Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-1548 State: PUBLISHED Published: 2006-03-30T22:00:00 Last Updated: 2024-08-07T17:19:48.799Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25614 - http://securitytracker.com/id?1015856 - http://struts.apache.org/struts-doc-1.2.9/u
ibmcloud.com/vulnerabilities/25614 - http://securitytracker.com/id?1015856 - http://struts.apache.org/struts-doc-1.2.9/userGuide/release-notes.html - http://www.vupen.com/english/advisories/2006/1205 - http://www.securityfocus.com/bid/17342 - http://secunia.com/advisories/19493 - https://issues.apache.org/struts/browse/STR-2781 - http://issues.apache.org/bugzilla/show_bug.cgi?id=38749 - http://lists.suse.com/archive/suse-security-announce/2006-May/0004.html - http://secunia.com/advisories/20117
CVE ID: CVE-2006-1549 State: PUBLISHED Published: 2006-04-10T22:00:00 Last Updated: 2024-08-07T17:19:48.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25704 - http://securityreason.com/securityalert/676 - http://www.securityfocus.com/archive/1/430453/100/0/threaded - http://www.securityfocus.com/bid/22766 - http://securitytracker.com/id?1015
yfocus.com/archive/1/430453/100/0/threaded - http://www.securityfocus.com/bid/22766 - http://securitytracker.com/id?1015880 - http://securityreason.com/achievement_securityalert/35 - http://www.securityfocus.com/archive/1/430598/100/0/threaded - http://www.vupen.com/english/advisories/2006/1290 - http://www.securityfocus.com/archive/1/430742/100/0/threaded - http://securityreason.com/securityalert/2312 - http://www.osvdb.org/24485 - http://www.securityfocus.com/archive/1/431018/100/0/threaded - http://www.php-security.org/MOPB/MOPB-02-2007.html
CVE ID: CVE-2006-1550 State: PUBLISHED Published: 2006-03-30T23:00:00 Last Updated: 2024-08-07T17:19:48.321Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the xfig import code (xfig-import.c) in Dia 0.87 and later before 0.95-pre6 allow user-assisted attackers to have an unknown impact via a crafted xfig file, possibly involving an invalid (1) color index, (2) number of points, or (3) depth. Additional Analyst Notes: - CVE Program Container: References: - http://www.mandriva.com/security/advisories?name=MDKSA-2006:062 - http://www.redhat.com/support/errata/RHSA-2006-0280.html - http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html - http:/
edhat.com/support/errata/RHSA-2006-0280.html - http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html - http://www.securityfocus.com/bid/17310 - http://www.debian.org/security/2006/dsa-1025 - http://secunia.com/advisories/19505 - http://secunia.com/advisories/19765 - http://secunia.com/advisories/19469 - http://www.securityfocus.com/archive/1/429357/100/0/threaded - http://secunia.com/advisories/19507 - http://secunia.com/advisories/19959 - http://securitytracker.com/id?1015853 - http://www.gentoo.org/security/en/glsa/glsa-200604-14.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361 - http://secunia.com/advisories/19546 - http://www.r
rg/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10361 - http://secunia.com/advisories/19546 - http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00021.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25566 - https://usn.ubuntu.com/266-1/ - http://secunia.com/advisories/19897 - http://www.novell.com/linux/security/advisories/2006_04_28.html - http://secunia.com/advisories/19543
CVE ID: CVE-2006-1551 State: PUBLISHED Published: 2006-04-13T22:00:00 Last Updated: 2024-08-07T17:19:48.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: Eval injection vulnerability in pajax_call_dispatcher.php in PAJAX 0.5.1 and earlier allows remote attackers to execute arbitrary code via the (1) $method and (2) $args parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19653 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25859 - http://www.osvdb.org/24618 - http://www.securityfocus.com/bid/17519 - http://www.securityfocus.com/archive/1/431029/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/
- http://www.securityfocus.com/archive/1/431029/100/0/threaded - http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0270.html - http://www.vupen.com/english/advisories/2006/1353 - http://www.redteam-pentesting.de/advisories/rt-sa-2006-001.php
CVE ID: CVE-2006-1552 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:49.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.5 allows remote attackers to cause a denial of service (crash) via a crafted JPEG image with malformed JPEG metadata, as demonstrated using Safari, aka "Deja-Doom". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17951 - http://www.vupen.com/english/advisories/2006/1779 - http://www.osvdb.org/25597 - http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.securityfocus.com/bid/17321 - http://lists.apple.com
- http://www.us-cert.gov/cas/techalerts/TA06-132A.html - http://www.securityfocus.com/bid/17321 - http://lists.apple.com/archives/security-announce/2006/May/msg00003.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/26412 - http://secunia.com/advisories/20077 - http://drunkenblog.com/drunkenblog-archives/000760.html
CVE ID: CVE-2006-1553 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in functions/final_functions.php in VSNS Lemon 3.2.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015836 - http://www.securityfocus.com/archive/1/430345/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25456 - http://evuln.com/vulns/106/description.html - http://secunia.com/advisories/19420 - http://www.securityfocus.
es/25456 - http://evuln.com/vulns/106/description.html - http://secunia.com/advisories/19420 - http://www.securityfocus.com/bid/17281 - http://www.osvdb.org/24211
CVE ID: CVE-2006-1554 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in VSNS Lemon 3.2.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter while adding a comment. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015836 - http://www.securityfocus.com/archive/1/430345/100/0/threaded - http://www.osvdb.org/24212 - http://evuln.com/vulns/106/description.html - http://www.securityfocus.com/bid/17395 - http://secunia.com/advisories/19420 - https://exchange.xforce.ibmcloud.com/vu
- http://www.securityfocus.com/bid/17395 - http://secunia.com/advisories/19420 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25457
CVE ID: CVE-2006-1555 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: VSNS Lemon 3.2.0 allows remote attackers to bypass authentication and access password-protected articles by setting the vsns[topic_id] cookie to the targeted topic. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1015836 - http://www.securityfocus.com/archive/1/430345/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25459 - http://www.securityfocus.com/bid/17396 - http://evuln.com/vulns/106/description.html - http://www.osvdb.org/24213 - http://secunia.com/adv
yfocus.com/bid/17396 - http://evuln.com/vulns/106/description.html - http://www.osvdb.org/24213 - http://secunia.com/advisories/19420
CVE ID: CVE-2006-1556 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.190Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in view_caricatier.php in AL-Caricatier 2.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CatName, (2) CaricatierID, or (3) CatID parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429095/100/0/threaded - http://www.securityfocus.com/bid/17289 - http://secunia.com/advisories/17292 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25493
CVE ID: CVE-2006-1557 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.300Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in X-Changer 0.2 allow remote attackers to execute arbitrary SQL commands via the (1) from and (2) into parameters in a calculate action, and the (3) id parameter in an edit action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429359/100/0/threaded - http://www.vupen.com/english/advisories/2006/1188 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25549 - http://www.osvdb.org/24288 - http://secunia.com/advisorie
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25549 - http://www.osvdb.org/24288 - http://secunia.com/advisories/19459 - http://securityreason.com/securityalert/654 - http://www.securityfocus.com/bid/17322
CVE ID: CVE-2006-1558 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in search.php in PHP Script Index allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1158 - http://www.osvdb.org/24243 - http://secunia.com/advisories/19443 - http://osvdb.org/ref/24/24243-script_index.txt - http://www.securityfocus.com/bid/17297
CVE ID: CVE-2006-1559 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in PHP Script Index allows remote attackers to execute arbitrary SQL commands via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1158
CVE ID: CVE-2006-1560 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly (1) id and (2) topicid, in (a) browse.php, (b) category.php, (c) gallery.php, (d) poll.php, and (e) possibly other unspecified scripts. NOTE: portions of the description details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24268 - http://www.osvdb.org/24265 - http://www.securityfocu
- CVE Program Container: References: - http://www.osvdb.org/24268 - http://www.osvdb.org/24265 - http://www.securityfocus.com/archive/1/430311/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25512 - http://secunia.com/advisories/19391 - http://www.securityfocus.com/bid/17301 - http://securityreason.com/securityalert/680 - http://www.securityfocus.com/archive/1/430478/100/0/threaded - http://www.vupen.com/english/advisories/2006/1152 - http://www.osvdb.org/24266 - http://evuln.com/vulns/110 - http://www.osvdb.org/24267
CVE ID: CVE-2006-1561 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote attackers to execute arbitrary SQL commands via the x parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24270 - http://secunia.com/advisories/19448 - http://www.securityfocus.com/archive/1/430624/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25519 - http://www.securityfocus.com/bid/17320 - http://www.vupen.com/english/advisories/2006/1174 - http:
lnerabilities/25519 - http://www.securityfocus.com/bid/17320 - http://www.vupen.com/english/advisories/2006/1174 - http://evuln.com/vulns/111 - http://securityreason.com/securityalert/696
CVE ID: CVE-2006-1562 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) autor, (2) www, (3) temat, and (4) tresc parameters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19448 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25521 - http://www.securityfocus.com/archive/1/430624/100/0/threaded - http://www.osvdb.org/24271 - http://www.securityfocus.c
- http://www.securityfocus.com/archive/1/430624/100/0/threaded - http://www.osvdb.org/24271 - http://www.securityfocus.com/bid/17319 - http://www.vupen.com/english/advisories/2006/1174 - http://evuln.com/vulns/111
CVE ID: CVE-2006-1563 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.684Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19448 - http://www.securityfocus.com/archive/1/430624/100/0/threaded - http://www.osvdb.org/24272 - http://www.vupen.com/english/advisories/2006/1174 - http://evuln.com/vulns/111 - https://exchange.xf
w.osvdb.org/24272 - http://www.vupen.com/english/advisories/2006/1174 - http://evuln.com/vulns/111 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25522
CVE ID: CVE-2006-1564 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in libapache2-svn 1.3.0-4 for Subversion in Debian GNU/Linux includes RPATH values under the /tmp/svn directory for the (1) mod_authz_svn.so and (2) mod_dav_svn.so modules, which might allow local users to gain privileges by installing malicious libraries in that directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17288 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/2568
88 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359234 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25680
CVE ID: CVE-2006-1565 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.349Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in libgpib-perl 3.2.06-2 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the LinuxGpib.so module, which might allow local users to gain privileges by installing malicious libraries in that directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17288 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25681 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359239
CVE ID: CVE-2006-1566 State: PUBLISHED Published: 2006-03-31T11:00:00 Last Updated: 2024-08-07T17:19:48.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in libtunepimp-perl 0.4.2-1 in Debian GNU/Linux includes an RPATH value under the /tmp/buildd directory for the tunepimp.so module, which might allow local users to gain privileges by installing malicious libraries in that directory. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25682 - http://www.securityfocus.com/bid/17288 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=359241
CVE ID: CVE-2006-1567 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchField parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17332 - http://secunia.com/advisories/19467 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25564 - http://www.osvdb.org/24289 - http://pridels0.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html - http://www.vupen.com/english/
vdb.org/24289 - http://pridels0.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html - http://www.vupen.com/english/advisories/2006/1185
CVE ID: CVE-2006-1568 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.253Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) email, (2) location, or (3) website parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431001/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25577 - http://www.securityfocus.com/bid/17336 - http://www.vupen.com/english/advisories/2006/1186 - http://evuln.com/vulns/115/summary.html - http
focus.com/bid/17336 - http://www.vupen.com/english/advisories/2006/1186 - http://evuln.com/vulns/115/summary.html - http://securityreason.com/securityalert/708 - http://secunia.com/advisories/19475 - http://www.osvdb.org/24296
CVE ID: CVE-2006-1569 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.238Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters to (a) login.php or (b) register.php; or (3) u parameter to (c) profile.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/431001/100/0/threaded - http://www.securityfocus.com/bid/17336 - http://www.vupen.com/english/advisories/2006/1186 - http://evuln.com/vulns/115/summary.html - https://exchange.xforce.ibmcloud.c
ww.vupen.com/english/advisories/2006/1186 - http://evuln.com/vulns/115/summary.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/25578 - http://secunia.com/advisories/19475 - http://www.osvdb.org/24297 - http://www.osvdb.org/24298 - http://www.osvdb.org/24299
CVE ID: CVE-2006-1570 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.260Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Esqlanelapse 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19474 - http://sourceforge.net/project/shownotes.php?release_id=406021 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25568 - http://www.vupen.com/english/advisories/2006/1183 - http://www.securityfocus.com/bid/17331 - http://www.osvdb.org/24300
CVE ID: CVE-2006-1571 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25565 - http://www.osvdb.org/24301 - http://secunia.com/advisories/19476 - http://securityreason.com/securityalert/701 - http://evuln.com/vulns/114/summary.html - http://www.securityfocus.com/bid/17333 - http://www.securityfo
rityalert/701 - http://evuln.com/vulns/114/summary.html - http://www.securityfocus.com/bid/17333 - http://www.securityfocus.com/archive/1/430873/100/0/threaded - http://www.vupen.com/english/advisories/2006/1182
CVE ID: CVE-2006-1572 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/429474/100/0/threaded - http://securityreason.com/securityalert/658 - http://secunia.com/advisories/19481 - http://www.osvdb.org/24287 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25570 - http://www.vupen.com/english/advisories/2006/1181 - http://www.security
ange.xforce.ibmcloud.com/vulnerabilities/25570 - http://www.vupen.com/english/advisories/2006/1181 - http://www.securityfocus.com/bid/17324
CVE ID: CVE-2006-1573 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter (part of the $page_menu variable). Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25583 - http://www.securityfocus.com/bid/17323 - http://www.securityfocus.com/archive/1/429395/100/0/threaded - http://securityreason.com/securityalert/657 - http://www.osvdb.org/24313 - http://www.securityfocus.com/arc
0/threaded - http://securityreason.com/securityalert/657 - http://www.osvdb.org/24313 - http://www.securityfocus.com/archive/1/434419/100/0/threaded
CVE ID: CVE-2006-1574 State: PUBLISHED Published: 2006-04-01T00:00:00 Last Updated: 2024-08-07T17:19:48.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/1180 - http://www.securityfocus.com/bid/17337 - http://www.osvdb.org/24295 - http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html - http://secunia.com/advisories