Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
19063 - http://securityreason.com/securityalert/575 - http://securitytracker.com/id?1015780 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25171 - http://secunia.com/secunia_research/2006-16/ - http://www.securityfocus.com/archive/1/427475/100/0/threaded
CVE ID: CVE-2006-0951 State: PUBLISHED Published: 2006-04-08T01:00:00 Last Updated: 2024-08-07T16:56:15.567Z Vendors: n/a Products: n/a Problem Types: n/a Description: The GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/24394 - http://www.vupen.com/english/advisories/2006/1242 - http://secunia.com/secunia_research/2006-17/advisory/ - http://secunia.com/advisories/19054
CVE ID: CVE-2006-0956 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.937Z Vendors: n/a Products: n/a Problem Types: n/a Description: nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0762 - http://secunia.com/advisories/19046 - http://www.nufw.org/+NuFW-1-21-minor-security-fix+.html - http://www.securityfocus.com/bid/16868
CVE ID: CVE-2006-0957 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427321/100/0/threaded - http://www.vupen.com/english/advisories/2006/0759 - http://www.securityfocus.com/bid/16871 - http://evuln.com/vulns/89/summary.html - http://soft.zoneo.net
ries/2006/0759 - http://www.securityfocus.com/bid/16871 - http://evuln.com/vulns/89/summary.html - http://soft.zoneo.net/freeForum/changes.php - http://secunia.com/advisories/19020
CVE ID: CVE-2006-0958 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.320Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/427321/100/0/threaded - http://www.vupen.com/english/advisories/2006/0759 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24925 - http://evuln.com/vulns/89/summary.html - http://www.securityfocus.com/bid/16877 - http://
ud.com/vulnerabilities/24925 - http://evuln.com/vulns/89/summary.html - http://www.securityfocus.com/bid/16877 - http://soft.zoneo.net/freeForum/changes.php - http://secunia.com/advisories/19020
CVE ID: CVE-2006-0959 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:15.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie. NOTE: 1.04 has also been reported to be affected. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0774 - http://www.securityfocus.com/bid/16631 - http://www.securityfocus.com/archive/1/426320/100/0/threaded - http://www.securityfocus
ww.securityfocus.com/bid/16631 - http://www.securityfocus.com/archive/1/426320/100/0/threaded - http://www.securityfocus.com/archive/1/426653/100/0/threaded - http://securityreason.com/securityalert/512 - https://www.exploit-db.com/exploits/1539 - http://secunia.com/advisories/19061 - http://www.osvdb.org/23554 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24953
CVE ID: CVE-2006-0960 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.717Z Vendors: n/a Products: n/a Problem Types: n/a Description: uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness) via crafted datagrams to UDP port 7778. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19037 - http://securitytracker.com/id?1015690 - http://www.security.nnov.ru/Ldocument605.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/24968 - http://www.vupen.com/english/advisories/2006/0780 - http://www.securityfocus.com/bid/16894
CVE ID: CVE-2006-0961 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16813 - http://securitytracker.com/id?1015677 - http://www.osvdb.org/23618 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.html - http://www.nukedx.com/?viewd
://www.osvdb.org/23618 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.html - http://www.nukedx.com/?viewdoc=10 - https://www.exploit-db.com/exploits/1562 - http://marc.info/?l=full-disclosure&m=114079912721723&w=2 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24920 - http://www.vupen.com/english/advisories/2006/0881 - http://secunia.com/advisories/19157
CVE ID: CVE-2006-0962 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:15.437Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16930 - http://secunia.com/advisories/19084 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25019 - http://www.vupen.com/english/advisories/2006/0799 - https://www.exploit-db.com/exploits/1543
CVE ID: CVE-2006-0963 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25159 - http://sourceforge.net/project/shownotes.php?release_id=397543 - http://www.securityfocus.com/bid/16928 - http://secunia.com/advisories/19051 - http://www
wnotes.php?release_id=397543 - http://www.securityfocus.com/bid/16928 - http://secunia.com/advisories/19051 - http://www.vupen.com/english/advisories/2006/0800
CVE ID: CVE-2006-0964 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.984Z Vendors: n/a Products: n/a Problem Types: n/a Description: Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16906 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25242 - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full
force.ibmcloud.com/vulnerabilities/25242 - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
CVE ID: CVE-2006-0965 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.822Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25243 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - http://secu
e.xforce.ibmcloud.com/vulnerabilities/25243 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
CVE ID: CVE-2006-0966 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/25248 - http://www.securityfocus.com/bid/16906 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipe
.securityfocus.com/archive/1/426480/100/0/threaded - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
CVE ID: CVE-2006-0967 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16906 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - https://exchange.xforce.i
w.securityfocus.com/bid/16906 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/25249 - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
CVE ID: CVE-2006-0968 State: PUBLISHED Published: 2006-03-02T23:00:00 Last Updated: 2024-08-07T16:56:14.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16906 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25251 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - http://securityreason.com/sec
com/vulnerabilities/25251 - http://www.securityfocus.com/archive/1/426480/100/0/threaded - http://securityreason.com/securityalert/524 - http://secunia.com/advisories/19082 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html
CVE ID: CVE-2006-0969 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.317Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/507 - http://www.securityfocus.com/archive/1/426249/100/0/threaded
CVE ID: CVE-2006-0970 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/505 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24989 - http://www.securityfocus.com/archive/1/426214/100/0/threaded - http://www.osvdb.org/3228
CVE ID: CVE-2006-0971 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:15.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19053 - http://www.vupen.com/english/advisories/2006/0761 - http://securitytracker.com/id?1015686 - http://www.securityfocus.com/archive/1/427464/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24930 - http://securityreason.com/securityalert/506 - http://www3.autist
://exchange.xforce.ibmcloud.com/vulnerabilities/24930 - http://securityreason.com/securityalert/506 - http://www3.autistici.org/fdonato/advisory/DirectContact0.3b-adv.txt - http://www.securityfocus.com/archive/1/426250/100/0/threaded - http://www.osvdb.org/23519 - http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042560.html - http://www.securityfocus.com/bid/16849
CVE ID: CVE-2006-0972 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter. NOTE: the category vector is already covered by CVE-2005-3846. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16842 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24943 - http://www.securityfocus.com/archive/1/426195/100/0/threaded - http://securityreason.com/securityalert/501
CVE ID: CVE-2006-0973 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/435009/100/0/threaded - http://www.securityfocus.com/data/vulnerabilities/exploits/phpWebSite-topic-sql-inj.pl - http://www.securityfocus.com/bid/16825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25799 - http://www.securityfocus.c
ww.securityfocus.com/bid/16825 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25799 - http://www.securityfocus.com/archive/1/430870/100/0/threaded - https://www.exploit-db.com/exploits/1525
CVE ID: CVE-2006-0974 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/23540 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24981 - http://secunia.com/advisories/19043 - http://www.vupen.com/english/advisories/2006/0776 - http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html - http://www.securityfocus.com/bid/16821
CVE ID: CVE-2006-0975 State: REJECTED Published: 2006-03-03T11:00:00 Last Updated: 2006-03-10T10:00:00 Description: No description available.
CVE ID: CVE-2006-0976 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.308Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24955 - http://www.vupen.com/english/advisories/2006/0766 - http://www.nsag.ru/vuln/955.html - http://www.securityfocus.com/bid/16822 - http://secunia.com/advisories/19033 - http://www.securityfocus.com/archive/1/426073/100/0/threaded
CVE ID: CVE-2006-0977 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2006/0786 - http://secunia.com/advisories/19067 - http://www.securityfocus.com/bid/16840 - http://www.securityfocus
ries/2006/0786 - http://secunia.com/advisories/19067 - http://www.securityfocus.com/bid/16840 - http://www.securityfocus.com/archive/1/426181/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/24985
CVE ID: CVE-2006-0978 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header, (2) the From header, and (3) certain other unspecified headers. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426206/100/0/threaded - http://www.securityfocus.com/bid/16834 - http://securityreason.com/securityalert/504 - https://exchange.xforce
hreaded - http://www.securityfocus.com/bid/16834 - http://securityreason.com/securityalert/504 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24945 - http://secunia.com/advisories/18991 - http://secunia.com/secunia_research/2006-6/advisory/ - http://www.osvdb.org/23512 - http://www.vupen.com/english/advisories/2006/0751
CVE ID: CVE-2006-0979 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.819Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://issuedealer.com/changes/ - http://www.securityfocus.com/bid/16884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24929 - http://secunia.com/advisories/19018 - http://www.osvdb.org/23502
CVE ID: CVE-2006-0980 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.674Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426198/100/0/threaded - http://www.vupen.com/english/advisories/2006/0764 - http://secunia.com/advisories/19066 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24946
CVE ID: CVE-2006-0981 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:15.509Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/16800 - http://www.osvdb.org/23464 - http://www.hamid.ir/security/winace.txt - http://secunia.com/advisories/19013 - http://www.vupen.com/english/advisories/2006/0730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24902 - http://ww
tp://www.vupen.com/english/advisories/2006/0730 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24902 - http://www.securityfocus.com/archive/1/425971/100/0/threaded
CVE ID: CVE-2006-0982 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICAR test file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426348/100/0/threaded
CVE ID: CVE-2006-0983 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:15.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/426319/100/0/threaded - http://securityreason.com/securityalert/510 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24950 - http://www.securityfocus.com/bid/16874 - http://www.osvdb.org/23700 - http://sourceforge.net/forum/forum.php?forum_id=438526
CVE ID: CVE-2006-0984 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.416Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19070 - http://www.securityfocus.com/bid/16879 - http://www.vupen.com/english/advisories/2006/0775 - http://www.osvdb.org/23541 - https://exchange.xforce.ibmcloud.com/vulnerabilities/24980 - http://www.securityfocus.com/archive/1/426318/100/0/threaded - http://secu
e.xforce.ibmcloud.com/vulnerabilities/24980 - http://www.securityfocus.com/archive/1/426318/100/0/threaded - http://securityreason.com/securityalert/511
CVE ID: CVE-2006-0985 State: PUBLISHED Published: 2006-03-03T11:00:00 Last Updated: 2024-08-07T16:56:14.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/24957 - http://NeoSecurityTeam.net/advisories/Advisory-17.txt - http://secunia.com/advisories/19050 - http://www.securityfocus.com/archive/1/426304/100/0/threaded - http://ww