Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6916 State: PUBLISHED Published: 2007-01-11T02:00:00Z Last Updated: 2024-09-16T18:38:16.526Z Vendors: n/a Products: n/a Problem Types: n/a Description: Getahead Direct Web Remoting (DWR) before 1.1.3 allows attackers to cause a denial of service (infinite loop) via unknown vectors related to "crafted input." Additional Analyst Notes: - CVE Program Container: References: - http://getahead.ltd.uk/dwr/changelog
CVE ID: CVE-2006-6917 State: PUBLISHED Published: 2007-01-11T20:00:00 Last Updated: 2024-08-07T20:42:07.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup R11.5 Server before SP2 allows remote attackers to execute arbitrary code in the Tape Engine (tapeeng.exe) via a crafted RPC request with (1) opnum 38, which is not properly handled in TAPEUTIL.dll 11.5.3884.0, or (2) opnum 37, which is not properly handled in TAPEENG.dll 11.5.3884.0. Additional Analyst Notes: - CVE Program Container: References: - http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp - http://www.securi
iner: References: - http://supportconnectw.ca.com/public/storage/infodocs/basbrtapeeng-secnotice.asp - http://www.securityfocus.com/archive/1/454088/30/0/threaded - http://www3.ca.com/securityadvisor/newsinfo/collateral.aspx?cid=97428 - http://www.lssec.com/advisories/LS-20061001.pdf - http://www.securityfocus.com/archive/1/456711 - http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=34959 - http://www.securityfocus.com/archive/1/454094/30/360/threaded - http://www.securityfocus.com/archive/1/456428/100/0/threaded - http://www.securityfocus.com/archive/1/453930/30/390/threaded - https://www.exploit-db.com/exploits/3086 - http://www.lssec.com/advisories/LS-20060908.pdf - http://www.secur
threaded - https://www.exploit-db.com/exploits/3086 - http://www.lssec.com/advisories/LS-20060908.pdf - http://www.securityfocus.com/archive/1/453933/30/420/threaded
CVE ID: CVE-2006-6918 State: PUBLISHED Published: 2007-01-11T23:00:00Z Last Updated: 2024-09-16T23:31:51.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the Admin login for Georgian discussion board (GeoBB) before 1.0 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://sourceforge.net/forum/forum.php?forum_id=642218
CVE ID: CVE-2006-6919 State: PUBLISHED Published: 2007-01-11T23:00:00 Last Updated: 2024-08-07T20:42:07.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Firefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript in the local context via an RSS feed with an img tag containing the script followed by an extra trailing ">", which Sage modifies to close the img element before the malicious script. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/452010/100/0/threaded - http://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2/ - http://www.vupen.com/english/advisories/2006/4426 - https://
p://michaeldaw.org/md-hacks/rss-injection-in-sage-part-2/ - http://www.vupen.com/english/advisories/2006/4426 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30179 - http://secunia.com/advisories/22809
CVE ID: CVE-2006-6920 State: PUBLISHED Published: 2007-01-11T23:00:00 Last Updated: 2024-08-07T20:42:07.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4495 - http://www.nucleuscms.org/item/3044 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30254 - http://secunia.com/advisories/22843 - http://securitytracker.com/id?1017220 - http://www.securityfocus.com/bi
es/30254 - http://secunia.com/advisories/22843 - http://securitytracker.com/id?1017220 - http://www.securityfocus.com/bid/21104 - http://jvn.jp/jp/JVN%2384656399/index.html
CVE ID: CVE-2006-6921 State: PUBLISHED Published: 2007-01-12T23:00:00 Last Updated: 2024-08-07T20:42:07.815Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified versions of the Linux kernel allow local users to cause a denial of service (unrecoverable zombie process) via a program with certain instructions that prevent init from properly reaping a child whose parent has died. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10834 - http://secunia.com/advisories/27747 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://uwsg.iu.edu/hypermail/linux/kernel/061
isories/27747 - http://www.redhat.com/support/errata/RHSA-2008-0154.html - http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/1021.html - http://www.redhat.com/support/errata/RHSA-2007-0939.html - http://support.avaya.com/elmodocs2/security/ASA-2007-474.htm - http://uwsg.iu.edu/hypermail/linux/kernel/0612.2/0980.html - http://secunia.com/advisories/29236 - http://secunia.com/advisories/27436
CVE ID: CVE-2006-6922 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/36588 - http://www.vupen.com/english/advisories/2007/0159 - http://www.securityfocus.com/bid/22023 - http://sourceforge.net/project/shownotes.php?release_id=474782&group_id=171803
CVE ID: CVE-2006-6923 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the tk parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4485 - http://www.securityfocus.com/bid/20996 - http://www.securityfocus.com/bid/20988 - http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html - http://securityreason.com/securityalert/2144
CVE ID: CVE-2006-6924 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: bitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a sort_mode=-98 query string to (1) blogs/list_blogs.php, (2) fisheye/index.php, (3) wiki/orphan_pages.php, or (4) wiki/list_pages.php, which forces a SQL error. NOTE: the fisheye/list_galleries.php vector is already covered by CVE-2005-4380. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4485 - http://www.securityfocus.com/bid/20996 - http://secunia.com/advisories/22793 - https
.com/english/advisories/2006/4485 - http://www.securityfocus.com/bid/20996 - http://secunia.com/advisories/22793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30165 - http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html - http://securityreason.com/securityalert/2144
CVE ID: CVE-2006-6925 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.935Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the message title field when submitting an article to articles/edit.php, (2) the message title field when submitting a blog post to blogs/post.php, or (3) the message description field when editing in the Sandbox in wiki/edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4485 - http://www.securityfocus.com/bi
CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4485 - http://www.securityfocus.com/bid/20996 - http://www.securityfocus.com/bid/20988 - http://secunia.com/advisories/22793 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30167 - http://archives.neohapsis.com/archives/bugtraq/2006-11/0142.html - http://securityreason.com/securityalert/2144
CVE ID: CVE-2006-6926 State: PUBLISHED Published: 2007-01-13T02:00:00Z Last Updated: 2024-09-16T21:07:21.094Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by VulnDisco Pack. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22858 - http://www.securityfocus.com/bid/21084
CVE ID: CVE-2006-6927 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.854Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary SQL commands via (1) the uname (username) and (2) pword (passwd) fields in (a) admin/default.asp; the (3) ID parameter to (b) listfull.asp or (c) printmain.asp; the (4) cat parameter to (d) listmain.asp, (e) searchoption.asp, or (f) searchmain.asp; the (5) Keyword parameter to (g) searchkey.asp; the (6) area parameter to searchmain.asp or searchoption.asp; the (7) searchin parameter to searchkey.asp; or the (8) cost1, (9) cost2, (1
eter to searchmain.asp or searchoption.asp; the (7) searchin parameter to searchkey.asp; or the (8) cost1, (9) cost2, (10) acreage1, or (11) squarefeet1 parameters to searchoption.asp. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4630 - http://securityreason.com/securityalert/2143 - http://secunia.com/advisories/23049 - http://www.securityfocus.com/archive/1/452112/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/30424 - http://www.securityfocus.com/bid/21191
CVE ID: CVE-2006-6928 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.711Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to (a) listmain.asp or (b) searchmain.asp, the (2) the Keyword parameter to (c) searchkey.asp, or the (3) refno parameter to (d) forminfo.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4630 - http://securityreason.com/securityalert/2143 - http://secunia.com/advisories/23049 - https://exchange.xforce.ibmcloud.
- http://securityreason.com/securityalert/2143 - http://secunia.com/advisories/23049 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30425 - http://www.securityfocus.com/archive/1/452112/100/0/threaded - http://www.securityfocus.com/bid/21191
CVE ID: CVE-2006-6929 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.805Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) reply.asp or (b) view_print.asp, the (2) SH1 parameter to (c) search.asp, the (3) name parameter to reply.asp, or the (4) dosearch parameter to (d) advsearch.asp. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4632 - http://secunia.com/advisories/22985 - https://exchange.xforce.ibmcloud.com/vulnera
en.com/english/advisories/2006/4632 - http://secunia.com/advisories/22985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30450 - http://www.securityfocus.com/bid/21197 - http://s-a-p.ca/index.php?page=OurAdvisories&id=44 - http://securityreason.com/securityalert/2142 - http://www.securityfocus.com/archive/1/452088/100/0/threaded
CVE ID: CVE-2006-6930 State: PUBLISHED Published: 2007-01-13T02:00:00 Last Updated: 2024-08-07T20:42:07.811Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/4632 - http://secunia.com/advisories/22985 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30449 - http://www.securityfocus.com/bid/21197 - http://s-a-p.ca/index.php?page=OurAdvisories&id=44 - http://securityreason.com/securityalert/2142 - http://www.securityfocus.com/
a-p.ca/index.php?page=OurAdvisories&id=44 - http://securityreason.com/securityalert/2142 - http://www.securityfocus.com/archive/1/452088/100/0/threaded
CVE ID: CVE-2006-6931 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T20:42:07.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Algorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule matching for certain rules, allows remote attackers to cause a denial of service (CPU consumption and detection outage) via crafted network traffic, aka a "backtracking attack." Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/21991 - http://www.cs.wisc.edu/~smithr/pubs/randy_smith_acsac2006.zip - http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html - http://secun
ubs/randy_smith_acsac2006.zip - http://lists.immunitysec.com/pipermail/dailydave/2007-January/003954.html - http://secunia.com/advisories/24164 - http://secunia.com/advisories/24338 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31430 - http://www.osvdb.org/32096 - http://secunia.com/advisories/23716 - http://securitytracker.com/id?1017508 - http://security.gentoo.org/glsa/glsa-200702-03.xml - http://www.cs.wisc.edu/~smithr/pubs/acsac2006.pdf - http://www.mandriva.com/security/advisories?name=MDKSA-2007:051 - http://www.acsac.org/2006/advance_program.html - http://www.acsac.org/2006/papers/54.pdf - http://www.acsac.org/2006/abstracts/54.html - http://www.snort.org/pub-bin/snortnews.c
ww.acsac.org/2006/papers/54.pdf - http://www.acsac.org/2006/abstracts/54.html - http://www.snort.org/pub-bin/snortnews.cgi
CVE ID: CVE-2006-6932 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T20:42:07.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to (a) dispimage.asp, or the (2) order or (3) page parameter to (b) default.asp. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2147 - http://www.securityfocus.com/bid/21131 - http://www.securityfocus.com/archive/1/451875/100/0/threaded
CVE ID: CVE-2006-6933 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T20:42:07.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Easy Chat Server 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download certain files via direct requests to files such as (1) ServerKey.pem and (2) AcceptIP.txt. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30075 - http://secunia.com/advisories/22739
CVE ID: CVE-2006-6934 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T20:42:07.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Portix-PHP 0.4.2 allow remote attackers to inject arbitrary web script or HTML via the (1) titre or (2) auteur field in a forum post. Additional Analyst Notes: - CVE Program Container: References: - http://s-a-p.ca/index.php?page=OurAdvisories&id=8 - http://www.securityfocus.com/bid/20975 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30124 - http://securityreason.com/securityalert/2150 - http://secunia.com/advisories/22795 - http://www.securityfocus.com/archive/1/
://securityreason.com/securityalert/2150 - http://secunia.com/advisories/22795 - http://www.securityfocus.com/archive/1/450935/100/0/threaded
CVE ID: CVE-2006-6935 State: PUBLISHED Published: 2007-01-16T23:00:00 Last Updated: 2024-08-07T20:42:07.885Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the login component in Portix-PHP 0.4.2 allows remote attackers to execute arbitrary SQL commands via the username and passwd (password) fields. Additional Analyst Notes: - CVE Program Container: References: - http://s-a-p.ca/index.php?page=OurAdvisories&id=8 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30123 - http://www.securityfocus.com/bid/20974 - http://securityreason.com/securityalert/2150 - http://www.securityfocus.com/archive/1/450935/100/0/threaded
CVE ID: CVE-2006-6936 State: PUBLISHED Published: 2007-01-17T00:00:00 Last Updated: 2024-08-07T20:42:07.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) the catname parameter to displaypic.asp or (2) the search field. NOTE: vector 1 likely overlaps CVE-2006-3032. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30327 - http://www.securityfocus.com/archive/1/451786/100/0/threaded - http://www.securityfocus.com/bid/21138 - http://securityreason.com/securityalert/2148
CVE ID: CVE-2006-6937 State: PUBLISHED Published: 2007-01-17T00:00:00 Last Updated: 2024-08-07T20:42:07.886Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30324 - http://www.osvdb.org/31507 - http://aria-security.net/advisory/xtremeg.txt - http://www.securityfocus.com/archive/1/451786/100/0/threaded - http://www.securityfocus.com/bid/21138 - http://securityreason.com/securityalert/2148
CVE ID: CVE-2006-6938 State: PUBLISHED Published: 2007-01-17T00:00:00 Last Updated: 2024-08-07T20:42:07.755Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include arbitrary files via ".." sequences in the root parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2685 - https://exchange.xforce.ibmcloud.com/vulnerabilities/29904 - http://www.securityfocus.com/bid/20810
CVE ID: CVE-2006-6939 State: PUBLISHED Published: 2007-01-17T00:00:00 Last Updated: 2024-08-07T20:42:07.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open_sbuf function. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/30374 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:023 - http://www.trustix.org/errata/2007/0005 - http://secunia.com/advisories/23832 - http://secunia.com/advisories/23857 - http://fedoranews.org/cms/node/2449 - http://secunia.com/advisories/23848 - htt
- http://secunia.com/advisories/23857 - http://fedoranews.org/cms/node/2449 - http://secunia.com/advisories/23848 - http://www.securityfocus.com/bid/22129 - http://fedoranews.org/cms/node/2450 - http://secunia.com/advisories/24054 - http://www.vupen.com/english/advisories/2006/4573 - http://freshmeat.net/projects/ed/?branch_id=17855&release_id=240890 - https://issues.rpath.com/browse/RPL-962
CVE ID: CVE-2006-6940 State: PUBLISHED Published: 2007-01-17T11:00:00 Last Updated: 2024-08-07T20:42:07.897Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary code via a long header in an e-mail message. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0160 - http://sourceforge.net/project/shownotes.php?release_id=473941&group_id=152204 - http://sourceforge.net/tracker/index.php?func=detail&aid=1621688&group_id=152204&atid=783596
CVE ID: CVE-2006-6941 State: PUBLISHED Published: 2007-01-19T00:00:00 Last Updated: 2024-08-07T20:42:07.716Z Vendors: n/a Products: n/a Problem Types: n/a Description: index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/2704 - http://www.freewebshop.org/?id=27
CVE ID: CVE-2006-6942 State: PUBLISHED Published: 2007-01-19T02:00:00 Last Updated: 2024-08-07T20:42:07.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) the newname parameter to db_operations.php, the (4) query_history_latest, (5) query_history_latest_db, and (6) querydisplay_tab parameters to (c) querywindow.php, and (7) the pos parameter to (d) sql.php. Additional Analyst Notes: - CVE Program Container: Refere
(c) querywindow.php, and (7) the pos parameter to (d) sql.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7 - http://www.vupen.com/english/advisories/2006/4572 - http://secunia.com/advisories/26733 - http://marc.info/?l=bugtraq&m=116370414309444&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/30310 - http://www.us.debian.org/security/2007/dsa-1370 - http://www.securityfocus.com/bid/21137
CVE ID: CVE-2006-6943 State: PUBLISHED Published: 2007-01-19T02:00:00 Last Updated: 2024-08-07T20:42:07.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[], (2) target[], (3) db[], (4) goto[], (5) table[], and (6) tbl_group[] array arguments to (c) index.php, and the (7) back[] argument to (d) sql.php; and an invalid (8) sort_by parameter to (e) server_databases.php and (9) db parameter to (f) db_printview.php. Additional Analyst Notes: - CVE Program Container: References: - http://
p and (9) db parameter to (f) db_printview.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-8 - http://marc.info/?l=bugtraq&m=116370414309444&w=2 - http://www.securityfocus.com/bid/21137