rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4051 
PHP remote file inclusion vulnerability in global.php in Turnkey Web Tools PHP Live Helper 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4052 
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Simple Shop 2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) admin/index.php, (2) admin/adminindex.php, (3) admin/adminglobal.php, (4) admin/login.php, (5) admin/menu.php or (6) admin/header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4053 
PHP remote file inclusion vulnerability in templates/header.php in ME Download System 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the Vb8878b936c2bd8ae0cab parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4054 
Multiple PHP remote file inclusion vulnerabilities in ME Download System 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) Vb8878b936c2bd8ae0cab parameter to (a) inc/sett_style.php or (b) inc/sett_smilies.php; or the (2) Vb6c4d0e18a204a63b38f, (3) V18a78b93c3adaaae84e2, or (4) V9ae5d2ca9e9e787969ff parameters to (c) inc/datei.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4055 
Multiple PHP remote file inclusion vulnerabilities in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to (1) include/colorswitch.php, (2) contentimages.class.php, (3) ipfunctions.php, (4) configfunctions.php, (5) printpagedetails.php, or (6) log.class.php.  NOTE: the copyright.php vector is already covered by CVE-2006-3993.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4056 
Multiple SQL injection vulnerabilities in the authentication process in katzlbt (a) The Address Book 1.04e and earlier and (b) The Address Book Reloaded before 2.0-rc4 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameters.  NOTE: portions of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4057 
Buffer overflow in the preview_create function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service (application crash), and possibly execute arbitrary code, via a large email attachment.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4058 
Cross-site scripting (XSS) vulnerability in archive.php in Simplog 0.9.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyw parameter when performing a search.  NOTE: some details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4059 
Multiple PHP remote file inclusion vulnerabilities in USOLVED NEWSolved Lite 1.9.2, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) newsscript_lyt.php, (2) newsticker/newsscript_get.php, (3) inc/output/news_theme1.php, (4) inc/output/news_theme2.php, or (5) inc/output/news_theme3.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4060 
PHP remote file inclusion vulnerability in calendar.php in Visual Events Calendar 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4061 
PHP remote file inclusion vulnerability in index.php in Thomas Pequet phpPrintAnalyzer 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the rep_par_rapport_racine parameter.  NOTE: this issue has been disputed by third party researchers, stating that the rep_par_rapport_racine variable is initialized before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4062 
PHP remote file inclusion vulnerability in usr/extensions/get_tree.inc.php in Dmitry Sheiko SAPID Shop 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4063 
Multiple PHP remote file inclusion vulnerabilities in Csaba Godor SAPID Blog Beta 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_blog_infochannel.inc.php, (b) usr/extensions/get_blog_meta_info.inc.php, or (c) usr/extensions/get_infochannel.inc.php; or the (2) GLOBALS[root_path] parameter to (d) usr/extensions/get_tree.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4064 
SQL injection vulnerability in default.asp in YenerTurk Haber Script 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: it was later reported reported that 2.0 is also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4065 
Multiple PHP remote file inclusion vulnerabilities in Dmitry Sheiko SAPID Gallery 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter to (a) usr/extensions/get_calendar.inc.php or the (2) GLOBALS[root_path] parameter to (b) usr/extensions/get_tree.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4066 
The Graphical Device Interface Plus library (gdiplus.dll) in Microsoft Windows XP SP2 allows context-dependent attackers to cause a denial of service (application crash) via certain images that trigger a divide-by-zero error, as demonstrated by a (1) .ico file, (2) .png file that crashes MSN Messenger, and (3) .jpg file that crashes Internet Explorer.  NOTE: another researcher has not been able to reproduce this issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4067 
Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4068 
The pswd.js script relies on the client to calculate whether a username and password match hard-coded hashed values for a server, and uses a hashing scheme that creates a large number of collisions, which makes it easier for remote attackers to conduct offline brute force attacks.  NOTE: this script might also allow attackers to generate the server-side "secret" URL without determining the original password, but this possibility was not discussed by the original researcher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4069 
Multiple cross-site scripting (XSS) vulnerabilities in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allow remote attackers to inject arbitrary web script or HTML via the (1) m and (2) c parameters in index.php, (3) a search action, and (4) a "submit comment" action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4070 
Format string vulnerability in Imendio Planner 0.13 allows user-assisted attackers to execute arbitrary code via format string specifiers in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z
CVE-2006-4071 
Sign extension vulnerability in the createBrushIndirect function in the GDI library (gdi32.dll) in Microsoft Windows XP, Server 2003, and possibly other versions, allows user-assisted attackers to cause a denial of service (application crash) via a crafted WMF file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T01:00:00.000Z
CVE-2006-4072 
Multiple SQL injection vulnerabilities in Club-Nuke [XP] 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the (2) menu_id parameter to menu.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4073 
Multiple PHP remote file inclusion vulnerabilities in Fabian Hainz phpCC Beta 4.2 allow remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter to (1) login.php, (2) reactivate.php, or (3) register.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4074 
PHP remote file inclusion vulnerability in lib/tpl/default/main.php in the JD-Wiki Component (com_jd-wiki) 1.0.2 and earlier for Joomla!, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4075 
Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/folder.class.php, (2) lib/email.inc.php, (3) lib/document.class.php or (4) lib/auth.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4076 
Multiple PHP remote file inclusion vulnerabilities in Wim Fleischhauer docpile: wim's edition (docpile:we) 0.2.2 allow remote attackers to execute arbitrary PHP code via a URL in the INIT_PATH parameter to (1) lib/access.inc.php, (2) lib/folders.inc.php, (3) lib/init.inc.php or (4) lib/templates.inc.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4077 
PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the Language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4078 
pm.php (aka the PM system) in DeluxeBB 1.08, and possibly earlier, allows remote attackers to bypass authentication by providing an arbitrary username in the membercookie cookie parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4079 
Cross-site scripting (XSS) vulnerability in newpost.php in DeluxeBB 1.08, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the subject parameter (aka the topic title field).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4080 
DeluxeBB 1.08, and possibly earlier, uses cookies that include the MD5 hash of a password, which allows remote attackers to gain privileges by sniffing or cross-site scripting (XSS) and conduct password guessing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T01:00:00.000Z
CVE-2006-4081 
preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote attackers to execute commands via shell metacharacters ("|" pipe symbol) in the file parameter.  NOTE: the attack can be extended to arbitrary commands by the presence of CVE-2006-4000.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4082 
Barracuda Spam Firewall (BSF), possibly 3.3.03.053, contains a hardcoded password for the admin account for logins from 127.0.0.1 (localhost), which allows local users to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4083 
PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter, a different vector than CVE-2006-4040.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4084 
Unspecified vulnerability in phpAutoMembersArea (phpAMA) before 3.2.4 has unknown impact and attack vectors, related to "a potential security exploit which is critical."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4085 
PHP remote file inclusion vulnerability in Olaf Noehring The Search Engine Project (TSEP) 0.942 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter to pagenavigation.php, a different vector than CVE-2006-4055.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4086 
Cross-site scripting (XSS) vulnerability in index.php in Elaine Aquino Online Zone Journals (OZJournals) 1.5 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4087 
Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4088 
Multiple cross-site scripting (XSS) vulnerabilities in CivicSpace 0.8.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Subject, (2) Comment, and (3) Add new comment sections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4089 
Multiple buffer overflows in Andy Lo-A-Foe AlsaPlayer 0.99.76 and earlier allow remote attackers to cause a denial of service (application crash), or have other unknown impact, via (1) a long Location field sent by a web server, which triggers an overflow in the reconnect function in reader/http/http.c; (2) a long URL sent by a web server when AlsaPlayer is seeking a media file for the playlist, which triggers overflows in new_list_item and CbUpdated in interface/gtk/PlaylistWindow.cpp; and (3) a long response sent by a CDDB server, which triggers an overflow in cddb_lookup in input/ccda/cdda_engine.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4090 
Cross-site scripting (XSS) vulnerability in Webligo BlogHoster 2.2 allows remote attackers to inject arbitrary web script or HTML via the "From: part of the comment post," probably involving the nickname parameter to previewcomment.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4091 
Multiple cross-site scripting (XSS) vulnerabilities in Archangel Management Archangel Weblog 0.90.02 allow remote attackers to inject arbitrary web script or HTML via the (1) Name or (2) Comment section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4092 
Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T10:00:00.000Z
CVE-2006-4093 
Linux kernel 2.x.6 before 2.6.17.9 and 2.4.x before 2.4.33.1 on PowerPC PPC970 systems allows local users to cause a denial of service (crash) related to the "HID0 attention enable on PPC970 at boot time."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T21:00:00.000Z
CVE-2006-4095 
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain SIG queries, which cause an assertion failure when multiple RRsets are returned.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4096 
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-4097 
Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a denial of service (crash) via a crafted RADIUS Access-Request packet.  NOTE: it has been reported that at least one issue is a heap-based buffer overflow involving the Tunnel-Password attribute.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-08T23:00:00.000Z
CVE-2006-4098 
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-08T23:00:00.000Z
CVE-2006-4099 
Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-29T17:00:00.000Z
CVE-2006-4102 
PHP remote file inclusion vulnerability in tpl.inc.php in Falko Timme and Till Brehm SQLiteWebAdmin 0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the conf[classpath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4103 
PHP remote file inclusion vulnerability in article-raw.php in Jason Alexander phNNTP 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_newsportal parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4104 
Cross-site scripting (XSS) vulnerability in admin.cgi in mojoscripts.com mojoGallery allows remote attackers to inject arbitrary web script or HTML via "password input."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4105 
Cross-site scripting (XSS) vulnerability in Fill Threads Database (FTD) 3.7.3 allows remote attackers to inject arbitrary web script or HTML via the (1) search field or (2) an e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4106 
Cross-site scripting (XSS) vulnerability in blursoft blur6ex 0.3 allows remote attackers to inject arbitrary web script or HTML via a comment title.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4107 
SQL injection vulnerability in the Job Search module (job.module) 4.6 before revision 1.3.2.1 in Drupal allows remote attackers to execute arbitrary SQL commands via a job or resume search.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4108 
SQL injection vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4109 
Cross-site scripting (XSS) vulnerability in Bibliography (biblio.module) 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4110 
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase (or alternate case) characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T20:00:00.000Z
CVE-2006-4111 
Ruby on Rails before 1.1.5 allows remote attackers to execute Ruby code with "severe" or "serious" impact via a File Upload request with an HTTP header that modifies the LOAD_PATH variable, a different vulnerability than CVE-2006-4112.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4112 
Unspecified vulnerability in the "dependency resolution mechanism" in Ruby on Rails 1.1.0 through 1.1.5 allows remote attackers to execute arbitrary Ruby code via a URL that is not properly handled in the routing code, which leads to a denial of service (application hang) or "data loss," a different vulnerability than CVE-2006-4111.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4113 
PHP remote file inclusion vulnerability in genpage-cgi.php in Brian Fraval hitweb 4.2 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via the REP_INC parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z
CVE-2006-4114 
SQL injection vulnerability in view_com.php in Nicolas Grandjean PHPMyRing 4.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the idsite parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-14T21:00:00.000Z