006-6563 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.205Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before 1.3.1rc1 allows local users to execute arbitrary code via a large reqarglen length value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21587 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:232 - http://www.securityfocus.com/archive/1/454320/100/0/threaded - http://www.proftpd.org/docs/NEWS-1.3.1rc1 - http://www.coresecurity.com/?module=ContentM
chive/1/454320/100/0/threaded - http://www.proftpd.org/docs/NEWS-1.3.1rc1 - http://www.coresecurity.com/?module=ContentMod&action=item&id=1594 - http://www.securityfocus.com/archive/1/460648/100/0/threaded - http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.039.html - https://www.exploit-db.com/exploits/3330 - http://secunia.com/advisories/24163 - http://secunia.com/advisories/23473 - http://security.gentoo.org/glsa/glsa-200702-02.xml - http://secunia.com/advisories/23371 - http://www.vupen.com/english/advisories/2006/4998 - http://secunia.com/advisories/23392 - http://www.securityfocus.com/archive/1/460756/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30906
tp://www.securityfocus.com/archive/1/460756/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30906 - http://www.trustix.org/errata/2006/0074/
CVE ID: CVE-2006-6564 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to the STOR command, which results in a NULL pointer dereference. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30853 - http://sourceforge.net/project/shownotes.php?release_id=470364&group_id=21558 - http://retrogod.altervista.org/filezilla_0921_dos.html -
ge.net/project/shownotes.php?release_id=470364&group_id=21558 - http://retrogod.altervista.org/filezilla_0921_dos.html - http://www.vupen.com/english/advisories/2006/4937
CVE ID: CVE-2006-6565 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to the (1) LIST or (2) NLST commands, which results in a NULL pointer dereference, a different set of vectors than CVE-2006-6564. NOTE: CVE analysis suggests that the problem might be due to a malformed PORT command. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30853 - https://www.exploit-db.com/exploits/2914 - http://sourceforge.net/project
ge.xforce.ibmcloud.com/vulnerabilities/30853 - https://www.exploit-db.com/exploits/2914 - http://sourceforge.net/project/shownotes.php?release_id=470364&group_id=21558 - http://www.vupen.com/english/advisories/2006/4937
CVE ID: CVE-2006-6566 State: PUBLISHED Published: 2006-12-15T11:00:00 Last Updated: 2024-08-07T20:33:59.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module for mxBB 0.91c allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30821 - https://www.exploit-db.com/exploits/2918 - http://www.vupen.com/english/advisories/2006/4928 - https://www.exploit-db.com/exploits/2904 - http://www.vupen.com/english/advis