rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-3988 
PHP remote file inclusion vulnerability in index.php in Knusperleicht newsReporter 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the news_include_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3989 
PHP remote file inclusion vulnerability in index.php in Knusperleicht Shoutbox 4.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sb_include_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3990 
Multiple PHP remote file inclusion vulnerabilities in Paul M. Jones Savant2, possibly when used with the com_mtree component for Mambo and Joomla!, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter in (1) Savant2_Plugin_stylesheet.php, (2) Savant2_Compiler_basic.php, (3) Savant2_Error_pear.php, (4) Savant2_Error_stack.php, (5) Savant2_Filter_colorizeCode.php, (6) Savant2_Filter_trimwhitespace.php, (7) Savant2_Plugin_ahref.php, (8) Savant2_Plugin_ahrefcontact.php, (9) Savant2_Plugin_ahreflisting.php, (10) Savant2_Plugin_ahreflistingimage.php, (11) Savant2_Plugin_ahrefmap.php, (12) Savant2_Plugin_ahrefownerlisting.php, (13) Savant2_Plugin_ahrefprint.php, (14) Savant2_Plugin_ahrefrating.php, (15) Savant2_Plugin_ahrefrecommend.php, (16) Savant2_Plugin_ahrefreport.php, (17) Savant2_Plugin_ahrefreview.php, (18) Savant2_Plugin_ahrefvisit.php, (19) Savant2_Plugin_checkbox.php, (20) Savant2_Plugin_cycle.php, (21) Savant2_Plugin_dateformat.php, (22) Savant2_Plugin_editor.php, (23) Savant2_Plugin_form.php, (24) Savant2_Plugin_image.php, (25) Savant2_Plugin_input.php, (26) Savant2_Plugin_javascript.php, (27) Savant2_Plugin_listalpha.php, (28) Savant2_Plugin_listingname.php, (29) Savant2_Plugin_modify.php, (30) Savant2_Plugin_mtpath.php, (31) Savant2_Plugin_options.php, (32) Savant2_Plugin_radios.php, (33) Savant2_Plugin_rating.php, or (34) Savant2_Plugin_textarea.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3991 
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3992 
Unspecified vulnerability in the Centrino (1) w22n50.sys, (2) w22n51.sys, (3) w29n50.sys, and (4) w29n51.sys Microsoft Windows drivers for Intel 2200BG and 2915ABG PRO/Wireless Network Connection before 10.5 with driver 9.0.4.16 allows remote attackers to execute arbitrary code via certain frames that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3993 
PHP remote file inclusion vulnerability in copyright.php in Olaf Noehring The Search Engine Project (TSEP) 0.942 allows remote attackers to execute arbitrary PHP code via a URL in the tsep_config[absPath] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3994 
SQL injection vulnerability in the u2u_send_recp function in u2u.inc.php in XMB (aka extreme message board) 1.9.6 Alpha and earlier allows remote attackers to execute arbitrary SQL commands via the u2uid parameter to u2u.php, which is directly accessed from $_POST and bypasses the protection scheme.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3995 
Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3996 
SQL injection vulnerability in links/index.php in ATutor 1.5.3.1 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) desc or (2) asc parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T00:00:00.000Z
CVE-2006-3997 
PHP remote file inclusion vulnerability in hsList.php in WoWRoster (aka World of Warcraft Roster) 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T01:00:00.000Z
CVE-2006-3998 
PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T01:00:00.000Z
CVE-2006-3999 
ISS BlackICE PC Protection 3.6.cpj, 3.6.cpiE, and possibly earlier versions do not properly monitor the integrity of the pamversion.dll BlackICE library, which allows local users to subvert BlackICE by replacing pamversion.dll.  NOTE: in most cases, the attack would not cross privilege boundaries because replacing pamversion.dll requires administrative privileges. However, this issue is a vulnerability because BlackICE is intended to protect against certain rogue privileged actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T01:00:00.000Z
CVE-2006-4000 
Directory traversal vulnerability in cgi-bin/preview_email.cgi in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T01:00:00.000Z
CVE-2006-4001 
Login.pm in Barracuda Spam Firewall (BSF) 3.3.01.001 through 3.3.03.053 contains a hard-coded password for the guest account, which allows remote attackers to read sensitive information such as e-mail logs, and possibly e-mail contents and the admin password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-05T01:00:00.000Z
CVE-2006-4002 
Cross-site scripting (XSS) vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote attackers to inject arbitrary web script or HTML via the msg parameter.  NOTE: portions of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4003 
The config method in Henrik Storner Hobbit monitor before 4.1.2p2 permits access to files outside of the intended configuration directory, which allows remote attackers to obtain sensitive information via requests to the hobbitd daemon on port 1984/tcp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4004 
Directory traversal vulnerability in index.php in vbPortal 3.0.2 through 3.6.0 Beta 1, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the bbvbplang cookie, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4005 
BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4006 
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4007 
PHP remote file inclusion vulnerability in index.php in Knusperleicht Guestbook 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the GB_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4008 
PHP remote file inclusion vulnerability in index.php in Knusperleicht Faq 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the faq_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4009 
Cross-site scripting (XSS) vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4010 
SQL injection vulnerability in war.php in Virtual War (Vwar) 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the page parameter.  NOTE: other vectors are covered by CVE-2006-3139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4011 
PHP remote file inclusion vulnerability in esupport/admin/autoclose.php in Kayako eSupport 2.3.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the subd parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4012 
Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITE_Path parameter to (1) poll/poll.php or (2) poll/view_polls.php.  NOTE: the menu_dx.php vector is already covered by CVE-2005-2687.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4013 
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in (1) DATABLOB-GET and (2) DATABLOB-SAVE requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4014 
Symantec Brightmail AntiSpam (SBAS) before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service (application freeze) "by sending invalid posts".
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4015 
Hewlett-Packard (HP) ProCurve 3500yl, 6200yl, and 5400zl switches with software before K.11.33 allow remote attackers to cause a denial of service (possibly memory leak or system crash) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4016 
Cross-site scripting (XSS) vulnerability in /toendaCMS in toendaCMS stable 1.0.3 and earlier, and unstable 1.1 and earlier, allows remote attackers to inject arbitrary web script or HTML via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4017 
Cross-site scripting (XSS) vulnerability in the search module in Inter Network Marketing (INM) CMS G3 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-07T19:00:00.000Z
CVE-2006-4018 
Heap-based buffer overflow in the pefromupx function in libclamav/upx.c in Clam AntiVirus (ClamAV) 0.81 through 0.88.3 allows remote attackers to execute arbitrary code via a crafted UPX packed file containing sections with large rsize values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T20:00:00.000Z
CVE-2006-4019 
Dynamic variable evaluation vulnerability in compose.php in SquirrelMail 1.4.0 to 1.4.7 allows remote attackers to overwrite arbitrary program variables and read or write the attachments and preferences of other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-11T21:00:00.000Z
CVE-2006-4020 
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-08T20:00:00.000Z
CVE-2006-4021 
The cryptographic module in ScatterChat 1.0.x allows attackers to identify patterns in large numbers of messages by identifying collisions using a birthday attack on the custom padding mechanism for ECB mode encryption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-17T21:00:00.000Z
CVE-2006-4022 
Intel 2100 PRO/Wireless Network Connection driver PROSet before 7.1.4.6 allows local users to corrupt memory and execute code via "requests for capabilities from higher-level protocol drivers or user-level applications" involving crafted frames, a different issue than CVE-2006-3992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-4023 
The ip2long function in PHP 5.1.4 and earlier may incorrectly validate an arbitrary string and return a valid network IP address, which allows remote attackers to obtain network information and facilitate other attacks, as demonstrated using SQL injection in the X-FORWARDED-FOR Header in index.php in MiniBB 2.0.  NOTE: it could be argued that the ip2long behavior represents a risk for security-relevant issues in a way that is similar to strcpy's role in buffer overflows, in which case this would be a class of implementation bugs that would require separate CVE items for each PHP application that uses ip2long in a security-relevant manner.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-4024 
The FESTAHES_Load function in pce/hes.c in Festalon 0.5.0 through 0.5.5 allows user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative LoadAddr value in a HES file, which is used as an offset in a memcpy operation and leads to a buffer underflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-4025 
SQL injection vulnerability in profile.php in XennoBB 2.1.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the (1) bday_day, (2) bday_month, and (3) bday_year parameters in the personal section.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-4026 
PHP remote file inclusion vulnerability in SAPID CMS 123 rc3 allows remote attackers to execute arbitrary PHP code via a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php and the (2) GLOBALS["root_path"] parameter in usr/extensions/get_tree.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T00:00:00.000Z
CVE-2006-4028 
Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors.  NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related to "Anyone can register" functionality (user registration for guests).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T20:00:00.000Z
CVE-2006-4029 
Stack-based buffer overflow in sipd.dll in AGEphone 1.24 and 1.38.1 allows remote attackers to execute arbitrary code via a crafted UDP SIP packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T20:00:00.000Z
CVE-2006-4030 
Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-16T21:00:00.000Z
CVE-2006-4031 
MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4032 
Unspecified vulnerability in Cisco IOS CallManager Express (CME) allows remote attackers to gain sensitive information (user names) from the Session Initiation Protocol (SIP) user directory via certain SIP messages, aka bug CSCse92417.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4033 
Heap-based buffer overflow in Lhaplus.exe in Lhaplus 1.52, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LZH archive with a long header, as specified by the extendedHeaderSize.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4034 
PHP remote file inclusion vulnerability in include/html/config.php in ModernGigabyte ModernBill 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the DIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4035 
SQL injection vulnerability in counterchaos.php in CounterChaos 0.48c and earlier allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4036 
PHP remote file inclusion vulnerability in includes/usercp_register.php in ZoneMetrics ZoneX Publishers Gold Edition 1.0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4037 
Unspecified vulnerability in Fenestrae Faxination Server allows remote attackers to execute arbitrary code via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4038 
Multiple cross-site scripting (XSS) vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) gastname or (2) gastwohnort parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4039 
Multiple SQL injection vulnerabilities in eintragen.php in GaesteChaos 0.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) gastname, (2) gastwohnort, or (3) gasteintrag parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T22:00:00.000Z
CVE-2006-4040 
PHP remote file inclusion vulnerability in myevent.php in myWebland myEvent 1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4041 
SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4042 
Multiple SQL injection vulnerabilities in trackback.php in myWebland myBloggie 2.1.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) title, (2) url, (3) excerpt, or (4) blog_name parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4043 
index.php in myWebland myBloggie 2.1.4 and earlier allows remote attackers to obtain sensitive information via a query that only specifies the viewdate mode, which reveals the table prefix in a SQL error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4044 
PHP remote file inclusion vulnerability in Beautifier/Core.php in Brad Fears phpCodeCabinet 0.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the BEAUT_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4045 
PHP remote file inclusion vulnerability in news.php in Torbstoff News 4 allows remote attackers to execute arbitrary PHP code via a URL in the pfad parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4046 
Multiple stack-based buffer overflows in Open Cubic Player 2.6.0pre6 and earlier for Windows, and 0.1.10_rc5 and earlier on Linux/BSD, allow remote attackers to execute arbitrary code via (1) a large .S3M file handled by the mpLoadS3M function, (2) a crafted .IT file handled by the itplayerclass::module::load function, (3) a crafted .ULT file handled by the mpLoadULT function, or (4) a crafted .AMS file handled by the mpLoadAMS function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4047 
SQL injection vulnerability in index.php in Netious CMS 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4048 
Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration section when originating from the same IP address as the administrator.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4049 
Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-09T23:00:00.000Z
CVE-2006-4050 
PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-08-10T00:00:00.000Z