rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-4908 
OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wildcard, which displays all matching file and directory information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4909 
Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the appliance sends a meta-refresh.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4910 
The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4911 
Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4912 
PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4913 
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated by injecting PHP code into a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4914 
Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the ze_langue_02 cookie, as demonstrated by using the choix_lng parameter to choix_langue.php to indirectly set the cookie, then accessing livre_dor.php to trigger the inclusion from inc/change_lang_ck.php, possibly related to livre_livre.php.  NOTE: the livre_livre.php relationship has been reported by some third party sources.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T00:00:00.000Z
CVE-2006-4915 
Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrary web script or HTML via the content parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4916 
SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQL commands via the uye_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4917 
Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web script or HTML via the pgname parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4918 
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1) env_dir parameter to (a) blank.php, (b) admin.php, or (c) builddb.php, and the (2) script_root parameter to blank.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4919 
Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4920 
Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4921 
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4922 
Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4923 
Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-21T01:00:00.000Z
CVE-2006-4924 
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service (CPU consumption) via an SSH packet that contains duplicate blocks, which is not properly handled by the CRC compensation attack detector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-27T01:00:00.000Z
CVE-2006-4925 
packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-29T00:00:00.000Z
CVE-2006-4926 
The NDIS-TDI Hooking Engine, as used in the (1) KLICK (KLICK.SYS) and (2) KLIN (KLIN.SYS) device drivers 2.0.0.281 for in Kaspersky Labs Anti-Virus 6.0.0.303 and other Anti-Virus and Internet Security products, allows local users to execute arbitrary code via crafted Irp structure with invalid addresses in the 0x80052110 IOCTL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-20T22:00:00.000Z
CVE-2006-4927 
The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-10-05T21:00:00.000Z
CVE-2006-4935 
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4936 
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4937 
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if debugging is disabled, which might allow remote authenticated users to obtain sensitive information by triggering the messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4938 
help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might allow remote authenticated users to obtain the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4939 
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debugging is disabled, which might allow attackers to obtain the pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4940 
login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addresses and Moodle account names) via a find action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4941 
Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbitrary web script or HTML via (1) the choose parameter in files/index.php and (2) the sub parameter in doc/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4942 
Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to write LaTeX or MimeTeX output files to the top level of the dataroot directory via (a) filter/algebra/pix.php or (b) filter/tex/pix.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4943 
course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbitrary local URIs, which allows remote attackers to obtain sensitive information via the jump parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4944 
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpdns_basedir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T00:00:00.000Z
CVE-2006-4945 
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the _PHPLIB[libdir] parameter to (1) rechnung.php or (2) prepend.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T01:00:00.000Z
CVE-2006-4946 
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0.99, and possibly 2.5 Beta and earlier, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T01:00:00.000Z
CVE-2006-4947 
Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T01:00:00.000Z
CVE-2006-4948 
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a long file name. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T01:00:00.000Z
CVE-2006-4949 
Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1 and the Drupal 4.7 Site Profile Directory (profile_pages.module) before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack of validation on output," possibly in the name and title parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T01:00:00.000Z
CVE-2006-4950 
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4951 
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail message with a JSP file attachment, which is stored under the web root with a predictable filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4952 
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrary users between different mail folders, specified by the folderid and tofolderid parameters, via the ID parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4953 
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary SQL commands via the (1) adr_sortkey and (2) adr_sortkey_desc parameters in the (a) addrlist servlet, and the (3) sortkey and (4) sortkey_desc parameters in the (b) maillist servlet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4954 
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote attackers to modify information of arbitrary users, as demonstrated by modifying (1) passwords and (2) permissions, (3) viewing profile settings, and (4) creating and (5) deleting users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4955 
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the (1) savefolder and (2) savefilename parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4956 
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4957 
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to execute arbitrary SQL commands via the email parameter to Admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4958 
Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4959 
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, and settings details, via unspecified vectors, possibly involving (1) taarchives.cgi, (2) ttaAuthentication.jsp, (3) ttalicense.cgi, (4) ttawlogin.cgi, (5) ttawebtop.cgi, (6) ttaabout.cgi, or (7) test-cgi.  NOTE: This information is based upon a vague initial disclosure.  Details will be updated as they become available.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4960 
Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the m parameter, which is reflected in an error message resulting from a failed SQL query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4961 
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4962 
Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence via the phpExt parameter, as demonstrated by executing PHP code in a log file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4963 
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbitrary local files via a .. (dot dot) sequence in the view parameter in the show_view action in the calendarmodule module, as demonstrated by executing PHP code through session files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4964 
Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbitrary web script or HTML via (1) vectors that bypass the XSS protection mechanisms of the pnVarCleanFromInput function, and (2) unspecified vectors related to the AntiCracker.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-23T10:00:00.000Z
CVE-2006-4965 
Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain.  NOTE: as of 20070912, this issue has been demonstrated by using instances of Components.interfaces.nsILocalFile and Components.interfaces.nsIProcess to execute arbitrary local files within Firefox and possibly Internet Explorer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T00:00:00.000Z
CVE-2006-4966 
PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[phpQRootDir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T00:00:00.000Z
CVE-2006-4967 
Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web script or HTML via (1) the CatId parameter in a product category action in index.php or (2) the SearchWd parameter in an index search action in index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4968 
PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4969 
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute arbitrary PHP code via a URL in the Inc_Dir parameter in (1) affiliates.php, (2) orders.php, (3) events.php, (4) index.php, (5) articles.php, (6) faqs.php, (7) guestbook.php, (8) catalog.php, (9) wholesale.php, (10) weblinks.php, (11) certificates.php, (12) sitesearch.php, (13) contact.php, (14) sitemap.php, (15) search.php, (16) registry.php, or (17) error.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4970 
PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to execute arbitrary PHP code via a URL in the Home_Path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4971 
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4972 
Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote attackers to inject arbitrary web script or HTML via the navbits[][name] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4973 
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4974 
Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z
CVE-2006-4975 
Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers to inject arbitrary web script or HTML via a URL at the online service.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-09-25T01:00:00.000Z