rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-1329 
The SASL negotiation in Jabber Studio jabberd before 2.0s11 allows remote attackers to cause a denial of service ("c2s segfault") by sending a "response stanza before an auth stanza".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1330 
Multiple SQL injection vulnerabilities in phpWebsite 0.83 and earlier allow remote attackers to execute arbitrary SQL commands via the sid parameter to (1) friend.php or (2) article.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1331 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) method or (2) list parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1332 
Noah's Classifieds 1.3 and earlier allows remote attackers to obtain sensitive information via an invalid list parameter in the showdetails method to index.php, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1333 
Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1334 
Multiple SQL injection vulnerabilities in Maian Weblog 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) entry and (2) email parameters to (a) print.php and (b) mail.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1335 
gnome screensaver before 2.14, when running on an X server with AllowDeactivateGrabs and AllowClosedownGrabs enabled, allows attackers with physical access to cause the screensaver to crash and access the session via the Ctl+Alt+Keypad-Multiply keyboard sequence, which removes the grab from gnome.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T01:00:00.000Z
CVE-2006-1336 
Cross-site scripting vulnerability in calendar.php in ExtCalendar 1.0 and possibly other versions before 2.0 allows remote attackers to inject arbitrary web script or HTML via the (1) year, (2) month, (3) next, and (4) prev parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1337 
Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1338 
Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors involving "incorrectly encoded quoted-printable emails".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1339 
Directory traversal vulnerability in inc/functions.inc.php in CuteNews 1.4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the archive parameter in an HTTP POST or COOKIE request, which bypasses a sanity check that is only applied to a GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1340 
CuteNews 1.4.1 and possibly other versions allows remote attackers to obtain the installation path via unspecified vectors involving an invalid file path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1341 
SQL injection vulnerability in events.php in Maian Events 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T02:00:00.000Z
CVE-2006-1342 
net/ipv4/af_inet.c in Linux kernel 2.4 does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the (1) getsockname, (2) getpeername, and (3) accept functions, which allows local users to obtain portions of potentially sensitive memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T18:00:00.000Z
CVE-2006-1343 
net/ipv4/netfilter/ip_conntrack_core.c in Linux kernel 2.4 and 2.6, and possibly net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c in 2.6, does not clear sockaddr_in.sin_zero before returning IPv4 socket names from the getsockopt function with SO_ORIGINAL_DST, which allows local users to obtain portions of potentially sensitive memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-21T18:00:00.000Z
CVE-2006-1344 
Cross-site scripting (XSS) vulnerability in VeriSign haydn.exe, as used in Managed PKI (MPKI) 6.0, allows remote attackers to inject arbitrary web script or HTML via a javascript URI in the VHTML_FILE parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1345 
polls.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to obtain sensitive information via a vote action with an "option[]=null" parameter value, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1346 
Directory traversal vulnerability in inc/setLang.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a lang[*][file] parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included by index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1347 
SQL injection vulnerability in loginfunction.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1348 
Cross-site scripting (XSS) vulnerability in index.php in Greg Neustaetter gCards 1.45 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang[*][file] parameter, which is injected into an error message.  NOTE: this issue might be resultant from CVE-2006-1346.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1349 
Multiple cross-site scripting (XSS) vulnerabilities in Musicbox 2.3 Beta 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id and (2) type and (3) show parameters in a top action in (a) index.php; and the (4) message1 parameter in (b) cart.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1350 
PHP remote file include vulnerability in index.php in 99Articles.com (aka ArticlesOne.com) Free articles directory allows remote attackers to include and execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1351 
BEA WebLogic Server 6.1 SP7 and earlier allows remote attackers to read arbitrary files via unknown attack vectors related to a "default internal servlet" accessed through HTTP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1352 
BEA WebLogic Server and WebLogic Express 8.1 SP4 and earlier, 7.0 SP6 and earlier, and WebLogic Server 6.1 SP7 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via crafted non-canonicalized XML documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T01:00:00.000Z
CVE-2006-1353 
Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.asp and (2) content_ID parameter in news/News_Item.asp; authenticated administrators can also conduct attacks via (3) user_id parameter to users/add_edit_user.asp, (4) bannerid parameter to banner_adds/banner_add_edit.asp, (5) cat_id parameter to categories/add_edit_cat.asp, (6) Content_ID parameter to News/add_edit_news.asp, (7) download_id parameter to downloads/add_edit_download.asp, (8) Poll_ID parameter to poll/add_edit_poll.asp, (9) contactid parameter to contactus/contactus_add_edit.asp, (10) sortby parameter to poll/poll_list.asp, and (11) unspecified inputs to downloads/add_edit_download.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1354 
Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (server crash) via "Insufficient input validation" in the EAP-MSCHAPv2 state machine module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1355 
avast! Antivirus 4.6.763 and earlier sets "BUILTIN\Everyone" permissions to critical system files in the installation folder, which allows local users to gain privileges or disable protection by modifying those files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1356 
Stack-based buffer overflow in the count_vcards function in LibVC 3, as used in Rolo, allows user-assisted attackers to execute arbitrary code via a vCard file (e.g. contacts.vcf) containing a long line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1357 
Cross-site scripting (XSS) vulnerability in my.support.php3 in F5 Firepass 4100 SSL VPN 5.4.2 allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1358 
Unspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be retrieved from the cache for the wrong session, which might allow one user to see a Portlet of another user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-22T02:00:00.000Z
CVE-2006-1359 
Microsoft Internet Explorer 6 and 7 Beta 2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a certain createTextRange call on a checkbox object, which results in a dereference of an invalid table pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T00:00:00.000Z
CVE-2006-1360 
Multiple SQL injection vulnerabilities in MusicBox 2.3 Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) type, or (3) show parameter to (a) index.php; or the (4) message1 or (5) message parameter to (b) cart.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-1361 
Cross-site scripting (XSS) vulnerability in OSWiki before 0.3.1 allows remote attackers to inject arbitrary web script or HTML via the username field to (1) list.rhtml or (2) show.rhtml.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-1362 
Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp.  NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-1363 
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-1364 
Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-1365 
The Motorola PEBL U6, the Motorola V600, and possibly the Motorola E398 and other Motorola phones allow remote attackers to add an entry for their own Bluetooth device to a target device's list of trusted devices (aka Device History), and possibly obtain AT level access to the target device, by initiating and interrupting an OBEX Push Profile that pretends to send a vCard, aka a "HeloMoto" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1366 
Buffer overflow in the Motorola PEBL U6 08.83.76R, and possibly other Motorola P2K-based phones, allows remote attackers to cause a denial of service (device shutdown), and possibly execute arbitrary code, via a long OBEX setpath to the OBEX File Transfer (aka FTP) service on Bluetooth channel 9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1367 
The Motorola PEBL U6 08.83.76R, the Motorola V600, and possibly the Motorola E398 and other Motorola P2K-based phones does not require pairing for a connection related to the Headset Audio Gateway service, which allows user-assisted remote attackers to obtain AT level access and view phonebook entries and saved SMS messages by connecting on Bluetooth channel 3 and tricking the user into pressing Grant, aka a "Blueline" attack.  NOTE: while user-assisted, the attack is made more feasible because of a GUI misrepresentation issue that allows a default message to be replaced by an attacker-specified one.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1368 
Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service (kmalloc'd memory corruption) via a remote NDIS response to OID_GEN_SUPPORTED_LIST, which causes memory to be allocated for the reply data but not the reply structure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1369 
Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.5 and earlier before 20060308 allows remote attackers to inject arbitrary web script or HTML via a Private Message (PM) in certain circumstances.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1370 
Buffer overflow in RealNetworks RealPlayer 10.5 6.0.12.1040 through 6.0.12.1348, RealPlayer 10, RealOne Player v2, RealOne Player v1, RealPlayer 8, and RealPlayer Enterprise before 20060322 allows remote attackers to have an unknown impact via a malicious Mimio boardCast (mbc) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1371 
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using (1) manager.php, (2) standalonemanager.php, and (3) images.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T23:00:00.000Z
CVE-2006-1372 
Multiple SQL injection vulnerabilities in 1WebCalendar 4.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) EventID parameter in viewEvent.cfm, (2) NewsID parameter in newsView.cfm, or (3) ThisDate parameter in mainCal.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1373 
Cross-site scripting (XSS) vulnerability in status_image.php in PHP Live! 3.0 allows remote attackers to inject arbitrary web script or HTML via the base_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1374 
SQL injection vulnerability in viewStatement.php in AdMan 1.0.20051221 and earlier allows remote attackers to execute arbitrary SQL commands via the transactions_offset parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1375 
AdMan 1.0.20051221 and earlier allows remote attackers to obtain the full path via (1) a blank campaignId parameter to editCampaign.php and (2) a blank schemeId parameter to viewPricingScheme.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1376 
The installation of Debian GNU/Linux 3.1r1 from the network install CD creates /var/log/debian-installer/cdebconf with world writable permissions, which allows local users to cause a denial of service (disk consumption).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1377 
Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1378 
PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand() seed values and conducting a known plaintext attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T02:00:00.000Z
CVE-2006-1379 
Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as (1) tmntsrv.exe and (2) tmproxy.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1380 
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1381 
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1382 
PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows remote attackers to include arbitrary files via the systempath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1383 
Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1384 
Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1385 
Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T11:00:00.000Z
CVE-2006-1386 
The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T22:00:00.000Z
CVE-2006-1387 
TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T22:00:00.000Z
CVE-2006-1388 
Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-24T20:00:00.000Z
CVE-2006-1389 
Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-25T00:00:00.000Z
CVE-2006-1390 
The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-25T00:00:00.000Z
CVE-2006-1391 
The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-25T00:00:00.000Z
CVE-2006-1392 
Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-26T23:00:00.000Z