rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-5094 
PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780 or CVE-2006-4893.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T21:00:00.000Z
CVE-2006-5095 
PHP remote file inclusion vulnerability in index.php in MyPhotos 0.1.3b beta allows remote attackers to execute arbitrary PHP code via the includesdir parameter.  NOTE: this issue is disputed by CVE on 20060927, since the includesdir is defined before being used when the product is installed according to the provided instructions
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T21:00:00.000Z
CVE-2006-5096 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla! eCommerce Edition CMS 1.0.11, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the Itemid parameter in a (1) com_contact or (2) subscribe action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T21:00:00.000Z
CVE-2006-5097 
PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the application_rootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor.  The vendor says "the variable is set in settings.inc.php, so this is not a vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T21:00:00.000Z
CVE-2006-5098 
lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service (CPU consumption) via large w and h parameters, when resizing an image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T23:00:00.000Z
CVE-2006-5099 
lib/exec/fetch.php in DokuWiki before 2006-03-09e, when conf[imconvert] is configured to use ImageMagick, allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) w and (2) h parameters, which are not filtered when invoking convert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T23:00:00.000Z
CVE-2006-5100 
PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the WN_BASEDIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5101 
PHP remote file inclusion vulnerability in include.php in Comdev CSV Importer 3.1 and possibly 4.1, as used in (1) Comdev Contact Form 3.1, (2) Comdev Customer Helpdesk 3.1, (3) Comdev Events Calendar 3.1, (4) Comdev FAQ Support 3.1, (5) Comdev Guestbook 3.1, (6) Comdev Links Directory 3.1, (7) Comdev News Publisher 3.1, (8) Comdev Newsletter 3.1, (9) Comdev Photo Gallery 3.1, (10) Comdev Vote Caster 3.1, (11) Comdev Web Blogger 3.1, and (12) Comdev eCommerce 3.1, allows remote attackers to execute arbitrary PHP code via a URL in the path[docroot] parameter.  NOTE: it has been reported that 4.1 versions might also be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5102 
PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5103 
PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the "right" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5104 
SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL commands via the templatesused parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5105 
Multiple PHP remote file inclusion vulnerabilities in SyntaxCMS 1.1.1 through 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (1) the init_path parameter to admin/testing/tests/0030_init_syntax.php, or (2) an unspecified parameter to admin/testing/index.php.  NOTE: the 0004_init_urls.php vector is already covered by CVE-2006-5055.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5106 
Cross-site scripting (XSS) vulnerability in FacileForms before 1.4.7 for Mambo and Joomla!, when either register_globals or RG_EMULATION is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5107 
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL commands via (1) the user_name parameter in admin/forgot_pass.php, (2) the order_id parameter in view_order.php, (3) the view_doc parameter in view_doc.php, and (4) the order_id parameter in admin/print_order.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5108 
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitrary web script or HTML via the order_id parameter in (1) admin/print_order.php and (2) view_order.php; the (3) site_url and (4) la_search_home parameters and (5) certain language parameters in admin/nav.php; the (6) image parameter in admin/image.php; the (7) site_name, (8) la_adm_header, (9) charset, and (10) certain other parameters in admin/header.inc.php; the (12) la_pow_by parameter in footer.inc.php; and the (13) site_name parameter and (14) certain other parameters in header.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5109 
Devellion CubeCart 2.0.x allows remote attackers to obtain sensitive information via a direct request for (1) link_navi.php or (2) spotlight.php, which reveals the path in various error messages.  NOTE: the information.php, language.php, list_docs.php, popular_prod.php, sale.php, check_sum.php, and cat_navi.php vectors are already covered by CVE-2005-0607.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5110 
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, a different vector than CVE-2006-5074.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5111 
The libksba library 0.9.12 and possibly other versions, as used by gpgsm in the newpg package on SUSE LINUX, allows attackers to cause a denial of service (application crash) via a malformed X.509 certificate in a signature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5112 
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long HTTP GET request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5113 
Directory traversal vulnerability in common.php in Yuuki Yoshizawa Exporia 0.3.0 allows remote attackers to include and execute local files via a .. (dot dot) in the lan parameter to includes.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5114 
Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow remote attackers to inject arbitrary web script or HTML via the (1) ~urlmime or (2) ~command parameter, different vectors than CVE-2003-0749.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5115 
Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the engine parameter, as demonstrated by uploading a file containing PHP code with an image/jpeg content type, and then referencing this file through the engine parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5116 
Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyAdmin before 2.9.1-rc1 allow remote attackers to perform unauthorized actions as another user by (1) directly setting a token in the URL though dynamic variable evaluation and (2) unsetting arbitrary variables via the _REQUEST array, related to (a) libraries/common.lib.php, (b) session.inc.php, and (c) url_generating.lib.php.  NOTE: the PHP unset function vector is covered by CVE-2006-3017.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5117 
phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5118 
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the Application_Root parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5119 
Multiple cross-site scripting (XSS) vulnerabilities in Zen Cart 1.3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_name or (2) admin_pass parameter in (a) admin/login.php, or the (3) admin_email parameter in (b) admin/password_forgotten.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5120 
Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) index.php and (2) process_login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5121 
SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5122 
Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5123 
Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib_path or (2) lang_path parameter in unspecified files, related to code changes intended to fix inclusion, a different vulnerability than CVE-2002-0451, CVE-2006-4204, and CVE-2006-4609.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5124 
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) target and (2) action parameters in window.php, and possibly the (3) target parameter in home.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5125 
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows remote attackers to obtain sensitive information via a directory name in the target parameter, which triggers a directory listing through the opendir function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5126 
PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote attackers to execute arbitrary PHP code via a URL in the file_name[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5127 
Multiple cross-site scripting (XSS) vulnerabilities in Bartels Schoene ConPresso before 4.0.5a allow remote attackers to inject arbitrary web script or HTML via (1) the nr parameter in detail.php, (2) the msg parameter in db_mysql.inc.php, and (3) the pos parameter in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5128 
SQL injection vulnerability in index.php in Bartels Schoene ConPresso before 4.0.5a allows remote attackers to execute arbitrary SQL commands via the nr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5129 
Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via (1) the message parameter, and possibly other parameters, in module/shout/jafshout.php (aka the shoutbox); and (2) the message body in a forum post in module/forum/topicwin.php, related to the name, email, title, date, ldate, and lname variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5130 
Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) url, (3) title, and (4) about parameters in a forum post.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5131 
module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by "<?php" and "?>", possibly due to a static code injection vulnerability involving admin/data_inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5132 
Multiple PHP remote file inclusion vulnerabilities in phpMyAgenda 3.0 Final and earlier allow remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter to (1) agendaplace.php3, (2) agendaplace2.php3, (3) infoevent.php3, and (4) agenda2.php3, different vectors than CVE-2006-2009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5133 
Buffer overflow in GuildFTPd 0.999.13 allows remote attackers to have an unknown impact, possibly code execution related to input containing "globbing chars."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5134 
Mercury SiteScope 8.2 (8.1.2.0) allows remote authenticated users to cause a denial of service (loss of connectivity to the classic interface) via attempted HTML injection into the "new monitor description" field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5135 
Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) open_box, (2) middle_box, and (3) close_box parameters in (a) sources/myaccount.php; the (4) navigation_end parameter in (b) navigation/search.php and (c) navigation/donation.php; and the (6) navigation_start and (7) navigation_middle parameters in navigation/donation.php, (d) navigation/latestnews.php, and (e) navigation/links.php; different vectors than CVE-2006-5092.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5136 
Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5137 
Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inject PHP code via a theme[] array parameter to admin/doedittheme.php, which is injected into includes/theme.inc.php; (2) inject PHP code via a config[] array parameter to admin/doeditconfig.php, and then execute the code via includes/config.inc.php; and inject a reference to PHP code via a URL in the config[path] parameter, and then execute the code via (3) dorateuser.php, (4) calendar.php, and unspecified other scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5138 
Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information via a direct request for cron/php/subscriptions.php, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5139 
Unspecified vulnerability in MkPortal allows remote attackers to corrupt web site content, and possibly have other impact, via a certain long Message that affects "Tables," related to the Urlobox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5140 
SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5141 
PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remote attackers to execute arbitrary PHP code via a URL in the anp_path parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T20:00:00.000Z
CVE-2006-5142 
Stack-based buffer overflow in CA BrightStor ARCserve Backup R11.5 client and server allows remote attackers to execute arbitrary code via long messages to the CheyenneDS Mailslot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T20:00:00.000Z
CVE-2006-5143 
Multiple buffer overflows in CA BrightStor ARCserve Backup r11.5 SP1 and earlier, r11.1, and 9.01; BrightStor ARCserve Backup for Windows r11; BrightStor Enterprise Backup 10.5; Server Protection Suite r2; and Business Protection Suite r2 allow remote attackers to execute arbitrary code via crafted data on TCP port 6071 to the Backup Agent RPC Server (DBASVR.exe) using the RPC routines with opcode (1) 0x01, (2) 0x02, or (3) 0x18; invalid stub data on TCP port 6503 to the RPC routines with opcode (4) 0x2b or (5) 0x2d in ASCORE.dll in the Message Engine RPC Server (msgeng.exe); (6) a long hostname on TCP port 41523 to ASBRDCST.DLL in the Discovery Service (casdscsvc.exe); or unspecified vectors related to the (7) Job Engine Service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-06T20:00:00.000Z
CVE-2006-5144 
Cross-site scripting (XSS) vulnerability in userupload.php in OlateDownload 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the description_small parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5145 
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands via the (1) page parameter in details.php or the (2) query parameter in search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5146 
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter in (a) funk.php, or the (2) action parameter in (b) tem.php and (c) uss.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5147 
PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the no_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5148 
Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the repertorylevel parameter including scripts in /forum/ including (1) search.php, (2) message.php, (3) member.php, (4) mail.php, (5) lostpassword.php, (6) gesfil.php, (7) forum82lib.php3, and other unspecified scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5149 
Multiple directory traversal vulnerabilities in OpenBiblio before 0.5.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the page parameter to shared/help.php or (2) the tab parameter to shared/header.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5150 
SQL injection vulnerability in the reports system in OpenBiblio before 0.5.2 allows remote attackers with report privileges to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-02T23:00:00.000Z
CVE-2006-5151 
Unspecified vulnerability in HP Ignite-UX server before C.6.9.150 for HP-UX B.11.00, B.11.11, and B.11.23 allows remote attackers to "gain root access" via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z
CVE-2006-5152 
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL that is returned in a large HTTP 404 error message without an explicit charset, a related issue to CVE-2006-0032.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-03T23:00:00.000Z