rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-2642 
** UNVERIFIABLE **  NOTE: this issue does not contain any verifiable or actionable details.  Cross-site scripting (XSS) vulnerability in Marco M. F. De Santis Php-residence 0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via "any of its input."  NOTE: the original disclosure is based on vague researcher claims without vendor acknowledgement; therefore this identifier cannot be linked with any future identifier that identifies more specific vectors.  Perhaps this should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2643 
Cross-site scripting (XSS) vulnerability in index.php in Monster Top List (MTL) 1.4 allows remote attackers to inject arbitrary web script or HTML via the user_error_message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2644 
AWStats 6.5, and possibly other versions, allows remote authenticated users to execute arbitrary code by using the configdir parameter to awstats.pl to upload a configuration file whose name contains shell metacharacters, then access that file using the LogFile directive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2645 
PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to execute arbitrary code via a URL in the _PX_config[manager_path] parameter.  NOTE: this is a different executable and affected version than CVE-2006-0725.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2646 
Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a long A0001 argument that begins with a '"' (double quote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2647 
Untrusted search path vulnerability in update_flash for IBM AIX 5.1, 5.2 and 5.3 allows local users to execute arbitrary commands via unknown vectors involving lsmcode and possibly other commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2648 
Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to inject arbitrary HTML or web script via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2649 
Multiple cross-site scripting (XSS) vulnerabilities in (a) search.php, (b) search_cat.php, (c) search_price.php, and (d) product_details.php in the cosmicshop directory for CosmicShoppingCart allow remote attackers to inject arbitrary web script or HTML via multiple unspecified parameters, as demonstrated by the (1) query parameter in search.php and the (2) data parameter in search_cat.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2650 
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2651 
Cross-site scripting (XSS) vulnerability in index.php in Vacation Rental Script 1.0 allows remote attackers to inject arbitrary web script or HTML via the obj parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2652 
Cross-site scripting (XSS) vulnerability in WikiNi 0.4.2 and earlier allows remote attackers to inject arbitrary HTML and web script by editing a Wiki page to contain the script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2653 
Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T10:00:00.000Z
CVE-2006-2654 
Directory traversal vulnerability in smbfs smbfs on FreeBSD 4.10 up to 6.1 allows local users to escape chroot restrictions for an SMB-mounted filesystem via "..\\" sequences.  NOTE: this is similar to CVE-2006-1864, but this is a different implementation of smbfs, so it has a different CVE identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2655 
The build process for ypserv in FreeBSD 5.3 up to 6.1 accidentally disables access restrictions when using the /var/yp/securenets file, which allows remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T01:00:00.000Z
CVE-2006-2656 
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execute arbitrary code via a long filename.  NOTE: tiffsplit is not setuid.  If there is not a common scenario under which tiffsplit is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T18:00:00.000Z
CVE-2006-2658 
Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-12T16:00:00.000Z
CVE-2006-2659 
libs/comverp.c in Courier MTA before 0.53.2 allows attackers to cause a denial of service (CPU consumption) via unknown vectors involving usernames that contain the "=" (equals) character, which is not properly handled during encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T19:00:00.000Z
CVE-2006-2660 
Buffer consumption vulnerability in the tempnam function in PHP 5.1.4 and 4.x before 4.4.3 allows local users to bypass restrictions and create PHP files with fixed names in other directories via a pathname argument longer than MAXPATHLEN, which prevents a unique string from being appended to the filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-13T18:00:00.000Z
CVE-2006-2661 
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file that triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T19:00:00.000Z
CVE-2006-2662 
VMware Server before RC1 does not clear user credentials from memory after a console connection is made, which might allow local attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-02T10:00:00.000Z
CVE-2006-2663 
Multiple cross-site scripting (XSS) vulnerabilities in iFlance 1.1 allow remote attackers to inject arbitrary web script or HTML via certain inputs to (1) acc_verify.php or (2) project.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2664 
Cross-site scripting (XSS) vulnerability in iFdate 1.2 allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) password fields, or certain other input text boxes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2665 
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2666 
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG[pear_dir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2667 
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary commands by inserting a carriage return and PHP code when updating a profile, which is appended after a special comment sequence into files in (1) wp-content/cache/userlogins/ (2) wp-content/cache/users/ which are later included by cache.php, as demonstrated using the displayname argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2668 
Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) modules/credits/business.php, (2) modules/credits/credits.php, or (3) modules/credits/help.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2669 
Multiple cross-site scripting (XSS) vulnerabilities in Pre Shopping Mall 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) search parameter in search.php (the "search box"), (2) the prodid parameter in detail.php, and the (3) cid parameter in products.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2670 
Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script or HTML via a chat message in (1) fastchat.php and (2) fastshow.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2671 
SQL injection vulnerability in ChatPat 1.0 allows remote attackers to execute arbitrary SQL commands via the nickname field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2672 
Multiple cross-site scripting (XSS) vulnerabilities in Realty Pro One allow remote attackers to inject arbitrary web script or HTML via the (1) listingid parameter to (a) images.php, (b) index_other.php, or (c) request_info.php; (2) propertyid parameter to (d) searchlookup.php, (3) id parameter to (e) images.php, or (4) agentid parameter to (f) request_info.php.  NOTE: some of these issues might be resultant from SQL injection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2673 
Cross-site scripting (XSS) vulnerability in search.html in Bulletin Board Elite-Board (E-Board) 1.1 allows remote attackers to inject arbitrary web script or HTML via the search box.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2674 
Multiple SQL injection vulnerabilities in Tamber Forum 1.9.13 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) frm_id parameter to (a) show_forum.asp, (2) a search field to (b) forum_search.asp, (3) Email address or (4) Password to (c) admin/index.asp, (5) frm_cat_id parameter to (d) browse_forum_cat.asp, or (6) Message Subject or (7) Message Text field to (e) post_message.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2675 
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute arbitrary PHP code via a URL in the (1) thispath or (2) configdir parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-30T21:00:00.000Z
CVE-2006-2676 
Dispatch.cgi/_user/uservCard/ in SiteScape Forum 7.2 and possibly earlier generates different responses in a way that allows remote attackers to enumerate valid usernames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2677 
SiteScape Forum 7.2 and possibly earlier stores the avf.rc configuraiton file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive path information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2678 
Multiple cross-site scripting (XSS) vulnerabilities in Pre News Manager 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) index.php, and the (2) nid parameter to (b) news_detail.php, (c) email_story.php, (d) thankyou.php, (e) printable_view.php, (f) tella_friend.php, and (g) send_comments.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2679 
Unspecified vulnerability in the VPN Client for Windows Graphical User Interface (GUI) (aka the VPN client dialer) in Cisco VPN Client for Windows 4.8.00.* and earlier, except for 4.7.00.0533, allows local authenticated, interactive users to gain privileges, possibly due to privileges of dialog boxes, aka bug ID CSCsd79265.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2680 
Cross-site scripting (XSS) vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2681 
PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_quotes are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the site_path parameter to (1) index.php and (2) inc-common.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2682 
PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _PSL[classdir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2683 
PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote attackers to execute arbitrary PHP code via a URL in the REDSYS[MYPATH][TEMPLATES] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2684 
Cross-site scripting (XSS) vulnerability in the search module in CMS Mundo 1.0 allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2685 
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allows remote attackers to execute arbitrary PHP code via a URL in the BASE_path parameter to (1) base_qry_common.php, (2) base_stat_common.php, and (3) includes/base_include.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2686 
PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2687 
Cross-site scripting (XSS) vulnerability in adduser.php in PHP-AGTC Membership System 1.1a and earlier allows remote attackers to inject arbitrary web script or HTML via the email address (useremail parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2688 
SQL injection vulnerability in the employees node (class.employee.inc) in Achievo 1.1.0 and earlier and 1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the atkselector parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2689 
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) debut_image parameter in (a) article-album.php3, (2) date parameter in (b) rubrique.php3, and the (3) perso and (4) aide parameters to (c) an unknown script, probably index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2690 
An unspecified script in EVA-Web 2.1.2 and earlier, probably index.php, allows remote attackers to obtain the full path of the web server via invalid (1) perso or (2) aide parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2691 
Unspecified "information leakage" vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to access arbitrary images, including dynamically generated images, via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2692 
Multiple unspecified vulnerabilities in aMuleWeb for AMule before 2.1.2 allow remote attackers to read arbitrary image, HTML, or PHP files via unknown vectors, probably related to directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2693 
Directory traversal vulnerability in admin/admin_hacks_list.php in Nivisec Hacks List 1.20 and earlier for phpBB, when register_globals is enabled, allows remote attackers to read arbitrary files via a ".." in the phpEx parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2694 
Multiple PHP remote file inclusion vulnerabilities in EzUpload Pro 2.10 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) form.php, (2) customize.php, and (3) initialize.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2695 
admin/upprocess.php in DGNews 1.5 and earlier allows remote attackers to execute arbitrary code by uploading scripts with arbitrary extensions to the img directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2696 
Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) startletter parameter in userview.asp and the (2) catid parameter in topics.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2697 
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) startletter parameter in userview.asp and the (2) forumname parameter in topics.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2698 
Geeklog 1.4.0sr2 and earlier allows remote attackers to obtain the full installation path via a direct request and possibly invalid arguments to (1) layout/professional/functions.php or (2) getimage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2699 
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inject arbitrary HTML or web script via the image argument in a show action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2700 
SQL injection vulnerability in admin/auth.inc.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via the loginname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2701 
SQL injection vulnerability in Geeklog 1.4.0sr2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to story submission.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2702 
vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PC_REMOTE_ADDR HTTP header, which vars.php uses to redefine $_SERVER['REMOTE_ADDR'].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T10:00:00.000Z
CVE-2006-2703 
The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers to read network traffic and execute commands via a man-in-the-middle (MITM) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-01T10:00:00.000Z
CVE-2006-2704 
Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2705 
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2706 
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of service via forged "session start" messages that cause AVR to connect to arbitrary hosts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2707 
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2708 
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z
CVE-2006-2709 
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-31T22:00:00.000Z