Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-0442 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers to inject arbitrary web script or HTML via the (1) notepad parameter in a notepad action and (2) signature parameter in an editsig action. NOTE: These are different attack vectors, and probably a different vulnerability, than CVE-2006-0218 and CVE-2006-0219. Additional Analyst Notes: - CVE Program Container: References: - http://kapda.ir/advisory-241.html - http://secunia.com/advisories/18603 - http://www.sec
rogram Container: References: - http://kapda.ir/advisory-241.html - http://secunia.com/advisories/18603 - http://www.securityfocus.com/archive/1/423128/100/0/threaded - http://securitytracker.com/id?1015535 - http://www.vupen.com/english/advisories/2006/0316 - http://www.securityfocus.com/bid/16361
CVE ID: CVE-2006-0443 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) realname and (2) comment parameters, or (3) via a javascript URI in the url parameter, when adding a comment. Additional Analyst Notes: - CVE Program Container: References: - http://evuln.com/vulns/49/summary.html - http://www.osvdb.org/22716 - http://www.securityfocus.com/bid/16376 - http://securityreason.com/securityalert/369 - http://secunia.com/advisories/18610 - http://www.se
yfocus.com/bid/16376 - http://securityreason.com/securityalert/369 - http://secunia.com/advisories/18610 - http://www.securityfocus.com/archive/1/423023/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24292 - http://www.vupen.com/english/advisories/2006/0326
CVE ID: CVE-2006-0444 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.665Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via the (1) par parameter in the post function on the forum page and possibly the (2) poll_id parameter on the poll page. NOTE: the poll_id vector can also allow resultant cross-site scripting (XSS) from an unquoted error message for invalid SQL syntax. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423145/100/0/threaded - http://www.secur
: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423145/100/0/threaded - http://www.securityfocus.com/bid/16391 - http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt - http://www.osvdb.org/22722 - http://www.osvdb.org/22720 - http://www.vupen.com/english/advisories/2006/0342 - http://secunia.com/advisories/18597 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24355
CVE ID: CVE-2006-0445 State: PUBLISHED Published: 2006-01-26T22:00:00 Last Updated: 2024-08-07T16:34:14.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "\", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423145/100/0/threaded - http://www.securityfocus.com/bid/16391 - http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt - htt
/0/threaded - http://www.securityfocus.com/bid/16391 - http://www.h4cky0u.org/advisories/HYSA-2006-002-phpclan.txt - http://www.osvdb.org/22721
CVE ID: CVE-2006-0446 State: PUBLISHED Published: 2006-01-27T00:00:00 Last Updated: 2024-08-07T16:34:14.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary commands as the web server via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0319 - http://www.securityfocus.com/bid/16371 - http://secunia.com/advisories/18594 - http://devel.webwork.rochester.edu/twiki/bin/view/Webwork/WeBWorKRelease2pt1pt4 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24322
CVE ID: CVE-2006-0447 State: PUBLISHED Published: 2006-01-27T00:00:00 Last Updated: 2024-08-07T16:34:14.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute arbitrary code via a long username to the (1) AUTH PLAIN or (2) AUTH LOGIN SMTP commands, which is not properly handled by (a) EPSTRS.EXE or (b) SPA-RS.EXE; (3) a long username in the APOP POP3 command, which is not properly handled by (c) EPSTPOP4S.EXE or (d) SPA-POP3S.EXE; (4) a long IMAP DELETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE. Additional Analyst Notes: - CVE
LETE command, which is not properly handled by (e) EPSTIMAP4S.EXE or (f) SPA-IMAP4S.EXE. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0318 - http://secunia.com/secunia_research/2006-1/advisory/ - http://www.osvdb.org/22761 - http://secunia.com/advisories/18480 - http://www.osvdb.org/22763 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24331 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24334 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24333 - http://www.securityfocus.com/bid/16379 - http://www.osvdb.org/22762
CVE ID: CVE-2006-0448 State: PUBLISHED Published: 2006-01-27T00:00:00 Last Updated: 2024-08-07T16:34:14.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to (a) list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the (b) APPEND, (c) COPY, or (d) RENAME commands. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24336 - http://www.vupen.com/english/advisories/2006/0318 - http://secunia
/exchange.xforce.ibmcloud.com/vulnerabilities/24336 - http://www.vupen.com/english/advisories/2006/0318 - http://secunia.com/secunia_research/2006-1/advisory/ - http://www.osvdb.org/22764 - http://secunia.com/advisories/18480 - http://www.osvdb.org/22765 - http://www.securityfocus.com/bid/16379
CVE ID: CVE-2006-0449 State: PUBLISHED Published: 2006-01-27T00:00:00 Last Updated: 2024-08-07T16:34:14.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers to cause a denial of service (infinite loop) by sending an APPEND command and disconnecting before the expected amount of data is sent. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0318 - http://secunia.com/secunia_research/2006-1/advisory/ - http://www.osvdb.org/22766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24341 - http://secunia.c
1/advisory/ - http://www.osvdb.org/22766 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24341 - http://secunia.com/advisories/18480 - http://www.securityfocus.com/bid/16379
CVE ID: CVE-2006-0450 State: PUBLISHED Published: 2006-01-27T00:00:00 Last Updated: 2024-08-07T16:34:14.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering many users through profile.php or (2) using search.php to search in a certain way that confuses the database. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/423030/100/0/threaded - http://h4cky0u.org/viewtopic.php?t=637 - http://www.h4cky0u.org/advisories/HYSA-2006-001-phpbb.txt - http://securityreason.com/securityalert/368 - https://exchange.xforce.ibmclo
0u.org/advisories/HYSA-2006-001-phpbb.txt - http://securityreason.com/securityalert/368 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24327
CVE ID: CVE-2006-0451 State: PUBLISHED Published: 2006-02-14T22:00:00 Last Updated: 2024-08-07T16:34:14.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (memory consumption) via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the ber_scanf call, as demonstrated using the ProtoVer LDAP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18960 - http://www.securityfocus.com/bid/16677 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?i
cunia.com/advisories/18960 - http://www.securityfocus.com/bid/16677 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24794
CVE ID: CVE-2006-0452 State: PUBLISHED Published: 2006-02-14T22:00:00 Last Updated: 2024-08-07T16:34:14.821Z Vendors: n/a Products: n/a Problem Types: n/a Description: dn2ancestor in the LDAP component in Fedora Directory Server 1.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via a ModDN operation with a DN that contains a large number of "," (comma) characters, which results in a large amount of recursion, as demonstrated using the ProtoVer LDAP test suite. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24796 - http://secunia.com/advisories/18960 - http://www.securityfocus.com/bid/16
ge.xforce.ibmcloud.com/vulnerabilities/24796 - http://secunia.com/advisories/18960 - http://www.securityfocus.com/bid/16677 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179137
CVE ID: CVE-2006-0453 State: PUBLISHED Published: 2006-02-14T22:00:00 Last Updated: 2024-08-07T16:34:14.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service (crash) via a certain "bad BER sequence" that results in a free of uninitialized memory, as demonstrated using the ProtoVer LDAP test suite. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18960 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24795 - http://www.securityfocus.com/bid/16677 - http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=179135
CVE ID: CVE-2006-0454 State: PUBLISHED Published: 2006-02-07T18:00:00 Last Updated: 2024-08-07T16:34:14.747Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmp_send, does not properly handle when the ip_options_echo function in icmp.c fails, which allows remote attackers to cause a denial of service (crash) via vectors such as (1) record-route and (2) timestamp IP options with the needaddr bit set and a truncated value. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/18788 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - https://ex
es: - http://secunia.com/advisories/18788 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:040 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24575 - http://secunia.com/advisories/18861 - http://secunia.com/advisories/18774 - http://www.trustix.org/errata/2006/0006 - http://marc.info/?l=linux-kernel&m=113927617401569&w=2 - http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html - http://www.novell.com/linux/security/advisories/2006_06_kernel.html - http://www.securityfocus.com/archive/1/427981/100/0/threaded - http://www.vupen.com/english/advisories/2006/0464 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.3 - http://www.ubuntu.com/
m/english/advisories/2006/0464 - http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.15.3 - http://www.ubuntu.com/usn/usn-250-1 - http://secunia.com/advisories/18784 - http://www.securityfocus.com/bid/16532 - http://marc.info/?l=linux-kernel&m=113927648820694&w=2 - http://lists.immunitysec.com/pipermail/dailydave/2006-February/002909.html - http://secunia.com/advisories/18766
CVE ID: CVE-2006-0455 State: PUBLISHED Published: 2006-02-15T22:00:00 Last Updated: 2024-08-07T16:34:14.838Z Vendors: n/a Products: n/a Problem Types: n/a Description: gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even when the detached signature file does not carry a signature, which could cause programs that use gpgv to assume that the signature verification has succeeded. Note: this also occurs when running the equivalent command "gpg --verify". Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16663 - http://secunia.com/advisories/18956 - http://www.trustix.org/errata/2006
ces: - http://www.securityfocus.com/bid/16663 - http://secunia.com/advisories/18956 - http://www.trustix.org/errata/2006/0008 - http://marc.info/?l=gnupg-devel&m=113999098729114&w=2 - http://www.openpkg.org/security/OpenPKG-SA-2006.001-gnupg.html - http://secunia.com/advisories/19249 - http://www.novell.com/linux/security/advisories/2006_05_sr.html - http://www.redhat.com/support/errata/RHSA-2006-0266.html - http://www.novell.com/linux/security/advisories/2006_13_gpg.html - ftp://patches.sgi.com/support/free/security/advisories/20060401-01-U - http://www.securityfocus.com/archive/1/425289/100/0/threaded - http://secunia.com/advisories/18934 - http://fedoranews.org/updates/FEDORA-2006-116.sht
rchive/1/425289/100/0/threaded - http://secunia.com/advisories/18934 - http://fedoranews.org/updates/FEDORA-2006-116.shtml - https://exchange.xforce.ibmcloud.com/vulnerabilities/24744 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10084 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.476477 - http://www.securityfocus.com/archive/1/433931/100/0/threaded - http://secunia.com/advisories/18955 - http://lists.gnupg.org/pipermail/gnupg-announce/2006q1/000211.html - http://www.novell.com/linux/security/advisories/2006_09_gpg.html - http://secunia.com/advisories/19130 - http://www.gentoo.org/security/en/glsa/gl
x/security/advisories/2006_09_gpg.html - http://secunia.com/advisories/19130 - http://www.gentoo.org/security/en/glsa/glsa-200602-10.xml - http://secunia.com/advisories/19532 - http://secunia.com/advisories/18933 - http://www.us.debian.org/security/2006/dsa-978 - http://www.osvdb.org/23221 - http://www.ubuntu.com/usn/usn-252-1 - http://secunia.com/advisories/18968 - http://secunia.com/advisories/18845 - http://secunia.com/advisories/18942 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:043 - http://www.vupen.com/english/advisories/2006/0610
CVE ID: CVE-2006-0456 State: PUBLISHED Published: 2006-06-27T23:00:00 Last Updated: 2024-08-07T16:34:14.504Z Vendors: n/a Products: n/a Problem Types: n/a Description: The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local users to cause a denial of service via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18687 - http://www.vupen.com/english/advisories/2006/2554 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=331c46591414f7f92b1cec048009abe89892ee79 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba
%3Bh=331c46591414f7f92b1cec048009abe89892ee79 - http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=331c46591414f7f92b1cec048009abe89892ee79 - http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.16-rc6 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://www.debian.org/security/2006/dsa-1103 - http://secunia.com/advisories/21465 - http://www.mail-archive.com/kernel-svn-changes%40lists.alioth.debian.org/msg01631.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9909 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com
http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/22417 - http://secunia.com/advisories/20914
CVE ID: CVE-2006-0457 State: PUBLISHED Published: 2006-03-14T02:00:00 Last Updated: 2024-08-07T16:34:14.828Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the (1) add_key, (2) request_key, and (3) keyctl functions in Linux kernel 2.6.x allows local users to cause a denial of service (crash) or read sensitive kernel memory by modifying the length of a string argument between the time that the kernel calculates the length and when it copies the data into kernel memory. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19220 - http://www.securityfocus.com/bid/17084 - http://www.redhat.com/support/errata/RHSA-2006-0575.h
ia.com/advisories/19220 - http://www.securityfocus.com/bid/17084 - http://www.redhat.com/support/errata/RHSA-2006-0575.html - http://www.novell.com/linux/security/advisories/2006-05-31.html - http://secunia.com/advisories/21465 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9566 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25354 - http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm - http://secunia.com/advisories/20398 - http://secunia.com/advisories/22417 - http://www.osvdb.org/23894 - http://www.mandriva.com/security/advisories?name=MDKSA-2006:059 - https://usn.ubuntu.com/263-1/
CVE ID: CVE-2006-0458 State: PUBLISHED Published: 2006-03-06T23:00:00 Last Updated: 2024-08-07T16:34:14.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DCC ACCEPT command handler in irssi before 0.8.9+0.8.10rc5-0ubuntu4.1 in Ubuntu Linux, and possibly other distributions, allows remote attackers to cause a denial of service (application crash) via certain crafted arguments in a DCC command. Additional Analyst Notes: - CVE Program Container: References: - https://usn.ubuntu.com/259-1/ - http://secunia.com/advisories/19090 - http://www.securityfocus.com/bid/16913 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25147
CVE ID: CVE-2006-0459 State: PUBLISHED Published: 2006-03-29T23:00:00 Last Updated: 2024-08-07T16:34:14.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator (flex) before 2.5.33 does not allocate enough memory for grammars containing (1) REJECT statements or (2) trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependent attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - http://prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?download - http://www.osvdb.org/23440 - http://www.us.debian.org/
//prdownloads.sourceforge.net/flex/flex-2.5.33.tar.bz2?download - http://www.osvdb.org/23440 - http://www.us.debian.org/security/2006/dsa-1020 - http://www.vupen.com/english/advisories/2006/0770 - http://secunia.com/advisories/19071 - http://www.securityfocus.com/bid/16896 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24995 - http://www.gentoo.org/security/en/glsa/glsa-200603-07.xml - http://secunia.com/advisories/19228 - http://secunia.com/advisories/19424 - http://securityreason.com/securityalert/570 - http://secunia.com/advisories/19126 - https://usn.ubuntu.com/260-1/ - http://sourceforge.net/mailarchive/forum.php?thread_name=20060223020346.GA11231%40tabitha.home.tldz.org&forum_n
260-1/ - http://sourceforge.net/mailarchive/forum.php?thread_name=20060223020346.GA11231%40tabitha.home.tldz.org&forum_name=flex-announce
CVE ID: CVE-2006-0460 State: PUBLISHED Published: 2006-02-17T01:00:00 Last Updated: 2024-08-07T16:34:14.790Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0643 - http://www.securityfocus.com/bid/16697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24764 - http://www.gentoo.org/security/en/glsa/glsa-200602-09.xml - http://www.osvdb.org/23263 - http://secunia.com/advisories/18914 - http://www.debian.org/security/2006/dsa-997 - http://se
tp://www.osvdb.org/23263 - http://secunia.com/advisories/18914 - http://www.debian.org/security/2006/dsa-997 - http://secunia.com/advisories/19210 - http://secunia.com/advisories/18915
CVE ID: CVE-2006-0461 State: PUBLISHED Published: 2006-01-27T23:00:00 Last Updated: 2024-08-07T16:34:14.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject arbitrary web script or HTML via HTTP_REFERER (referer). Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0325 - http://secunia.com/advisories/18602 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24296 - http://www.securityfocus.com/archive/1/423068/100/0/threaded - http://securityreason.com/securityalert/372 - http://evuln.com/vulns/48/summa
ocus.com/archive/1/423068/100/0/threaded - http://securityreason.com/securityalert/372 - http://evuln.com/vulns/48/summary.html - http://www.securityfocus.com/bid/16377
CVE ID: CVE-2006-0462 State: PUBLISHED Published: 2006-01-27T23:00:00 Last Updated: 2024-08-07T16:34:14.753Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary SQL commands via the entrada parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16393 - http://www.vupen.com/english/advisories/2006/0327 - http://www.osvdb.org/22755 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24309 - http://evuln.com/vulns/50/summary.html - http://www.securityfocus.com/archive/1/423162 - http://securityreason.com/securityal
//evuln.com/vulns/50/summary.html - http://www.securityfocus.com/archive/1/423162 - http://securityreason.com/securityalert/377 - http://secunia.com/advisories/18633
CVE ID: CVE-2006-0463 State: PUBLISHED Published: 2006-01-27T23:00:00Z Last Updated: 2024-09-17T03:32:38.429Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) goto_id parameter to index.php or (2) page parameter to news_full.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22712 - http://www.osvdb.org/22713 - http://osvdb.org/ref/22/22712-ideocontent.txt
CVE ID: CVE-2006-0464 State: PUBLISHED Published: 2006-01-27T23:00:00Z Last Updated: 2024-09-16T19:00:03.972Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the (1) goto_id or (2) mid parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/22714 - http://osvdb.org/ref/22/22712-ideocontent.txt