rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-0940 
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0941 
Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arbitrary web script or HTML via certain variables when posting new messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0942 
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulnerability than CVE-2005-1509.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0943 
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0944 
Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0945 
PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0946 
Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0947 
Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-01T02:00:00.000Z
CVE-2006-0948 
AOL 9.0 Security Edition revision 4184.2340, and probably other versions, uses insecure permissions (Everyone/Full Control) for the "America Online 9.0" directory, which allows local users to gain privileges by replacing critical files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-0949 
RaidenHTTPD 1.1.47 allows remote attackers to obtain source code of script files, including PHP, via crafted requests involving (1) "." (dot), (2) space, and (3) "/" (slash) characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-06T21:00:00.000Z
CVE-2006-0950 
unalz 0.53 allows user-assisted attackers to overwrite arbitrary files via an ALZ archive with ".." (dot dot) sequences in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-13T19:00:00.000Z
CVE-2006-0951 
The GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-08T01:00:00.000Z
CVE-2006-0956 
nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service (service hang) by flooding packets at the authentication server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0957 
Direct static code injection vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to execute arbitrary PHP code via the (1) X-Forwarded-For and (2) Client-Ip HTTP headers, which are stored in Data/flood.db.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0958 
Cross-site scripting (XSS) vulnerability in func.inc.php in ZoneO-Soft freeForum before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) subject parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0959 
SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote attackers to execute arbitrary SQL commands by setting the comma variable value via the comma parameter in a cookie.  NOTE: 1.04 has also been reported to be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0960 
uConfig agent in Compex NetPassage WPE54G router allows remote attackers to cause a denial of service (unresposiveness) via crafted datagrams to UDP port 7778.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0961 
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands via the haber_id parameter.  NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0962 
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass parameter in a cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0963 
Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via (1) long locale environment variables to a strcpy function call in c_locale_glibc2.c and (2) long arguments to unspecified functions in num_put_float.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0964 
Client Firewall in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass firewall program execution rules by replacing an allowed program with an arbitrary program.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0965 
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to bypass security protections and configure privileged options via a long argument to ncpmon.exe, which provides access to alternate privileged menus, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0966 
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (CPU consumption) via a large number of arguments to ncprwsnt.exe, possibly due to a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0967 
NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to cause a denial of service (memory usage and cpu utilization) via a flood of arbitrary UDP datagrams to ports 0 to 65000. NOTE: this issue was reported as a buffer overflow, but that term usually does not apply in flooding attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0968 
The ncprwsnt service in NCP Network Communication Secure Client 8.11 Build 146, and possibly other versions, allows local users to execute arbitrary code by modifying the connect.bat script, which is automatically executed by the service after a connection is established.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-02T23:00:00.000Z
CVE-2006-0969 
PHP remote file inclusion vulnerability in index.php in Top sites de PixelArtKingdom allows remote attackers to include and execute arbitrary files via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0970 
PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products, possibly SupportTrio, allows remote attackers to include and execute arbitrary files via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0971 
Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0972 
SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: the category vector is already covered by CVE-2005-3846.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0973 
SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote attackers to execute arbitrary SQL commands via the topic parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0974 
Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject arbitrary web script or HTML via the err_txt parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0976 
Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers to read arbitrary files via the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0977 
Craig Morrison Mail Transport System Professional (aka MTS Pro) acts as an open relay when configured to relay all mail through an external SMTP server, which allows remote attackers to relay mail by connecting to the MTS Pro server, then sending a MAIL FROM that specifies a domain that is local to the server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0978 
Multiple cross-site scripting (XSS) vulnerabilities in the View Headers (aka viewheaders) functionality in ArGoSoft Mail Server Pro 1.8.8.5 allow remote attackers to inject arbitrary web script or HTML via (1) the Subject header, (2) the From header, and (3) certain other unspecified headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0979 
Unspecified vulnerability in the local weblog publisher in Nidelven IT Issue Dealer before 0.9.96 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0980 
Multiple cross-site scripting (XSS) vulnerabilities in Jay Eckles CGI Calendar 2.7 allow remote attackers to inject arbitrary web script or HTML via the year parameter in (1) index.cgi and (2) viewday.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0981 
Directory traversal vulnerability in e-merge WinAce 2.6 and earlier allows remote attackers to create and overwrite arbitrary files via certain crafted pathnames in a (1) zip or (2) tar archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0982 
The on-access scanner for McAfee Virex 7.7 for Macintosh, in some circumstances, might not activate when malicious content is accessed from the web browser, and might not prevent the content from being saved, which allows remote attackers to bypass virus protection, as demonstrated using the EICAR test file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0983 
Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0984 
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitrary web script or HTML via the gTopNombre parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0985 
Multiple cross-site scripting (XSS) vulnerabilities in the "post comment" functionality of WordPress 2.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) website, and (3) comment parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0986 
WordPress 2.0.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) default-filters.php, (2) template-loader.php, (3) rss-functions.php, (4) locale.php, (5) wp-db.php, and (6) kses.php in the wp-includes/ directory; and (7) edit-form-advanced.php, (8) admin-functions.php, (9) edit-link-form.php, (10) edit-page-form.php, (11) admin-footer.php, and (12) menu.php in the wp-admin directory; and possibly (13) list directory contents of the wp-includes directory.  NOTE: the vars.php, edit-form.php, wp-settings.php, and edit-form-comment.php vectors are already covered by CVE-2005-4463.  The menu-header.php vector is already covered by CVE-2005-2110.  Other vectors might be covered by CVE-2005-1688.  NOTE: if the typical installation of WordPress does not list any site-specific files to wp-includes, then vector [13] is not an exposure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0987 
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0988 
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on Windows NT 4.0, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service (traffic amplification) via DNS queries with spoofed source IP addresses.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T11:00:00.000Z
CVE-2006-0989 
Stack-based buffer overflow in the volume manager daemon (vmd) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T00:00:00.000Z
CVE-2006-0990 
Stack-based buffer overflow in the NetBackup Catalog daemon (bpdbm) in Veritas NetBackup Enterprise Server 5.0 through 6.0 and DataCenter and BusinesServer 4.5FP and 4.5MP allows attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T00:00:00.000Z
CVE-2006-0991 
Buffer overflow in the NetBackup Sharepoint Services server daemon (bpspsserver) on NetBackup 6.0 for Windows allows remote attackers to execute arbitrary code via crafted "Request Service" packets to the vnetd service (TCP port 13724).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-28T00:00:00.000Z
CVE-2006-0992 
Stack-based buffer overflow in Novell GroupWise Messenger before 2.0 Public Beta 2 allows remote attackers to execute arbitrary code via a long Accept-Language value without a comma or semicolon.  NOTE: due to a typo, the original ZDI advisory accidentally referenced CVE-2006-0092.  This is the correct identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-14T10:00:00.000Z
CVE-2006-0993 
The web management interface in 3Com TippingPoint SMS Server before 2.2.1.4478 does not restrict access to certain directories, which might allow remote attackers to obtain potentially sensitive information such as configuration settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-10T01:00:00.000Z
CVE-2006-0994 
Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-05-10T10:00:00.000Z
CVE-2006-0995 
EMC Dantz Retrospect 7 backup client 7.0.107, and other versions before 7.0.109, and 6.5 before 6.5.138 allows remote attackers to cause a denial of service (client termination and loss of backup service) via a malformed packet to TCP port 497, which triggers an assert error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-03T21:00:00.000Z
CVE-2006-0996 
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject arbitrary web script or HTML via long array variables, including (1) a large number of dimensions or (2) long values, which prevents HTML tags from being removed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-04-10T18:00:00.000Z
CVE-2006-0997 
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) permits encryption with a NULL key, which results in cleartext communication that allows remote attackers to read an SSL protected session by sniffing network traffic.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-0998 
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) sometimes selects a weak cipher instead of an available stronger cipher, which makes it easier for remote attackers to sniff and decrypt an SSL protected session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-0999 
The SSL server implementation in NILE.NLM in Novell NetWare 6.5 and Novell Open Enterprise Server (OES) allows a client to force the server to use weak encryption by stating that a weak cipher is required for client compatibility, which might allow remote attackers to decrypt contents of an SSL protected session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-23T11:00:00.000Z
CVE-2006-10001 Subscribe to Comments Plugin subscribe-to-comments.php cross site scripting
A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 2.0.8 is able to address this issue. The identifier of the patch is 9683bdf462fcac2f32b33be98f0b96497fbd1bb6. It is recommended to upgrade the affected component. The identifier VDB-222321 was assigned to this vulnerability.
Problem types: cwe_id: CWE-79
description: CWE-79 Cross Site Scripting
Affected products: vendor: n/a
product: Subscribe to Comments Plugin
CVSS v3.1: version: 3.1
baseScore: 3.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
baseSeverity: LOW
Credits: lang: en
value: VulDB GitHub Commit Analyzer
Published: 2023-03-05T20:31:03.187Z
CVE-2006-10002 XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes
XML::Parser versions through 2.45 for Perl could overflow the pre-allocated buffer size cause a heap corruption (double free or corruption) and crashes.

A :utf8 PerlIO layer, parse_stream() in Expat.xs could overflow the XML input buffer because Perl's read() returns decoded characters while SvPV() gives back multi-byte UTF-8 bytes that can exceed the pre-allocated buffer size. This can cause heap corruption (double free or corruption) and crashes.
Problem types: cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
cwe_id: CWE-176
description: CWE-176 Improper Handling of Unicode Encoding
Affected products: vendor: TODDR
product: XML::Parser
default_status: unaffected
Published: 2026-03-19T11:03:46.888Z
CVE-2006-10003 XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack
XML::Parser versions through 2.47 for Perl has an off-by-one heap buffer overflow in st_serial_stack.

In the case (stackptr == stacksize - 1), the stack will NOT be expanded. Then the new value will be written at location (++stackptr), which equals stacksize and therefore falls just outside the allocated buffer.

The bug can be observed when parsing an XML file with very deep element nesting
Problem types: cwe_id: CWE-193
description: CWE-193 Off-by-one Error
cwe_id: CWE-122
description: CWE-122 Heap-based Buffer Overflow
Affected products: vendor: TODDR
product: XML::Parser
default_status: unaffected
Published: 2026-03-19T11:08:04.341Z
CVE-2006-1000 
Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) newsid parameter to newsdetailsview.asp and (2) password parameter to login.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-06T20:00:00.000Z
CVE-2006-1001 
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote attackers to execute arbitrary SQL commands via the fid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-06T20:00:00.000Z
CVE-2006-1002 
NETGEAR WGT624 Wireless DSL router has a default account of super_username "Gearguy" and super_passwd "Geardog", which allows remote attackers to modify the configuration.  NOTE: followup posts have suggested that this might not occur with all WGT624 routers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-06T20:00:00.000Z
CVE-2006-1003 
The backup configuration option in NETGEAR WGT624 Wireless Firewall Router stores sensitive information in cleartext, which allows remote attackers to obtain passwords and gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-03-06T20:00:00.000Z