rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3087 
Multiple cross-site scripting (XSS) vulnerabilities in EZGallery 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) pUserID, (2) aid, (3) aname, (4) uid, and (5) m parameter in (a) common/galleries.asp; (6) aid, (7) aname, (8) uid, (9) m, (10) gp, and (11) g parameter in (b) common/pupload.asp; and (12) msg, (13) fn and (14) gp parameter in (c) common/upload.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3088 
Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the make_id parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3089 
Multiple cross-site scripting (XSS) vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) prefixe_dossier parameter in (a) /inc/header.php; (2) msg parameter in (b) /remises/ajouter_remise.php, (c) /tva/ajouter_tva.php, (d) /stocks/ajouter.php, (e) /pays/ajouter_pays.php, (f) /produits/ajouter_cat.php, (g) /produits/ajouter_produit.php and (h) /produits/modifier_cat.php; (3) tire parameter in /remises/ajouter_remise.php; (4) quantite, (5) taux and (6) date parameter in /stocks/ajouter.php; and (7) pays and (8) prefixe parameter in /pays/ajouter_pays.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3090 
Multiple SQL injection vulnerabilities in PhpMyFactures 1.0, and possibly 1.2 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id_pays parameter in (a) /pays/modifier_pays.php; (2) id_produit, (3) quantite, (4) prix_ht, and (5) date parameter in (b) /stocks/ajouter.php; (6) id_cat parameter in (c) /produits/modifier_cat.php; (7) id_client parameter in (d) /clients/modifier_client.php; (8) id_remise parameter in (e) /remises/index.php; (9) id_taux parameter in (f) /tva/index.php; (10) ref_produit, and (11) id_stock parameter in (g) /stocks/index.php; (12) id_pays parameter in (h) /pays/index.php; and (13) id_cat parameter in (i) /produits/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3091 
PhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the installation path via a direct request to (1) /verif.php, (2) /inc/footer.php, and (3) /remises/ajouter_remise.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3092 
PhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data via direct requests with modified parameters to (1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3093 
Multiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown impact and unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3094 
Multiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) cal_event.php and (2) cal_popup.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3095 
Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the RETURNURL parameter in (1) userlogin.cfm and (2) account.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3096 
Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) forum parameter in messagepost.cfm and (2) topic parameter in topics.cfm.  NOTE: this item was created based on information in a blog entry that was apparently removed after CVE analysis.  As of 20060619, CVE is attempting to determine the cause of the removal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-19T21:00:00.000Z
CVE-2006-3097 
Unspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-20T17:00:00.000Z
CVE-2006-3100 
termpkg 3.3 suffers from buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2019-11-06T02:34:16.000Z
CVE-2006-3101 
Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3102 
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remote attackers to execute arbitrary PHP code by uploading arbitrary files with double extensions, which are stored for a small period of time under the webroot in the temp/articles directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3103 
Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error parameter in users/login.php and the (2) feedback parameter in articles/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3104 
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode parameter, which reveals the installation path and database information in the resultant error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3105 
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3106 
Cross-site scripting (XSS) vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbitrary web script or HTML via the subsite parameter in the subsite todo.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3107 
Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in (1) GLOBALS[where_framework] to (a) admin/modules/news/news_class.php and (b) admin/modules/content/content_class.php, and (2) GLOBALS[where_cms] to (c) admin/modules/block_media/util.media.php.  NOTE: this issue might be resultant from a global overwrite vulnerability.  This issue is similar to CVE-2006-2576, but the vectors are different.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3108 
Cross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote attackers to inject arbitrary Javascript via an HTML div tag with a carriage return between the onmouseover attribute and its value, which bypasses the mail filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3109 
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.2(3), and 4.3 before 4.3(1), allows remote attackers to inject arbitrary web script or HTML via the (1) pattern parameter in ccmadmin/phonelist.asp and (2) arbitrary parameters in ccmuser/logon.asp, aka bugid CSCsb68657.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3110 
Cross-site scripting (XSS) vulnerability in main.php in Chipmailer 1.09 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) betreff, (3) mail, and (4) text parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3111 
Multiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to execute arbitrary SQL commands via multiple parameters, as demonstrated by (1) anfang, (2) name, (3) mail, (4) anrede, (5) vorname, (6) nachname, (7) gebtag, (8) gebmonat, and (9) gebjahr.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3112 
Chipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to php.php, which displays the output of the phpinfo function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T01:00:00.000Z
CVE-2006-3113 
Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, which causes a timer object to be deleted in a way that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-27T20:00:00.000Z
CVE-2006-3114 
PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T22:00:00.000Z
CVE-2006-3115 
SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execute arbitrary SQL commands via the raid_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-29T21:00:00.000Z
CVE-2006-3116 
Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) configuration.php, (3) guilds.php, (4) index.php, (5) locations.php, (6) login.php, (7) lua_output.php, (8) permissions.php, (9) profile.php, (10) raids.php, (11) register.php, (12) roster.php, and (13) view.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-29T21:00:00.000Z
CVE-2006-3117 
Heap-based buffer overflow in OpenOffice.org (aka StarOffice) 1.1.x up to 1.1.5 and 2.0.x before 2.0.3 allows user-assisted attackers to execute arbitrary code via a crafted OpenOffice XML document that is not properly handled by (1) Calc, (2) Draw, (3) Impress, (4) Math, or (5) Writer, aka "File Format / Buffer Overflow Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-30T18:00:00.000Z
CVE-2006-3118 
spread uses a temporary file with a static filename based on the port number, which allows local users to cause a denial of service by creating the file during a race condition between unlink and bind function calls.  NOTE: spread deletes this temporary file before use, which could cause conflicts with other programs that use the same filename, but this is not a distinct issue.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-30T19:00:00.000Z
CVE-2006-3119 
The fbgs framebuffer Postscript/PDF viewer in fbi before 2.01 has a typo that prevents a filter from working correctly, which allows user-assisted attackers to bypass the filter and execute malicious Postscript commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-25T23:00:00.000Z
CVE-2006-3120 
Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack vectors related to the logging functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-31T21:00:00.000Z
CVE-2006-3121 
The peel_netstring function in cl_netstring.c in the heartbeat subsystem in High-Availability Linux before 1.2.5, and 2.0 before 2.0.7, allows remote attackers to cause a denial of service (crash) via the length parameter in a heartbeat message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-3122 
The supersede_lease function in memory.c in ISC DHCP (dhcpd) server 2.0pl5 allows remote attackers to cause a denial of service (application crash) via a DHCPDISCOVER packet with a 32 byte client-identifier, which causes the packet to be interpreted as a corrupt uid and causes the server to exit with "corrupt lease uid."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-3123 
Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-3124 
Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-26T10:00:00.000Z
CVE-2006-3125 
Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a packet specifying a negative number of players, which is used as an array index.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-31T21:00:00.000Z
CVE-2006-3126 
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-06T00:00:00.000Z
CVE-2006-3127 
Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to cause a denial of service (memory consumption) by performing a large number of RSA cryptographic operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T23:00:00.000Z
CVE-2006-3128 
choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploading a PHP file with a GIF file extension, then directly accessing that file in the Repositories directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-21T23:00:00.000Z
CVE-2006-3129 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) cat and (2) view parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T01:00:00.000Z
CVE-2006-3130 
SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T01:00:00.000Z
CVE-2006-3131 
Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script or HTML via the (1) news_archive, (2) language, and (3) intranetLogin parameters in (a) index.php; the (4) sites_id parameter in (b) sites.php; and the (5) news_id parameter in (c) news_more.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T01:00:00.000Z
CVE-2006-3132 
Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T01:00:00.000Z
CVE-2006-3134 
Buffer overflow in GraceNote CDDBControl ActiveX Control, as used by multiple products that use Gracenote CDDB, allows remote attackers to execute arbitrary code via a long option string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-27T17:00:00.000Z
CVE-2006-3135 
Multiple SQL injection vulnerabilities in CMS Mundo 1.0 build 008, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the (1) news_id parameter in the (a) news module, (2) searchstring parameter in (b) the search module, (3) id parameter in (c) the webshop module, (4) username parameter in (d) index.php, and (5) Name, (6) Address, (7) Zip, (8) City, (9) Country, and (10) Email fields during (e) a user profile update.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-07-13T21:00:00.000Z
CVE-2006-3136 
Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4) /xmlrpc/api_metaweblog.inc.php.  NOTE: this is a similar vulnerability to CVE-2006-2583.  NOTE: this issue has been disputed by third parties, who state that the DIR_LIBS parameter is defined in an include file before being used
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3137 
Cross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows remote attackers to inject arbitrary web script or HTML via the cart_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3138 
Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PIC parameter in offers-pix.php, (2) from parameter in cp/index.php, and (3) action parameter in cp/admin_index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3139 
Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and (4) sortby parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3140 
SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3141 
Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to inject arbitrary web script or HTML via the image parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3142 
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3143 
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the error_msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3144 
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier allows remote attackers to execute arbitrary PHP code via a URL in the microcms_path parameter.  NOTE: it was later reported that this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3145 
Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code when assembling the header, possibly related to an off-by-one error.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3146 
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack.  NOTE: this issue was originally reported for 4.00.23.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3147 
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to gain host admin privileges, list all resellers, or change resellers' passwords via unspecified vectors.  NOTE: due to the lack of precise details, it is not clear whether this is related to a previously disclosed issue such as CVE-2005-1788.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3148 
SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3149 
Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z
CVE-2006-3150 
SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-06-22T22:00:00.000Z