Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-4970 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29021 - http://securityreason.com/securityalert/1624 - http://www.securityfocus.com/bid/20112 - https://www.exploit-db.com/exploits/2392 - http://www.securityfocus.com/archive/1/446419/100/0/threaded
CVE ID: CVE-2006-4971 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.427Z Vendors: n/a Products: n/a Problem Types: n/a Description: MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3666 - http://www.securityfocus.com/archive/1/446093/100/0/threaded - http://securityreason.com/securityalert/1628
CVE ID: CVE-2006-4972 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/3666 - http://www.securityfocus.com/archive/1/446093/100/0/threaded - http://securityreason.com/securityalert/1628 - http://secunia.com/advisories/21972
CVE ID: CVE-2006-4973 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.329Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.dotnetnuke.com/About/WhatIsDotNetNuke/SecurityPolicy/SecurityBulletinno3/tabid/990/Default.aspx - http://secunia.com/advisories/22051 - http://www.vupen.com/english/advisories/2006/3734 - https://exchange.xforce.ibmcloud.com/vulnerabiliti
dvisories/22051 - http://www.vupen.com/english/advisories/2006/3734 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29048 - http://www.secureshapes.com/advisories/vuln20-09-2006.htm - http://www.securityfocus.com/bid/20117
CVE ID: CVE-2006-4974 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/29125 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29074 - http://www.securityfocus.com/bid/20121 - https://www.exploit-db.com/exploits/2401 - http://secunia.com/advisories/22032
CVE ID: CVE-2006-4975 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.820Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1626 - http://www.securityfocus.com/archive/1/446414/100/0/threaded - http://advisories.echo.or.id/adv/adv47-theday-2006.txt
CVE ID: CVE-2006-4976 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct request for (1) server.php, (2) adodb-errorpear.inc.php, (3) adodb-iterator.inc.php, (4) adodb-pear.inc.php, (5) adodb-perf.inc.php, (6) adodb-xmlschema.inc.php, and (7) adodb.inc.php; files in datadict including (8) datadict-access.inc.php, (9) datadict-db2.inc.php, (10) datadict-generic.inc.php, (11) datadict-ibase.inc.php, (12) datadict-informix.inc.php, (13) datadict-mssql.inc.php, (14) datadict-mysql.inc
c.php, (11) datadict-ibase.inc.php, (12) datadict-informix.inc.php, (13) datadict-mssql.inc.php, (14) datadict-mysql.inc.php, (15) datadict-oci8.inc.php, (16) datadict-postgres.inc.php, and (17) datadict-sybase.inc.php; files in drivers/ including (18) adodb-access.inc.php, (19) adodb-ado.inc.php, (20) adodb-ado_access.inc.php, (21) adodb-ado_mssql.inc.php, (22) adodb-borland_ibase.inc.php, (23) adodb-csv.inc.php, (24) adodb-db2.inc.php, (25) adodb-fbsql.inc.php, (26) adodb-firebird.inc.php, (27) adodb-ibase.inc.php, (28) adodb-informix.inc.php, (29) adodb-informix72.inc.php, (30) adodb-mssql.inc.php, (31) adodb-mssqlpo.inc.php, (32) adodb-mysql.inc.php, (33) adodb-mysqli.inc.php, (34) adodb
p, (30) adodb-mssql.inc.php, (31) adodb-mssqlpo.inc.php, (32) adodb-mysql.inc.php, (33) adodb-mysqli.inc.php, (34) adodb-mysqlt.inc.php, (35) adodb-oci8.inc.php, (36) adodb-oci805.inc.php, (37) adodb-oci8po.inc.php, (38) adodb-odbc.inc.php, (39) adodb-odbc_mssql.inc.php, (40) adodb-odbc_oracle.inc.php, (41) adodb-oracle.inc.php, (42) adodb-postgres64.inc.php, (43) adodb-postgres7.inc.php, (44) adodb-proxy.inc.php, (45) adodb-sapdb.inc.php, (46) adodb-sqlanywhere.inc.php, (47) adodb-sqlite.inc.php, (48) adodb-sybase.inc.php, (49) adodb-vfp.inc.php; file in perf/ including (50) perf-db2.inc.php, (51) perf-informix.inc.php, (52) perf-mssql.inc.php, (53) perf-mysql.inc.php, (54) perf-oci8.inc.ph
0) perf-db2.inc.php, (51) perf-informix.inc.php, (52) perf-mssql.inc.php, (53) perf-mysql.inc.php, (54) perf-oci8.inc.php, (55) perf-postgres.inc.php; tests/ files (56) benchmark.php, (57) client.php, (58) test-datadict.php, (59) test-perf.php, (60) test-pgblob.php, (61) test-php5.php, (62) test-xmlschema.php, (63) test.php, (64) test2.php, (65) test3.php, (66) test4.php, (67) test5.php, (68) test_rs_array.php, (69) testcache.php, (70) testdatabases.inc.php, (71) testgenid.php, (72) testmssql.php, (73) testoci8.php, (74) testoci8cursor.php, (75) testpaging.php, (76) testpear.php, (77) testsessions.php, (78) time.php, or (79) tmssql.php, which reveals the path in various error messages. Addit
r.php, (77) testsessions.php, (78) time.php, or (79) tmssql.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/1629 - http://www.securityfocus.com/archive/1/445995/100/100/threaded
CVE ID: CVE-2006-4977 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.303Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to upload arbitrary PHP code to the phpquiz/img_quiz folder via the (a) upload, (b) ok_update, (c) image, and (d) path parameters, possibly requiring directory traversal sequences in the path parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2376 - http://www.vupen.com/english/advisories/2006/369
ram Container: References: - https://www.exploit-db.com/exploits/2376 - http://www.vupen.com/english/advisories/2006/3693 - http://www.morx.org/phpquiz.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28995 - http://securityreason.com/securityalert/1627 - http://secunia.com/advisories/22015 - http://www.securityfocus.com/bid/20065 - http://www.securityfocus.com/archive/1/446315/100/0/threaded
CVE ID: CVE-2006-4978 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:22.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the univers parameter in score.php and (2) the quiz_id parameter in home.php, accessed through the front/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2376 - http://www.vupen.com/english/advisories/2006/3693 - http://www.morx.org/phpquiz.txt - http://securityreason.com/securityalert/1627 - http://secunia.com/advisories/22
3693 - http://www.morx.org/phpquiz.txt - http://securityreason.com/securityalert/1627 - http://secunia.com/advisories/22015 - https://exchange.xforce.ibmcloud.com/vulnerabilities/28993 - http://www.securityfocus.com/bid/20065 - http://www.securityfocus.com/archive/1/446315/100/0/threaded
CVE ID: CVE-2006-4979 State: PUBLISHED Published: 2006-09-25T01:00:00 Last Updated: 2024-08-07T19:32:23.069Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows remote attackers to inject arbitrary PHP code in config.inc.php via modified configuration settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2376 - http://www.vupen.com/english/advisories/2006/3693 - http://www.morx.org/phpquiz.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/28997 - http://securityreason.com/securityalert/1627 - http://se
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28997 - http://securityreason.com/securityalert/1627 - http://secunia.com/advisories/22015 - http://www.securityfocus.com/bid/20065 - http://www.securityfocus.com/archive/1/446315/100/0/threaded
CVE ID: CVE-2006-4980 State: PUBLISHED Published: 2006-10-09T17:00:00 Last Updated: 2024-08-07T19:32:22.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the repr function in Python 2.3 through 2.6 before 20060822 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character UTF-32/UCS-4 strings to certain scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22303 - http://www.debian.org/security/2006/dsa-1197 - http://www.vmware.com/support/vi3/doc/esx-3069097-patch.html - http://secunia.com/advisories/22487 - http://www.securityfocus.com/archi
re.com/support/vi3/doc/esx-3069097-patch.html - http://secunia.com/advisories/22487 - http://www.securityfocus.com/archive/1/448244/100/100/threaded - http://secunia.com/advisories/22639 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:181 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29408 - http://secunia.com/advisories/23680 - http://secunia.com/advisories/22512 - https://launchpad.net/distros/ubuntu/+source/python2.4/+bug/56633 - http://zoehep.xent.com/~bsittler/python2.4-2.4.3_unicodeobject.c.diff - http://support.avaya.com/elmodocs2/security/ASA-2006-229.htm - http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470 - http://secun
2006-229.htm - http://sourceforge.net/tracker/index.php?func=detail&aid=1541585&group_id=5470&atid=305470 - http://secunia.com/advisories/31492 - http://www.redhat.com/support/errata/RHSA-2008-0629.html - http://www.redhat.com/support/errata/RHSA-2006-0713.html - http://www.vupen.com/english/advisories/2006/5131 - http://securitytracker.com/id?1017019 - http://secunia.com/advisories/22357 - http://www.debian.org/security/2006/dsa-1198 - http://secunia.com/advisories/22379 - http://www.ubuntu.com/usn/usn-359-1 - http://secunia.com/advisories/22448 - http://www.novell.com/linux/security/advisories/2006_25_sr.html - http://www.securityfocus.com/bid/20376 - http://bugzilla.redhat.com/bugzilla/sh
ux/security/advisories/2006_25_sr.html - http://www.securityfocus.com/bid/20376 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=208162 - http://security.gentoo.org/glsa/glsa-200610-07.xml - http://www.vupen.com/english/advisories/2006/3940 - https://issues.rpath.com/browse/RPL-702 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=391589 - http://www.securityfocus.com/archive/1/456546/100/200/threaded - http://secunia.com/advisories/22358 - http://www.vmware.com/support/vi3/doc/esx-9986131-patch.html - ftp://patches.sgi.com/support/free/security/advisories/20061001-01-P.asc - http://secunia.com/advisories/22297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre
-P.asc - http://secunia.com/advisories/22297 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10789 - http://kb.vmware.com/KanisaPlatform/Publishing/882/5120103_f.SAL_Public.html - http://secunia.com/advisories/22531 - http://secunia.com/advisories/22276
CVE ID: CVE-2006-4981 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that (1) permits all non-Windows devices or (2) whitelists certain sets of Organizationally Unique Identifiers (OUIs). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446421/100/0/threaded - http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf
CVE ID: CVE-2006-4982 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address of a disconnected printer. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446421/100/0/threaded - http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf - http:
.com/archive/1/446421/100/0/threaded - http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf - http://www.osvdb.org/30978
CVE ID: CVE-2006-4983 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NAC allows quarantined devices to communicate over the network with (1) DNS, (2) DHCP, and (3) EAPoUDP, which allows attackers to bypass control methods by tunneling network traffic through one of these protocols. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446421/100/0/threaded - http://www.osvdb.org/30977 - http://www.insightix.com/files/pdf/Bypassing_NAC_Solutions_Whitepaper.pdf
CVE ID: CVE-2006-4984 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter in (1) adminpanel/includes/mailinglist/mlist_xls.php and (2) adminpanel/includes/add_forms/addmp3.php. NOTE: the other vectors from the original disclosure are already covered by CVE-2006-3193. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29083 - http://www.securityfocus.com/bid/201
ntainer: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/29083 - http://www.securityfocus.com/bid/20137 - http://www.securityfocus.com/archive/1/446576/100/0/threaded - http://securityreason.com/securityalert/1634
CVE ID: CVE-2006-4985 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrary web script or HTML via (1) the max_file_size_purdy parameter in adminpanel/includes/helpfiles/help_mp3.php, (2) the message_text parameter in adminpanel/includes/mailinglist/sendemail.php, (3) the this_year parameter in includes/footer.php, and the band parameter in (4) adminpanel/includes/helpfiles/help_news.php (5) adminpanel/includes/helpfiles/help_merch.php, (6) adminpanel/includes/header.php, and (7) ad
helpfiles/help_news.php (5) adminpanel/includes/helpfiles/help_merch.php, (6) adminpanel/includes/header.php, and (7) adminpanel/login_header.php; and includes/content/ files including (8) bio_content.php, (9) gbook_content.php, (10) interview_content.php, (11) links_content.php, (12) lyrics_content.php, (13) member_content.php, (14) merch_content.php, (15) mp3_content.php, (16) news_content.php, (17) pastshows_content.php, (18) photo_content.php, (19) releases_content.php, (20) reviews_content.php, (21) shows_content.php, and (22) signgbook_content.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/21992 - http://www.securityfocus.com/bid/201
Notes: - CVE Program Container: References: - http://secunia.com/advisories/21992 - http://www.securityfocus.com/bid/20137 - http://www.securityfocus.com/archive/1/446576/100/0/threaded - http://securityreason.com/securityalert/1634
CVE ID: CVE-2006-4986 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:23.170Z Vendors: n/a Products: n/a Problem Types: n/a Description: Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain files in the includes/content directory, (2) includes/shows_preview.php, and (3) adminpanel/configform.php; and files in adminpanel/includes/ including (4) mailinglist/disphtmltbl.php, (5) mailinglist/dispxls.php, (6) mailinglist/sendshows.php, (7) previews/preview_bio.php, (8) previews/preview_genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (1
genmerch.php, (9) previews/preview_fliers.php, (10) previews/preview_gbook.php, (11) previews/preview_interviews.php, (12) previews/preview_links.php, (13) previews/preview_lyrics.php, (14) previews/preview_membio.php, (15) previews/preview_merchphotos.php, (16) previews/preview_mp3s.php, (17) previews/preview_news.php, (18) previews/preview_photos.php, (19) previews/preview_releases.php, (20) previews/preview_relmerch.php, (21) previews/preview_relphotos.php, (22) previews/preview_reviews.php, (23) previews/preview_shows.php, (24) previews/preview_wearmerch.php, (25) change_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/chang
e_forms/change_bio.php, (26) change_forms/change_fliers.php, (27) change_forms/change_gbook.php, (28) change_forms/change_gen_merch.php, (29) change_forms/change_interview.php, (30) change_forms/change_links.php, (31) change_forms/change_lyrics.php, (32) change_forms/change_members.php, (33) change_forms/change_merch.php, (34) change_forms/change_merch_pic.php, (35) change_forms/change_mp3s.php, (36) change_forms/change_news.php, (37) change_forms/change_photos.php, (38) change_forms/change_rel_merch.php, (39) change_forms/change_rel_pic.php, (40) change_forms/change_releases.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, and (43) change_forms/change_wear_merc
es.php, (41) change_forms/change_reviews.php, (42) change_forms/change_shows.php, and (43) change_forms/change_wear_merch.php, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/20137 - http://www.securityfocus.com/archive/1/446576/100/0/threaded - http://securityreason.com/securityalert/1634 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29085
CVE ID: CVE-2006-4987 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.884Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbitrary PHP code via a URL in the globals[content_dir] parameter in (1) example-view/templates/article.php, (2) example-view/templates/root.php, and (3) example-view/templates/dates_list.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446575/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29101 - http://www.securityfocus.com/bid/2
/446575/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29101 - http://www.securityfocus.com/bid/20134 - http://securityreason.com/securityalert/1633
CVE ID: CVE-2006-4988 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.835Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via (1) the query string to relocate.php, (2) the globals[pageid] parameter in example-view/inc/print_button.php, and other unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446575/100/0/threaded - http://www.securityfocus.com/bid/20134 - http://securityreason.com/securityalert/1633 - https://exchange.xforce.ibm
ed - http://www.securityfocus.com/bid/20134 - http://securityreason.com/securityalert/1633 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29098
CVE ID: CVE-2006-4989 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbnail.php, (2) functions/admin/all.php, (3) functions/admin/init_session.php, (4) functions/all.php, and (5) certain files in example-view/admin_templates/, which reveals the path in various error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/446575/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29100 - http://www.securityf
.com/archive/1/446575/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/29100 - http://www.securityfocus.com/bid/20134 - http://securityreason.com/securityalert/1633
CVE ID: CVE-2006-4990 State: PUBLISHED Published: 2006-09-26T01:43:00 Last Updated: 2024-08-07T19:32:22.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in PhotoPost allow remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter in (1) addfav.php, (2) adm-admlog.php, (3) adm-approve.php, (4) adm-backup.php, (5) adm-cats.php, (6) adm-cinc.php, (7) adm-db.php, (8) adm-editcfg.php, (9) adm-inc.php, (10) adm-index.php, (11) adm-modcom.php, (12) adm-move.php, (13) adm-options.php, (14) adm-order.php, (15) adm-pa.php, (16) adm-photo.php, (17) adm-purge.php, (18) adm-style.php, (19) adm-templ.php, (20) adm-us