deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2006-1567
Published: 2006-04-01
Description: Cross-site scripting (XSS) vulnerability in searchresults.asp in SiteSearch Indexer 3.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchField parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://pridels0.blogspot.com/2006/03/sitesearch-indexer-35-xss-vuln.html; http://secunia.com/advisories/19467; http://www.osvdb.org/24289
CVE: CVE-2006-1568
Published: 2006-04-01
Description: Multiple cross-site scripting (XSS) vulnerabilities in register.php in RedCMS 0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) email, (2) location, or (3) website parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/115/summary.html; http://secunia.com/advisories/19475; http://securityreason.com/securityalert/708
CVE: CVE-2006-1569
Published: 2006-04-01
Description: Multiple SQL injection vulnerabilities in RedCMS 0.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters to (a) login.php or (b) register.php; or (3) u parameter to (c) profile.php.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/115/summary.html; http://secunia.com/advisories/19475; http://www.osvdb.org/24297
CVE: CVE-2006-1570
Published: 2006-04-01
Description: Cross-site scripting (XSS) vulnerability in Esqlanelapse 2.0 and 2.2 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19474; http://sourceforge.net/project/shownotes.php?release_id=406021; http://www.osvdb.org/24300
CVE: CVE-2006-1571
Published: 2006-04-01
Description: Multiple SQL injection vulnerabilities in loginprocess.php in qliteNews 2005.07.01 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/114/summary.html; http://secunia.com/advisories/19476; http://securityreason.com/securityalert/701
CVE: CVE-2006-1572
Published: 2006-04-01
Description: SQL injection vulnerability in post.php in Oxygen 1.1.3 allows remote attackers to execute arbitrary SQL commands via the fid parameter in a newthread action.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19481; http://securityreason.com/securityalert/658; http://www.osvdb.org/24287
CVE: CVE-2006-1573
Published: 2006-04-01
Description: PHP remote file inclusion vulnerability in index.php in MediaSlash Gallery allows remote attackers to execute arbitrary PHP code via a URL in the rub parameter (part of the $page_menu variable).
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/657; http://www.osvdb.org/24313; http://www.securityfocus.com/archive/1/429395/100/0/threaded
CVE: CVE-2006-1574
Published: 2006-04-01
Description: Cross-site scripting (XSS) vulnerability in Groupmax World Wide Web, World Wide Web Desktop, World Wide Web for Scheduler, and Desktop for Scheduler, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/19483; http://www.hitachi-support.com/security_e/vuls_e/HS06-005_e/index-e.html; http://www.osvdb.org/24295
CVE: CVE-2006-1575
Published: 2006-04-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in news.php in QLnews 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) autorx and (2) newsx parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://evuln.com/vulns/113/description.html; http://secunia.com/advisories/19479; http://securityreason.com/securityalert/699
CVE: CVE-2006-1576
Published: 2006-04-02
Description: Direct static code injection vulnerability in QLnews 1.2 allows remote authenticated administrators to execute arbitrary PHP code by modifying config.php.
CVSS Score: 7.5 (HIGH)
References: http://evuln.com/vulns/113/description.html; http://secunia.com/advisories/19479; http://www.osvdb.org/24291
CVE: CVE-2006-1577
Published: 2006-04-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in view_all_set.php in Mantis 1.0.1, 1.0.0rc5, and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) start_day, (2) start_year, and (3) start_month parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/03/mantis-xss-vuln.html; http://secunia.com/advisories/19471; http://secunia.com/advisories/21400
CVE: CVE-2006-1578
Published: 2006-04-02
Description: Multiple SQL injection vulnerabilities in Keystone Digital Library Suite (DLS) 1.5.4 and earlier allow remote attackers to execute arbitrary SQL commands via the subject_type_id parameter in (1) the index page and (2) the search module.
CVSS Score: 6.4 (MEDIUM)
References: http://pridels0.blogspot.com/2006/03/keystone-dls-sql-vuln.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/25571; http://pridels0.blogspot.com/2006/03/keystone-dls-sql-vuln.html
CVE: CVE-2006-1579
Published: 2006-04-02
Description: SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote attackers to execute arbitrary SQL commands via the limite parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/archive/1/429512/100/0/threaded; http://www.securityfocus.com/bid/17338; https://exchange.xforce.ibmcloud.com/vulnerabilities/25584
CVE: CVE-2006-1580
Published: 2006-04-02
Description: Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter in query.jsp and (2) entryId parameter in edit.jsp.
CVSS Score: 5.8 (MEDIUM)
References: http://pridels0.blogspot.com/2006/04/bugzero-xss-vuln.html; http://secunia.com/advisories/19492; http://www.osvdb.org/24328
CVE: CVE-2006-1581
Published: 2006-04-02
Description: Directory traversal vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the _path parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/19520; http://securitytracker.com/id?1015854; http://www.osvdb.org/24373
CVE: CVE-2006-1582
Published: 2006-04-02
Description: Cross-site scripting (XSS) vulnerability in index.php in Blank'N'Berg 0.2 allows remote attackers to inject arbitrary web script or HTML via the _path parameter.  NOTE: this might be resultant from the directory traversal issue.
CVSS Score: 5.8 (MEDIUM)
References: http://secunia.com/advisories/19520; http://securitytracker.com/id?1015854; http://www.osvdb.org/24374
CVE: CVE-2006-1583
Published: 2006-04-02
Description: Cross-site scripting (XSS) vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter.  NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.
CVSS Score: 5.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/429535/100/0/threaded; http://www.securityfocus.com/bid/17334; https://exchange.xforce.ibmcloud.com/vulnerabilities/25685
CVE: CVE-2006-1584
Published: 2006-04-02
Description: Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to fopen function calls or file uploads.  NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" might be the affected parameter.
CVSS Score: 6.4 (MEDIUM)
References: http://www.securityfocus.com/archive/1/429535/100/0/threaded; http://www.securityfocus.com/bid/17334; https://exchange.xforce.ibmcloud.com/vulnerabilities/25686
CVE: CVE-2006-1585
Published: 2006-04-02
Description: Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via (1) the pc parameter in (a) index.php and (2) pnom, (3) pcourriel, and (4) pcommentaire parameters in (b) image_agrandir.php.
CVSS Score: 6.4 (MEDIUM)
References: http://secunia.com/advisories/19503; http://securityreason.com/securityalert/660; http://www.bash-x.net/undef/adv/monalbum.html
CVE: CVE-2006-1586
Published: 2006-04-02
Description: SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL commands via the pass parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19500; http://www.osvdb.org/24362; http://www.securityfocus.com/archive/1/429607/100/0/threaded
CVE: CVE-2006-1587
Published: 2006-04-03
Description: NetBSD 1.6 up to 3.0, when a user has "set record" in .mailrc with the default umask set, creates the record file with 0644 permissions, which allows local users to read the record file.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-007.txt.asc; http://secunia.com/advisories/19465; http://securitytracker.com/id?1015847
CVE: CVE-2006-1588
Published: 2006-04-03
Description: The bridge ioctl (if_bridge code) in NetBSD 1.6 through 3.0 does not clear sensitive memory before copying ioctl results to the requesting process, which allows local users to obtain portions of kernel memory.
CVSS Score: 2.1 (LOW)
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-005.txt.asc; http://secunia.com/advisories/19464; http://securitytracker.com/id?1015846
CVE: CVE-2006-1589
Published: 2006-04-03
Description: The elf_load_file function in NetBSD 2.0 through 3.0 allows local users to cause a denial of service (kernel crash) via an ELF interpreter that does not have a PT_LOAD section in its header, which triggers a null dereference.
CVSS Score: 4.9 (MEDIUM)
References: ftp://ftp.NetBSD.org/pub/NetBSD/security/advisories/NetBSD-SA2006-008.txt.asc; http://securitytracker.com/id?1015848; http://www.osvdb.org/24576
CVE: CVE-2006-1590
Published: 2006-04-03
Description: Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE) 1.2.4 and (2) Analysis Console for Intrusion Databases (ACID) 0.9.6b23 allows remote attackers to inject arbitrary web script or HTML via the (a) back parameter to base_graph_main.php, (b) netmask parameter to base_stat_ipaddr.php, or (c) submit parameter to base_qry_alert.php within BASE, or (d) query string to acid_main.php in ACID, which causes the request URI ($_SERVER['REQUEST_URI']) to be inserted into a refresh operation.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/19544; http://sourceforge.net/mailarchive/forum.php?thread_id=10064470&forum_id=42223; http://www.osvdb.org/20835
CVE: CVE-2006-1591
Published: 2006-04-03
Description: Heap-based buffer overflow in Microsoft Windows Help winhlp32.exe allows user-assisted attackers to execute arbitrary code via crafted embedded image data in a .hlp file.
CVSS Score: 5.1 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044748.html; http://securityreason.com/securityalert/700; http://www.open-security.org/advisories/15
CVE: CVE-2006-1592
Published: 2006-04-03
Description: Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.
CVSS Score: 7.5 (HIGH)
References: http://aluigi.altervista.org/adv/zdaebof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html; http://secunia.com/advisories/19496
CVE: CVE-2006-1593
Published: 2006-04-03
Description: The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-399
References: http://aluigi.altervista.org/adv/zdaebof-adv.txt; http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html; http://secunia.com/advisories/19496
CVE: CVE-2006-1594
Published: 2006-04-03
Description: Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." (dot dot) sequences to (1) read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or (2) execute arbitrary code via the includePath parameter to learnPath/include/scormExport.inc.php.
CVSS Score: 7.5 (HIGH)
References: http://retrogod.altervista.org/claroline_174_incl_xpl.html; http://secunia.com/advisories/19461; http://www.securityfocus.com/bid/17343
CVE: CVE-2006-1595
Published: 2006-04-03
Description: Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.
CVSS Score: 4.3 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1905.html; http://retrogod.altervista.org/claroline_174_incl_xpl.html; http://secunia.com/advisories/19461
CVE: CVE-2006-1596
Published: 2006-04-03
Description: PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter.
CVSS Score: 7.5 (HIGH)
References: http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1888.html; http://retrogod.altervista.org/claroline_174_incl_xpl.html; http://secunia.com/advisories/19461
CVE: CVE-2006-1433
Published: 2006-04-03
Description: Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-en.php, which reveals the full installation path.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/ref/24/24302-annuaire_directory.txt; http://secunia.com/advisories/19548; http://www.osvdb.org/24302
CVE: CVE-2006-1434
Published: 2006-04-03
Description: Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field (COMMENTAIRE parameter).
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/ref/24/24302-annuaire_directory.txt; http://secunia.com/advisories/19548; http://www.osvdb.org/24303
CVE: CVE-2006-1435
Published: 2006-04-03
Description: Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter).
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/ref/24/24255-aria.txt; http://secunia.com/advisories/19551; http://www.osvdb.org/24255
CVE: CVE-2006-1438
Published: 2006-04-03
Description: Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title, (3) article, (4) author, and (5) keywords parameters to (b) submit_article.php; and (6) Question, (7) Name, and (8) Email parameters to (c) submit_question.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/ref/24/24310-aphpkb.txt; http://secunia.com/advisories/19554; http://www.osvdb.org/24310
CVE: CVE-2006-1598
Published: 2006-04-03
Description: AN HTTPD 1.42n, and possibly other versions before 1.42p, allows remote attackers to obtain source code of scripts via crafted requests with (1) dot and (2) space characters in the file extension.
CVSS Score: 7.8 (HIGH)
References: http://secunia.com/advisories/19326; http://secunia.com/secunia_research/2006-21/advisory; http://securitytracker.com/id?1015858
CVE: CVE-2006-1599
Published: 2006-04-03
Description: Unspecified vulnerability in VCEngine.php in v-creator before 1.3-pre3, when the VC_CRYPTO_METHOD option is OPENSSL, allows remote attackers to execute arbitrary commands, possibly due to problems in the (1) encrypt and (2) decrypt functions.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19453; http://sourceforge.net/forum/forum.php?forum_id=557129; http://www.osvdb.org/24304
CVE: CVE-2006-1600
Published: 2006-04-03
Description: SQL injection vulnerability in category.php in PhpWebGallery 1.4.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/669; http://www.securityfocus.com/archive/1/429665/100/0/threaded; http://securityreason.com/securityalert/669
CVE: CVE-2006-1058
Published: 2006-04-04
Description: BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-916
References: http://bugs.busybox.net/view.php?id=604; http://secunia.com/advisories/19477; http://secunia.com/advisories/25098
CVE: CVE-2006-1601
Published: 2006-04-04
Description: Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors.
CVSS Score: 1.7 (LOW)
References: http://secunia.com/advisories/19444; http://securitytracker.com/id?1015849; http://sunsolve.sun.com/search/document.do?assetkey=1-26-102278-1
CVE: CVE-2006-1602
Published: 2006-04-04
Description: PHP remote file inclusion vulnerability in includes/functions_common.php in the VWar Account module (vWar_Account) in PHPNuke Clan 3.0.1 allows remote attackers to include arbitrary files via a URL in the vwar_root2 parameter.  NOTE: it is possible that this issue stems from a problem in VWar itself, but this is not clear.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19501; http://www.osvdb.org/24481; http://www.securityfocus.com/archive/1/429615/100/0/threaded
CVE: CVE-2006-1603
Published: 2006-04-04
Description: Cross-site scripting (XSS) vulnerability in profile.php in phpBB 2.0.19 allows remote attackers to inject arbitrary web script or HTML via the cur_password parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/ref/24/24353-phpbb.txt; http://secunia.com/advisories/19494; http://www.osvdb.org/24353
CVE: CVE-2006-1604
Published: 2006-04-04
Description: Unspecified vulnerability in Exponent CMS before 0.96.5 RC 1 has unknown impact and remote attack vectors related to variables that are not "typecasted."
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19498; http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524; http://www.securityfocus.com/bid/17357
CVE: CVE-2006-1605
Published: 2006-04-04
Description: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows remote attackers to execute arbitrary code via unknown vectors involving "parsed PHP."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19498; http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524; http://www.osvdb.org/24358
CVE: CVE-2006-1606
Published: 2006-04-04
Description: Unspecified vulnerability in the image module in Exponent CMS before 0.96.5 RC 1 allows "directory disclosure" with unknown attack vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19498; http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524; http://www.securityfocus.com/bid/17357
CVE: CVE-2006-1607
Published: 2006-04-04
Description: Unspecified vulnerability in the banner module in Exponent CMS before 0.96.5 RC 1 allows "php injection" via unknown attack vectors.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/19498; http://sourceforge.net/project/shownotes.php?release_id=406474&group_id=118524; http://www.osvdb.org/24358
CVE: CVE-2006-1609
Published: 2006-04-04
Description: Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service (server process and transfer control process stop) when the products "receive data unexpectedly".
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19472; http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html; http://www.osvdb.org/24309
CVE: CVE-2006-1610
Published: 2006-04-04
Description: PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.  NOTE: this only occurs when register_globals is disabled.
CVSS Score: 5.1 (MEDIUM)
CWE: CWE-94
References: http://secunia.com/advisories/19482; http://www.osvdb.org/24400; http://www.securityfocus.com/archive/1/429611/100/0/threaded
CVE: CVE-2006-1611
Published: 2006-04-04
Description: Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/19511; http://sourceforge.net/project/shownotes.php?group_id=162546&release_id=406411; http://www.securityfocus.com/bid/17363
CVE: CVE-2006-1612
Published: 2006-04-04
Description: Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (3) subject, and (4) comment parameters.
CVSS Score: 5.1 (MEDIUM)
References: http://evuln.com/vulns/116/summary.html; http://secunia.com/advisories/19487; http://securityreason.com/securityalert/707
CVE: CVE-2006-1613
Published: 2006-04-04
Description: Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php.
CVSS Score: 5.0 (MEDIUM)
References: http://evuln.com/vulns/116/summary.html; http://secunia.com/advisories/19487; http://www.osvdb.org/24334
CVE: CVE-2006-0559
Published: 2006-04-04
Description: Format string vulnerability in the SMTP server for McAfee WebShield 4.5 MR2 and earlier allows remote attackers to execute arbitrary code via format strings in the domain name portion of a destination address, which are not properly handled when a bounce message is constructed.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/19491; http://securityreason.com/securityalert/671; http://securitytracker.com/id?1015861
CVE: CVE-2006-0051
Published: 2006-04-05
Description: Buffer overflow in playlistimport.cpp in Kaffeine Player 0.4.2 through 0.7.1 allows user-assisted attackers to execute arbitrary code via long HTTP request headers when Kaffeine is "fetching remote playlists", which triggers the overflow in the http_peek function.
CVSS Score: 5.1 (MEDIUM)
References: http://secunia.com/advisories/19525; http://secunia.com/advisories/19540; http://secunia.com/advisories/19542
CVE: CVE-2006-0401
Published: 2006-04-05
Description: Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors.
CVSS Score: 4.6 (MEDIUM)
References: http://docs.info.apple.com/article.html?artnum=303567; http://secunia.com/advisories/19462; http://securitytracker.com/id?1015859
CVE: CVE-2006-1616
Published: 2006-04-05
Description: Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.
CVSS Score: 7.5 (HIGH)
References: http://ns79.hosteur.com/~secuti/advancedpoll.txt; https://exchange.xforce.ibmcloud.com/vulnerabilities/25676; http://ns79.hosteur.com/~secuti/advancedpoll.txt