rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3924 
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-28T23:00:00.000Z
CVE-2006-3925 
Stack-based buffer overflow in ITIRecorder.MicRecorder ActiveX control in iarecord.dll in InterActual Player before 2.6 allows remote attackers to execute arbitrary code via a long argument to the Files method.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-28T23:00:00.000Z
CVE-2006-3926 
Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) start parameters to (a) viewfeedback.php or the (3) orderType parameter to (b) categories.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3927 
Cross-site scripting (XSS) vulnerability in auctionsearch.php in PhpProBid 5.24 allows remote attackers to inject arbitrary web script or HTML via the advsrc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3928 
PHP remote file inclusion vulnerability in index.php in WMNews 0.2a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the base_datapath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3929 
Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3930 
PHP remote file inclusion vulnerability in admin.a6mambohelpdesk.php in a6mambohelpdesk Mambo Component 18RC1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3931 
Buffer overflow in the daemon function in midirecord.cc in Tuomas Airaksinen Midirecord 2.0 allows local users to execute arbitrary code via a long command line argument (filename).  NOTE: This may not be a vulnerability if Midirecord is not installed setuid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3932 
SQL injection vulnerability in links.php in Gonafish LinksCaffe 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3933 
Cross-site scripting (XSS) vulnerability in Alkacon OpenCms before 6.2.2 allows remote authenticated users to inject arbitrary web script or HTML via the message body.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3934 
Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3935 
system/workplace/views/admin/admin-main.jsp in Alkacon OpenCms before 6.2.2 does not restrict access to administrator functions, which allows remote authenticated users to (1) send broadcast messages to all users (/workplace/broadcast), (2) list all users (/accounts/users), (3) add webusers (/accounts/webusers/new), (4) upload database import and export files (/database/importhttp), (5) upload arbitrary program modules (/modules/modules_import), and (6) read the log file (/workplace/logfileview) by setting the appropriate value for the path parameter in a direct request to admin-main.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3936 
system/workplace/editors/editor.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to read the source code of arbitrary JSP files by specifying the file in the resource parameter, as demonstrated using index.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3937 
post.php in x_atrix xGuestBook 1.02 allows remote attackers to obtain sensitive information via a request without the (1) user, (2) mail, (3) p, or (4) url parameter, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3938 
DotClear allows remote attackers to obtain sensitive information via a direct request for (1) edit_cat.php, (2) index.php, (3) edit_link.php in ecrire/tools/blogroll/; (4) syslog/index.php, (5) thememng/index.php, (6) toolsmng/index.php, (7) utf8convert/index.php in /ecrire/tools/; (8) /ecrire/inc/connexion.php and (9) /inc/session.php; (10) class.blog.php, (11) class.blogcomment.php, (12) and class.blogpost.php in /inc/classes/; (13) append.php, (14) class.xblog.php, (15) class.xblogcomment.php, and (16) class.xblogpost.php in /layout/; (17) form.php, (18) list.php, (19) post.php, or (20) template.php in /themes/default/, which reveal the installation path in error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3939 
ScriptsCenter ezUpload Pro 2.2.0 allows remote attackers to perform administrative activities without authentication in (1) filter.php, which permits changing the Extensions Mode file type; (2) access.php, which permits changing the Protection Method; (3) edituser.php, which permits adding upload capabilities to user accounts; (4) settings.php, which permits changing the admin information; and (5) index.php, which permits uploading of arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3940 
Multiple SQL injection vulnerabilities in phpbb-Auction allow remote attackers to execute arbitrary SQL commands via (1) the ar parameter in auction_room.php and (2) the u parameter in auction_store.php. NOTE: the auction_rating.php vector is already covered by CVE-2005-1234.  NOTE: the original disclosure states that the product name is "PHP-Auction", but this is probably an error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T22:00:00.000Z
CVE-2006-3941 
Unspecified vulnerability in the daemons for Sun N1 Grid Engine 5.3 and N1 Grid Engine 6.0 allows local users to cause a denial of service (grid service shutdown) and possibly execute arbitrary code using buffer overflows via unknown vectors that cause (1) qmaster or (2) execd to terminate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3942 
The server driver (srv.sys) in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (system crash) via an SMB_COM_TRANSACTION SMB message that contains a string without null character termination, which leads to a NULL dereference in the ExecuteTransaction function, possibly related to an "SMB PIPE," aka the "Mailslot DOS" vulnerability.  NOTE: the name "Mailslot DOS" was derived from incomplete initial research; the vulnerability is not associated with a mailslot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3943 
Stack-based buffer overflow in NDFXArtEffects in Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via long (1) RGBExtraColor, (2) RGBForeColor, and (3) RGBBackColor properties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3944 
Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) via a (1) Forms.ListBox.1 or (2) Forms.ListBox.1 object with the ListWidth property set to (a) 0x7fffffff, which triggers an integer overflow exception, or to (b) 0x7ffffffe, which triggers a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3945 
The CSS functionality in Opera 9 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by setting the background property of a DHTML element to a long http or https URL, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3946 
WebCore in Apple Mac OS X 10.3.9 and 10.4 through 10.4.7 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted HTML that triggers a "memory management error" in WebKit, possibly due to a buffer overflow, as originally reported for the KHTMLParser::popOneBlock function in Apple Safari 2.0.4 using Javascript that changes document.body.innerHTML within a DIV tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T23:00:00.000Z
CVE-2006-3947 
PHP remote file inclusion vulnerability in components/com_mambatstaff/mambatstaff.php in the Mambatstaff 3.1b and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3948 
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3949 
PHP remote file inclusion vulnerability in artlinks.dispnew.php in the Artlinks component (com_artlinks) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3950 
SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3951 
PHP remote file inclusion vulnerability in moodle.php in Mam-moodle alpha component (com_moodle) for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3952 
Stack-based buffer overflow in EFS Software Easy File Sharing FTP Server 2.0 allows remote attackers to execute arbitrary code via a long argument to the PASS command.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3953 
Cross-site scripting (XSS) vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to inject arbitrary web script or HTML via the gallery parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3954 
Directory traversal vulnerability in usercp.php in MyBB (aka MyBulletinBoard) 1.x allows remote attackers to read arbitrary files via a .. (dot dot) in the gallery parameter in a (1) avatar or (2) do_avatar action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3955 
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) news.php, (2) search.php, or (3) whosOnline.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3956 
Multiple cross-site scripting (XSS) vulnerabilities in contact.php in Advanced Webhost Billing System (AWBS) 2.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) AccountUsername and (3) Message parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3957 
PHP remote file inclusion vulnerability in payment.php in BosDev BosDates allows remote attackers to execute arbitrary PHP code via a URL in the insPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3958 
Multiple unspecified cross-site scripting (XSS) vulnerabilities in Taskjitsu 2.0.3 allow remote attackers to inject arbitrary web script or HTML via (1) the Search Tasks system, or authenticated users via (2) the Edit Task system, (3) the back-end Category Editor system, and (4) "Pages that display task status, email addresses, URL, customer, and project information."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3959 
SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3960 
SQL injection vulnerability in top.php in X-Scripts X-Poll, probably 2.30, allows remote attackers to execute arbitrary SQL commands via the poll parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3961 
Buffer overflow in McSubMgr ActiveX control (mcsubmgr.dll) in McAfee Security Center 6.0.23 for Internet Security Suite 2006, Wireless Home Network Security, Personal Firewall Plus, VirusScan, Privacy Service, SpamKiller, AntiSpyware, and QuickClean allows remote user-assisted attackers to execute arbitrary commands via long string parameters, which are later used in vsprintf.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T21:00:00.000Z
CVE-2006-3962 
PHP remote file inclusion vulnerability in administrator/components/com_bayesiannaivefilter/lang.php in the bayesiannaivefilter component (com_bayesiannaivefilter) 1.1 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3963 
Multiple SQL injection vulnerabilities in Banex PHP MySQL Banner Exchange 2.21 allow remote attackers to execute arbitrary SQL commands via the (1) site_name parameter to (a) signup.php, and the (2) id, (3) deleteuserbanner, (4) viewmem, (5) viewmemunb, (6) viewunmem,or (7) deleteuser parameters to (b) admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3964 
PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3965 
Banex PHP MySQL Banner Exchange 2.21 stores lib.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as database usernames and passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3966 
PHP remote file inclusion vulnerability in /lib/tree/layersmenu.inc.php in the PHP Layers Menu 2.3.5 package for MyNewsGroups :) 0.6b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myng_root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3967 
PHP remote file inclusion vulnerability in component/option,com_moskool/Itemid,34/admin.moskool.php in MamboXChange Moskool 1.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3968 
The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent applications from detecting that the data has been modified.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3969 
PHP remote file inclusion vulnerability in administrator/components/com_colophon/admin.colophon.php in Colophon 1.2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3970 
PHP remote file inclusion vulnerability in lmo.php in the LMO Component (com_lmo) 1.0b2 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-01T22:00:00.000Z
CVE-2006-3971 
Cross-site scripting (XSS) vulnerability in visitor/livesupport/chat.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to inject arbitrary web script or HTML via the userid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-02T16:00:00.000Z
CVE-2006-3972 
Directory traversal vulnerability in includes/operator_chattranscript.php in Scott Weedon Ajax Chat, possibly 0.1, allows remote attackers to read arbitrary files via a .. (dot dot) in the chatid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-02T16:00:00.000Z
CVE-2006-3973 
My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test Your Firewall" feature, which allows local users to gain SYSTEM privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-22T11:00:00.000Z
CVE-2006-3974 
Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-06-11T19:00:00.000Z
CVE-2006-3975 
Unspecified vulnerability in CA eTrust Antivirus WebScan allows remote attackers to execute arbitrary code due to "improper bounds checking when processing certain user input."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-04T23:00:00.000Z
CVE-2006-3976 
Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 allows remote attackers to install arbitrary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-04T23:00:00.000Z
CVE-2006-3977 
Unspecified vulnerability in CA eTrust Antivirus WebScan before 1.1.0.1048 has unknown impact and remote attackers related to "improper processing of outdated WebScan components."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-04T23:00:00.000Z
CVE-2006-3978 
Unspecified vulnerability in a Verity third party library, as used on Adobe ColdFusion MX 7 through MX 7.0.2 and possibly other products, allows local users to execute arbitrary code via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-10T22:00:00.000Z
CVE-2006-3979 
The AdminAPI of ColdFusion MX 7 allows attackers to bypass authentication by using "programmatic access" to the adminAPI instead of the ColdFusion Administrator.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T10:00:00.000Z
CVE-2006-3980 
PHP remote file inclusion vulnerability in administrator/components/com_mgm/help.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3981 
PHP remote file inclusion vulnerability in about.mgm.php in Mambo Gallery Manager (MGM) 0.95r2 and earlier for Mambo 4.5 allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3982 
PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3983 
PHP remote file inclusion vulnerability in editprofile.php in php(Reactor) 1.27pl1 allows remote attackers to execute arbitrary PHP code via a URL in the pathtohomedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3984 
PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3985 
Stack-based buffer overflow in DZIPS32.DLL 6.0.0.4 in ConeXware PowerArchiver 9.62.03 allows user-assisted attackers to execute arbitrary code by adding a new file to a crafted ZIP archive that already contains a file with a long name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3986 
PHP remote file inclusion vulnerability in index.php in Knusperleicht Newsletter 3.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NL_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3987 
Multiple PHP remote file inclusion vulnerabilities in index.php in Knusperleicht FileManager 1.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) dwl_download_path or (2) dwl_include_path parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z