rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4847 
Multiple buffer overflows in Ipswitch WS_FTP Server 5.05 before Hotfix 1 allow remote authenticated users to execute arbitrary code via long (1) XCRC, (2) XSHA1, or (3) XMD5 commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4848 
Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the REP_CLASS parameter to (1) index.php, (2) arbo.php, (3) framepoint.php, (4) genpage.php, (5) lienvalider.php, (6) appreciation.php, (7) partenariat.php, (8) rechercher.php, (9) projet.php, (10) propoexample.php, (11) refererpoint.php, or (12) top50.php.  NOTE: this issue has been disputed by a third party researcher, stating that REP_CLASS is initialized in an included file before being used
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4849 
PHP remote file inclusion vulnerability in header.php in MobilePublisherPHP 1.5 RC2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4850 
PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4851 
PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4852 
SQL injection vulnerability in browse.asp in QuadComm Q-Shop 3.5 allows remote attackers to execute arbitrary SQL commands via the OrderBy parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4853 
SQL injection vulnerability in kategorix.asp in Haberx 1.02 through 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in kategorihaberx.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T01:00:00.000Z
CVE-2006-4855 
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4856 
Multiple cross-site scripting (XSS) vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, or (3) url parameters; (4) certain content parameters in the preview method; or (5) the q parameter in (a) sitesearch.do.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4857 
SQL injection vulnerability in default.asp (aka the login page) in ClickTech ClickBlog 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) form_codeword (aka the Password field) parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4858 
PHP remote file inclusion vulnerability in install.serverstat.php in the Serverstat (com_serverstat) 0.4.4 and earlier component for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4859 
Unrestricted file upload vulnerability in contact.html.php in the Contact (com_contact) component in Limbo (aka Lite Mambo) CMS 1.0.4.2L and earlier allows remote attackers to upload PHP code to the images/contact folder via a filename with a double extension in the contact_attach parameter in a contact option in index.php, which bypasses an insufficiently restrictive regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4860 
Multiple unspecified vulnerabilities in (1) index.php, (2) minixml.inc.php, (3) doc.inc.php, (4) element.inc.php, (5) node.inc.php, (6) treecomp.inc.php, (7) forum.html.php, (8) forum.php, (9) antihack.php, (10) content.php, (11) initglobals.php, and (12) imanager.php in Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311 have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4861 
SQL injection vulnerability in loginprocess.asp in Mohammed Mehdi Panjwani Complain Center 1 allows remote attackers to execute arbitrary SQL commands via the (1) TxtUser (aka Username) and (2) TxtPass (aka Password) parameters in login.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4862 
SQL injection vulnerability in default.aspx in easypage allows remote attackers to execute arbitrary SQL commands via the srch parameter in the Search page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4863 
Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in (1) login.php, (2) stats.php, (3) detail.php, or (4) erase.php.  NOTE: CVE and a third party dispute this vulnerability, because the langfile parameter is set to english.php in each file.  NOTE: CVE also disputes a later report of this vulnerability in 1.2, because the langfile parameter is set to french.php in 1.2
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4864 
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4865 
Walter Beschmout PhpQuiz allows remote attackers to obtain sensitive information via a direct request to cfgphpquiz/install.php and other unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4866 
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, allows local users to execute arbitrary code via a long extension argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4867 
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL commands via the t_id parameter when the go parameter is "Forum."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4868 
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Internet Explorer 6.0 on Windows XP SP2, and possibly other versions, allows remote attackers to execute arbitrary code via a Vector Markup Language (VML) file with a long fill parameter within a rect tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4869 
PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execute arbitrary PHP code via a URL in the gallery_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4870 
Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T19:00:00.000Z
CVE-2006-4871 
SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4872 
SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4873 
Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php, (2) modules/register.php, (3) modules/poll.php, (4) modules/panel.php, (5) modules/pm.php, (6) modules/news.php, (7) modules/templates_change.php, (8) modules/users.php, (9) modules/misc.php, (10) modules/masspm.php, (11) modules/mass-email.php, (12) modules/main-nav.php, (13) modules/login.php, (14) modules/layout.php, (15) modules/hq.php, (16) modules/forum.php, (17) modules/forum-admin.php, (18) modules/events.php, (19) modules/emoticons.php, (20) modules/download.php, (21) modules/blocks.php, (22) modules/ban.php, (23) modules/badwords.php, (24) modules/ads.php, or (25) modules/admin.php, which reveals the installation path in various error messages.  NOTE: The modules/online.php vector is already covered by CVE-2006-1679.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4874 
Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1) language[Admin name] and (2) language[Admin back] parameters in (a) modules/blocks.php; the (3) language[Register title] and (4) language[Register title2] parameters in (b) modules/register.php; the (5) language[Mass-Email form title], (6) language[Mass-Email form desc], (7) language[Mass-Email form desc2] (8) language[Mass-Email form desc3], and (9) language[Mass-Email form desc4] parameters in (c) modules/mass-email.php; the (10) language[Forgotten title], (11) language[Forgotten desc], (12) language[Forgotten desc2], (13) language[Forgotten desc3], (14) language[Forgotten desc4], and (15) language[Forgotten desc5] parameters in (d) modules/register.php; and the (16) language[Search view desc], (17) language[Search view desc2], (18) language[Search view desc3], (19) language[Search view desc4], (20) language[Search view desc5], (21) language[Search view desc6], (22) language[Search view desc7], and (23) language[Search view desc8] parameters in (e) modules/search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4875 
Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files, and possibly files with arbitrary extensions, to gallery/albums/public.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4876 
Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4877 
Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php, and (3) header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4878 
Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter.  NOTE: this was later reported to affect 1.0.1, and demonstrated for code execution by uploading and accessing an avatar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4879 
SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4880 
David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4881 
Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error and (4) txt_templatenotexist parameters in (c) template.php; the (5) split parameter in certain files, as demonstrated by (d) editprofile.php, (e) search.php, (f) index.php, and (g) pm.php; and the (6) txt_login parameter in (h) loginline.php; and allow remote authenticated users to inject arbitrary web script or HTML via the (7) txt_logout parameter in (i) loginline.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4882 
SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4883 
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4884 
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title parameter in index.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4885 
PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party information. The bottom.php parameter is already covered by CVE-2006-4826.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4886 
The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button, possibly due to an interface-related race condition.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4887 
Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation.  NOTE: it could be argued that the issue is not in Remote Desktop itself, but in applications that are installed while using it.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4888 
Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4889 
Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3) includes/functions.admin.php, (4) includes/admin.inc.php, (5) help.php, (6) smile.php, (7) entry.php; (8) adminhelp0.php, (9) adminhelp1.php, (10) adminhelp2.php, and (11) adminhelp3.php in (a) help/en and (b) help/de directories; and the (12) preview.php, (13) log.php, (14) index.php, (15) config.php, and (16) admin.php in the (c) admin directory, a different set of vectors than CVE-2006-4788.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T21:00:00.000Z
CVE-2006-4890 
Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2) fckeditor/editor/dialog/fck_link.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4891 
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4892 
SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4893 
PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4894 
Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4895 
IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4897 
CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4898 
PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconf[rootpath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T22:00:00.000Z
CVE-2006-4899 
The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when running on Windows, allows remote attackers to obtain the web server path via a "'" (single quote) in the PIProfile function, which leaks the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-22T22:00:00.000Z
CVE-2006-4900 
Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, allows remote authenticated users to read and delete arbitrary files via ".." sequences in the eSCCAdHocHtmlFile parameter to eSMPAuditServlet, which is not properly handled by the getadhochtml function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-22T22:00:00.000Z
CVE-2006-4901 
Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows remote attackers to spoof alerts and conduct replay attacks by invoking eTSAPISend.exe with the desired arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-22T22:00:00.000Z
CVE-2006-4902 
The NetBackup bpcd daemon (bpcd.exe) in Symantec Veritas NetBackup 5.0 before 5.0_MP7, 5.1 before 5.1_MP6, and 6.0 before 6.0_MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-14T20:00:00.000Z
CVE-2006-4904 
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4905 
PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4906 
SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the new_calendarid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4907 
OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z