deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-6053
Published: 2006-11-22
Description: The ext3fs_dirhash function in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext3 stream with malformed data structures.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-10-11-2006.html; http://rhn.redhat.com/errata/RHSA-2007-0014.html; http://secunia.com/advisories/22776
CVE: CVE-2006-6054
Published: 2006-11-22
Description: The ext2 file system code in Linux kernel 2.6.x allows local users to cause a denial of service (crash) via an ext2 stream with malformed data structures that triggers an error in the ext2_check_page due to a length that is smaller than the minimum.
CVSS Score: 4.0 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-12-11-2006.html; http://rhn.redhat.com/errata/RHSA-2007-0014.html; http://rhn.redhat.com/errata/RHSA-2007-0436.html
CVE: CVE-2006-6055
Published: 2006-11-22
Description: Stack-based buffer overflow in A5AGU.SYS 1.0.1.41 for the D-Link DWL-G132 wireless adapter allows remote attackers to execute arbitrary code via a 802.11 beacon request with a long Rates information element (IE).
CVSS Score: 10.0 (HIGH)
References: http://projects.info-pull.com/mokb/MOKB-13-11-2006.html; http://secunia.com/advisories/22860; http://securitytracker.com/id?1017215
CVE: CVE-2006-6056
Published: 2006-11-22
Description: Linux kernel 2.6.x up to 2.6.18 and possibly other versions, when SELinux hooks are enabled, allows local users to cause a denial of service (crash) via a malformed file stream that triggers a NULL pointer dereference in the superblock_doinit function, as demonstrated using an HFS filesystem image.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-14-11-2006.html; http://rhn.redhat.com/errata/RHSA-2007-0014.html; http://secunia.com/advisories/22887
CVE: CVE-2006-6057
Published: 2006-11-22
Description: The Linux kernel 2.6.x up to 2.6.18, and possibly other versions, on Fedora Core 6 and possibly other operating systems, allows local users to cause a denial of service (crash) via a malformed gfs2 file stream that triggers a NULL pointer dereference in the init_journal function.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-15-11-2006.html; http://secunia.com/advisories/22886; http://secunia.com/advisories/24098
CVE: CVE-2006-6058
Published: 2006-11-22
Description: The minix filesystem code in Linux kernel 2.6.x before 2.6.24, including 2.6.18, allows local users to cause a denial of service (hang) via a malformed minix file stream that triggers an infinite loop in the minix_bmap function.  NOTE: this issue might be due to an integer overflow or signedness error.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-189
References: http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.24; http://projects.info-pull.com/mokb/MOKB-17-11-2006.html; http://secunia.com/advisories/23034
CVE: CVE-2006-6059
Published: 2006-11-22
Description: Buffer overflow in MA521nd5.SYS driver 5[PII_REDACTED] for NetGear MA521 PCMCIA adapter allows remote attackers to execute arbitrary code via (1) beacon or (2) probe 802.11 frame responses with an long supported rates information element.  NOTE: this issue was reported as a "memory corruption" error, but the associated exploit code suggests that it is a buffer overflow.
CVSS Score: 10.0 (HIGH)
References: http://projects.info-pull.com/mokb/MOKB-18-11-2006.html; http://secunia.com/advisories/23036; http://securitytracker.com/id?1017254
CVE: CVE-2006-6060
Published: 2006-11-22
Description: The NTFS filesystem code in Linux kernel 2.6.x up to 2.6.18, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a malformed NTFS file stream that triggers an infinite loop in the __find_get_block_slow function.
CVSS Score: 4.9 (MEDIUM)
References: http://projects.info-pull.com/mokb/MOKB-19-11-2006.html; http://secunia.com/advisories/23474; http://secunia.com/advisories/25691
CVE: CVE-2006-6061
Published: 2006-11-22
Description: com.apple.AppleDiskImageController in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to execute arbitrary code via a malformed DMG image that triggers memory corruption.  NOTE: the severity of this issue has been disputed by a third party, who states that the impact is limited to a denial of service (kernel panic) due to a vm_fault call with a non-aligned address.
CVSS Score: 9.3 (HIGH)
References: http://alastairs-place.net/2006/11/dmg-vulnerability/; http://docs.info.apple.com/article.html?artnum=305214; http://kernelfun.blogspot.com/2006/11/more-mokb-20-11-2006-related-news.html
CVE: CVE-2006-6062
Published: 2006-11-22
Description: Unspecified vulnerability in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a malformed UDTO HFS+ disk image, such as with "bad sectors," which triggers memory corruption.
CVSS Score: 5.1 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://projects.info-pull.com/mokb/MOKB-21-11-2006.html
CVE: CVE-2006-6063
Published: 2006-11-22
Description: Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via a M3U file containing a long (1) FileName, and cause a crash via a long (2) DisplayName.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22999; http://www.securityfocus.com/bid/21206; http://www.vupen.com/english/advisories/2006/4636
CVE: CVE-2006-6064
Published: 2006-11-22
Description: Multiple buffer overflows in the Message Parsing Interpreter (MPI) in Fuzzball MUCK before 6.07 allow remote attackers to execute arbitrary code via crafted messages.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22977; http://sourceforge.net/project/shownotes.php?release_id=465373&group_id=1596; http://www.securityfocus.com/bid/21217
CVE: CVE-2006-6065
Published: 2006-11-22
Description: PHP remote file inclusion vulnerability in includes/mx_common.php in the CalSnails Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/22931; http://www.securityfocus.com/archive/1/452142/100/0/threaded; http://www.securityfocus.com/bid/21143
CVE: CVE-2006-6066
Published: 2006-11-22
Description: Multiple SQL injection vulnerabilities in Dragon Calendar / Events Listing 2.x allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) admin_login.asp, the (3) ID parameter to (b) event_searchdetail.asp, or the (4) VenueID parameter to (c) venue_detail.asp.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=32; http://secunia.com/advisories/22930; http://www.osvdb.org/30443
CVE: CVE-2006-6067
Published: 2006-11-22
Description: Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) f-email.asp, or the (2) peopleID and (2) sort_order parameters to (b) listings.asp, different vectors than CVE-2006-5955.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=40; http://www.securityfocus.com/archive/1/451962/100/0/threaded; http://www.securityfocus.com/bid/21156
CVE: CVE-2006-6068
Published: 2006-11-22
Description: Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier allows remote attackers to list filenames of arbitrary images via a .. (dot dot) in the gal parameter to index.php.
CVSS Score: 2.6 (LOW)
References: http://secunia.com/advisories/22990; http://www.securityfocus.com/archive/1/452169/100/0/threaded; http://www.securityfocus.com/archive/1/452656/100/0/threaded
CVE: CVE-2006-6069
Published: 2006-11-22
Description: index.php in mAlbum 0.3 and earlier allows remote attackers to obtain the installation path via an invalid gal parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/archive/1/452169/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/30430; http://www.securityfocus.com/archive/1/452169/100/0/threaded
CVE: CVE-2006-6070
Published: 2006-11-22
Description: SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter.
CVSS Score: 7.5 (HIGH)
References: http://securitytracker.com/id?1017255; http://www.securityfocus.com/archive/1/452103/100/0/threaded; http://www.securityfocus.com/bid/21195
CVE: CVE-2006-3973
Published: 2006-11-22
Description: My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.
CVSS Score: 7.2 (HIGH)
References: http://secunia.com/advisories/21142; http://secunia.com/secunia_research/2006-59/advisory; http://securitytracker.com/id?1017267
CVE: CVE-2006-5941
Published: 2006-11-24
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2177.  Reason: This candidate is a duplicate of CVE-2005-2177.  Notes: All CVE users should reference CVE-2005-2177 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2006-6072
Published: 2006-11-24
Description: SQL injection vulnerability in bpg/publications_list.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 allows remote attackers to execute arbitrary SQL commands via the vjob parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/22888; http://www.securityfocus.com/bid/21094; http://www.vupen.com/english/advisories/2006/4514
CVE: CVE-2006-6073
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via the (1) ProductID parameter in productdetail.asp or the (2) categoryid parameter in products.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://aria-security.net/advisory/eShopping.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8066&w=2; https://exchange.xforce.ibmcloud.com/vulnerabilities/30262
CVE: CVE-2006-6074
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL commands via (1) the ProductID parameter in (a) reviews.asp, or the (2) cat_id or (3) sub_id parameter in (b) subProducts.asp.  NOTE: the productdetail.asp vector is already covered by another identifier.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=21; http://secunia.com/advisories/22955; http://securityreason.com/securityalert/1906
CVE: CVE-2006-6075
Published: 2006-11-24
Description: Cross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary web script or HTML via the name parameter.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/22943; http://www.vupen.com/english/advisories/2006/4579; http://secunia.com/advisories/22943
CVE: CVE-2006-6076
Published: 2006-11-24
Description: Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier allows remote attackers to execute arbitrary code via certain RPC requests to TCP port 6502.
CVSS Score: 10.0 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050808.html; http://lists.grok.org.uk/pipermail/full-disclosure/2006-November/050814.html; http://secunia.com/advisories/23060
CVE: CVE-2006-6077
Published: 2006-11-24
Description: The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
CVSS Score: 5.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20070202-01-P.asc; ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc; http://fedoranews.org/cms/node/2713
CVE: CVE-2006-6078
Published: 2006-11-24
Description: PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbitrary PHP code via a URL in the cm_basedir parameter.
CVSS Score: 7.5 (HIGH)
References: http://advisories.echo.or.id/adv/adv61-matdhule-2006.txt; http://securityreason.com/securityalert/1909; http://securitytracker.com/id?1017278
CVE: CVE-2006-6079
Published: 2006-11-24
Description: Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP code via a URL in the mainframe parameter to (1) admin.loudmouth.php or (2) toolbar.loudmouth.php.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1905; http://www.securityfocus.com/archive/1/452085/100/100/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/30409
CVE: CVE-2006-6080
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary SQL commands via the (1) catID or (2) editorID parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1908; http://www.aria-security.com/forum/showthread.php?t=37; http://www.securityfocus.com/archive/1/452116/100/0/threaded
CVE: CVE-2006-6081
Published: 2006-11-24
Description: PHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the plugin_file parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/1904; http://www.securityfocus.com/archive/1/452086/100/100/threaded; http://www.securityfocus.com/archive/1/452139/100/0/threaded
CVE: CVE-2006-6082
Published: 2006-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter to addlisting.asp or the (2) search parameter to search.asp.
CVSS Score: 4.3 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=54; http://secunia.com/advisories/23067; http://securityreason.com/securityalert/1907
CVE: CVE-2006-6083
Published: 2006-11-24
Description: SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL commands via the category parameter.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=54; http://secunia.com/advisories/23067; http://www.securityfocus.com/archive/1/452241/100/0/threaded
CVE: CVE-2006-6084
Published: 2006-11-24
Description: Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=52; http://secunia.com/advisories/23055; http://securitytracker.com/id?1017266
CVE: CVE-2006-6085
Published: 2006-11-24
Description: Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local users to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/23035; http://secunia.com/advisories/23099; http://security.gentoo.org/glsa/glsa-200611-21.xml
CVE: CVE-2006-6086
Published: 2006-11-24
Description: PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_pear_path parameter.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://arfis.wordpress.com/2007/09/13/rfi-02-eark/; http://secunia.com/advisories/23059; http://www.securityfocus.com/bid/21224
CVE: CVE-2006-6087
Published: 2006-11-24
Description: Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the action parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/22988; http://securityreason.com/securityalert/1919; http://www.securityfocus.com/archive/1/452183/100/0/threaded
CVE: CVE-2006-6088
Published: 2006-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) n or (2) d parameter in igallery.asp, or (3) an unspecified parameter related to search, possibly the Search Gallery field, or the myquery parameter, in search.asp.  NOTE: some of these details are obtained from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://aria-security.net/advisory/i-Gallery34.txt; http://secunia.com/advisories/22952; http://securityreason.com/securityalert/1912
CVE: CVE-2006-6089
Published: 2006-11-24
Description: Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject arbitrary web script or HTML via the (1) title (Subject), (2) groupname (Group Name), or (3) detail (Message) field.
CVSS Score: 4.3 (MEDIUM)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=35; http://secunia.com/advisories/22943; http://securityreason.com/securityalert/1913
CVE: CVE-2006-6090
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via the (1) password parameter to (a) adminlogin.asp, the (2) name or (3) password parameter to (b) userlogin.asp, or the (3) search parameter to search.asp.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=35; http://secunia.com/advisories/22943; http://securityreason.com/securityalert/1913
CVE: CVE-2006-6091
Published: 2006-11-24
Description: Cross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006_11_21 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/23065; http://sourceforge.net/project/shownotes.php?release_id=465519&group_id=182536; http://www.securityfocus.com/bid/21243
CVE: CVE-2006-6092
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute arbitrary SQL commands via the (1) vehicleID, (2) categoryID_list, (3) sale_type, (4) stock_number, (5) manufacturer, (6) model, (7) vehicleID, (8) year, (9) vin, and (10) listing_price parameters.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=38; http://secunia.com/advisories/22974; http://securityreason.com/securityalert/1916
CVE: CVE-2006-6093
Published: 2006-11-24
Description: Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitrary PHP code via a URL in the (1) admin_folder and (2) path parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/23037; http://www.securityfocus.com/bid/21163; http://www.vupen.com/english/advisories/2006/4659
CVE: CVE-2006-6094
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) catID parameter to activeNews_categories.asp, the (2) articleID parameter to activeNews_comments.asp, or the (3) query parameter to activenews_search.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]6444&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=31; http://secunia.com/advisories/22981
CVE: CVE-2006-6095
Published: 2006-11-24
Description: Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands via the (1) articleID parameter to activenews_view.asp or the (2) page parameter to default.asp.  NOTE: the activeNews_categories.asp and activeNews_comments.asp vectors are already covered by CVE-2006-6094.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3790&w=2; http://www.aria-security.com/forum/showthread.php?t=33; http://www.osvdb.org/31568
CVE: CVE-2006-6096
Published: 2006-11-24
Description: Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3790&w=2; http://www.aria-security.com/forum/showthread.php?t=33; http://www.securityfocus.com/bid/21167
CVE: CVE-2006-6097
Published: 2006-11-24
Description: GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a tar file that contains a GNUTYPE_NAMES record with a symbolic link, which is not properly handled by the extract_archive function in extract.c and extract_mangle function in mangle.c, a variant of CVE-2002-1216.
CVSS Score: 4.0 (MEDIUM)
References: ftp://patches.sgi.com/support/free/security/advisories/20061202-01-P.asc; http://docs.info.apple.com/article.html?artnum=305214; http://kb.vmware.com/KanisaPlatform/Publishing/817/2240267_f.SAL_Public.html
CVE: CVE-2006-5869
Published: 2006-11-26
Description: pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.
CVSS Score: 5.1 (MEDIUM)
References: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=356988; http://secunia.com/advisories/20012; http://secunia.com/advisories/23135
CVE: CVE-2006-6108
Published: 2006-11-26
Description: Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://secunia.com/advisories/22925; http://securitytracker.com/id?1017277
CVE: CVE-2006-6109
Published: 2006-11-26
Description: Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) policy parameter in openPolicy.asp or the (2) brand parameter in prodList.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]3469&w=2; http://s-a-p.ca/index.php?page=OurAdvisories&id=25; http://secunia.com/advisories/22954
CVE: CVE-2006-6110
Published: 2006-11-26
Description: Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote attackers to execute arbitrary SQL commands via the (1) vjob parameter in publications_list.asp or (2) InfoID parameter in publication_view.asp.
CVSS Score: 7.5 (HIGH)
References: http://aria-security.net/advisory/bpg.txt; http://securityreason.com/securityalert/1915; http://www.securityfocus.com/archive/1/451537/100/100/threaded
CVE: CVE-2006-6111
Published: 2006-11-26
Description: Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) productid parameter in product.asp or (2) search parameter in search.asp.  NOTE: the category.asp vector is already covered by CVE-2004-1873.
CVSS Score: 7.5 (HIGH)
References: http://s-a-p.ca/index.php?page=OurAdvisories&id=27; http://www.osvdb.org/32750; http://www.osvdb.org/32751