deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5742
Published: 2006-11-06
Description: The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allows remote attackers to inject arbitrary web script or HTML from a certain embedded Internet Explorer object into an SSID template value, aka "Cross-Application Scripting (XAS)".
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22475; http://www.securityfocus.com/archive/1/449119/100/200/threaded; http://www.securityfocus.com/archive/1/449739/100/100/threaded
CVE: CVE-2006-5743
Published: 2006-11-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to inject arbitrary web script or HTML via (1) an Access Point with a crafted SSID, (2) the name of the sensor WIDS, (3) the name of the Highwall EndPoint workstation, or other unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://www.osvdb.org/29916; http://www.securityfocus.com/archive/1/449118/100/200/threaded; http://www.securityfocus.com/archive/1/449739/100/100/threaded
CVE: CVE-2006-5744
Published: 2006-11-06
Description: Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface allow remote attackers to execute arbitrary SQL commands via an Access Point with a crafted SSID, and via unspecified vectors related to a malicious system operator.
CVSS Score: 7.5 (HIGH)
References: http://www.osvdb.org/29916; http://www.securityfocus.com/archive/1/449118/100/200/threaded; http://www.securityfocus.com/archive/1/449739/100/100/threaded
CVE: CVE-2006-5745
Published: 2006-11-06
Description: Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.6 (HIGH)
References: http://blogs.securiteam.com/?p=717; http://secunia.com/advisories/22687; http://securitytracker.com/id?1017157
CVE: CVE-2006-5746
Published: 2006-11-06
Description: The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate, which allows remote attackers to read network traffic via a man-in-the-middle (MITM) attack, possibly related to the use of self-signed certificates.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/22475; http://www.osvdb.org/29921; http://www.securityfocus.com/archive/1/449119/100/200/threaded
CVE: CVE-2006-5757
Published: 2006-11-06
Description: Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versions allows local users to cause a denial of service (infinite loop) by mounting a crafted ISO9660 filesystem containing malformed data structures.
CVSS Score: 1.2 (LOW)
CWE: CWE-17, CWE-399
References: http://projects.info-pull.com/mokb/MOKB-05-11-2006.html; http://rhn.redhat.com/errata/RHSA-2007-0014.html; http://secunia.com/advisories/22702
CVE: CVE-2006-5758
Published: 2006-11-06
Description: The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel structures on a global shared memory section that is mapped with read-only permissions, but can be remapped by other processes as read-write, which allows local users to cause a denial of service (memory corruption and crash) and gain privileges by modifying the kernel structures.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://kernelwars.blogspot.com/2007/01/alive.html; http://projects.info-pull.com/mokb/MOKB-06-11-2006.html; http://secunia.com/advisories/22668
CVE: CVE-2006-5759
Published: 2006-11-06
Description: index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server via empty (1) rns[] or (2) pag[] arguments, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=5; http://securityreason.com/securityalert/1825; http://www.securityfocus.com/archive/1/450566/100/0/threaded
CVE: CVE-2006-5760
Published: 2006-11-06
Description: Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the racine parameter to (1) function_log.php, (2) function_balise_url.php, or (3) connection.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22710; http://www.osvdb.org/30183; http://www.osvdb.org/30184
CVE: CVE-2006-5761
Published: 2006-11-06
Description: Cross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject arbitrary web script or HTML via the rns parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=5; http://secunia.com/advisories/22715; http://securityreason.com/securityalert/1825
CVE: CVE-2006-5762
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.  NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting.  This also affects Free Image Hosting 2.0, which contains the same code.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/22594; http://www.attrition.org/pipermail/vim/2007-March/001473.html; http://www.osvdb.org/30143
CVE: CVE-2006-5763
Published: 2006-11-06
Description: Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter to (1) login.php, (2) register.php, or (3) send.php.  NOTE: the original provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting.  Vector 1 also affects Free Image Hosting 2.0, which contains the same code.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22594; http://www.attrition.org/pipermail/vim/2007-March/001473.html; http://www.osvdb.org/30144
CVE: CVE-2006-5764
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.  NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://www.attrition.org/pipermail/vim/2007-March/001473.html; http://www.securityfocus.com/archive/1/463707/100/0/threaded; http://www.securityfocus.com/bid/23118
CVE: CVE-2006-5765
Published: 2006-11-06
Description: SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22698; http://securityreason.com/securityalert/1826; http://www.blogcu.com/Liz0ziM/1312100
CVE: CVE-2006-5766
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the config[public_dir] parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20892; https://exchange.xforce.ibmcloud.com/vulnerabilities/29988; https://www.exploit-db.com/exploits/2703
CVE: CVE-2006-5767
Published: 2006-11-06
Description: PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the d_root parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://sourceforge.net/forum/forum.php?forum_id=636860; http://www.attrition.org/pipermail/vim/2006-December/001202.html; http://www.securityfocus.com/bid/20914
CVE: CVE-2006-5768
Published: 2006-11-06
Description: Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the av parameter to (1) msg/view.php, (2) msg/inc_message.php, (3) msg/inc_envoi.php, and (4) admin/incl_voir_compet.php.
CVSS Score: 7.5 (HIGH)
References: http://advisories.echo.or.id/adv/adv58-theday-2006.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]3571&w=2; http://secunia.com/advisories/22721
CVE: CVE-2006-5769
Published: 2006-11-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in admin.tool CMS 3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fSid or (2) fSrcBegriffe parameters in unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7129&w=2; http://www.majorsecurity.de/index_2.php?major_rls=major_rls30; http://www.securityfocus.com/bid/20905
CVE: CVE-2006-5770
Published: 2006-11-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web script or HTML via (1) Bloks, (2) Newnews, (3) lBlok, and (4) foooot parameter in (a) index.php; Newnews, (5) newmsgs, and Bloks parameter in (b) MobileNews.php; Newnews parameter in (c) polls.php; (6) cats parameter in (d) send.php; (7) footer parameter in (e) up.php; and (8) pagenav parameter in (f) cp/index.php.
CVSS Score: 6.8 (MEDIUM)
References: http://www.osvdb.org/32046; http://www.osvdb.org/32047; http://www.osvdb.org/32048
CVE: CVE-2006-5771
Published: 2006-11-06
Description: Cross-site scripting (XSS) vulnerability in Arkoon SSL360 1.0 and 2.0 before 2.0/2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22833; http://www.arkoon.fr/upload/alertes/42AK-2006-05-FR-1.1_SSL360_XSS.pdf; http://www.securityfocus.com/bid/20890
CVE: CVE-2006-5772
Published: 2006-11-06
Description: Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) password and (2) prod parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22664; http://www.freewebshop.org/index.php?id=27; http://www.vupen.com/english/advisories/2006/4332
CVE: CVE-2006-5773
Published: 2006-11-06
Description: Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitrary files and disclose the installation path via a .. (dot dot) in the action parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22664; http://www.freewebshop.org/index.php?id=27; http://www.securityfocus.com/bid/20888
CVE: CVE-2006-5774
Published: 2006-11-06
Description: Cross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/22697; http://www.h14m.org/dist/
CVE: CVE-2006-5775
Published: 2006-11-06
Description: Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows remote attackers to inject arbitrary web script or HTML, possibly via the name parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22720; http://www.funkboard.co.uk/forum/thread.php?id=312; http://www.securityfocus.com/bid/20946
CVE: CVE-2006-4572
Published: 2006-11-07
Description: ip6_tables in netfilter in the Linux kernel before 2.6.16.31 allows remote attackers to (1) bypass a rule that disallows a protocol, via a packet with the protocol header not located immediately after the fragment header, aka "ip6_tables protocol bypass bug;" and (2) bypass a rule that looks for a certain extension header, via a packet with an extension header outside the first fragment, aka "ip6_tables extension header bypass bug."
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://readlist.com/lists/vger.kernel.org/linux-kernel/55/275979.html; http://secunia.com/advisories/22731; http://secunia.com/advisories/22762
CVE: CVE-2006-4806
Published: 2006-11-07
Description: Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22732; http://secunia.com/advisories/22744; http://secunia.com/advisories/22752
CVE: CVE-2006-4807
Published: 2006-11-07
Description: loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22732; http://secunia.com/advisories/22744; http://secunia.com/advisories/22752
CVE: CVE-2006-4808
Published: 2006-11-07
Description: Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22732; http://secunia.com/advisories/22744; http://secunia.com/advisories/22752
CVE: CVE-2006-4809
Published: 2006-11-07
Description: Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22732; http://secunia.com/advisories/22744; http://secunia.com/advisories/22752
CVE: CVE-2006-5776
Published: 2006-11-07
Description: Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php.  NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outside of the web document root and require the administrator to modify $ariadne in an include file
CVSS Score: 7.5 (HIGH)
References: http://attrition.org/pipermail/vim/2006-November/001108.html; http://attrition.org/pipermail/vim/2006-November/001109.html; http://securityreason.com/securityalert/1827
CVE: CVE-2006-5777
Published: 2006-11-07
Description: Creasito E-Commerce Content Manager 1.3.08 allows remote attackers to bypass authentication and perform privileged functions via a non-empty finame parameter to (1) addnewcont.php, (2) adminpassw.php, (3) amministrazione.php, (4) artins.php, (5) bgcolor.php, (6) cancartcat.php, (7) canccat.php, (8) cancelart.php, (9) cancontsit.php, (10) chanpassamm.php, (11) dele.php, (12) delecat.php, (13) delecont.php, (14) emailall.php, (15) gestflashtempl.php, (16) gestmagart.php, (17) gestmagaz.php, (18) gestpre.php, (19) input.php, (20) input3.php, (21) insnucat.php, (22) instempflash.php, (23) mailfc.php, (24) modfdati.php, (25) rescont4.php, (26) ricordo1.php, (27) ricordo4.php, (28) tabcatalg.php, (29) tabcont.php, (30) tabcont3.php, (31) tabstile.php, (32) tabstile3.php, (33) testimmg.php, and (34) update.php in admin/.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22729; https://exchange.xforce.ibmcloud.com/vulnerabilities/30011; https://www.exploit-db.com/exploits/2709
CVE: CVE-2006-5778
Published: 2006-11-07
Description: ftpd in linux-ftpd 0.17, and possibly other versions, performs a chdir before setting the UID, which allows local users to bypass intended access restrictions by redirecting their home directory to a restricted directory.
CVSS Score: 4.6 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=384454; http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/049014.html; http://secunia.com/advisories/22997
CVE: CVE-2006-5779
Published: 2006-11-07
Description: OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, which triggers an assertion failure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz; http://gleg.net/vulndisco_meta.shtml; http://secunia.com/advisories/22750
CVE: CVE-2006-5780
Published: 2006-11-07
Description: Stack-based buffer overflow in nfsd.exe in XLink Omni-NFS Server 5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet to port 2049 (nfsd), as demonstrated by vd_xlink.pm.
CVSS Score: 7.5 (HIGH)
References: http://gleg.net/downloads/VULNDISCO_META_FREE.tar.gz; http://gleg.net/vulndisco_meta.shtml; http://secunia.com/advisories/22751
CVE: CVE-2006-5650
Published: 2006-11-07
Description: The ICQPhone.SipxPhoneManager ActiveX control in America Online ICQ 5.1 allows remote attackers to download and execute arbitrary code via the DownloadAgent function, as demonstrated using an ICQ avatar.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22670; http://securityreason.com/securityalert/1830; http://securitytracker.com/id?1017163
CVE: CVE-2006-5651
Published: 2006-11-07
Description: list.php in DigiOz Guestbook before 1.7.1 allows remote attackers to obtain sensitive information via a non-numeric page parameter, which displays the installation path in the resulting error message.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=full-disclosure&m=[PII_REDACTED]0333&w=2; http://securityreason.com/securityalert/1829; http://www.netvigilance.com/advisory0006
CVE: CVE-2006-5781
Published: 2006-11-07
Description: Stack-based buffer overflow in the handshake function in iodine 0.3.2 allows remote attackers to execute arbitrary code via a crafted DNS response.
CVSS Score: 7.5 (HIGH)
References: http://code.kryo.se/iodine/CHANGELOG.txt; http://secunia.com/advisories/22674; http://securitytracker.com/id?1017155
CVE: CVE-2006-5783
Published: 2006-11-07
Description: Firefox 1.5.0.7 on Kubuntu Linux allows remote attackers to cause a denial of service (crash) via a long URL in an A tag.  NOTE: this issue has been disputed by several vendors, who could not reproduce the report. In addition, the scope of the impact - system freeze - suggests an issue that is not related to Firefox. Due to this impact, CVE concurs with the dispute
CVSS Score: 7.8 (HIGH)
References: http://www.securityfocus.com/archive/1/450398/100/0/threaded; http://www.securityfocus.com/archive/1/450424/100/0/threaded; http://www.securityfocus.com/archive/1/450476/100/0/threaded
CVE: CVE-2006-5784
Published: 2006-11-07
Description: Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to read arbitrary files via crafted data on a "3200+SYSNR" TCP port, as demonstrated by port 3201. NOTE: this issue can be leveraged by local users to access a named pipe as the SAPServiceJ2E user.
CVSS Score: 4.6 (MEDIUM)
References: http://secunia.com/advisories/22677; http://securityreason.com/securityalert/1828; http://www.securityfocus.com/archive/1/450394/100/0/threaded
CVE: CVE-2006-5785
Published: 2006-11-07
Description: Unspecified vulnerability in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 allows remote attackers to cause a denial of service (enserver.exe crash) via a 0x72F2 sequence on UDP port 64999.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22677; http://securityreason.com/securityalert/1828; http://www.securityfocus.com/archive/1/450394/100/0/threaded
CVE: CVE-2006-5786
Published: 2006-11-07
Description: Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute PHP code in arbitrary files via ".." sequences in the e107language_e107cookie cookie to gsitemap.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20913; https://exchange.xforce.ibmcloud.com/vulnerabilities/30030; https://www.exploit-db.com/exploits/2711
CVE: CVE-2006-5787
Published: 2006-11-07
Description: admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passwords via a direct request, possibly related to an authentication issue in admin/chk_admin.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22757; http://www.securityfocus.com/bid/20951; http://www.vupen.com/english/advisories/2006/4383
CVE: CVE-2006-5788
Published: 2006-11-07
Description: PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to execute arbitrary PHP code via a URL in the p parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22757; http://www.osvdb.org/30228; http://www.securityfocus.com/archive/1/452137/100/200/threaded
CVE: CVE-2006-5789
Published: 2006-11-07
Description: War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number of "%s" format strings in (1) CWD, (2) CDUP, (3) DELE, (4) NLST, (5) LIST, (6) SIZE, and possibly other commands.  NOTE: it is possible that vector 1 is an off-by-one variant or incomplete fix of CVE-2005-0312.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-399
References: http://secunia.com/advisories/22755; http://securityreason.com/securityalert/1832; http://securitytracker.com/id?1017174
CVE: CVE-2006-5790
Published: 2006-11-07
Description: Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) an entry with an attachment whose name contains format string specifiers (el_submit function), and possibly other vectors in the (2) receive_config, (3) show_rss_feed, (4) show_elog_list, (5) show_logbook_node, and (6) server_loop functions.
CVSS Score: 7.5 (HIGH)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016; http://secunia.com/advisories/22638; http://secunia.com/advisories/23580
CVE: CVE-2006-5791
Published: 2006-11-07
Description: Multiple cross-site scripting (XSS) vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the filename for downloading, which is not quoted in an error message by the send_file_direct function, and (2) the Type or Category values in a New entry, which is not properly handled in an error message by the submit_elog function.
CVSS Score: 2.6 (LOW)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=392016; http://secunia.com/advisories/22638; http://secunia.com/advisories/23580
CVE: CVE-2006-5792
Published: 2006-11-07
Description: Unspecified vulnerability in XLink Omni-NFS Enterprise allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by vd_xlink2.pm, an "Omni-NFS Enterprise remote exploit." NOTE: this is probably a different vulnerability than CVE-2006-5780. As of 20061107, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 7.5 (HIGH)
References: http://gleg.net/vulndisco_meta.shtml; https://exchange.xforce.ibmcloud.com/vulnerabilities/30143; http://gleg.net/vulndisco_meta.shtml