deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-5366
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and remote attack vectors related to (1) Oracle Containers for J2EE, aka Vuln# OC4J01, and (2) Oracle Process Mgmt & Notification, aka OPMN01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5367
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.7 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS03 in Oracle Applications Framework, (2) APPS04 in Oracle Applications Technology Stack, and (3) APPS05 in Oracle Balanced Scorecard, (4) APPS09 in Oracle Scripting, and (5) APPS10 in Oracle Trading Community.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5368
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Exchange component in Oracle E-Business Suite 6.2.4 has unknown impact and remote attack vectors, aka Vuln# APPS01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5369
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Application Object Library in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS02.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5370
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS06 for Oracle CRM Gateway for Mobile Devices and (2) APPS08 for Oracle iStore.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5371
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Email Center component in Oracle E-Business Suite 11.5.9 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS07.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5372
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10 up to 11.5.10CU2 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) APPS11 for Oracle Universal Work Queue and (2) APPS12 for Oracle Application Object Library.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5373
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Install Base component in Oracle E-Business Suite 11.5.10CU1 has unknown impact and remote authenticated attack vectors, aka Vuln# APPS13.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5374
Published: 2006-10-18
Description: Unspecified vulnerability in Oracle Pharmaceutical Applications 4.5.1 has unknown impact and remote authenticated attack vectors, aka Vuln# PHAR01.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5375
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.46 GA, 8.47 GA, 8.48 GA, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote attack vectors, aka Vuln# (1) PSE01, (2) PSE02, and (3) PSE03.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5376
Published: 2006-10-18
Description: Multiple unspecified vulnerabilities in PeopleTools component in Oracle PeopleSoft Enterprise 8.22 GA, 8.46 GA, 8.47 GA, 8.48 GA, 8.22.11, 8.46.15, 8.47.09, and 8.48.03 have unknown impact and remote authenticated attack vectors, aka Vuln# (1) PSE04, (2) PSE06, (3) PSE07, and (4) PSE08.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5377
Published: 2006-10-18
Description: Unspecified vulnerability in PeopleSoft component in Oracle PeopleSoft Enterprise 8.80 GA, 8.90 GA, 8.8 Bundle 11, and 8.9 Bundle 4 has unknown impact and remote authenticated attack vectors, aka Vuln# PSE05.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5378
Published: 2006-10-18
Description: Unspecified vulnerability in JD Edwards HTML Server in JD Edwards EnterpriseOne SP23_O2, 8.95.P1, and 8.96.D1 has unknown impact and remote authenticated attack vectors, aka Vuln# JDE01.
CVSS Score: 9.0 (HIGH)
References: http://secunia.com/advisories/22396; http://securitytracker.com/id?1017077; http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html
CVE: CVE-2006-5379
Published: 2006-10-18
Description: The accelerated rendering functionality of NVIDIA Binary Graphics Driver (binary blob driver) For Linux v8774 and v8762, and probably on other operating systems, allows local and remote attackers to execute arbitrary code via a large width value in a font glyph, which can be used to overwrite arbitrary memory locations.
CVSS Score: 7.5 (HIGH)
References: http://download2.rapid7.com/r7-0025/; http://download2.rapid7.com/r7-0025/nv_exploit.c; http://nvidia.custhelp.com/cgi-bin/nvidia.cfg/php/enduser/std_adp.php?p_faqid=1971
CVE: CVE-2006-5380
Published: 2006-10-18
Description: Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php.  NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1739; http://www.attrition.org/pipermail/vim/2006-October/001084.html; http://www.securityfocus.com/archive/1/448549/100/0/threaded
CVE: CVE-2006-5381
Published: 2006-10-18
Description: Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysqli.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, (7) db_pgsql.inc, or (8) db_sybase.inc in the conlib/ directory.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1738; http://www.securityfocus.com/archive/1/448563/100/0/threaded; http://securityreason.com/securityalert/1738
CVE: CVE-2006-4811
Published: 2006-10-18
Description: Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-189
References: ftp://patches.sgi.com/support/free/security/advisories/20061002-01-P; ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P; http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=210742
CVE: CVE-2006-5383
Published: 2006-10-18
Description: SQL injection vulnerability in comadd.php in Def-Blog 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22389; http://www.securityfocus.com/bid/20545; http://www.vupen.com/english/advisories/2006/4049
CVE: CVE-2006-5384
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AGE parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22416; http://www.securityfocus.com/bid/20508; http://www.vupen.com/english/advisories/2006/4048
CVE: CVE-2006-5385
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in admin/admin_spam.php in the SpamOborona 1.0b and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22438; http://securityreason.com/securityalert/1741; http://www.securityfocus.com/archive/1/448633/100/0/threaded
CVE: CVE-2006-5386
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in process.php in NuralStorm Webmail 0.98b and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DEFAULT_SKIN parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22403; http://www.vupen.com/english/advisories/2006/4044; https://exchange.xforce.ibmcloud.com/vulnerabilities/29553
CVE: CVE-2006-5387
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in mods/iai/includes/constants.php in the PlusXL 20_272 and earlier phpBB module allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22414; http://securityreason.com/securityalert/1740; http://www.securityfocus.com/archive/1/448581/100/0/threaded
CVE: CVE-2006-5388
Published: 2006-10-18
Description: SQL injection vulnerability in index.php in WebSPELL 4.01.01 and earlier allows remote attackers to execute arbitrary SQL commands via the getsquad parameter, a different vector than CVE-2006-4783.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20540; https://exchange.xforce.ibmcloud.com/vulnerabilities/29563; https://www.exploit-db.com/exploits/2568
CVE: CVE-2006-5389
Published: 2006-10-18
Description: tools/tellhim.php in PHP-Wyana allows remote attackers to obtain sensitive information via an invalid lang parameter, which reveals the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://securityreason.com/securityalert/1743; http://www.securityfocus.com/archive/1/448789/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/29601
CVE: CVE-2006-5390
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in includes/functions_mod_user.php in the ACP User Registration (MMW) 1.00 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/22436; http://www.osvdb.org/29734; http://www.phpbb.com/phpBB/viewtopic.php?p=2504370#2504370
CVE: CVE-2006-5391
Published: 2006-10-18
Description: Xfire 1.64 and earlier allows remote attackers to cause a denial of service (client application crash) via a long string to UDP port 25777.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/20548; https://exchange.xforce.ibmcloud.com/vulnerabilities/29602; https://www.exploit-db.com/exploits/2571
CVE: CVE-2006-5392
Published: 2006-10-18
Description: Multiple PHP remote file inclusion vulnerabilities in OpenDock FullCore 4.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the doc_directory parameter in (1) sw/index_sw.php; (2) cart.php, (3) lib_cart.php, (4) lib_read_cart.php, (5) lib_sys_cart.php, and (6) txt_info_cart.php in sw/lib_cart/; (7) comment.php, (8) find_comment.php, and (9) lib_comment.php in sw/lib_comment/; (10) sw/lib_find/find.php; and other unspecified PHP scripts.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22410; http://www.osvdb.org/29906; http://www.osvdb.org/29907
CVE: CVE-2006-5393
Published: 2006-10-18
Description: Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another user's SSL VPN session.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: http://securitytracker.com/id?1017018; http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml; http://www.securityfocus.com/bid/20410
CVE: CVE-2006-5394
Published: 2006-10-18
Description: The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL VPN session.
CVSS Score: 2.1 (LOW)
References: http://securitytracker.com/id?1017018; http://www.cisco.com/en/US/products/products_security_advisory09186a0080754f34.shtml; http://www.securityfocus.com/bid/20410
CVE: CVE-2006-5395
Published: 2006-10-18
Description: Buffer overflow in Microsoft Class Package Export Tool (aka clspack.exe) allows context-dependent attackers to execute arbitrary code via a long string.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20561; https://exchange.xforce.ibmcloud.com/vulnerabilities/39975; http://www.securityfocus.com/bid/20561
CVE: CVE-2006-5396
Published: 2006-10-18
Description: The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.
CVSS Score: 4.9 (MEDIUM)
References: http://secunia.com/advisories/22453; http://securitytracker.com/id?1017082; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102667-1
CVE: CVE-2006-5398
Published: 2006-10-18
Description: SQL injection vulnerability in comments.php in Simplog 0.9.3.1 allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1017087; http://www.securityfocus.com/archive/1/449092/100/0/threaded; http://www.securityfocus.com/bid/20556
CVE: CVE-2006-5399
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in classes/Import_MM.class.php in PHPRecipeBook 2.36, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the g_rb_basedir parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://secunia.com/advisories/22427; http://www.securityfocus.com/archive/1/449116/100/0/threaded; http://www.securityfocus.com/archive/1/449130/100/0/threaded
CVE: CVE-2006-5400
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in forum/track.php in CyberBrau 0.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://www.securityfocus.com/bid/20555; https://exchange.xforce.ibmcloud.com/vulnerabilities/29551; https://www.exploit-db.com/exploits/2559
CVE: CVE-2006-5401
Published: 2006-10-18
Description: PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php in AROUNDMe 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the templatePath parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/20553; https://exchange.xforce.ibmcloud.com/vulnerabilities/29555; https://www.exploit-db.com/exploits/2562
CVE: CVE-2006-5402
Published: 2006-10-18
Description: Multiple PHP remote file inclusion vulnerabilities in PHPmybibli 3.0.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path, (2) javascript_path, and (3) include_path parameters in (a) cart.php; the (4) class_path parameter in (b) index.php; the (5) javascript_path parameter in (c) edit.php; the (6) include_path parameter in (d) circ.php; unspecified parameters in (e) select.php; and unspecified parameters in other files.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94
References: http://advisories.echo.or.id/adv/adv55-theday-2006.txt; http://attrition.org/pipermail/vim/2006-October/001087.html; http://attrition.org/pipermail/vim/2006-October/001088.html
CVE: CVE-2006-5403
Published: 2006-10-19
Description: Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22228; http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html; http://securitytracker.com/id?1016988
CVE: CVE-2006-5404
Published: 2006-10-19
Description: Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22228; http://securityresponse.symantec.com/avcenter/security/Content/2006.10.05.html; http://securitytracker.com/id?1016988
CVE: CVE-2006-5405
Published: 2006-10-19
Description: Unspecified vulnerability in Toshiba Bluetooth wireless device driver 3.x and 4 through 4.00.35, as used in multiple products, allows physically proximate attackers to cause a denial of service (crash), corrupt memory, and possibly execute arbitrary code via crafted Bluetooth packets.
CVSS Score: 6.2 (MEDIUM)
References: http://attrition.org/pipermail/vim/2006-October/001085.html; http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html; http://secunia.com/advisories/22402
CVE: CVE-2006-5406
Published: 2006-10-19
Description: Passgo Defender 5.2 creates the application directory with insecure permissions (Everyone/Full Control), which allows local users to read and modify sensitive files.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 3.6 (LOW)
References: http://secunia.com/advisories/22271; http://www.osvdb.org/29789; http://www.securityfocus.com/bid/20600
CVE: CVE-2006-5407
Published: 2006-10-19
Description: PHP remote file inclusion vulnerability in open_form.php in osTicket allows remote attackers to execute arbitrary PHP code via a URL in the include_dir parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1745; http://www.securityfocus.com/archive/1/448687/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/29577
CVE: CVE-2006-5408
Published: 2006-10-20
Description: Multiple cross-site scripting (XSS) vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to inject arbitrary HTML or web script via unspecified vectors.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22494; http://securitytracker.com/id?1017091; http://www.securityfocus.com/archive/1/449118/100/0/threaded
CVE: CVE-2006-5409
Published: 2006-10-20
Description: Multiple SQL injection vulnerabilities in the wireless IDS management interface for Highwall Enterprise and Highwall Endpoint 4.0.2.11045 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22494; http://securitytracker.com/id?1017091; http://www.osvdb.org/29917
CVE: CVE-2006-5410
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter.  NOTE: it is possible that this issue overlaps CVE-2006-4189.
CVSS Score: 5.1 (MEDIUM)
References: http://securityreason.com/securityalert/1747; http://www.securityfocus.com/archive/1/449090/100/0/threaded; http://www.securityfocus.com/bid/20576
CVE: CVE-2006-5411
Published: 2006-10-20
Description: Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19343; http://securityreason.com/securityalert/1746; http://www.securityfocus.com/archive/1/447870/100/200/threaded
CVE: CVE-2006-5412
Published: 2006-10-20
Description: admin.php in PHP Outburst Easynews 4.4.1 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication, and gain the ability to execute arbitrary code, via the en_login_id parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22466; http://www.securityfocus.com/bid/20596; http://www.vupen.com/english/advisories/2006/4085
CVE: CVE-2006-5413
Published: 2006-10-20
Description: Multiple PHP remote file inclusion vulnerabilities in SuperMod 3.0.0 for YABB (YaBBSM) allow remote attackers to execute arbitrary PHP code via a URL in the sourcedir parameter to (1) Offline.php, (2) Sources/Admin.php, (3) Sources/Offline.php, or (4) content/portalshow.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22437; http://www.securityfocus.com/bid/20568; http://www.securityfocus.com/bid/20570
CVE: CVE-2006-5414
Published: 2006-10-20
Description: Barry Nauta BRIM before 1.2.1 allows remote authenticated users to read information from other users via a modified URL.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22454; http://sourceforge.net/forum/forum.php?forum_id=624172; https://exchange.xforce.ibmcloud.com/vulnerabilities/29650
CVE: CVE-2006-5415
Published: 2006-10-20
Description: PHP remote file inclusion vulnerability in includes/functions_newshr.php in the News Defilante Horizontale 4.1.1 and earlier module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22434; http://securityreason.com/securityalert/1749; http://www.securityfocus.com/archive/1/448655/100/0/threaded
CVE: CVE-2006-5416
Published: 2006-10-20
Description: Cross-site scripting (XSS) vulnerability in my.acctab.php3 in F5 Networks FirePass 1000 SSL VPN 5.5, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the sid parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22444/; http://securityreason.com/securityalert/1752; http://securitytracker.com/id?1017076
CVE: CVE-2006-5417
Published: 2006-10-20
Description: McAfee Network Agent (mcnasvc.exe) 1.0.178.0, as used by multiple McAfee products possibly including Internet Security Suite, Personal Firewall Plus, and VirusScan, allows remote attackers to cause a denial of service (agent crash) via a long packet, possibly because of an invalid string position field value.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/22371; http://securitydot.net/xpl/exploits/vulnerabilities/articles/1659/exploit.html; http://securityreason.com/securityalert/1750