deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-0939
Published: 2006-03-01
Description: SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) id or (2) action parameter to (a) basket.php, or (3) id or (4) page parameter to (b) cat.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/495; http://securitytracker.com/id?1015685; http://www.securityfocus.com/archive/1/426082
CVE: CVE-2006-0940
Published: 2006-03-01
Description: Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/87/summary.html; http://secunia.com/advisories/19047; http://securityreason.com/securityalert/557
CVE: CVE-2006-0941
Published: 2006-03-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/87/summary.html; http://secunia.com/advisories/19047; http://securityreason.com/securityalert/557
CVE: CVE-2006-0942
Published: 2006-03-01
Description: SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509.
CVSS Score: 7.5 (HIGH)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/PwsPHP_SQL_Inj.php; http://www.osvdb.org/28444; http://www.securityfocus.com/bid/16567
CVE: CVE-2006-0943
Published: 2006-03-01
Description: SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/496; http://securitytracker.com/id?1015684; http://www.pwsphp.com/index.php?mod=news&ac=commentaires&id=278
CVE: CVE-2006-0944
Published: 2006-03-01
Description: Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1015689; http://www.osvdb.org/23620; http://www.securityfocus.com/archive/1/426184/100/0/threaded
CVE: CVE-2006-0945
Published: 2006-03-01
Description: PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: http://securitytracker.com/id?1015689; http://www.osvdb.org/23621; http://www.securityfocus.com/archive/1/426184/100/0/threaded
CVE: CVE-2006-0946
Published: 2006-03-01
Description: Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19069; http://securitytracker.com/id?1015688; http://www.osvdb.org/23527
CVE: CVE-2006-0947
Published: 2006-03-01
Description: Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19069; http://securitytracker.com/id?1015688; http://www.securityfocus.com/archive/1/426186
CVE: CVE-2006-0394
Published: 2006-03-02
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0848.  Reason: This candidate is a duplicate of CVE-2006-0848.  Notes: All CVE users should reference CVE-2006-0848 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-0383
Published: 2006-03-02
Description: IPSec when used with VPN networks in Mac OS X 10.4 through 10.4.5 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving the "incorrect handling of error conditions".
CVSS Score: 5.0 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0384
Published: 2006-03-02
Description: automount in Mac OS X 10.4.5 and earlier allows remote file servers to cause a denial of service (unresponsiveness) or execute arbitrary code via unspecified vectors that cause automount to "mount file systems with reserved names".
CVSS Score: 7.5 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0956
Published: 2006-03-02
Description: nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server.
CVSS Score: 1.7 (LOW)
References: http://secunia.com/advisories/19046; http://www.nufw.org/+NuFW-1-21-minor-security-fix+.html; http://www.securityfocus.com/bid/16868
CVE: CVE-2006-0957
Published: 2006-03-02
Description: Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/89/summary.html; http://secunia.com/advisories/19020; http://soft.zoneo.net/freeForum/changes.php
CVE: CVE-2006-0958
Published: 2006-03-02
Description: Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://evuln.com/vulns/89/summary.html; http://secunia.com/advisories/19020; http://soft.zoneo.net/freeForum/changes.php
CVE: CVE-2006-0959
Published: 2006-03-02
Description: SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie.  NOTE: 1.04 has also been reported to be affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/19061; http://securityreason.com/securityalert/512; http://www.osvdb.org/23554
CVE: CVE-2006-0960
Published: 2006-03-02
Description: uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness) via crafted datagrams to UDP port 7778.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19037; http://securitytracker.com/id?1015690; http://www.security.nnov.ru/Ldocument605.html
CVE: CVE-2006-0961
Published: 2006-03-02
Description: SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter.  NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2006-02/0449.html; http://marc.info/?l=full-disclosure&m=[PII_REDACTED]1723&w=2; http://secunia.com/advisories/19157
CVE: CVE-2006-0962
Published: 2006-03-02
Description: SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19084; http://www.securityfocus.com/bid/16930; http://www.vupen.com/english/advisories/2006/0799
CVE: CVE-2006-0963
Published: 2006-03-02
Description: Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-120
References: http://secunia.com/advisories/19051; http://sourceforge.net/project/shownotes.php?release_id=397543; http://www.securityfocus.com/bid/16928
CVE: CVE-2006-0964
Published: 2006-03-02
Description: Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html; http://secunia.com/advisories/19082; http://www.securityfocus.com/archive/1/426480/100/0/threaded
CVE: CVE-2006-0965
Published: 2006-03-02
Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html; http://secunia.com/advisories/19082; http://www.securityfocus.com/archive/1/426480/100/0/threaded
CVE: CVE-2006-0966
Published: 2006-03-02
Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow.
CVSS Score: 2.1 (LOW)
CWE: CWE-119, CWE-399
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html; http://secunia.com/advisories/19082; http://www.securityfocus.com/archive/1/426480/100/0/threaded
CVE: CVE-2006-0967
Published: 2006-03-02
Description: NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks.
CVSS Score: 2.1 (LOW)
CWE: CWE-399
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html; http://secunia.com/advisories/19082; http://www.securityfocus.com/archive/1/426480/100/0/threaded
CVE: CVE-2006-0968
Published: 2006-03-02
Description: The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.
CVSS Score: 7.2 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042640.html; http://secunia.com/advisories/19082; http://securityreason.com/securityalert/524
CVE: CVE-2006-0969
Published: 2006-03-03
Description: PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/507; http://www.securityfocus.com/archive/1/426249/100/0/threaded; http://securityreason.com/securityalert/507
CVE: CVE-2006-0970
Published: 2006-03-03
Description: PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/505; http://www.osvdb.org/3228; http://www.securityfocus.com/archive/1/426214/100/0/threaded
CVE: CVE-2006-0971
Published: 2006-03-03
Description: Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-February/042560.html; http://secunia.com/advisories/19053; http://securityreason.com/securityalert/506
CVE: CVE-2006-0972
Published: 2006-03-03
Description: SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the category vector is already covered by CVE-2005-3846.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/501; http://www.securityfocus.com/archive/1/426195/100/0/threaded; http://www.securityfocus.com/bid/16842
CVE: CVE-2006-0973
Published: 2006-03-03
Description: SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/430870/100/0/threaded; http://www.securityfocus.com/archive/1/435009/100/0/threaded; http://www.securityfocus.com/bid/16825
CVE: CVE-2006-0974
Published: 2006-03-03
Description: Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/bugtraq/2006-02/0548.html; http://secunia.com/advisories/19043; http://www.osvdb.org/23540
CVE: CVE-2006-0975
Published: 2006-03-03
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-0459.  Reason: This candidate is a reservation duplicate of CVE-2006-0459.  Notes: All CVE users should reference CVE-2006-0459 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-0976
Published: 2006-03-03
Description: Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-22
References: http://secunia.com/advisories/19033; http://www.nsag.ru/vuln/955.html; http://www.securityfocus.com/archive/1/426073/100/0/threaded
CVE: CVE-2006-0977
Published: 2006-03-03
Description: Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19067; http://www.securityfocus.com/archive/1/426181/100/0/threaded; http://www.securityfocus.com/bid/16840
CVE: CVE-2006-0978
Published: 2006-03-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header, (2) the From header, and (3) certain other unspecified headers.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/18991; http://secunia.com/secunia_research/2006-6/advisory/; http://securityreason.com/securityalert/504
CVE: CVE-2006-0979
Published: 2006-03-03
Description: Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://issuedealer.com/changes/; http://secunia.com/advisories/19018; http://www.osvdb.org/23502
CVE: CVE-2006-0980
Published: 2006-03-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19066; http://www.securityfocus.com/archive/1/426198/100/0/threaded; http://www.vupen.com/english/advisories/2006/0764
CVE: CVE-2006-0981
Published: 2006-03-03
Description: Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
CVSS Score: 4.0 (MEDIUM)
References: http://secunia.com/advisories/19013; http://www.hamid.ir/security/winace.txt; http://www.osvdb.org/23464
CVE: CVE-2006-0982
Published: 2006-03-03
Description: The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICAR test file.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/426348/100/0/threaded; http://www.securityfocus.com/archive/1/426348/100/0/threaded
CVE: CVE-2006-0983
Published: 2006-03-03
Description: Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/510; http://sourceforge.net/forum/forum.php?forum_id=438526; http://www.osvdb.org/23700
CVE: CVE-2006-0984
Published: 2006-03-03
Description: Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19070; http://securityreason.com/securityalert/511; http://www.osvdb.org/23541
CVE: CVE-2006-0985
Published: 2006-03-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters.
CVSS Score: 4.3 (MEDIUM)
References: http://NeoSecurityTeam.net/advisories/Advisory-17.txt; http://secunia.com/advisories/19050; http://www.securityfocus.com/archive/1/426304/100/0/threaded
CVE: CVE-2006-0986
Published: 2006-03-03
Description: WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php, (11) admin-footer.php, and (12) menu.php in the wp-admin directory; and possibly (13) list directory contents of the wp-includes directory.  NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors are already covered by CVE-2005-4463.  The menu-header.php vector is already covered by CVE-2005-2110.  Other vectors might be covered by CVE-2005-1688.  NOTE: if the typical installation of WordPress does not list any site-specific files to wp-includes, then vector [13] is not an exposure.
CVSS Score: 5.0 (MEDIUM)
References: http://NeoSecurityTeam.net/advisories/Advisory-17.txt; http://secunia.com/advisories/19050; http://www.securityfocus.com/archive/1/426304/100/0/threaded
CVE: CVE-2006-0987
Published: 2006-03-03
Description: The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
CVSS Score: 5.0 (MEDIUM)
References: http://dns.measurement-factory.com/surveys/sum1.html; http://kb.isc.org/article/AA-00269; http://www.securityfocus.com/archive/1/426368/100/0/threaded
CVE: CVE-2006-0988
Published: 2006-03-03
Description: The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
CVSS Score: 7.8 (HIGH)
References: http://dns.measurement-factory.com/surveys/sum1.html; http://www.securityfocus.com/archive/1/426368/100/0/threaded; http://www.us-cert.gov/reading_room/DNS-recursion121605.pdf
CVE: CVE-2006-0995
Published: 2006-03-03
Description: EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service (client termination and loss of backup service) via a malformed packet to TCP port 497, which triggers an assert error.
CVSS Score: 5.0 (MEDIUM)
References: http://kb.dantz.com/article.asp?article=8361&p=2; http://secunia.com/advisories/19097; http://securitytracker.com/id?1015714
CVE: CVE-2006-0386
Published: 2006-03-03
Description: FileVault in Mac OS X 10.4.5 and earlier does not properly mount user directories when creating a FileVault image, which allows local users to access protected files when FileVault is enabled.
CVSS Score: 1.7 (LOW)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0388
Published: 2006-03-03
Description: Safari in Mac OS X 10.3 before 10.3.9 and 10.4 before 10.4.5 allows remote attackers to redirect users to local files and execute arbitrary JavaScript via unspecified vectors involving HTTP redirection to local resources.
CVSS Score: 2.6 (LOW)
CWE: CWE-94
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0389
Published: 2006-03-03
Description: Cross-site scripting (XSS) vulnerability in Syndication (Safari RSS) in Mac OS X 10.4 through 10.4.5 allows remote attackers to execute arbitrary JavaScript via unspecified vectors involving RSS feeds.
CVSS Score: 2.6 (LOW)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0391
Published: 2006-03-03
Description: Directory traversal vulnerability in the BOM framework in Mac OS X 10.x before 10.3.9 and 10.4 before 10.4.5 allows user-assisted attackers to overwrite or create arbitrary files via an archive that is handled by BOMArchiveHelper.
CVSS Score: 1.7 (LOW)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0387
Published: 2006-03-06
Description: Stack-based buffer overflow in Safari in Mac OS X 10.4.5 and earlier, and 10.3.9 and earlier, allows remote attackers to execute arbitrary code via unspecified vectors involving a web page with crafted JavaScript, a different vulnerability than CVE-2005-4504.
CVSS Score: 6.4 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303382; http://lists.apple.com/archives/security-announce/2006/Mar/msg00000.html; http://secunia.com/advisories/19064
CVE: CVE-2006-0390
Published: 2006-03-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4504.  Reason: This candidate is a duplicate of CVE-2005-4504.  Notes: All CVE users should reference CVE-2005-4504 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage