rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-1203 
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1204 
Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prev, (2) next, and (3) rand5 parameters in (a) index.php; the (4) r_username and (5) r_loc parameters in (b) new_topic.php; the (6) r_num, (7) r_family_name, (8) r_icq, (9) r_yahoo, (10) r_aim, (11) r_homepage, (12) r_interests, (13) r_about, (14) selected1, (15) selected0, (16) signature_selected1, (17) signature_selected0, (18) smile_selected1, (19) smile_selected0, (20) ubb_selected1, and (21) ubb_selected0 parameters in (c) profile.php; the (22) quote and (23) tid parameters in (d) reply.php; and the (24) tid, (25) sticked, and (26) mid parameters in (e) view_topic.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1205 
Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1206 
Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1207 
PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1208 
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1209 
PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1210 
The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1211 
IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1212 
Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability.  NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a "page" parameter or variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1213 
JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1214 
UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands, as demonstrated by "TKL - q\x08Q *\x08PoC."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T01:00:00.000Z
CVE-2006-1215 
Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter.  NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1216 
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1217 
SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1218 
Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1219 
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1220 
Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T02:00:00.000Z
CVE-2006-1221 
Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder.  NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T11:00:00.000Z
CVE-2006-1222 
Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T11:00:00.000Z
CVE-2006-1223 
Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T11:00:00.000Z
CVE-2006-1224 
Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T11:00:00.000Z
CVE-2006-1225 
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1226 
Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1227 
Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1228 
Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1229 
SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1230 
Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter.  NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1231 
CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1232 
Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1233 
Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1234 
SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T19:00:00.000Z
CVE-2006-1235 
Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable.  NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-14T23:00:00.000Z
CVE-2006-1236 
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T00:00:00.000Z
CVE-2006-1237 
Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T16:00:00.000Z
CVE-2006-1238 
SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T16:00:00.000Z
CVE-2006-1239 
Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T16:00:00.000Z
CVE-2006-1240 
Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T17:00:00.000Z
CVE-2006-1241 
Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T17:00:00.000Z
CVE-2006-1242 
The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T17:00:00.000Z
CVE-2006-1243 
Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T17:00:00.000Z
CVE-2006-1244 
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc.  NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed.  Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-15T19:00:00.000Z
CVE-2006-1245 
Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-17T01:00:00.000Z
CVE-2006-1246 
Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-17T11:00:00.000Z
CVE-2006-1247 
rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-19T16:00:00.000Z
CVE-2006-1248 
Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-17T19:00:00.000Z
CVE-2006-1249 
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1250 
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1251 
Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1252 
Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1253 
Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1254 
Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1255 
Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1256 
Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1257 
The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1258 
Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.0.1 allows remote attackers to inject arbitrary web script or HTML via the set_theme parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1259 
Multiple SQL injection vulnerabilities in Maian Support 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) email or (2) pass parameter to admin/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T01:00:00.000Z
CVE-2006-1260 
Horde Application Framework 3.0.9 allows remote attackers to read arbitrary files via a null character in the url parameter in services/go.php, which bypasses a sanity check.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z
CVE-2006-1261 
Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z
CVE-2006-1262 
Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z
CVE-2006-1263 
Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z
CVE-2006-1264 
Cross-site scripting (XSS) vulnerability in xhawk.net discussion 2.0 beta2 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z
CVE-2006-1265 
SQL injection vulnerability in discussion.class.php in xhawk.net discussion 2.0 beta2 allows remote attackers to execute arbitrary SQL commands via the view parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-19T02:00:00.000Z