rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-5024 
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5025 
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5026 
Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5027 
Jeroen Vennegoor JevonCMS, possibly pre alpha, allows remote attackers to obtain sensitive information via a direct request for php/main/phplib files (1) db_msql.inc, (2) db_mssql.inc, (3) db_mysql.inc, (4) db_oci8.inc, (5) db_odbc.inc, (6) db_oracle.inc, and (7) db_pgsql.inc; and (8) db_sybase.inc, which reveals the path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5028 
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft Windows allows remote attackers to list arbitrary directories via a ../ (dot dot slash) in the file parameter in a chdir action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5029 
SQL injection vulnerability in thread.php in WoltLab Burning Board (wBB) 2.3.x allows remote attackers to obtain the version numbers of PHP, MySQL, and wBB via the page parameter.  NOTE: this issue might be a forced SQL error. Also, the original report was disputed by a third party for 2.3.3 and 2.3.4.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5030 
SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users to execute arbitrary SQL commands via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5031 
Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5032 
PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the url_phpartenaire parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5033 
Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to cause a denial of service via the session parameter, possibly related to format string specifiers or malformed URL encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5034 
Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5035 
Multiple cross-site scripting (XSS) vulnerabilities in Paul Smith Computer Services vCAP 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the statusmsg parameter in RegisterPage.cgi or (2) a URI corresponding to a nonexistent file. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5036 
MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sq_remote_page_url parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks. NOTE: the researcher reports that "The vendor does not consider this a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5037 
MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq_content_src parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting (XSS) attacks.  NOTE: the researcher reports that "The vendor does not consider this a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5038 
The FiWin SS28S WiFi VoIP SIP/Skype Phone, firmware version 01_02_07, has a hard-coded username and password, which allows remote attackers to gain administrative access via telnet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5039 
Unspecified vulnerability in Events 1.3 beta module (com_events) for Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5040 
Unspecified vulnerability in SEF404x (com_sef) for Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5041 
Unspecified vulnerability in Hot Properties (possibly com_hotproperties) 0.97 and earlier for Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5042 
Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5043 
Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to (1) file_upload.php or (2) image_upload.php, a variant of CVE-2006-3528.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5044 
Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5045 
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and attack vectors, probably related to PHP remote file inclusion in the mosConfig_absolute_path to conf.pollxt.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5046 
Unspecified vulnerability in RS Gallery2 (com_rsgallery2) 1.11.3 and earlier for Joomla! has unspecified impact and attack vectors, related to lack of "hardened language files."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5047 
Unspecified vulnerability in rsgallery2.html.php in RS Gallery2 component (com_rsgallery2) before 1.11.3 for Joomla! allows attackers to execute arbitrary code.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5048 
Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier for Joomla! allow remote attackers to execute arbitrary code via a URL in the mosConfig_absolute_path parameter in (1) configinsert.php, (2) lang.php, (3) client.php, and (4) server.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5049 
Unspecified vulnerability in Classifieds (com_classifieds) component 1.3 and earlier for Joomla! has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5050 
Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5051 
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5052 
Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T23:00:00.000Z
CVE-2006-5053 
PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content_page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5054 
SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the uye_nu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5055 
PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the init_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5056 
Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attackers to inject arbitrary web script or HTML via the destination parameter in the Login view.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5057 
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary web script or HTML via the (1) gid parameter in details.php, or the (2) photogid parameter in view_photog.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5058 
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to execute arbitrary code via a long map argument to the "callvote map" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5059 
Multiple cross-site scripting (XSS) vulnerabilities in WWWthreads 5.4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the Cat parameter to (1) dosearch.php, (2) postlist.php, (3) showmembers.php, (4) faq_english.php, (5) online.php, (6) login.php, (7) newuser.php, (8) wwwthreads.php, (9) search.php, or (10) postlist.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5060 
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the forgot parameter in the forgot mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5061 
PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5062 
PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows remote attackers to execute arbitrary PHP code via a URL in the temppath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5063 
Cross-site scripting (XSS) vulnerability in Elog 2.6.1 allows remote attackers to inject arbitrary web script or HTML by editing log entries in HTML mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5064 
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entryid parameter in comment.php, (2) page parameter in index.php, or the (3) uid parameter in user.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5065 
PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[lib][db][path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5066 
Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter in index.php or the (2) do parameter in admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5067 
PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter.  NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5068 
PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the o parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5069 
Cross-site scripting (XSS) vulnerability in class.tx_indexedsearch.php in the Indexed Search 2.9.0 extension for Typo3 before 4.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5070 
PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fsinit][objpath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5071 
Multiple cross-site scripting (XSS) vulnerabilities in eyeOS before 0.9.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving (1) eyeNav and (2) system/baixar.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-28T00:00:00.000Z
CVE-2006-5072 
The System.CodeDom.Compiler classes in Novell Mono create temporary files with insecure permissions, which allows local users to overwrite arbitrary files or execute arbitrary code via a symlink attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-05T23:00:00.000Z
CVE-2006-5073 
Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than CVE-2006-5013.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5074 
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the alert parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5075 
The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors related to an SSL client.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5076 
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter in (1) admin/index.php, (2) Facts.php, or (3) search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5077 
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5078 
PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SESSION[dirMain] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5079 
PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_to_bt_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5080 
Cross-site scripting (XSS) vulnerability in the search function in Six Apart Movable Type 3.3 to 3.32, and Movable Type Enterprise 1.01 and 1.02, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5081 
PHP remote file inclusion vulnerability in acc.php in QuickBlogger (QB) 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5082 
Unspecified vulnerability in Sugar Suite Open Source (SugarCRM) before 4.2.1 Patch C (20060917) has unspecified impact, related to code execution, and unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5083 
PHP remote file inclusion vulnerability in includes/functions_portal.php in Integrated MODs (IM) Portal 1.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5084 
Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a malformed Skype URL, as originally reported to involve a null dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5085 
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5086 
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters.  NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-5087 
Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path parameter in (1) track.php or (2) connect.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5088 
PHP remote file inclusion vulnerability in connected_users.lib.php3 in phpHeaven phpMyChat 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the ChatPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5089 
PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. CVE disputes this vulnerability because the file variable is defined before use in a way that prevents arbitrary inclusion
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5090 
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject arbitrary web script or HTML via the (1) mod or (2) action parameters in index.php, or the (3) pageid parameter in modules/pageedit/index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5091 
Unspecified vulnerability in HP-UX B.11.11 and B.11.23 CIFS Server (Samba) allows local users to gain privileges or obtain "unauthorized access" via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5092 
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary PHP code via a URL in the navigation_start parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T20:00:00.000Z
CVE-2006-5093 
PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T21:00:00.000Z