Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1377.

Cross-site scripting (XSS) vulnerability in img.php in (1) EasyMoblog 0.5.1 and (2) CoMoblog 1.1 allows remote attackers to inject arbitrary web script or HTML via the i parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1377?

{'name': '24093', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24093'}, {'name': 'easymoblog-img-xss(25420)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25420'}, {'name': 'comoblog-img-xss(25416)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25416'}, {'name': 'ADV-2006-1087', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1087'}, {'name': '19379', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19379'}, {'name': '20060323 [KAPDA::#37] - CoMoblog XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428553/100/0/threaded'}, {'name': '17201', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17201'}, {'name': 'ADV-2006-1086', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1086'}, {'name': '17199', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17199'}, {'name': '24094', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24094'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-301.html'}, {'name': '19370', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19370'}, {'name': '1015824', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015824'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1377?


Explain the CVE ID: What does the identifier CVE-2006-1378 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1378.

PasswordSafe 3.0 beta, when running on Windows before XP, uses a weak random number generator (C++ rand function) during generation of the database encryption key, which makes it easier for attackers to decrypt the database and steal passwords by generating keys for all possible rand() seed values and conducting a known plaintext attack.


Provide references for further information: Can you share references or external links related to CVE-2006-1378?

{'name': 'passwordsafe-key-brute-force(25429)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25429'}, {'name': '618', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/618'}, {'name': '20060323 PasswordSafe 3.0 weak random number generator allows key recovery attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428552/100/0/threaded'}, {'name': '20060907 Re: PasswordSafe 3.0 weak random number generator allows key recovery attack', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/445509/100/0/threaded'}, {'name': '17200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17200'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1378?


Explain the CVE ID: What does the identifier CVE-2006-1379 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1379.

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as (1) tmntsrv.exe and (2) tmproxy.exe.


Provide references for further information: Can you share references or external links related to CVE-2006-1379?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english'}, {'name': '19282', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19282'}, {'name': 'ADV-2006-1042', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1042'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1379?


Explain the CVE ID: What does the identifier CVE-2006-1380 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1380.

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.


Provide references for further information: Can you share references or external links related to CVE-2006-1380?

{'name': 'imss-isntsmtp-directory-permissions(25415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25415'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english'}, {'name': 'ADV-2006-1041', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1041'}, {'name': '19022', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19022'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1380?


Explain the CVE ID: What does the identifier CVE-2006-1381 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1381.

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.


Provide references for further information: Can you share references or external links related to CVE-2006-1381?

{'name': 'imss-isntsmtp-directory-permissions(25415)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25415'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english'}, {'name': 'ADV-2006-1041', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1041'}, {'name': '11576', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/11576'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1381?


Explain the CVE ID: What does the identifier CVE-2006-1382 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1382.

PHP remote file inclusion vulnerability in impex/ImpExData.php in vBulletin ImpEx module 1.74, when register_globals is disabled, allows remote attackers to include arbitrary files via the systempath parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1382?

{'name': '20070504 Remote File Include In Script impex', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/467666/100/0/threaded'}, {'name': '20060323 XOR Crew :: vBulletin ImpEx <= 1.74 - Remote Command Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044318.html'}, {'name': 'ADV-2006-1056', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1056'}, {'name': '17206', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17206'}, {'name': 'impex-systempath-file-include(34095)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/34095'}, {'name': '19352', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19352'}, {'name': 'impex-impexdata-file-include(25391)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25391'}, {'name': '24070', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24070'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1382?


Explain the CVE ID: What does the identifier CVE-2006-1383 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1383.

Directory traversal vulnerability in Baby FTP Server (BabyFTP) 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not.


Provide references for further information: Can you share references or external links related to CVE-2006-1383?

{'name': '17205', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17205'}, {'name': 'baby-ftp-information-disclosure(25413)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25413'}, {'name': '19338', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19338'}, {'name': 'ADV-2006-1069', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1069'}, {'name': '24057', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24057'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1383?


Explain the CVE ID: What does the identifier CVE-2006-1384 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1384.

Cross-site scripting (XSS) vulnerability in apwc_win_main.jsp in the web console in IBM Tivoli Business Systems Manager (TBSM) before 3.1.0.1 allows remote attackers to inject arbitrary web script or HTML via the skin parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1384?

{'name': 'OA14904', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1OA14904'}, {'name': 'tivoli-bsm-skin-xss(25412)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25412'}, {'name': '24069', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24069'}, {'name': '19332', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19332'}, {'name': 'ADV-2006-1073', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1073'}, {'name': '1015822', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015822'}, {'name': '17210', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17210'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1384?


Explain the CVE ID: What does the identifier CVE-2006-1385 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1385.

Stack-based buffer overflow in the parseTaggedData function in WavePacket.mm in KisMAC R54 through R73p allows remote attackers to execute arbitrary code via multiple SSIDs in a Cisco vendor tag in a 802.11 management frame.


Provide references for further information: Can you share references or external links related to CVE-2006-1385?

{'name': '24072', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24072'}, {'name': '609', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/609'}, {'name': 'ADV-2006-1070', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1070'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://kismac.de/_trac/changeset/113'}, {'name': '17198', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17198'}, {'name': 'kismac-80211-parsing-bo(25422)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25422'}, {'name': '20060323 Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/044323.html'}, {'name': '20060323 Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428537/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.hardened-php.net/advisory_032006.115.html'}, {'name': '19354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19354'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1385?


Explain the CVE ID: What does the identifier CVE-2006-1386 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1386.

The (1) rdiff and (2) preview scripts in TWiki 4.0 and 4.0.1 ignore access control settings, which allows remote attackers to read restricted areas and access restricted content in TWiki topics.


Provide references for further information: Can you share references or external links related to CVE-2006-1386?

{'name': 'twiki-restricted-content-access(25444)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25444'}, {'name': '17268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17268'}, {'name': '19410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19410'}, {'name': '1015843', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015843'}, {'name': 'ADV-2006-1116', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1116'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://twiki.org/cgi-bin/view/Codev/SecurityAlertTWiki4RdiffPreviewAccess'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1386?


Explain the CVE ID: What does the identifier CVE-2006-1387 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1387.

TWiki 4.0, 4.0.1, and 20010901 through 20040904 allows remote authenticated users with edit rights to cause a denial of service (infinite recursion leading to CPU and memory consumption) via INCLUDE by URL statements that form a loop, such as a page that includes itself.


Provide references for further information: Can you share references or external links related to CVE-2006-1387?

{'name': '19410', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19410'}, {'name': 'twiki-include-edit-dos(25445)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25445'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://twiki.org/cgi-bin/view/Codev/SecurityAdvisoryDosAttackWithInclude'}, {'name': 'ADV-2006-1116', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1116'}, {'name': '17267', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17267'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1387?


Explain the CVE ID: What does the identifier CVE-2006-1388 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1388.

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1388?

{'name': 'oval:org.mitre.oval:def:1591', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1591'}, {'name': 'ie-hta-file-execution(25394)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25394'}, {'name': '19378', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19378'}, {'name': 'VU#434641', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/434641'}, {'name': 'oval:org.mitre.oval:def:1642', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1642'}, {'name': 'oval:org.mitre.oval:def:1774', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1774'}, {'name': 'TA06-101A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-101A.html'}, {'name': '20060321 IE .hta vulnerability reported', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1415.html'}, {'name': 'oval:org.mitre.oval:def:1676', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1676'}, {'tags': ['x_refsource_MISC'], 'url': 'http://news.zdnet.com/2100-1009_22-6052396.html?tag=zdfd.newsfeed'}, {'name': 'MS06-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013'}, {'name': '17181', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17181'}, {'tags': ['x_refsource_MISC'], 'url': 'http://jeffrey.vanderstad.net/grasshopper/'}, {'name': '1015800', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015800'}, {'name': '24095', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24095'}, {'name': 'ADV-2006-1318', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1318'}, {'name': 'oval:org.mitre.oval:def:1724', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1724'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1388?


Explain the CVE ID: What does the identifier CVE-2006-1389 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1389.

Unspecified vulnerability in swagentd in HP-UX B.11.00, B.11.04, and B.11.11 allows remote attackers to cause a denial of service (application crash) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1389?

{'name': '19373', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19373'}, {'name': '19395', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19395'}, {'name': 'HPSBUX02105', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788'}, {'name': 'ADV-2006-1089', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1089'}, {'name': 'SSRT061134', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00622788'}, {'name': '17215', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17215'}, {'name': 'oval:org.mitre.oval:def:616', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A616'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-076.htm'}, {'name': 'oval:org.mitre.oval:def:1031', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1031'}, {'name': 'hpux-swagentd-dos(25421)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25421'}, {'name': '1015819', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015819'}, {'name': 'oval:org.mitre.oval:def:312', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A312'}, {'name': '24097', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24097'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1389?


Explain the CVE ID: What does the identifier CVE-2006-1390 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1390.

The configuration of NetHack 3.4.3-r1 and earlier, Falcon's Eye 1.9.4a and earlier, and Slash'EM 0.0.760 and earlier on Gentoo Linux allows local users in the games group to modify saved games files to execute arbitrary code via buffer overflows and overwrite arbitrary files via symlink attacks.


Provide references for further information: Can you share references or external links related to CVE-2006-1390?

{'name': '19376', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19376'}, {'name': 'GLSA-200603-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-23.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=125902'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=127167'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=127319'}, {'name': "20060324 Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Localprivilege escalation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428739/100/0/threaded'}, {'name': 'gentoo-multiple-games-privilege-escalation(25528)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25528'}, {'name': "20060324 Re: [ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428743/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=122376'}, {'name': '24104', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24104'}, {'name': '17217', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17217'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1390?


Explain the CVE ID: What does the identifier CVE-2006-1391 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1391.

The (a) Quick 'n Easy Web Server before 3.1.1 and (b) Baby ASP Web Server 2.7.2 allows remote attackers to obtain the source code of ASP files via (1) . (dot) and (2) space characters in the extension of a URL.


Provide references for further information: Can you share references or external links related to CVE-2006-1391?

{'name': '17222', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17222'}, {'name': '19312', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19312'}, {'name': "20060324 Secunia Research: Quick 'n Easy/Baby Web Server ASP CodeDisclosure Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428667/100/0/threaded'}, {'name': 'ADV-2006-1085', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1085'}, {'name': 'quickneasy-web-asp-disclosure(25418)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25418'}, {'name': '24100', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24100'}, {'name': '24099', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24099'}, {'name': '624', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/624'}, {'name': 'baby-web-asp-disclosure(25417)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25417'}, {'name': '19306', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19306'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-19/advisory/'}, {'name': 'ADV-2006-1088', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1088'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1391?


Explain the CVE ID: What does the identifier CVE-2006-1392 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1392.

Multiple cross-site scripting (XSS) vulnerabilities in index.cgi in the login server in University of Washington Pubcookie 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified inputs.


Provide references for further information: Can you share references or external links related to CVE-2006-1392?

{'name': 'pubcookie-login-server-xss(25427)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25427'}, {'name': '24521', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24521'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pubcookie.org/news/20060306-login-secadv.html'}, {'name': 'VU#337585', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/337585'}, {'name': '17221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17221'}, {'name': '19348', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19348'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1392?


Explain the CVE ID: What does the identifier CVE-2006-1393 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1393.

Multiple cross-site scripting (XSS) vulnerabilities in the mod_pubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1393?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pubcookie.org/news/20060306-apps-secadv.html'}, {'name': 'pubcookie-appserver-module-xss(25426)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25426'}, {'name': '24103', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24103'}, {'name': '17221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17221'}, {'name': 'VU#314540', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/314540'}, {'name': '19348', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19348'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1393?


Explain the CVE ID: What does the identifier CVE-2006-1394 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1394.

Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1394?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pubcookie.org/news/20060306-apps-secadv.html'}, {'name': '24520', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24520'}, {'name': '17221', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17221'}, {'name': 'VU#314540', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/314540'}, {'name': '19348', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19348'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1394?


Explain the CVE ID: What does the identifier CVE-2006-1395 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1395.

SQL injection vulnerability in mb.cgi in Cholod MySQL Based Message Board allows remote attackers to execute arbitrary SQL commands via unspecified vectors in a showmessage action, possibly the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1395?

{'name': '19439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19439'}, {'name': 'cholod-mb-sql-injection(25520)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25520'}, {'name': 'ADV-2006-1153', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1153'}, {'name': '17224', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17224'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1395?


Explain the CVE ID: What does the identifier CVE-2006-1396 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1396.

Multiple cross-site scripting (XSS) vulnerabilities in Cholod MySQL Based Message Board allow remote attackers to inject arbitrary web script or HTML via unknown vectors.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1396?

{'name': '19439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19439'}, {'name': 'cholod-mb-xss(25518)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25518'}, {'name': 'ADV-2006-1153', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1153'}, {'name': '17223', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17223'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1396?


Explain the CVE ID: What does the identifier CVE-2006-1397 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1397.

Multiple cross-site scripting (XSS) vulnerabilities in (a) phpAdsNew and (b) phpPgAds before 2.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) certain parameters to the banner delivery module, which is not properly handled in the administrator interface, or (2) certain parameters to the login form.


Provide references for further information: Can you share references or external links related to CVE-2006-1397?

{'name': 'phpadsnew-login-banner-xss(25458)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25458'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=404964'}, {'name': '19384', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19384'}, {'name': '24206', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24206'}, {'name': '633', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/633'}, {'name': 'ADV-2006-1107', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1107'}, {'name': '17251', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17251'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://phpadsnew.com/two/nucleus/index.php?itemid=46'}, {'name': '20060327 [PHPADSNEW-SA-2006-001] phpAdsNew and phpPgAds 2.0.8 fix multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428898/100/0/threaded'}, {'name': '24205', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24205'}, {'name': '1015829', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015829'}, {'name': '1015828', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015828'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=404963'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1397?


Explain the CVE ID: What does the identifier CVE-2006-1398 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1398.

Cross-site scripting (XSS) vulnerability in guestbook.php in G-Book 1.0 allows remote attackers to inject arbitrary web script or HTML via the g_message parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1398?

{'name': '17253', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17253'}, {'name': '19414', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19414'}, {'name': '24141', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24141'}, {'name': '1015830', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015830'}, {'name': '634', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/634'}, {'name': 'gbook-guestbook-xss(25475)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25475'}, {'name': '20060327 HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428900/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h4cky0u.org/advisories/HYSA-2006-006-g-book.txt'}, {'name': 'ADV-2006-1100', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1100'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1398?


Explain the CVE ID: What does the identifier CVE-2006-1399 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1399.

Cross-site scripting (XSS) vulnerability in searchresult.php in Meeting Reserve 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the search_term parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1399?

{'name': '17256', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17256'}, {'name': 'meeting-reserve-searchresult-xss(25432)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25432'}, {'name': '24162', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24162'}, {'name': 'ADV-2006-1110', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1110'}, {'name': '19372', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19372'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1399?


Explain the CVE ID: What does the identifier CVE-2006-1400 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1400.

Cross-site scripting (XSS) vulnerability in MyTasks/PersonalTaskEdit.asp in Metisware Instructor 1.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the Task parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1400?

{'name': '19385', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19385'}, {'name': '24139', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24139'}, {'name': 'metisware-instructor-personaltaskcreate-xss(25490)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25490'}, {'name': '17234', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17234'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/metisware-instructor-xss-vuln.html'}, {'name': 'ADV-2006-1112', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1400?


Explain the CVE ID: What does the identifier CVE-2006-1401 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1401.

Multiple cross-site scripting (XSS) vulnerabilities in search.php in Calendar Express 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) allwords or (2) oneword parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1401?

{'name': '17240', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17240'}, {'name': 'calendarexpress-search-xss(25467)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25467'}, {'name': '19393', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19393'}, {'name': 'ADV-2006-1109', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1109'}, {'name': '24161', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24161'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1401?


Explain the CVE ID: What does the identifier CVE-2006-1402 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1402.

Buffer overflow in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to (1) cause a denial of service via a long nickname or teamname to the SV_SetupUserInfo function or (2) execute arbitrary code via a long string sent when joining a match or a long chat message to the SV_BroadcastPrintf function.


Provide references for further information: Can you share references or external links related to CVE-2006-1402?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/csdoombof-adv.txt'}, {'name': 'ADV-2006-1105', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1105'}, {'name': '19389', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19389'}, {'name': 'csdoom-sv-setupuserinfo-bo(25449)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25449'}, {'name': '17248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17248'}, {'name': 'csdoom-sv-broadcastprintf-bo(25448)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25448'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://voxelsoft.com/csdoom/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1402?


Explain the CVE ID: What does the identifier CVE-2006-1403 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1403.

Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console.


Provide references for further information: Can you share references or external links related to CVE-2006-1403?

{'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/csdoombof-adv.txt'}, {'name': 'ADV-2006-1105', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1105'}, {'name': '19389', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19389'}, {'name': '17248', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17248'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://voxelsoft.com/csdoom/'}, {'name': 'csdoom-printf-format-string(25450)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25450'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1403?


Explain the CVE ID: What does the identifier CVE-2006-1404 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1404.

Multiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) file or (2) function parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1404?

{'name': 'blankol-bol-xss(25488)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25488'}, {'name': 'ADV-2006-1111', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1111'}, {'name': '24124', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24124'}, {'name': '19387', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19387'}, {'name': '17265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17265'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/blankol-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1404?


Explain the CVE ID: What does the identifier CVE-2006-1405 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1405.

Cross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management System (ssCMS) 2.1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1405?

{'name': 'sscms-search-xss(25452)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25452'}, {'name': '17254', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17254'}, {'name': 'ADV-2006-1097', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1097'}, {'name': '19399', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19399'}, {'name': '24120', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24120'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/sweetsuitenet-sscms-21x-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1405?


Explain the CVE ID: What does the identifier CVE-2006-1406 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1406.

Multiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtuser or (2) txtpassword parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1406?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/uniforum-xss-vuln.html'}, {'name': 'ADV-2006-1101', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1101'}, {'name': '17245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17245'}, {'name': 'uniforum-wbadmlog-xss(25433)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25433'}, {'name': '24123', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24123'}, {'name': '19397', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19397'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1406?


Explain the CVE ID: What does the identifier CVE-2006-1407 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1407.

Multiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) txtDomainName parameter to domains.asp or (2) SearchText or (3) UserLevel parameters to default.asp.


Provide references for further information: Can you share references or external links related to CVE-2006-1407?

{'name': 'ADV-2006-1093', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1093'}, {'name': '24125', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24125'}, {'name': '24126', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24126'}, {'name': '19375', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19375'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/helm-web-hosting-control-panel-xss.html'}, {'name': '17263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17263'}, {'name': 'helm-domainsusersdefaault-xss(30309)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/30309'}, {'name': 'helm-domainsdefault-xss(25470)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25470'}, {'name': '20060327 Helm Control Panel followup', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-March/000654.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1407?


Explain the CVE ID: What does the identifier CVE-2006-1408 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1408.

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large packet, which prevents Vavoom from discarding the packet from the socket.


Provide references for further information: Can you share references or external links related to CVE-2006-1408?

{'name': 'ADV-2006-1104', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1104'}, {'name': '19388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19388'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/vaboom-adv.txt'}, {'name': '17261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17261'}, {'name': 'vavoom-fionread-dos(25454)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25454'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1408?


Explain the CVE ID: What does the identifier CVE-2006-1409 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1409.

Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLength value in a compressed packet.


Provide references for further information: Can you share references or external links related to CVE-2006-1409?

{'name': 'ADV-2006-1104', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1104'}, {'name': '19388', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19388'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/vaboom-adv.txt'}, {'name': '17261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17261'}, {'name': 'vavoom-comprlength-bo(25455)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25455'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1409?


Explain the CVE ID: What does the identifier CVE-2006-1410 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1410.

Multiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Screen name or (2) Session Topic field.


Provide references for further information: Can you share references or external links related to CVE-2006-1410?

{'name': 'absolutelivesupport-register-xss(25434)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25434'}, {'name': '24131', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24131'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/absolute-live-support-xe-v20-xss-vuln.html'}, {'name': '17258', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17258'}, {'name': '19415', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19415'}, {'name': 'ADV-2006-1099', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1099'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1410?


Explain the CVE ID: What does the identifier CVE-2006-1411 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1411.

Cross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via (1) the shownew parameter in gallery.asp and (2) unspecified search module parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1411?

{'name': '18712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/18712'}, {'name': 'absolute-gallery-xss(25466)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25466'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/absolute-image-gallery-xe-20-xss-vuln.html'}, {'name': '24214', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24214'}, {'name': 'ADV-2006-1103', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1103'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1411?


Explain the CVE ID: What does the identifier CVE-2006-1412 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1412.

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd.


Provide references for further information: Can you share references or external links related to CVE-2006-1412?

{'name': '20061204 Multiple bugs in TFT-Gallery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/453471/100/0/threaded'}, {'name': '1611', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1611'}, {'name': '17250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17250'}, {'name': '19411', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19411'}, {'name': '20061204 Re: Multiple bugs in TFT-Gallery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/453485/100/0/threaded'}, {'name': 'ADV-2006-1115', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1115'}, {'name': 'tftgallery-passwd-disclosure(25465)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25465'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1412?


Explain the CVE ID: What does the identifier CVE-2006-1413 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1413.

Multiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) adid or (2) aname parameter in (a) common/email.asp, (b) users/users_search.asp, or (c) users/users_profiles.asp; (3) page parameter in (d) users/users_calendar.asp; (4) usid parameter in (e) users/users_mgallery.asp; or (5) m parameter in (f) users/users_search.asp.


Provide references for further information: Can you share references or external links related to CVE-2006-1413?

{'name': 'ezhomepagepro-multiple-xss(25468)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25468'}, {'name': '17236', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17236'}, {'name': '24134', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24134'}, {'name': '24135', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24135'}, {'name': '24133', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24133'}, {'name': 'ADV-2006-1094', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1094'}, {'name': '19386', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19386'}, {'name': '24136', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24136'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/ezhomepagepro-multiple-xss-vuln.html'}, {'name': '24132', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24132'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1413?


Explain the CVE ID: What does the identifier CVE-2006-1414 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1414.

Multiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) author, (2) subject, (3) message, or (4) dayprune parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1414?

{'name': '24119', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24119'}, {'name': '19401', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19401'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/xss-in-toast-forums-16.html'}, {'name': 'ADV-2006-1092', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1092'}, {'name': 'toastforums-toast-xss(25440)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25440'}, {'name': '17249', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17249'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1414?


Explain the CVE ID: What does the identifier CVE-2006-1415 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1415.

Cross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the em parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1415?

{'name': 'dotnetbb-iforget-xss(25462)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25462'}, {'name': '17246', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17246'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/xss-vuln-in-dotnetbb-v24.html'}, {'name': '24122', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24122'}, {'name': '19398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19398'}, {'name': 'ADV-2006-1098', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1098'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1415?


Explain the CVE ID: What does the identifier CVE-2006-1416 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1416.

Cross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters, possibly the question parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1416?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/absolute-faq-manager-net-xss-vuln.html'}, {'name': 'absolutefaqmanager-search-xss(25463)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25463'}, {'name': '24127', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24127'}, {'name': '17242', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17242'}, {'name': '19396', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19396'}, {'name': 'ADV-2006-1096', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1096'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1416?


Explain the CVE ID: What does the identifier CVE-2006-1417 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1417.

Multiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka Web Quiz pro), possibly 1.0, allow remote attackers to inject arbitrary web script or HTML via the (1) exam parameter in prequiz.asp or (2) msg parameter in student.asp.


Provide references for further information: Can you share references or external links related to CVE-2006-1417?

{'name': 'ADV-2006-1091', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1091'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/web-quiz-pro-xss-vuln.html'}, {'name': '19416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19416'}, {'name': '17255', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17255'}, {'name': 'webquiz-multiple-xss(25431)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25431'}, {'name': '24129', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24129'}, {'name': '24130', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24130'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1417?


Explain the CVE ID: What does the identifier CVE-2006-1418 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1418.

Cross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management System 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1418?

{'name': 'eschoolmanagementsystem-default-xss(25469)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25469'}, {'name': '24128', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24128'}, {'name': '17257', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17257'}, {'name': 'ADV-2006-1095', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1095'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/e-school-management-system-xss-vuln.html'}, {'name': '19381', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19381'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1418?


Explain the CVE ID: What does the identifier CVE-2006-1419 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1419.

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1419?

{'name': 'ADV-2006-1134', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1134'}, {'name': '632', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/632'}, {'name': '19382', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19382'}, {'name': '20060326 nuked-klan<=1.7.5 SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428895/100/0/threaded'}, {'name': '24204', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24204'}, {'name': '17233', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17233'}, {'name': 'nuked-klan-calendar-sql-injection(25446)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25446'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1419?


Explain the CVE ID: What does the identifier CVE-2006-1420 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1420.

SQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute arbitrary SQL commands via the lessid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1420?

{'name': '24254', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24254'}, {'name': '17239', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17239'}, {'name': '20060325 SQL Injection in SaphpLesson2.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428891/100/0/threaded'}, {'name': 'saphplesson-print-sql-injection(25453)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25453'}, {'name': '629', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/629'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1420?


Explain the CVE ID: What does the identifier CVE-2006-1421 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1421.

Multiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) acname or (2) contentid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1421?

{'name': '19392', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19392'}, {'name': 'akocomment-akocomment-sql-injection(25451)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25451'}, {'name': '20060326 AkoComment SQL injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428893/100/0/threaded'}, {'name': '631', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/631'}, {'name': '17241', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17241'}, {'name': '24209', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24209'}, {'name': 'ADV-2006-1136', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1136'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1421?


Explain the CVE ID: What does the identifier CVE-2006-1422 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1422.

SQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the event_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1422?

{'name': '17230', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17230'}, {'name': '1610', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1610'}, {'name': 'phpbookingcal-detailsview-sql-injection(25580)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25580'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1422?


Explain the CVE ID: What does the identifier CVE-2006-1423 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1423.

SQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and earlier, allows remote attackers to execute arbitrary SQL commands via the Number parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1423?

{'name': '20060325 UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428833/100/0/threaded'}, {'name': '628', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/628'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1423?


Explain the CVE ID: What does the identifier CVE-2006-1424 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1424.


Provide references for further information: Can you share references or external links related to CVE-2006-1424?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1424?


Explain the CVE ID: What does the identifier CVE-2006-1425 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1425.

Cross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the name parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1425?

{'name': '20060327 HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428901/100/0/threaded'}, {'name': '17278', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17278'}, {'name': '24166', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24166'}, {'name': '20060327 HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=114344921211241&w=2'}, {'name': '636', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/636'}, {'name': '19409', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19409'}, {'name': 'ADV-2006-1130', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1130'}, {'name': 'phpmyfamily-track-xss(25476)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25476'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1425?


Explain the CVE ID: What does the identifier CVE-2006-1426 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1426.

Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1426?

{'name': '20060327 Blog Pixel Motion<=1.xx Authentication Bypass Vulnerability & SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428964/100/0/threaded'}, {'name': 'pixelmotionblog-adminindex-security-bypass(25478)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25478'}, {'name': '24169', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24169'}, {'name': '17260', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17260'}, {'name': 'pixelmotionblog-index-sql-injection(25481)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25481'}, {'name': '19421', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19421'}, {'name': 'ADV-2006-1135', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1135'}, {'name': '24168', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24168'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1426?


Explain the CVE ID: What does the identifier CVE-2006-1427 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1427.

Multiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) action, (2) id, (3) num, (4) board, (5) cat, (6) real, (7) viewcat, (8) img, or (9) curcatname parameter in cgi-bin/index.cgi, or (10) vsSD parameter in /mods/calendar/index.cgi.


Provide references for further information: Can you share references or external links related to CVE-2006-1427?

{'name': 'ADV-2006-1102', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1102'}, {'name': '24279', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24279'}, {'name': '17359', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17359'}, {'name': '19506', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19506'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.web-app.net/cgi-bin/index.cgi?action=downloadinfo&cat=pastversions&id=1'}, {'name': 'webapp-index-xss(25435)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25435'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.web-app.net/cgi-bin/index.cgi?action=redirectd&cat=pastversions&id=1'}, {'name': '24278', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24278'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/webapp-multiple-xss-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1427?


Explain the CVE ID: What does the identifier CVE-2006-1428 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1428.

Multiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the fs parameter to (1) mod.php or (2) mod_print.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1428?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/phpcoin-v122-xss-vuln.html'}, {'name': '24188', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24188'}, {'name': 'ADV-2006-1129', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1129'}, {'name': '24189', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24189'}, {'name': '17279', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17279'}, {'name': '19419', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19419'}, {'name': 'phpcoin-multiple-xss(25492)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25492'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1428?


Explain the CVE ID: What does the identifier CVE-2006-1429 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1429.

Cross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rtn parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1429?

{'name': '24187', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24187'}, {'name': '19427', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19427'}, {'name': '17273', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17273'}, {'name': 'classifiedzone-accountlogon-xss(25494)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25494'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/classifiedzone-v12-xss-vuln.html'}, {'name': 'ADV-2006-1132', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1132'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1429?


Explain the CVE ID: What does the identifier CVE-2006-1430 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1430.

Multiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dedicatedPlanID parameter to dedicated_order.php, (2) sharedPlanID parameter to shared_order.php, (3) plan_id parameter to customers/server_management.php, and (4) email field to customers/forgotpass.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1430?

{'name': '24176', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24176'}, {'name': '24174', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24174'}, {'name': '19432', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19432'}, {'name': '17282', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17282'}, {'name': 'ADV-2006-1131', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1131'}, {'name': '24175', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24175'}, {'name': '24173', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24173'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/controlzx-hms-hosting-management.html'}, {'name': 'controlzshms-multiple-scripts-xss(25491)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25491'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1430?


Explain the CVE ID: What does the identifier CVE-2006-1431 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1431.

Cross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote attackers to inject arbitrary web script or HTML via URL-encoded (1) srchfor and (2) srchby parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1431?

{'name': 'ADV-2006-1127', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1127'}, {'name': '17272', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17272'}, {'name': 'couponzone-local-xss(25484)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25484'}, {'name': '24180', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24180'}, {'name': '19430', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19430'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1431?


Explain the CVE ID: What does the identifier CVE-2006-1432 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1432.

fusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and other sensitive information, via invalid values, as demonstrated using manipulations associated with SQL.


Provide references for further information: Can you share references or external links related to CVE-2006-1432?

{'name': 'couponzone-local-path-disclosure(25486)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25486'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/couponzone-v42-multiple-vuln.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1432?


Explain the CVE ID: What does the identifier CVE-2006-1433 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1433.

Annuaire (Directory) 1.0 allows remote attackers to obtain sensitive information via a direct request to include/lang-en.php, which reveals the full installation path.


Provide references for further information: Can you share references or external links related to CVE-2006-1433?

{'name': '24302', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24302'}, {'name': 'annuaire-includelangen-path-disclosure(25668)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25668'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24302-annuaire_directory.txt'}, {'name': '19548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19548'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1433?


Explain the CVE ID: What does the identifier CVE-2006-1434 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1434.

Cross-site scripting (XSS) vulnerability in inscription.php in Annuaire (Directory) 1.0 allows remote attackers to inject arbitrary web script or HTML via the Comment Field (COMMENTAIRE parameter).


Provide references for further information: Can you share references or external links related to CVE-2006-1434?

{'name': '24303', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24303'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24302-annuaire_directory.txt'}, {'name': '19548', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19548'}, {'name': '17393', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17393'}, {'name': 'annuaire-inscription-xss(25669)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25669'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1434?


Explain the CVE ID: What does the identifier CVE-2006-1435 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1435.

Cross-site scripting (XSS) vulnerability in genmessage.php in Accounting Receiving and Inventory Administration (ARIA) 0.99-6 allows remote attackers to inject arbitrary web script or HTML via the Message Field (message parameter).


Provide references for further information: Can you share references or external links related to CVE-2006-1435?

{'name': '19551', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19551'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24255-aria.txt'}, {'name': 'aria-genmessage-xss(25688)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25688'}, {'name': '24255', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24255'}, {'name': '17411', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17411'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1435?


Explain the CVE ID: What does the identifier CVE-2006-1436 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1436.

Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Website, and (5) Public Remarks fields to (a) eventpublisher_admin.htm and (b) eventpublisher_usersubmit.htm.


Provide references for further information: Can you share references or external links related to CVE-2006-1436?

{'name': '19727', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19727'}, {'name': '24236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24236'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24236-upoint.txt'}, {'name': '17646', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17646'}, {'name': '24235', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1436?


Explain the CVE ID: What does the identifier CVE-2006-1437 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1437.

UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eventpublisher.txt.


Provide references for further information: Can you share references or external links related to CVE-2006-1437?

{'name': '17647', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17647'}, {'name': '19727', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19727'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24236-upoint.txt'}, {'name': '24237', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24237'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1437?


Explain the CVE ID: What does the identifier CVE-2006-1438 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1438.

Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (aphpkb) 0.57 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword_list parameter to (a) index.php; (2) title, (3) article, (4) author, and (5) keywords parameters to (b) submit_article.php; and (6) Question, (7) Name, and (8) Email parameters to (c) submit_question.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1438?

{'name': '24312', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24312'}, {'name': '24311', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24311'}, {'name': '19554', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19554'}, {'tags': ['x_refsource_MISC'], 'url': 'http://osvdb.org/ref/24/24310-aphpkb.txt'}, {'name': 'aphpkb-multiple-scripts-xss(25666)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25666'}, {'name': '17377', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17377'}, {'name': '24310', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24310'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1438?


Explain the CVE ID: What does the identifier CVE-2006-1439 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1439.

NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.


Provide references for further information: Can you share references or external links related to CVE-2006-1439?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'name': 'macos-appkit-nssecuretext-weak-security(26404)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26404'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '25583', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25583'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1439?


Explain the CVE ID: What does the identifier CVE-2006-1440 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1440.

BOM in Apple Mac OS X 10.3.9 and 10.4.6 allows attackers to overwrite arbitrary files via an archive that contains symbolic links.


Provide references for further information: Can you share references or external links related to CVE-2006-1440?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'name': '1016082', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016082'}, {'name': 'macos-bom-archive-file-overwrite(26405)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26405'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': '25584', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25584'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1440?


Explain the CVE ID: What does the identifier CVE-2006-1441 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1441.

Integer overflow in CFNetwork in Apple Mac OS X 10.4.6 allows remote attackers to execute arbitrary code via crafted chunked transfer encoding.


Provide references for further information: Can you share references or external links related to CVE-2006-1441?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'name': '1016082', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016082'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': 'macos-cfnetwork-chunked-overlow(26406)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26406'}, {'name': '25585', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25585'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1441?


Explain the CVE ID: What does the identifier CVE-2006-1442 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1442.

The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.


Provide references for further information: Can you share references or external links related to CVE-2006-1442?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': '25586', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25586'}, {'name': 'macos-corefoundation-bundle-code-execution(26407)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26407'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '1016080', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016080'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1442?


Explain the CVE ID: What does the identifier CVE-2006-1443 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1443.

Integer underflow in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 allows context-dependent attackers to execute arbitrary code via unspecified vectors involving conversions from string to file system representation within (1) CFStringGetFileSystemRepresentation or (2) getFileSystemRepresentation:maxLength:withPath in NSFileManager, and possibly other similar API functions.


Provide references for further information: Can you share references or external links related to CVE-2006-1443?

{'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'name': '25587', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/25587'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'macos-corefoundation-integer-underflow(26408)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26408'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '1016080', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016080'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1443?


Explain the CVE ID: What does the identifier CVE-2006-1444 mean in the context of cybersecurity?