rainbutterfly/cve_corpus huggingface dataset:
CVE-2006-6254 
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) of files via the chemin parameter, as demonstrated using directory traversal sequences to obtain the MySQL username and password from conn_cahier_de_texte.php.  NOTE: it is not clear whether the scope of this issue extends above the web document root, and whether directory traversal is the primary vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6255 
Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the filename parameter and code in the moreinfo parameter, which is saved to a filename under descriptions/, which is accessible via a direct request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6256 
Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a folder name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6257 
The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sensitive information via certain folder names such as ones composed of JavaScript code, which reveal the path in a warning message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6258 
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might allow remote attackers to obtain the password by sniffing or by conducting a cross-site scripting (XSS) attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6259 
Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9.5 and earlier allow remote attackers to (1) create arbitrary files and directories via a .. (dot dot) in the "create name" field and (2) read arbitrary files via a .. (dot dot) in the "web root" field when configuring a subdomain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6260 
SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows remote attackers to execute arbitrary SQL commands via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6261 
Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted (1) M3u or (2) M3u-8 file; or a (3) crafted PLS file with a long value in the (a) NumberofEntries, (b) Length (aka Length1), (c) Filename (aka File1), (d) Title (aka Title1) field, or other unspecified fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6262 
Directory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and earlier allows remote attackers to create arbitrary empty files via a .. (dot dot) in the orig_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6263 
Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the packet to the next hop, which might allow remote attackers to bypass policies of certain Internet gateways that drop all source-routed packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6264 
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent an intranet address, which might allow remote attackers to send IPv4 traffic to intranet hosts that use non-RFC1918 addresses, bypassing IPv4 ingress filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6265 
Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without the guessing required to find a port mapping for a traditional restricted NAT client, by (1) using the client port number contained in the Teredo address or (2) following the bubble-to-open procedure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6266 
Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) in response to packets from non-Teredo source addresses, which might allow remote attackers to induce Teredo clients to send packets to third parties.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6267 
PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6268 
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote authenticated users to execute arbitrary SQL commands via a url-encoded id parameter to users.php that begins with a valid filename, as demonstrated by "default.gif" followed by a double-encoded NULL and ' (apostrophe) (%2500%2527).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6269 
Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in rating.asp, (2) the mealid parameter in meal_rest.asp, and (3) the resid parameter in res_details.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6270 
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via (1) the soruid parameter in forum2.asp, (2) the ak parameter in kullanicilistesi.asp, (3) the kelimeler parameter in aramayap.asp, and (4) the kullaniciadi parameter in giris.asp; and allow remote authenticated users to execute arbitrary SQL commands via (5) the mesajno parameter in mesajkutum.asp.  NOTE: the harf parameter in kullanicilistesi.asp and the baslik parameter in forum.asp are already covered by CVE-2005-4141.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6271 
Multiple cross-site scripting (XSS) vulnerabilities in PHPOLL 0.96 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) index.php, (2) info.php; and (3) index.php, (4) votanti.php, (5) risultati_config.php, (6) modifica_band.php, (7) band_editor.php, and (8) config_editor.php in admin/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6272 
Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6273 
sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir parameter, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6274 
SQL injection vulnerability in articles.asp in Expinion.net iNews (1) Publisher (iNP) 2.5 and earlier, and possibly (2) News Manager, allows remote attackers to execute arbitrary SQL commands via the ex parameter.  NOTE: early reports of this issue reported it as XSS, but this was erroneous.  The original report was for News Manager, but there is strong evidence that the correct product is Publisher.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6275 
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6276 
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6277 
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter, a different vector than CVE-2005-3086.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6278 
Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6279 
index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referencing a nonexistent skin, which reveals the installation path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6280 
SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6281 
PHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote attackers to execute arbitrary PHP code via a URL in the dicshunary_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6282 
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a different vector than CVE-2006-4709.  NOTE: might only be an exposure if display_errors is enabled, but due to lack of details, even this is not clear.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6283 
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the subject field of (1) a private message (PM) or (2) a bulletin board post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6284 
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to include arbitrary files via a .. (dot dot) sequence in the act parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6285 
PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the externalConfig parameter.  NOTE: CVE and other third parties dispute this vulnerability because $externalConfig is defined before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6286 
Palm Desktop 4.1.4 and earlier stores user data with weak permissions under the application directory, which allows local users to obtain sensitive information (address books, calendar files, and todo lists of other users) via unspecified vectors.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6287 
Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long pathname in an M3U file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6288 
Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code via (1) a playlist file with long song names, because of an overflow in the CPL_AddPrefixedFile function in CPI_Playlist.c; (2) a skin file with long button names, because of an overflow in the main_skin_check_ini_value function in skin.c; and (3) a skin file with long bitmap filenames, because of an overflow in the main_skin_open function in skin.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-04T11:00:00.000Z
CVE-2006-6289 
Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbb_userid parameter to the top-level URI.  NOTE: it could be argued that this vulnerability is due to a bug in the unset PHP command (CVE-2006-3017) and the proper fix should be in PHP; if so, then this should not be treated as a vulnerability in wBB Lite.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6290 
Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) EXAMINE or (2) SELECT command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6291 
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command, as addressed by the ME-10020 hotfix.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6292 
Apple Airport Extreme firmware 0.1.27 in Mac OS X 10.4.8 on Mac mini, MacBook, and MacBook Pro with Core Duo hardware allows remote attackers to cause a denial of service (out-of-bounds memory access and kernel panic) and have possibly other security-related impact via certain beacon frames.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6293 
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to execute arbitrary code via a crafted CHM file. NOTE: this issue has at least a partial overlap with CVE-2006-6294.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6294 
Multiple unspecified vulnerabilities in FRISK Software F-Prot Antivirus before 4.6.7 have unspecified impact and attack vectors. NOTE: this might be related to CVE-2006-6293, but it is not clear due to the vagueness of the report.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6295 
PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 allows remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6296 
The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service (memory consumption) via an RPC request that specifies a large 'offered' value (output buffer size), a variant of CVE-2005-3644.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6297 
Stack consumption vulnerability in the KFILE JPEG (kfile_jpeg) plugin in kdegraphics 3, as used by konqueror, digikam, and other KDE image browsers, allows remote attackers to cause a denial of service (stack consumption) via a crafted EXIF section in a JPEG file, which results in an infinite recursion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6298 
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execute arbitrary SQL commands via the (1) kullanici_ismi and (2) sifre parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6299 
Integer overflow in Msg.dll in Novell ZENworks 7 Asset Management (ZAM) before SP1 IR11 and the Collection client allows remote attackers to execute arbitrary code via crafted packets, which trigger a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6300 
Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6301 
DenyHosts 2.5 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address, which is not properly handled by a regular expression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T19:00:00.000Z
CVE-2006-6302 
fail2ban 0.7.4 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and cause a denial of service by adding arbitrary IP addresses to the sshd log file, as demonstrated by logging in via ssh with a login name containing certain strings with an IP address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T19:00:00.000Z
CVE-2006-6303 
The read_multipart function in cgi.rb in Ruby before 1.8.5-p2 does not properly detect boundaries in MIME multipart content, which allows remote attackers to cause a denial of service (infinite loop) via crafted HTTP requests, a different issue than CVE-2006-5467.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T19:00:00.000Z
CVE-2006-6304 
The do_coredump function in fs/exec.c in the Linux kernel 2.6.19 sets the flag variable to O_EXCL but does not use it, which allows context-dependent attackers to modify arbitrary files via a rewrite attack during a core dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-14T20:00:00.000Z
CVE-2006-6305 
Unspecified vulnerability in Net-SNMP 5.3 before 5.3.0.1, when configured using the rocommunity or rouser snmpd.conf tokens, causes Net-SNMP to grant write access to users or communities that only have read-only access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T22:00:00.000Z
CVE-2006-6306 
Format string vulnerability in Novell Modular Authentication Services (NMAS) in the Novell Client 4.91 SP2 and SP3 allows users with physical access to read stack and memory contents via format string specifiers in the Username field of the logon window.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6307 
srvloc.sys in Novell Client for Windows before 4.91 SP3 allows remote attackers to cause an unspecified denial of service via a crafted packet to port 427 that triggers an access of pageable or invalid addresses using a higher interrupt request level (IRQL) than necessary.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-05T11:00:00.000Z
CVE-2006-6308 
Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges.  NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T20:00:00.000Z
CVE-2006-6309 
Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T20:00:00.000Z
CVE-2006-6310 
Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an invalid src attribute value ("?") in an HTML frame tag that is in a frameset tag with a large rows attribute.  NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T20:00:00.000Z
CVE-2006-6311 
Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in an HTML table tag with a width value that is dynamically calculated using JavaScript.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-06T20:00:00.000Z
CVE-2006-6318 
The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of service (daemon crash) by attempting to access a logbook whose name begins with "global," which results in a NULL pointer dereference.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2006-12-28T20:00:00.000Z