rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4192 
Multiple buffer overflows in MODPlug Tracker (OpenMPT) 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via (1) long strings in ITP files used by the CSoundFile::ReadITProject function in soundlib/Load_it.cpp and (2) crafted modules used by the CSoundFile::ReadSample function in soundlib/Sndfile.cpp, as demonstrated by crafted AMF files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-4193 
Microsoft Internet Explorer 6.0 SP1 and possibly other versions allows remote attackers to cause a denial of service and possibly execute arbitrary code by instantiating COM objects as ActiveX controls, including (1) imskdic.dll (Microsoft IME), (2) chtskdic.dll (Microsoft IME), and (3) msoe.dll (Outlook), which leads to memory corruption. NOTE: it is not certain whether the issue is in Internet Explorer or the individual DLL files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-4194 
Unspecified vulnerability in Cisco PIX 500 Series Security Appliances allows remote attackers to send arbitrary UDP packets to intranet devices via unspecified vectors involving Session Initiation Protocol (SIP) fixup commands, a different issue than CVE-2006-4032.  NOTE: the vendor, after working with the researcher, has been unable to reproduce the issue
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T01:00:00.000Z
CVE-2006-4195 
PHP remote file inclusion vulnerability in param.peoplebook.php in the Peoplebook Component for Mambo (com_peoplebook) 1.0 and earlier, and possibly 1.1.2, when register_globals and allow_url_fopen are enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4196 
PHP remote file inclusion vulnerability in index.php in WEBInsta CMS 0.3.1 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the templates_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4197 
Multiple buffer overflows in libmusicbrainz (aka mb_client or MusicBrainz Client Library) 2.1.2 and earlier, and SVN 8406 and earlier, allow remote attackers to cause a denial of service (crash) or execute arbitrary code via (1) a long Location header by the HTTP server, which triggers an overflow in the MBHttp::Download function in lib/http.cpp; and (2) a long URL in RDF data, as demonstrated by a URL in an rdf:resource field in an RDF XML document, which triggers overflows in many functions in lib/rdfparse.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4198 
PHP remote file inclusion vulnerability in includes/session.php in Wheatblog (wB) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the wb_class_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4199 
Cross-site scripting (XSS) vulnerability in Soft3304 04WebServer 1.83 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly sanitized before it is returned in an error page, a different vulnerability than CVE-2004-1512.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4200 
Unspecified vulnerability in 04WebServer 1.83 and earlier allows remote attackers to bypass user authentication via unspecified vectors related to request processing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4201 
Unspecified vulnerability in the backup agent and Cell Manager in HP OpenView Storage Data Protector 5.1 and 5.5 before 20060810 allows remote attackers to execute arbitrary code on an agent via unspecified vectors related to authentication and input validation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4202 
SQL injection vulnerability in proje_goster.php in Spidey Blog Script 1.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4203 
PHP remote file inclusion vulnerability in help.mmp.php in the MMP Component (com_mmp) 1.2 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4204 
Multiple PHP remote file inclusion vulnerabilities in PHProjekt 5.1 and possibly earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_pre parameter in lib/specialdays.php and the (2) lib_path parameter in lib/dbman_filter.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4205 
Multiple PHP remote file inclusion vulnerabilities in WebDynamite ProjectButler 0.8.4 allow remote attackers to execute arbitrary PHP code via a URL in the rootdir parameter to /classes/ scripts including (1) Cache.class.php, (2) Customer.class.php, (3) Performance.class.php, (4) Project.class.php, (5) Representative.class.php, (6) User.class.php, or (7) common.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4206 
Cross-site scripting (XSS) vulnerability in calendar.asp in ASPPlayground.NET Forum Advanced Edition 2.4.5 Unicode, and possibly other versions before October 15, 2006, allows remote attackers to inject arbitrary web script or HTML via the calendarID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4207 
Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4208 
Directory traversal vulnerability in wp-db-backup.php in Skippy WP-DB-Backup plugin for WordPress 1.7 and earlier allows remote authenticated users with administrative privileges to read arbitrary files via a .. (dot dot) in the backup parameter to edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4209 
PHP remote file inclusion vulnerability in install3.php in WEBInsta Mailing List Manager 1.3e allows remote attackers to execute arbitrary PHP code via a URL in the cabsolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4210 
nu_mail.inc.php in Andreas Kansok phPay 2.02 and 2.02.1, when register_globals is enabled, allows remote attackers to use the server as an open mail relay via modified mail_text2, user_row[5], nu_mail_1, and shop_mail parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4211 
Cross-site scripting (XSS) vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4212 
SQL injection vulnerability in b0zz and Chris Vincent Owl Intranet Engine 0.90 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4213 
PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4214 
Multiple SQL injection vulnerabilities in Zen Cart 1.3.0.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) GPC data to the ipn_get_stored_session function in ipn_main_handler.php, which can be leveraged to modify elements of $_SESSION; and allow remote authenticated users to execute arbitrary SQL commands via (2) a session id within a cookie to whos_online_session_recreate, (3) the quantity field to the add_cart function, (4) an id[] parameter when adding an item to a shopping cart, or (5) a redemption code when checking out (dc_redeem_code parameter to includes/modules/order_total/ot_coupon.php).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4215 
PHP remote file inclusion vulnerability in index.php in Zen Cart 1.3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the autoLoadConfig[999][0][loadFile] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4217 
PHP remote file inclusion vulnerability in modules/usersonline/users.php in WEBInsta CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the module_dir parameter, a different vulnerability than CVE-2006-4196.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T23:00:00.000Z
CVE-2006-4218 
Directory traversal vulnerability in Zen Cart 1.3.0.2 and earlier allows remote attackers to include and possibly execute arbitrary local files via directory traversal sequences in the typefilter parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T23:00:00.000Z
CVE-2006-4219 
The Terminal Services COM object (tsuserex.dll) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by instantiating it as an ActiveX object in Internet Explorer 6.0 SP1 on Microsoft Windows 2003 EE SP1 CN.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:00:00.000Z
CVE-2006-4220 
Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote attackers to inject arbitrary web script or HTML via the (1) User.html, (2) Error, (3) User.Theme.index, and (4) and User.lang parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-05T11:00:00.000Z
CVE-2006-4221 
Stack-based buffer overflow in the IBM Access Support eGatherer ActiveX control before 3.20.0284.0 allows remote attackers to execute arbitrary code via a long filename parameter to the RunEgatherer method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4222 
Multiple unspecified vulnerabilities in IBM WebSphere Application Server before 6.0.2.13 have unspecified vectors and impact, including (1) an "authority problem" in ThreadIdentitySupport as identified by PK25199, and "Potential security exposure" issues as identified by (2) PK22747, (3) PK24334, (4) PK25740, and (5) PK26123.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4223 
IBM WebSphere Application Server (WAS) before 6.0.2.13 allows context-dependent attackers to obtain sensitive information via unspecified vectors related to "JSP source code exposure" (PK23475), which occurs when ibm-web-ext.xmi sets fileServingEnabled to true or ExtendedDocumentRoot is used to place a JSP outside a WAR.file; (3) the First Failure Data Capture (ffdc) log file (PK24834); and (4) traces (PK25568), a different issue than CVE-2006-4137.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4224 
Cross-site scripting (XSS) vulnerability in calendar.php in Virtual War (VWar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the year parameter.  NOTE: The page parameter vector is covered by CVE-2006-4009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4226 
MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4227 
MySQL before 5.0.25 and 5.1 before 5.1.12 evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote authenticated users to gain privileges through a routine that has been made available using GRANT EXECUTE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4228 
Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4229 
PHP remote file inclusion vulnerability in archive.php in the mosListMessenger Component (com_lm) before 20060719 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4230 
Multiple PHP remote file inclusion vulnerabilities in index.php in Lizge V.20 Web Portal allow remote attackers to execute arbitrary PHP code via a URL in the (1) lizge or (2) bade parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4231 
IrfanView 3.98 (with plugins) allows remote attackers to cause a denial of service (application crash) via a crafted CUR image file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4232 
Race condition in the grid-proxy-init tool in Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allows local users to steal credential data by replacing the proxy credentials file in between file creation and the check for exclusive file access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4233 
Globus Toolkit 3.2.x, 4.0.x, and 4.1.0 before 20060815 allow local users to obtain sensitive information (proxy certificates) and overwrite arbitrary files via a symlink attack on temporary files in the /tmp directory, as demonstrated by files created by (1) myproxy-admin-adduser, (2) grid-ca-sign, and (3) grid-security-config.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4234 
PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-18T19:55:00.000Z
CVE-2006-4235 
Buffer overflow in the import project functionality in Sony SonicStage Mastering Studio 1.1.00 through 2.2.01 allows remote attackers to execute arbitrary code via a crafted SMP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4236 
Multiple PHP remote file inclusion vulnerabilities in POWERGAP allow remote attackers to execute arbitrary PHP code via a URL in the (1) shopid parameter to (a) s01.php, (b) s02.php, (c) s03.php, and (d) s04.php; and possibly a URL located after "shopid=" or "sid=" in the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4237 
PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote (IRSR) 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _sysSessionPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4238 
SQL injection vulnerability in torrents.php in WebTorrent (WTcom) 0.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter in category mode.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4239 
PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool (OPT) Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRM_inc parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4240 
PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4241 
PHP remote file inclusion vulnerability in processor/reporter.sql.php in the Reporter Mambo component (com_reporter) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4242 
PHP remote file inclusion vulnerability in install.jim.php in the JIM 1.0.1 component for Joomla or Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T18:00:00.000Z
CVE-2006-4243 
linux vserver 2.6 before 2.6.17 suffers from privilege escalation in remount code.
Problem types: description: Other
Affected products: vendor: linux-2.6
product: linux-2.6
Published: 2019-11-06T02:43:37.000Z
CVE-2006-4244 
SQL-Ledger 2.4.4 through 2.6.17 authenticates users by verifying that the value of the sql-ledger-[username] cookie matches the value of the sessionid parameter, which allows remote attackers to gain access as any logged-in user by setting the cookie and the parameter to the same value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-31T01:00:00.000Z
CVE-2006-4245 
archivemail 0.6.2 uses temporary files insecurely leading to a possible race condition.
Problem types: description: General Race Condition
Affected products: vendor: archivemail
product: archivemail
Published: 2019-11-06T02:54:19.000Z
CVE-2006-4246 
Usermin before 1.220 (20060629) allows remote attackers to read arbitrary files, possibly related to chfn/save.cgi not properly handling an empty shell parameter, which results in changing root's shell instead of the shell of a specified user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-19T18:00:00.000Z
CVE-2006-4247 
Unspecified vulnerability in the Password Reset Tool before 0.4.1 on Plone 2.5 and 2.5.1 Release Candidate allows attackers to reset the passwords of other users, related to "an erroneous security declaration."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T19:00:00.000Z
CVE-2006-4248 
thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-31T19:00:00.000Z
CVE-2006-4249 
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-07T23:00:00.000Z
CVE-2006-4250 
Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted arguments to the -H flag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T18:00:00.000Z
CVE-2006-4251 
Buffer overflow in PowerDNS Recursor 3.1.3 and earlier might allow remote attackers to execute arbitrary code via a malformed TCP DNS query that prevents Recursor from properly calculating the TCP DNS query length.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T19:00:00.000Z
CVE-2006-4252 
PowerDNS Recursor 3.1.3 and earlier allows remote attackers to cause a denial of service (resource exhaustion and application crash) via a CNAME record with a zero TTL, which triggers an infinite loop.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-11-14T20:00:00.000Z
CVE-2006-4253 
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply nested XML file, followed by redirecting the browser to another page, which leads to a concurrency failure that causes structures to be freed incorrectly, as demonstrated by (1) ffoxdie and (2) ffoxdie3.  NOTE: it has been reported that Netscape 8.1 and K-Meleon 1.0.1 are also affected by ffoxdie.  Mozilla confirmed to CVE that ffoxdie and ffoxdie3 trigger the same underlying vulnerability.  NOTE: it was later reported that Firefox 2.0 RC2 and 1.5.0.7 are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T20:00:00.000Z
CVE-2006-4254 
Unspecified vulnerability in setlocale in IBM AIX 5.1.0 through 5.3.0 allows local users to gain privileges via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T20:00:00.000Z
CVE-2006-4255 
Cross-site scripting (XSS) vulnerability in horde/imp/search.php in Horde IMP H3 before 4.1.3 allows remote attackers to include arbitrary web script or HTML via multiple unspecified vectors related to folder names, as injected into the vfolder_label form field in the IMP search screen.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T20:00:00.000Z
CVE-2006-4256 
index.php in Horde Application Framework before 3.1.2 allows remote attackers to include web pages from other sites, which could be useful for phishing attacks, via a URL in the url parameter, aka "cross-site referencing." NOTE: some sources have referred to this issue as XSS, but it is different than classic XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-21T20:00:00.000Z