rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-5863 
PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-11T01:00:00.000Z
CVE-2006-5864 
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript (PS) file with certain headers that contain long comments, as demonstrated using the (1) DocumentMedia, (2) DocumentPaperSizes, and possibly (3) PageMedia and (4) PaperSize headers.  NOTE: this issue can be exploited through other products that use gv such as evince.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-11T01:00:00.000Z
CVE-2006-5865 
PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the langs_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-11T01:00:00.000Z
CVE-2006-5866 
Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to read and include arbitrary files via ".." sequences in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-11T01:00:00.000Z
CVE-2006-5867 
fetchmail before 6.3.6-rc4 does not properly enforce TLS and may transmit cleartext passwords over unsecured links if certain circumstances occur, which allows remote attackers to obtain sensitive information via man-in-the-middle (MITM) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-09T00:00:00.000Z
CVE-2006-5868 
Multiple buffer overflows in Imagemagick 6.0 before 6.0.6.2, and 6.2 before 6.2.4.5, has unknown impact and user-assisted attack vectors via a crafted SGI image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-22T01:00:00.000Z
CVE-2006-5869 
pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-26T22:00:00.000Z
CVE-2006-5870 
Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-04T11:00:00.000Z
CVE-2006-5871 
smbfs in Linux kernel 2.6.8 and other versions, and 2.4.x before 2.4.34, when UNIX extensions are enabled, ignores certain mount options, which could cause clients to use server-specified uid, gid and mode settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-11T23:00:00.000Z
CVE-2006-5872 
login.pl in SQL-Ledger before 2.6.21 and LedgerSMB before 1.1.5 allows remote attackers to execute arbitrary Perl code via the "-e" flag in the script parameter, which is used as an argument to the perl program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-18T00:00:00.000Z
CVE-2006-5873 
Buffer overflow in the cluster_process_heartbeat function in cluster.c in layer 2 tunneling protocol network server (l2tpns) before 2.1.21 allows remote attackers to cause a denial of service via a large heartbeat packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-12T00:00:00.000Z
CVE-2006-5874 
Clam AntiVirus (ClamAV) 0.88 and earlier allows remote attackers to cause a denial of service (crash) via a malformed base64-encoded MIME attachment that triggers a null pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-10T02:00:00.000Z
CVE-2006-5875 
eoc.py in Enemies of Carlotta (EoC) before 1.2.4 allows remote attackers to execute arbitrary commands via shell metacharacters in an "SMTP level e-mail address".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-14T00:00:00.000Z
CVE-2006-5876 
The soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows remote attackers to cause a denial of service (crash) via malformed HTTP headers, probably involving missing fields or values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-01-16T19:00:00.000Z
CVE-2006-5877 
The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-02-23T21:00:00.000Z
CVE-2006-5878 
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5879 
SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll_ID parameter, a different vector than CVE-2006-1353.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5880 
SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbitrary SQL commands via the catid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5881 
SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute arbitrary SQL commands via the cl_cat_ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5882 
Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter before 4.100.15.5 and other products, allows remote attackers to execute arbitrary code via an 802.11 response frame containing a long SSID field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5883 
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary web script or HTML via the (1) dir parameter in (a) seldir.html, and the (2) user and (3) dir parameters in (b) newuser.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-5884 
Multiple unspecified vulnerabilities in DirectAnimation ActiveX controls for Microsoft Internet Explorer 5.01 through 6 have unknown impact and remote attack vectors, possibly related to (1) Danim.dll and (2) Lmrt.dll, a different set of vulnerabilities than CVE-2006-4446 and CVE-2006-4777.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T21:00:00.000Z
CVE-2006-5885 
SQL injection vulnerability in Products.asp in NuStore 1.0 allows remote attackers to execute arbitrary SQL commands via the SubCatagoryID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5886 
SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5887 
SQL injection vulnerability in CampusNewsDetails.asp in Dynamic Dataworx NuSchool 1.0 allows remote attackers to execute arbitrary SQL commands via the NewsID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5888 
SQL injection vulnerability in viewarticle.asp in Superfreaker Studios UPublisher 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5889 
SQL injection vulnerability in printLog.php in BrewBlogger (BB) 1.3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5890 
SQL injection vulnerability in detail.asp in Superfreaker Studios USupport 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5891 
SQL injection vulnerability in detail.asp in Superfreaker Studios UStore 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5892 
SQL injection vulnerability in MoreInfo.asp in The Net Guys ASPired2Poll 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5893 
Multiple PHP remote file inclusion vulnerabilities in iWonder Designs Storystream 0.4.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter to (1) mysql.php and (2) mysqli.php in include/classes/pear/DB/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5894 
Directory traversal vulnerability in lang.php in Rama CMS 0.68 and earlier, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by lang.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5895 
PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T22:00:00.000Z
CVE-2006-5896 
REMLAB Web Mech Designer 2.0.5 allows remote attackers to obtain the full path of the script via an incorrect Tonnage parameter to calculate.php that triggers a divide-by-zero error, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-27T21:00:00.000Z
CVE-2006-5897 
Multiple directory traversal vulnerabilities in PhpMyChat Plus 1.9 and earlier allow remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter to (1) avatar.php, (2) colorhelp_popup.php, (3) color_popup.php, (4) index.php, (5) index1.php, (6) lib/connected_users.lib.php, (7) lib/index.lib.php, and (8) phpMyChat.php3; and the (9) L parameter to logs.php.  NOTE: CVE analysis suggests that vector 1 might be incorrect.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5898 
Directory traversal vulnerability in localization/languages.lib.php3 in PhpMyChat 0.14.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ChatPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5899 
PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter.  NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and, if not deleted, intentionally allows setting repertoire without an inclusion attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5900 
Cross-site scripting (XSS) vulnerability in the incubator/tests/Zend/Http/_files/testRedirections.php sample code in Zend Framework Preview 0.2.0 allows remote attackers to inject arbitrary web script or HTML via arbitrary parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5901 
Hawking Technology wireless router WR254-CA uses a hardcoded IP address among the set of DNS server IP addresses, which could allow remote attackers to cause a denial of service or hijack the router by attacking or spoofing the server at the hardcoded address.  NOTE: it could be argued that this issue reflects an inherent limitation of DNS itself, so perhaps it should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5902 
viksoe GMail Drive shell extension allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by (1) a GMAILFS: [13;a;1] message with a new filename and a file attachment, which injects a new file into the filesystem; (2) a GMAILFS: [13;a;1] message with an existing filename and a file attachment, which overwrites existing file content; and (3) a GMAILFS: [14;a;1] message, which creates a folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5903 
Rahul Jonna Gmail File Space (GSpace) allows remote attackers to perform virtual filesystem actions via e-mail messages with certain subject lines, as demonstrated by (1) a GSPACE "2174|1|1|1|gs:/ d$" message, which injects a new file into the filesystem; and (2) a GSPACE "|-135|1|1|0|gs:/ d$" message, which creates a folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5904 
Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[MWCHAT_Libs] parameter to (1) about.php, (2) buddy.php, (3) chat.php, (4) dialog.php, (5) head.php, (6) help.php, (7) index.php, and (8) license.php, different vectors than CVE-2005-1869.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5905 
Web Directory Pro allows remote attackers to (1) backup the database and obtain the backup via a direct request to admin/backup_db.php or (2) modify configuration via a direct request to admin/options.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5906 
PHP remote file inclusion vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary PHP code via a URL in the chemin parameter.  NOTE: the issue is disputed by other researchers, who observe that $chemin is defined before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5907 
SQL injection vulnerability in modules/bannieres/bannieres.php in Jean-Christophe Ramos SCRIPT BANNIERES (aka ban 0.1 and PLS-Bannieres 1.21) allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5908 
Multiple SQL injection vulnerabilities in the login_user function in yans.func.php in Lucas Rodriguez San Pedro Yet Another News System (YANS) 0.2b allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5909 
generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5910 
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5911 
Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 2.6.2 allow remote attackers to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) Alias.php, (2) Article.php, (3) ArticleAttachment.php, (4) ArticleComment.php, (5) ArticleData.php, (6) ArticleImage.php, (7) ArticleIndex.php, (8) ArticlePublish.php, (9) ArticleTopic.php, (10) ArticleType.php, (11) ArticleTypeField.php, (12) Attachment.php, (13) Country.php, (14) DatabaseObject.php, (15) Event.php, (16) IPAccess.php, (17) Image.php, (18) Issue.php, (19) IssuePublish.php, (20) Language.php, (21) Log.php, (22) LoginAttempts.php, (23) Publication.php, (24) Section.php, (25) ShortURL.php, (26) Subscription.php, (27) SubscriptionDefaultTime.php, (28) SubscriptionSection.php, (29) SystemPref.php, (30) Template.php, (31) TimeUnit.php, (32) Topic.php, (33) UrlType.php, (34) User.php, and (35) UserType.php in implementation/management/classes/; (36) configuration.php and (37) db_connect.php in implementation/management/; and (38) LocalizerConfig.php and (39) LocalizerLanguage.php in implementation/management/priv/localizer/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5912 
Unspecified vulnerability in Campware Campsite before 2.6.2 has unknown impact and attack vectors, related to a "Security fix for you-know-what," possibly related to encrypted passwords.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5913 
Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5914 
SQL injection vulnerability in ls.php in SAMEDIA LandShop allows remote attackers to execute arbitrary SQL commands via the infield parameter.  NOTE: the start, search_order, search_type, and search_area parameters are already covered by CVE-2005-4018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5915 
Multiple cross-site scripting (XSS) vulnerabilities in ls.php in SAMEDIA LandShop allow remote attackers to inject arbitrary web script or HTML via the (1) start, (2) CAT_ID, (3) keyword, (4) search_area, (5) search_type, (6) infield, or (7) search_order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5916 
Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5917 
Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the (1) article_id parameter in (a) articles/comments.php and (b) articles/article.php, and the (2) page_id parameter in (c) articles/pages.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5918 
Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upload and execute arbitrary PHP scripts via the "Link to Download" field.  NOTE: it is possible that the field value is restricted to files on specific public web sites.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5919 
PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in ActiveCampaign KnowledgeBuilder 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the visEdit_root parameter, a different vector than CVE-2003-1131.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5920 
PHP remote file inclusion vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to execute arbitrary PHP code via a URL in the lan parameter.  NOTE: SecurityFocus disputes this issue, saying "further analysis reveals that the application is not vulnerable." NOTE: this issue may overlap CVE-2006-5113
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5921 
Multiple cross-site scripting (XSS) vulnerabilities in add_comment.php in Wheatblog (wB) allow remote attackers to inject arbitrary web script or HTML via the (1) Name, (2) WWW, and (3) Comment fields. NOTE: this issue may overlap CVE-2006-5195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5922 
index.php in Wheatblog (wB) allows remote attackers to obtain sensitive information via certain values of the postPtr[] and next parameters, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5923 
PHP remote file inclusion vulnerability in index.php in Chris Mac gtcatalog (aka GimeScripts Shopping Catalog) 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the custom parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5924 
Cross-site scripting (XSS) vulnerability in index.php in Efficient IP iPmanager (IPm) 2.3 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter.  NOTE: the provenance of this information is unknown; details are obtained from third party sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T15:00:00.000Z
CVE-2006-5925 
Links web browser 1.00pre12 and Elinks 0.9.2 with smbclient installed allows remote attackers to execute arbitrary code via shell metacharacters in an smb:// URI, as demonstrated by using PUT and GET statements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-15T19:00:00.000Z