rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3212 
Cross-site scripting (XSS) vulnerability in sign.php in cjGuestbook 1.3 and earlier allows remote attackers to inject web script or HTML via the (1) name, (2) email, (3) add, and (4) wName parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3213 
SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter to an unspecified script, possibly host/yeni_host.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3214 
Unspecified vulnerability in Hitachi Groupmax Address Server 7 and earlier, and Groupmax Mail Server 7 and earlier allows remote attackers to cause a denial of service (product "stop") via unspecified vectors involving "unexpected requests".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3215 
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to bypass the "text analysis", possibly bypassing SPAM and other filters, by sending an e-mail specifying a non-existent or unrecognized character set.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3216 
Clearswift MAILsweeper for SMTP before 4.3.20 and MAILsweeper for Exchange before 4.3.20 allows remote attackers to cause a denial of service via (1) non-ASCII characters in a reverse DNS lookup result from a Received header, which leads to a Receiver service stop, and (2) unspecified vectors involving malformed messages, which causes "unpredictable behavior" that prevents the Security service from processing more messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3217 
JaguarEditControl (JEdit) ActiveX Control 1.1.0.20 and earlier allows remote attackers to obtain sensitive information, such as the username and MAC and IP addresses, by setting the test field to certain values such as 2404 or 2790, then reading the information from the .JText field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T01:00:00.000Z
CVE-2006-3218 
SQL injection vulnerability in profile.php in Woltlab Burning Board (WBB) 2.1.6 allows remote attackers to execute arbitrary SQL commands via the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T10:00:00.000Z
CVE-2006-3219 
SQL injection vulnerability in thread.php in Woltlab Burning Board (WBB) 2.2.2 allows remote attackers to execute arbitrary SQL commands via the threadid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T10:00:00.000Z
CVE-2006-3220 
SQL injection vulnerability in studienplatztausch.php in Woltlab Burning Board (WBB) 2.2.1 allows remote attackers to execute arbitrary SQL commands via the sid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T10:00:00.000Z
CVE-2006-3221 
SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via double-encoded values in the user parameter in a userinfo subaction.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T10:00:00.000Z
CVE-2006-3222 
The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-24T10:00:00.000Z
CVE-2006-3223 
Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3224 
Apple Safari 2.0.3 (417.9.3) on Mac OS X 10.4.6 allows remote attackers to cause a denial of service (CPU consumption) via Javascript with an infinite for loop.  NOTE: it could be argued that this is not a vulnerability, unless it interferes with the operation of the system outside of the scope of Safari itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T16:00:00.000Z
CVE-2006-3225 
Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T16:00:00.000Z
CVE-2006-3226 
Cisco Secure Access Control Server (ACS) 4.x for Windows uses the client's IP address and the server's port number to grant access to an HTTP server port for an administration session, which allows remote attackers to bypass authentication via various methods, aka "ACS Weak Session Management Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T16:00:00.000Z
CVE-2006-3227 
Interpretation conflict between Internet Explorer and other web browsers such as Mozilla, Opera, and Firefox might allow remote attackers to modify the visual presentation of web pages and possibly bypass protection mechanisms such as content filters via ASCII characters with the 8th bit set, which could be stripped by Internet Explorer to render legible text, but not when using other browsers. NOTE: there has been significant discussion about this issue, and as of 20060625, it is not clear where the responsibility for this issue lies, although it might be due to vagueness within the associated standards.  NOTE: this might only be exploitable with certain encodings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T16:00:00.000Z
CVE-2006-3228 
Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary code via a crafted .mid (MIDI) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-26T19:00:00.000Z
CVE-2006-3229 
Cross-site scripting (XSS) vulnerability in Open WebMail (OWM) 2.52, and other versions released before 05/12/2006, allows remote attackers to inject arbitrary web script or HTML via the (1) To and (2) From fields in openwebmail-main.pl, and possibly (3) other unspecified vectors related to "openwebmailerror calls that need to display HTML."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T01:00:00.000Z
CVE-2006-3230 
Cross-site scripting (XSS) vulnerability in index.tmpl in Azureus Tracker 2.4.0.2 and earlier (Java BitTorrent Client Tracker) allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3231 
Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.11, when fileServingEnabled is true, allows remote attackers to obtain JSP source code and other sensitive information via "URIs with special characters."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3232 
Unspecified vulnerability in IBM WebSphere Application Server before 6.0.2.11 has unknown impact and attack vectors because the "UserNameToken cache was improperly used."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3233 
Cross-site scripting (XSS) vulnerability in openwebmail-read.pl in Open WebMail (OWM) 2.52, and other versions released before 06/18/2006, allows remote attackers to inject arbitrary web script or HTML via the from field.  NOTE: some third party sources have mentioned the "to" and "from" fields, although CVE analysis shows that these are associated with the previous version, a different executable, and a different CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3234 
Multiple SQL injection vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) produkt, (2) id_produc, and (3) id_kat parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3235 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FineShop 3.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) promocja, (2) wysw, or (3) id_produc parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3236 
Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3237 
Cross-site scripting (XSS) vulnerability in index.php in Enterprise Groupware System (EGS) 1.2.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3238 
Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3239 
SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3240 
Cross-site scripting (XSS) vulnerability in classes/ui.class.php in dotProject 2.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3241 
Cross-site scripting (XSS) vulnerability in messages.php in XennoBB 1.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the tid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3242 
Stack-based buffer overflow in the browse_get_namespace function in imap/browse.c of Mutt 1.4.2.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long namespaces received from the IMAP server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3243 
SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3244 
Multiple SQL injection vulnerabilities in Anthill 0.2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) order parameter in buglist.php and the (2) bug parameter in query.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3245 
Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) member and (2) activatecode parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3246 
Cross-site scripting (XSS) vulnerability in show.php in GL-SH Deaf Forum 6.4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3247 
Multiple cross-site scripting (XSS) vulnerabilities in show.php in GL-SH Deaf Forum 6.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) search, (2) page, and (3) action parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3249 
SQL injection vulnerability in search.php in Phorum 5.1.14 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the vendor has disputed this report, stating "If a non positive integer or non-integer is used for the page parameter for a search URL, the search query will use a negative number for the LIMIT clause. This causes the query to break, showing no results.  It IS NOT however a sql injection error."  While the original report is from a researcher with mixed accuracy, as of 20060703, CVE does not have any additional information regarding this issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T10:00:00.000Z
CVE-2006-3250 
Heap-based buffer overflow in Windows Live Messenger 8.0 allows user-assisted attackers to execute arbitrary code via a crafted Contact List (.ctt) file, which triggers the overflow when it is imported by the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T18:00:00.000Z
CVE-2006-3251 
Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T18:00:00.000Z
CVE-2006-3252 
Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T18:00:00.000Z
CVE-2006-3253 
Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary web script or HTML via the u parameter.  NOTE: the vendor has disputed this report, stating that they have been unable to replicate the issue and that "the userid parameter is run through our filtering system as an unsigned integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-3254 
SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-3255 
SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbitrary SQL commands via the boardid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-3256 
SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-3257 
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T19:00:00.000Z
CVE-2006-3258 
Multiple cross-site scripting (XSS) vulnerabilities in index.html in BNBT TrinEdit and EasyTracker 7.7r3.2004.10.27 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) filter or (2) sort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3259 
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the (1) ep parameter to search.php and the (2) subject parameter in comment.php (aka the Subject field when posting a comment).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3260 
Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web script or HTML via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3261 
Cross-site scripting (XSS) vulnerability in Trend Micro Control Manager (TMCM) 3.5 allows remote attackers to inject arbitrary web script or HTML via the username field on the login page, which is not properly sanitized before being displayed in the error log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3262 
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3263 
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3264 
Cross-site scripting (XSS) vulnerability in mclient.cgi in Namo DeepSearch 4.5 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3265 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Qdig before 1.2.9.3, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pre_gallery or (2) post_gallery parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3266 
Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) header parameter to (a) conad/include/rootGui.inc.php and (b) include/rootGui.inc.php; (2) mysqlCall parameter to (c) conad/changeEmail.inc.php, (d) conad/changeUserDetails.inc.php, (e) conad/checkPasswd.inc.php, (f) conad/login.inc.php and (g) conad/logout.inc.php; (3) mysqlcall parameter to (h) include/listall.inc.php; (4) prefix parameter to (i) show/index.php; and (5) config parameter to (j) conad/include/mysqlCall.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3267 
SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T21:00:00.000Z
CVE-2006-3268 
Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "random programmatic access" to other email within the same post office.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-29T17:00:00.000Z
CVE-2006-3269 
PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3270 
SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands via multiple unspecified parameters, such as the add_link_mid parameter.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3271 
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1) country and (2) sort_by parameters in (a) search_results.php; (3) browse parameter in (b) featured_photos.php; (4) cid parameter in (c) products.php, (d) index.php, and (e) news_desc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3272 
Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct actions as another user, such as changing usernames and passwords, via unspecified vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3273 
Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary web script or HTML via the user parameter ("New Name" field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3274 
Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrary files via \ (backslash) characters in the URL to certain directories under the web root, such as the image directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3275 
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands via a double-encoded user parameter in a viewprofile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z
CVE-2006-3276 
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary code via (1) a long User-Agent HTTP header in the RTSP service and (2) unspecified vectors involving the "parsing of HTTP URL schemes".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-28T22:00:00.000Z