rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4773 
Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via a flood of traffic on the LAN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4774 
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a denial of service by sending a VTP version 1 summary frame with a VTP version field value of 2.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4775 
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is incremented to 0x80000000 and is interpreted as a negative number in a signed context.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4776 
Heap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to execute arbitrary code via a long VLAN name in a VTP type 2 summary advertisement.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4777 
Heap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM object (daxctle.ocx) for Internet Explorer 6.0 SP1, on Chinese and possibly other Windows distributions, allows remote attackers to execute arbitrary code via unknown manipulations in arguments to the KeyFrame method, possibly related to an integer overflow, as demonstrated by daxctle2, and a different vulnerability than CVE-2006-4446.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T00:00:00.000Z
CVE-2006-4778 
SQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URL, which is used to populate the file ID.  NOTE: Some details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4779 
PHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded phpBB 1.0.6-R3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4780 
PHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4781 
Heap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code by sending a crafted packet to port 69/UDP, which triggers the overflow when constructing an absolute path name.  NOTE: Some details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4782 
src/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication and gain sensitive information stored in the database via a modified userID parameter in a write action to admin/database.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4783 
SQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands via the squadID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4784 
Multiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) doc/index.php or (2) files/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4785 
SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the format parameter as stored in the $blogEntry variable, which is not properly handled by the insert_record function, which calls _adodb_column_sql in the adodb layer (lib/adodb/adodb-lib.inc.php), which does not convert the data type to an int.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4786 
Moodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php and (2) other unspecified vectors involving scheduled backups.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4787 
AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message.  NOTE: some details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4788 
PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled and _SESSION[permission] parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4789 
Buffer overflow in Open Movie Editor 0.0.20060901 allows local users to cause a denial of service (system crash) or execute arbitrary code via a long project name in an open_movie_editor_project XML tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T10:00:00.000Z
CVE-2006-4790 
verify.c in GnuTLS before 1.4.4, when using an RSA key with exponent 3, does not properly handle excess data in the digestAlgorithm.parameters field when generating a hash, which allows remote attackers to forge a PKCS #1 v1.5 signature that is signed by that RSA key and prevents GnuTLS from correctly verifying X.509 and other certificates that use PKCS, a variant of CVE-2006-4339.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T19:00:00.000Z
CVE-2006-4793 
Multiple SQL injection vulnerabilities in icerik.asp in TualBLOG 1.0 allow remote attackers to execute arbitrary SQL commands, as demonstrated by the icerikno parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4794 
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script or HTML via the query string (PATH_INFO) in (1) contact.php, (2) download.php, (3) admin.php, (4) fpw.php, (5) news.php, (6) search.php, (7) signup.php, (8) submitnews.php, and (9) user.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4795 
Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport software in HP-UX B.11.11 and B.11.23 before 20060912 allows local users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4796 
Cross-site scripting (XSS) vulnerability in forum.asp in Snitz Forums 2000 3.4.06 allows remote attackers to inject arbitrary web script or HTML via the sortorder parameter (strtopicsortord variable).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4797 
Cross-site scripting (XSS) vulnerability in tag.php in CloudNine Interactive CJ Tag Board 3.0 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a url BBcode tag in the cjmsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4798 
SQL-Ledger before 2.4.4 stores a password in a query string, which might allow context-dependent attackers to obtain the password via a Referer field or browser history.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4799 
Buffer overflow in ffmpeg for xine-lib before 1.1.2 might allow context-dependent attackers to execute arbitrary code via a crafted AVI file and "bad indexes", a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T21:00:00.000Z
CVE-2006-4800 
Multiple buffer overflows in libavcodec in ffmpeg before 0.4.9_p20060530 allow remote attackers to cause a denial of service or possibly execute arbitrary code via multiple unspecified vectors in (1) dtsdec.c, (2) vorbis.c, (3) rm.c, (4) sierravmd.c, (5) smacker.c, (6) tta.c, (7) 4xm.c, (8) alac.c, (9) cook.c, (10) shorten.c, (11) smacker.c, (12) snow.c, and (13) tta.c.  NOTE: it is likely that this is a different vulnerability than CVE-2005-4048 and CVE-2006-2802.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T22:00:00.000Z
CVE-2006-4801 
Race condition in Deja Vu, as used in Roxio Toast Titanium 7 and possibly other products, allows local users to execute arbitrary code via temporary files, including dejavu_manual.rb, which are executed with raised privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T22:00:00.000Z
CVE-2006-4802 
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T22:00:00.000Z
CVE-2006-4803 
The Fan-Out Linux and UNIX receiver scripts in Novell Identity Manager (IDM) 3.0.1 allows local users to execute arbitrary commands via unspecified vectors involving certain environment variables and "code injection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-14T22:00:00.000Z
CVE-2006-4805 
epan/dissectors/packet-xot.c in the XOT dissector (dissect_xot_pdu) in Wireshark (formerly Ethereal) 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service (memory consumption and crash) via an encoded XOT packet that produces a zero length value when it is decoded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-27T23:00:00.000Z
CVE-2006-4806 
Multiple integer overflows in imlib2 allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) ARGB (loader_argb.c), (2) PNG (loader_png.c), (3) LBM (loader_lbm.c), (4) JPEG (loader_jpeg.c), or (5) TIFF (loader_tiff.c) images.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-07T00:00:00.000Z
CVE-2006-4807 
loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) via a crafted TGA image that triggers an out-of-bounds memory read, a different issue than CVE-2006-4808.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-07T00:00:00.000Z
CVE-2006-4808 
Heap-based buffer overflow in loader_tga.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TGA image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-07T00:00:00.000Z
CVE-2006-4809 
Stack-based buffer overflow in loader_pnm.c in imlib2 before 1.2.1, and possibly other versions, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-07T00:00:00.000Z
CVE-2006-4810 
Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-08T21:00:00.000Z
CVE-2006-4811 
Integer overflow in Qt 3.3 before 3.3.7, 4.1 before 4.1.5, and 4.2 before 4.2.1, as used in the KDE khtml library, kdelibs 3.1.3, and possibly other packages, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted pixmap image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-18T17:00:00.000Z
CVE-2006-4812 
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-09T18:00:00.000Z
CVE-2006-4813 
The __block_prepare_write function in fs/buffer.c for Linux kernel 2.6.x before 2.6.13 does not properly clear buffers during certain error conditions, which allows local users to read portions of files that have been unlinked.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-12T20:00:00.000Z
CVE-2006-4814 
The mincore function in the Linux kernel before 2.4.33.6 does not properly lock access to user space, which has unspecified impact and attack vectors, possibly related to a deadlock.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-20T02:00:00.000Z
CVE-2006-4819 
Heap-based buffer overflow in Opera 9.0 and 9.01 allows remote attackers to execute arbitrary code via a long URL in a tag (long link address).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-17T21:00:00.000Z
CVE-2006-4820 
Unspecified vulnerability in X.25 on HP-UX B.11.00, B.11.11, and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T21:00:00.000Z
CVE-2006-4821 
Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Userreview module before 1.19 2006/09/12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4822 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in eMuSOFT emuCMS 0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) query or (2) page parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4823 
PHP remote file inclusion vulnerability in scripts/news_page.php in Reamday Enterprises Magic News Pro 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4824 
PHP remote file inclusion vulnerability in lib/activeutil.php in Quicksilver Forums (QSF) 1.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the set[include_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4825 
Multiple cross-site scripting (XSS) vulnerabilities in cl_files/index.php in SoftComplex PHP Event Calendar 1.5.1, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) ti, (2) bi, or (3) cbgi parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4826 
PHP remote file inclusion vulnerability in bottom.php in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4827 
Multiple PHP remote file inclusion vulnerabilities in Vmist Downstat 1.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the art parameter to (1) admin.php, (2) chart.php, (3) modes.php, or (4) stats.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4828 
PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PP_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4829 
Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name parameter in a blog post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4830 
Directory traversal vulnerability in EditBlogTemplatesPlugin.java in David Czarnecki Blojsom 2.30 allows remote attackers to have an unknown impact by sending an HTTP request with a certain value of blogTemplate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4831 
Unspecified vulnerability in IP over DNS is now easy (iodine) before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4832 
Buffer overflow in the telnet service in Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allows remote attackers to cause a denial of service (reboot) and possibly execute arbitrary code via a long username.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4833 
Verso NetPerformer FRAD ACT SDM-95xx 7.xx (R1) and earlier, SDM-93xx 10.x.x (R2) and earlier, and SDM-92xx 9.x.x (R1) and earlier allow remote attackers to cause a denial of service (hang or reboot) via an ICMP packet with the same destination and source address and port, aka the "Land" vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4834 
PHP remote file inclusion vulnerability in index.php in Jule Slootbeek phpQuiz 0.01 allows remote attackers to execute arbitrary PHP code via a URL in the pagename parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4835 
Bluview Blue Magic Board (BMB) (aka BMForum) 5.5 allows remote attackers to obtain sensitive information via a direct request to (1) footer.php, (2) header.php, (3) db_mysql_error.php, (4) langlist.php, (5) sendmail.php, or (6) style.php, which reveals the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4836 
SQL injection vulnerability in login.php in DCP-Portal SE 6.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: The lostpassword.php and calendar.php vectors are already covered by CVE-2005-3365, and the search.php vector is already covered by CVE-2005-4227.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4837 
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) library/lib.php and (2) library/editor/editor.php.  NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4838 
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal SE 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) root_url and (2) dcp_version parameters in (a) admin/inc/footer.inc.php, and the root_url, (3) page_top_name, (4) page_name, and (5) page_options parameters in (b) admin/inc/header.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-15T22:00:00.000Z
CVE-2006-4839 
Sophos Anti-Virus 5.1 allows remote attackers to cause a denial of service (memory consumption) via a file that is compressed with Petite and contains a large number of sections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-01T15:00:00.000Z
CVE-2006-4842 
The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-12T00:00:00.000Z
CVE-2006-4843 
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified "code sequences" that bypass the protection scheme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-03-29T21:00:00.000Z
CVE-2006-4844 
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4845 
PHP remote file inclusion vulnerability in includes/footer.html.inc.php in TeamCal Pro 2.8.001 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tc_config[app_root] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4846 
Unspecified vulnerability in Citrix Access Gateway with Advanced Access Control (AAC) 4.2 before 20060914, when AAC is configured to use LDAP authentication, allows remote attackers to bypass authentication via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z