Provide references for further information: Can you share references or external links related to CVE-2006-1075?

{'name': '16990', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16990'}, {'name': 'ADV-2006-0849', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0849'}, {'name': '549', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/549'}, {'name': '20060306 Multiple vulnerabilities in Liero Xtreme 0.62b', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426864/100/0/threaded'}, {'name': '19079', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19079'}, {'name': 'liero-visualization-format-string(25187)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25187'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/lieroxxx-adv.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1075?


Explain the CVE ID: What does the identifier CVE-2006-1076 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1076.

SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1076?

{'name': 'invision-index-sql-injection(25254)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25254'}, {'name': '20060306 SQL injection in Invision Power Board v2.1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426875/100/0/threaded'}, {'name': '16971', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16971'}, {'name': '20060405 Re: SQL injection in Invision Power Board v2.1.5', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430357/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1076?


Explain the CVE ID: What does the identifier CVE-2006-1077 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1077.

Multiple cross-site scripting (XSS) vulnerabilities in the commentary in Evo-Dev evoBlog allow remote attackers to inject arbitrary web script or HTML via (1) the name parameter and (2) other unspecified parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1077?

{'name': '16983', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16983'}, {'name': '20060306 evoBlog Remote Name tag Script injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426826/100/0/threaded'}, {'name': '20060423 Re: evoBlog Remote Name tag Script injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431869/100/0/threaded'}, {'name': '544', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/544'}, {'name': '23826', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23826'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1077?


Explain the CVE ID: What does the identifier CVE-2006-1078 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1078.

Multiple buffer overflows in htpasswd, as used in Acme thttpd 2.25b, and possibly other products such as Apache, might allow local users to gain privileges via (1) a long command line argument and (2) a long line in a file.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.


Provide references for further information: Can you share references or external links related to CVE-2006-1078?

{'name': '20070102 Apache 1.3.37 htpasswd buffer overflow vulnerability', 'tags': ['mailing-list'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html'}, {'name': '20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.', 'tags': ['mailing-list'], 'url': 'http://www.securityfocus.com/archive/1/426823/100/0/threaded'}, {'name': '[thttpd] 20060305 Re: htpasswd.c security issues', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=thttpd&m=114154083000296&w=2'}, {'name': '20041029 Re: local buffer overflow in htpasswd for apache 1.3.31 not fixed in .33?', 'tags': ['mailing-list'], 'url': 'http://seclists.org/bugtraq/2004/Oct/0359.html'}, {'name': '16972', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/16972'}, {'url': 'http://issues.apache.org/bugzilla/show_bug.cgi?id=41279'}, {'name': '[thttpd] 20060305 htpasswd.c security issues', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=thttpd&m=114153031201867&w=2'}, {'name': 'thttpd-command-file-bo(25216)', 'tags': ['vdb-entry'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25216'}, {'name': '20040916 FlowSecurity.org: Local Stack Overflow on htpasswd apache 1.3.31 advsory.', 'tags': ['mailing-list'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html'}, {'url': 'http://issues.apache.org/bugzilla/show_bug.cgi?id=31975'}, {'name': '20041029 Apache 1.3.33 local buffer overflow in apache 1.3.31 not fixed in .33?', 'tags': ['mailing-list'], 'url': 'http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html'}, {'name': 'apache-htpasswd-strcpy-bo(31236)', 'tags': ['vdb-entry'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/31236'}, {'name': '20231127 SEC Consult SA-20231122 :: Multiple Vulnerabilities in m-privacy TightGate-Pro', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Nov/13'}, {'url': 'http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1078?


Explain the CVE ID: What does the identifier CVE-2006-1079 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1079.

htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function.  NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE.  However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.


Provide references for further information: Can you share references or external links related to CVE-2006-1079?

{'name': '20060305 htpasswd bufferoverflow and command execution in thttpd-2.25b.', 'tags': ['mailing-list'], 'url': 'http://www.securityfocus.com/archive/1/426823/100/0/threaded'}, {'name': '[thttpd] 20060305 Re: htpasswd.c security issues', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=thttpd&m=114154083000296&w=2'}, {'name': 'thttpd-command-line-bo(25217)', 'tags': ['vdb-entry'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25217'}, {'name': '16972', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/16972'}, {'name': '23828', 'tags': ['vdb-entry'], 'url': 'http://www.osvdb.org/23828'}, {'name': '[thttpd] 20060305 htpasswd.c security issues', 'tags': ['mailing-list'], 'url': 'http://marc.info/?l=thttpd&m=114153031201867&w=2'}, {'name': '20231127 SEC Consult SA-20231122 :: Multiple Vulnerabilities in m-privacy TightGate-Pro', 'tags': ['mailing-list'], 'url': 'http://seclists.org/fulldisclosure/2023/Nov/13'}, {'url': 'http://packetstormsecurity.com/files/175949/m-privacy-TightGate-Pro-Code-Execution-Insecure-Permissions.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1079?


Explain the CVE ID: What does the identifier CVE-2006-1080 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1080.

Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the message parameter, possibly requiring a URL encoded value.


Provide references for further information: Can you share references or external links related to CVE-2006-1080?

{'name': '20060304 Game-Panel <= 2.1.6 XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426825/100/0/threaded'}, {'name': 'gamepanel-login-xss(25144)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25144'}, {'name': 'ADV-2006-0864', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0864'}, {'tags': ['x_refsource_MISC'], 'url': 'http://notlegal.ws/gamepanel.txt'}, {'name': '16979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16979'}, {'name': '19143', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19143'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1080?


Explain the CVE ID: What does the identifier CVE-2006-1081 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1081.

SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers to execute arbitrary SQL commands via the email parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1081?

{'name': 'nexus-forgottenpassword-sql-injection(25017)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25017'}, {'name': 'ADV-2006-0809', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0809'}, {'name': '536', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/536'}, {'name': '19089', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19089'}, {'tags': ['x_refsource_MISC'], 'url': 'http://hamid.ir/security/nexus.txt'}, {'name': '20060302 PluggedOut Nexus SQL injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426575/100/0/threaded'}, {'name': '16915', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16915'}, {'name': '1015715', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015715'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1081?


Explain the CVE ID: What does the identifier CVE-2006-1082 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1082.

Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts.


Provide references for further information: Can you share references or external links related to CVE-2006-1082?

{'name': '533', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/533'}, {'name': '20060304 phpArcadeScript XSS Injections', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426755/100/0/threaded'}, {'name': '19124', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19124'}, {'name': 'ADV-2006-0821', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0821'}, {'name': '16957', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16957'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1082?


Explain the CVE ID: What does the identifier CVE-2006-1083 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1083.

Multiple directory traversal vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to read and possibly execute arbitrary files via a .. (dot dot) in the (1) option[language] and (2) option[template] parameters, and (3) possibly other parameters, to (a) admin.php and (b) other unspecified scripts.  NOTE: the admin.php/option[language] vector can be used by remote unauthenticated attackers to include arbitrary files in conjunction with CVE-2006-1085.


Provide references for further information: Can you share references or external links related to CVE-2006-1083?

{'name': 'ADV-2006-0822', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0822'}, {'name': '20060322 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428614/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/php_stats_0191_adv.html'}, {'name': '20060304 PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426762/100/0/threaded'}, {'name': '20060327 Re: PHP-Stats <= 0.1.9.1 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429145/100/0/threaded'}, {'name': '19116', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19116'}, {'name': '16963', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.phpstats.net/forum/viewtopic.php?t=140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1083?


Explain the CVE ID: What does the identifier CVE-2006-1084 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1084.

Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1084?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1084?


Explain the CVE ID: What does the identifier CVE-2006-1085 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1085.

admin.php in PHP-Stats 0.1.9.1 and earlier allows remote attackers to bypass authentication, gain administrator privileges, and execute arbitrary PHP code by modifying the option[admin_pass] parameter and setting the pass_cookie to the MD5 hash of the specified password.


Provide references for further information: Can you share references or external links related to CVE-2006-1085?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1085?


Explain the CVE ID: What does the identifier CVE-2006-1086 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1086.


Provide references for further information: Can you share references or external links related to CVE-2006-1086?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1086?


Explain the CVE ID: What does the identifier CVE-2006-1087 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1087.

Direct static code injection vulnerability in the modify_config action in admin.php for PHP-Stats 0.1.9.1 and earlier allows remote authenticated administrators to execute arbitrary PHP code via the option_new[compatibility_mode] parameter, which is not filtered before being stored in config.php.  NOTE: this vulnerability can be exploited by remote unauthenticated attackers in conjunction with the option[admin_pass] authentication bypass vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2006-1087?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1087?


Explain the CVE ID: What does the identifier CVE-2006-1088 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1088.

PHP-Stats 0.1.9.1 and earlier allows remote attackers to obtain potentially sensitive information via a direct request to checktables.php, which lists the database table_prefix.


Provide references for further information: Can you share references or external links related to CVE-2006-1088?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1088?


Explain the CVE ID: What does the identifier CVE-2006-1089 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1089.

Cross-site scripting (XSS) vulnerability in header.php in PunBB 1.2.10 allows remote attackers to inject arbitrary web script or HTML via the URL, which is not properly handled when the PHP_SELF variable is used to handle a pun_page tag.


Provide references for further information: Can you share references or external links related to CVE-2006-1089?

{'name': 'punbb-header-xss(24982)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24982'}, {'name': '16891', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16891'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch'}, {'name': 'ADV-2006-0773', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0773'}, {'name': '19039', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19039'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1089?


Explain the CVE ID: What does the identifier CVE-2006-1090 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1090.

register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user registrations.


Provide references for further information: Can you share references or external links related to CVE-2006-1090?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.punbb.org/changelogs/1.2.10_to_1.2.11.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.punbb.org/download/patch/punbb-1.2.10_to_1.2.11.patch'}, {'name': 'ADV-2006-0773', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0773'}, {'name': 'punbb-register-ip-dos(24837)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24837'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1090?


Explain the CVE ID: What does the identifier CVE-2006-1091 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1091.

Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1091?

{'name': '20060303 Kaspersky Memory/CPU Usage Leak by design', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426699'}, {'name': '16942', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16942'}, {'name': '535', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/535'}, {'name': 'kaspersky-unspecified-dos(25221)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25221'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1091?


Explain the CVE ID: What does the identifier CVE-2006-1092 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1092.

Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or panic) via unknown attack vectors that cause cause the kmem_oversize arena to allocate a large amount of system memory that does not get freed.


Provide references for further information: Can you share references or external links related to CVE-2006-1092?

{'name': 'ADV-2006-0829', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0829'}, {'name': '16966', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16966'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm'}, {'name': 'solaris-proc-pagedata-dos(25152)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25152'}, {'name': '102159', 'tags': ['vendor-advisory', 'x_refsource_SUNALERT'], 'url': 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102159-1'}, {'name': '1015723', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015723'}, {'name': 'oval:org.mitre.oval:def:1618', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1618'}, {'name': '19128', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19128'}, {'name': '19716', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19716'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1092?


Explain the CVE ID: What does the identifier CVE-2006-1093 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1093.

Unspecified vulnerability in IBM WebSphere 5.0.2.10 through 5.0.2.15 and 5.1.1.4 through 5.1.1.9 allows remote attackers to obtain sensitive information via unknown attack vectors, which causes JSP source code to be revealed.


Provide references for further information: Can you share references or external links related to CVE-2006-1093?

{'name': '1015716', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015716'}, {'name': '16908', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16908'}, {'name': 'ADV-2006-0788', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21231377'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1093?


Explain the CVE ID: What does the identifier CVE-2006-1094 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1094.

SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execute arbitrary SQL commands via the fileid parameter to (1) info_db.php or (2) database.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1094?

{'name': '20060301 Woltlab Burning Board 2.x (Datenbank MOD fileid) MultipleVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426583'}, {'name': '23810', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23810'}, {'name': '16914', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16914'}, {'name': '23808', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23808'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=17'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1094?


Explain the CVE ID: What does the identifier CVE-2006-1095 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1095.

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-1095?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.modpython.org/fs_sec_warn.html'}, {'name': '16916', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16916'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.cgisecurity.com/2006/02/07'}, {'name': 'ADV-2006-0768', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0768'}, {'name': '19239', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19239'}, {'name': 'modpython-filesession-command-execution(24965)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24965'}, {'name': '1015764', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015764'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1095?


Explain the CVE ID: What does the identifier CVE-2006-1096 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1096.

Cross-site scripting (XSS) vulnerability in index.php in NZ Ecommerce allows remote attackers to inject arbitrary web script or HTML via the action parameter.  NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem


Provide references for further information: Can you share references or external links related to CVE-2006-1096?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html'}, {'name': '23600', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23600'}, {'name': '16931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16931'}, {'name': '19088', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19088'}, {'name': 'ADV-2006-0803', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1096?


Explain the CVE ID: What does the identifier CVE-2006-1097 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1097.

Multiple cross-site scripting (XSS) vulnerabilities in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allow remote attackers to inject arbitrary web script or HTML via the fileid parameter to (1) info_db.php or (2) database.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1097?

{'name': '20060301 Woltlab Burning Board 2.x (Datenbank MOD fileid) MultipleVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426583'}, {'name': '23811', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23811'}, {'name': '20060301 Woltlab Burning Board 2.x (Datenbank MOD fileid) MultipleVulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0033.html'}, {'name': 'wbb-multiple-xss(25004)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25004'}, {'name': '23809', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23809'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=17'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1097?


Explain the CVE ID: What does the identifier CVE-2006-1098 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1098.

Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the (1) informationID or (2) ParentCategory parameter to index.php. NOTE: the vendor has disputed this issue in a comment on the researcher's blog, but research by CVE suggests that this might be a legitimate problem


Provide references for further information: Can you share references or external links related to CVE-2006-1098?

{'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html'}, {'name': '16931', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16931'}, {'name': '23601', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23601'}, {'name': '19088', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19088'}, {'name': 'ADV-2006-0803', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0803'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1098?


Explain the CVE ID: What does the identifier CVE-2006-1099 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1099.

PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1099?

{'name': '16932', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16932'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1099?


Explain the CVE ID: What does the identifier CVE-2006-1100 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1100.

Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data.


Provide references for further information: Can you share references or external links related to CVE-2006-1100?

{'name': 'sauerbraten-sgetstr-bo(25083)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25083'}, {'name': '20060306 Multiple vulnerabilities in Cube engine 2005_08_29', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426867/100/0/threaded'}, {'name': '19199', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19199'}, {'name': '16986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16986'}, {'name': '20060306 Multiple vulnerabilities in Sauerbraten engine 2006_02_28', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426865/100/0/threaded'}, {'name': '19110', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19110'}, {'name': 'ADV-2006-0847', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0847'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/evilcube-adv.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/sauerbraten/sauerbraten/src/shared/cube.h?r1=1.7&r2=1.8'}, {'name': '19111', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19111'}, {'name': 'GLSA-200603-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml'}, {'name': 'ADV-2006-0848', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0848'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1100?


Explain the CVE ID: What does the identifier CVE-2006-1101 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1101.

The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.


Provide references for further information: Can you share references or external links related to CVE-2006-1101?

{'name': '20060306 Multiple vulnerabilities in Cube engine 2005_08_29', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426867/100/0/threaded'}, {'name': '19199', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19199'}, {'name': '16986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16986'}, {'name': '20060306 Multiple vulnerabilities in Sauerbraten engine 2006_02_28', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426865/100/0/threaded'}, {'name': '19110', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19110'}, {'name': 'ADV-2006-0847', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0847'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/evilcube-adv.txt'}, {'name': 'sauerbraten-multiple-dos(25085)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25085'}, {'name': '19111', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19111'}, {'name': 'GLSA-200603-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml'}, {'name': 'ADV-2006-0848', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0848'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1101?


Explain the CVE ID: What does the identifier CVE-2006-1102 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1102.

Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.


Provide references for further information: Can you share references or external links related to CVE-2006-1102?

{'name': '20060306 Multiple vulnerabilities in Cube engine 2005_08_29', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426867/100/0/threaded'}, {'name': '19199', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19199'}, {'name': '16986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16986'}, {'name': '20060306 Multiple vulnerabilities in Sauerbraten engine 2006_02_28', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426865/100/0/threaded'}, {'name': '548', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/548'}, {'name': '19110', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19110'}, {'name': 'ADV-2006-0847', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0847'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/evilcube-adv.txt'}, {'name': 'sauerbraten-sprintf-dos(25086)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25086'}, {'name': '19111', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19111'}, {'name': 'GLSA-200603-10', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml'}, {'name': 'ADV-2006-0848', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0848'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1102?


Explain the CVE ID: What does the identifier CVE-2006-1103 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1103.

engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2006-1103?

{'name': 'sauerbraten-engineserver-dos(25087)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25087'}, {'name': '16986', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16986'}, {'name': '20060306 Multiple vulnerabilities in Sauerbraten engine 2006_02_28', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426865/100/0/threaded'}, {'name': '550', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/550'}, {'name': 'ADV-2006-0848', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0848'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1103?


Explain the CVE ID: What does the identifier CVE-2006-1104 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1104.

Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage parameter in index.php; and the (2) USER_AGENT, (3) HTTP_REFERER, and (4) HTTP_HOST HTTP header fields as used in the book_vistor function in includes/functions.php.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.


Provide references for further information: Can you share references or external links related to CVE-2006-1104?

{'tags': ['x_refsource_MISC'], 'url': 'http://forum.pixelpost.org/showthread.php?t=3535'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.neosecurityteam.net/index.php?action=advisories&id=19'}, {'name': 'pixelpost-functions-sql-injection(25046)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25046'}, {'name': '20060304 Pixel Post Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426764/100/0/threaded'}, {'name': '16964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16964'}, {'name': 'ADV-2006-0823', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0823'}, {'name': 'pixelpost-index-sql-injection(25044)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25044'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1104?


Explain the CVE ID: What does the identifier CVE-2006-1105 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1105.

Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.


Provide references for further information: Can you share references or external links related to CVE-2006-1105?

{'tags': ['x_refsource_MISC'], 'url': 'http://forum.pixelpost.org/showthread.php?t=3535'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.neosecurityteam.net/index.php?action=advisories&id=19'}, {'name': '20060304 Pixel Post Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426764/100/0/threaded'}, {'name': '16964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16964'}, {'name': 'pixelpost-phpinfo-obtain-information(25048)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25048'}, {'name': 'ADV-2006-0823', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0823'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1105?


Explain the CVE ID: What does the identifier CVE-2006-1106 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1106.

Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message, (2) name, (3) url, and (4) email parameters when commenting on a post.  NOTE: the vendor has disputed some issues from the original disclosure, but due to the vagueness of the dispute, it is not clear whether the vendor is disputing this particular issue.


Provide references for further information: Can you share references or external links related to CVE-2006-1106?

{'name': 'pixelpost-functions-xss(25047)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25047'}, {'tags': ['x_refsource_MISC'], 'url': 'http://forum.pixelpost.org/showthread.php?t=3535'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.neosecurityteam.net/index.php?action=advisories&id=19'}, {'name': '20060304 Pixel Post Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426764/100/0/threaded'}, {'name': '16964', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16964'}, {'name': 'ADV-2006-0823', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0823'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1106?


Explain the CVE ID: What does the identifier CVE-2006-1107 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1107.

Cross-site scripting (XSS) vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to inject arbitrary web script or HTML via the nick parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1107?

{'name': 'ADV-2006-0860', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0860'}, {'name': '17017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17017'}, {'name': '595', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/595'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/93/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nmdeluxe.com/index.php'}, {'name': 'nmdeluxe-news-xss(25069)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25069'}, {'name': '19117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19117'}, {'name': '20060317 [eVuln] NMDeluxe XSS & SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428002/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1107?


Explain the CVE ID: What does the identifier CVE-2006-1108 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1108.

SQL injection vulnerability in news.php in NMDeluxe before 1.0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1108?

{'name': 'ADV-2006-0860', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0860'}, {'name': '17017', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17017'}, {'name': '595', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/595'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/93/summary.html'}, {'name': 'nmdeluxe-news-sql-injection(25070)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25070'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://nmdeluxe.com/index.php'}, {'name': '19117', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19117'}, {'name': '20060317 [eVuln] NMDeluxe XSS & SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428002/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1108?


Explain the CVE ID: What does the identifier CVE-2006-1109 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1109.

SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: it is not clear whether this report is associated with a specific product.  If not, then it should not be included in CVE.


Provide references for further information: Can you share references or external links related to CVE-2006-1109?

{'name': '16960', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16960'}, {'name': '19103', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19103'}, {'name': 'totalecommerce-index-sql-injection(25045)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25045'}, {'name': '20060304 Advisory: TotalECommerce (index.asp id) Remote SQL InjectionVulnerability.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426765/100/0/threaded'}, {'name': '530', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/530'}, {'name': 'ADV-2006-0840', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0840'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=18'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1109?


Explain the CVE ID: What does the identifier CVE-2006-1110 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1110.

Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or HTML via the message body in a new message.


Provide references for further information: Can you share references or external links related to CVE-2006-1110?

{'name': '1547', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1547'}, {'name': '23610', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23610'}, {'name': '19096', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19096'}, {'name': 'aztekforum-multiple-xss(25035)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25035'}, {'name': '16938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16938'}, {'name': '20060302 AZTEK forums 4.0 multiple vulnerabilities (PoC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426650/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1110?


Explain the CVE ID: What does the identifier CVE-2006-1111 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1111.

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, which reveals usernames and passwords in a MySQL error message, possibly due to a forced SQL error or SQL injection.


Provide references for further information: Can you share references or external links related to CVE-2006-1111?

{'name': '1547', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1547'}, {'name': '23611', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23611'}, {'name': '16938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16938'}, {'name': 'aztekforum-info-disclosure(25036)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25036'}, {'name': '20060302 AZTEK forums 4.0 multiple vulnerabilities (PoC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426650/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1111?


Explain the CVE ID: What does the identifier CVE-2006-1112 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1112.

Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, which displays the installation path in a MySQL error message.


Provide references for further information: Can you share references or external links related to CVE-2006-1112?

{'name': '1547', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1547'}, {'name': '539', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/539'}, {'name': '23612', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23612'}, {'name': '16938', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16938'}, {'name': '20060302 AZTEK forums 4.0 multiple vulnerabilities (PoC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426650/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1112?


Explain the CVE ID: What does the identifier CVE-2006-1113 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1113.

SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1113?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://loudblog.de/forum/viewtopic.php?id=590'}, {'name': '17023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17023'}, {'name': '20060307 Loudblog 0.41 SQL Injection, Local file read/include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426973/100/0/threaded'}, {'name': '19172', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19172'}, {'name': 'loudblog-podcast-sql-injection(25101)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25101'}, {'name': 'ADV-2006-0878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0878'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1113?


Explain the CVE ID: What does the identifier CVE-2006-1114 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1114.

Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrary files via a .. (dot dot) and trailing %00 (NULL) byte in the (1) template and (2) page parameters in (a) index.php, and the (3) language parameter in (b) inc/backend_settings.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1114?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://loudblog.de/forum/viewtopic.php?id=590'}, {'name': '17023', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17023'}, {'name': '20060307 Loudblog 0.41 SQL Injection, Local file read/include', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426973/100/0/threaded'}, {'name': 'loudblog-index-directory-traversal(25103)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25103'}, {'name': '19172', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19172'}, {'name': 'ADV-2006-0878', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0878'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1114?


Explain the CVE ID: What does the identifier CVE-2006-1115 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1115.

nCipher HSM before 2.22.6, when generating a Diffie-Hellman public/private key pair without any specified DiscreteLogGroup parameters, chooses random parameters that could allow an attacker to crack the private key in significantly less time than a brute force attack.


Provide references for further information: Can you share references or external links related to CVE-2006-1115?

{'name': 'ADV-2006-0862', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0862'}, {'name': '1015719', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015719'}, {'name': '20060308 nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427146/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ncipher.com/resources/95/sa12_insecure_generation_of_diffiehellman_keys'}, {'name': '17006', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17006'}, {'name': '19137', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19137'}, {'name': 'ncipher-hsm-weak-key(25060)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25060'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1115?


Explain the CVE ID: What does the identifier CVE-2006-1116 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1116.

The CBC-MAC integrity functions in the nCipher nCore API before 2.18 transmit the initialization vector IV as part of a message when the implementation uses a non-zero IV, which allows remote attackers to bypass integrity checks and modify messages without being detected.


Provide references for further information: Can you share references or external links related to CVE-2006-1116?

{'name': '20060308 nCipher Advisory #13: CBC-MAC IV misleading programming interface', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427150/100/0/threaded'}, {'name': 'ADV-2006-0862', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0862'}, {'name': 'ncipher-ncore-bypass-security(25062)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25062'}, {'name': '17011', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17011'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ncipher.com/resources/96/sa13_cbcmac_iv_misleading_programming_interface'}, {'name': '1015718', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015718'}, {'name': '19137', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19137'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1116?


Explain the CVE ID: What does the identifier CVE-2006-1117 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1117.

nCipher firmware before V10, as used by (1) nShield, (2) nForce, (3) netHSM, (4) payShield, (5) SecureDB, (6) DSE200 Document Sealing Engine, (7) Time Source Master Clock (TSMC), and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote attackers to obtain information about encryption keys and crack those keys with less effort than brute force.


Provide references for further information: Can you share references or external links related to CVE-2006-1117?

{'name': 'ADV-2006-0862', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0862'}, {'name': '20060309 nCipher Advisory #14: Presence of flaws in firmware security', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427151/100/0/threaded'}, {'name': 'ncipher-firmware-weak-security(25063)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25063'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ncipher.com/resources/97/sa14_presence_of_flaws_in_firmware_security'}, {'name': '1015718', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015718'}, {'name': '17012', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17012'}, {'name': '19137', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19137'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1117?


Explain the CVE ID: What does the identifier CVE-2006-1118 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1118.

SQL injection vulnerability in bmail before Aardvark PR9.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors involving GBK character sets.


Provide references for further information: Can you share references or external links related to CVE-2006-1118?

{'name': '19147', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19147'}, {'name': 'ADV-2006-0863', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0863'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=144412&release_id=399256'}, {'name': 'bmail-gbkcharacterset-sql-injection(25073)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25073'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1118?


Explain the CVE ID: What does the identifier CVE-2006-1119 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1119.

fantastico in Cpanel does not properly handle when it has insufficient permissions to perform certain file operations, which allows remote authenticated users to obtain the full pathname, which is leaked in a PHP error message.


Provide references for further information: Can you share references or external links related to CVE-2006-1119?

{'name': '20060307 Cpanel Path Disclosure Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426957/100/0/threaded'}, {'name': 'cpanel-fantastico-path-disclosure(25277)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25277'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1119?


Explain the CVE ID: What does the identifier CVE-2006-1120 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1120.

Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) its_url parameter in the documents page and (2) url parameter in the send_write page of (a) index.php; (3) subject, and (4) images parameters to (b) calendar.php; (5) bid, (6) replying_msg, (7) subject, (8) body, and (9) mid parameters to (c) forums.php; (10) subject and (11) message parameters to (d) inbox.php; (12) subject_color and (13) email parameters to (e) lostpassword.php; and the (14) c_name, (15) content_inicial, and (16) cid parameters to (f) mycontents.php.  NOTE: the calendar.php/day vector is already subsumed by CVE-2006-0220, and the calendar.php/month, calendar.php/year, and search.php/q parameters for calendar.php are already subsumed by CVE-2004-2511.


Provide references for further information: Can you share references or external links related to CVE-2006-1120?

{'name': 'dcpportal-multiple-scripts-xss(25279)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25279'}, {'name': '23979', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23979'}, {'name': '23981', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23981'}, {'name': '20060309 DCP Portal: Multiple XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427175/100/0/threaded'}, {'name': '23980', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23980'}, {'name': '17050', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17050'}, {'name': '392', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/392'}, {'name': '23978', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23978'}, {'name': '23976', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23976'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-001.txt'}, {'name': '23977', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23977'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1120?


Explain the CVE ID: What does the identifier CVE-2006-1121 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1121.

Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HTML via the query string to index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1121?

{'name': 'cutenews-index-script-xss(25052)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25052'}, {'name': '20060304 [KAPDA::#30] - CuteNews1.4.1 Cross_Site_Scripting Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426759/100/0/threaded'}, {'name': '16961', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16961'}, {'name': '1015726', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015726'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kapda.ir/advisory-277.html'}, {'name': '531', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/531'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1121?


Explain the CVE ID: What does the identifier CVE-2006-1122 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1122.

Cross-site scripting (XSS) vulnerability in Default.asp in D2KBlog 1.0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the msg parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1122?

{'name': '17035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17035'}, {'name': '559', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/559'}, {'name': 'ADV-2006-0896', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0896'}, {'name': 'd2kblog-default-msg-xss(25214)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25214'}, {'name': '23771', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23771'}, {'name': '20060308 [KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427103/100/0/threaded'}, {'name': '19177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1122?


Explain the CVE ID: What does the identifier CVE-2006-1123 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1123.

SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the memName parameter in a cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-1123?

{'name': '17035', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17035'}, {'name': '23770', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23770'}, {'name': 'd2kblog-memname-sql-injection(25215)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25215'}, {'name': '559', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/559'}, {'name': 'ADV-2006-0896', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0896'}, {'name': '20060308 [KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427103/100/0/threaded'}, {'name': '19177', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19177'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1123?


Explain the CVE ID: What does the identifier CVE-2006-1124 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1124.

Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER command.


Provide references for further information: Can you share references or external links related to CVE-2006-1124?

{'name': '19119', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19119'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.morx.org/rev.txt'}, {'name': '16997', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16997'}, {'name': '20060309 RevilloC MailServer 1.x "USER" Command Handling Remote Buffer Overflow Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427192/100/0/threaded'}, {'name': '20060307 RevilloC mail server USER command heap overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0910.html'}, {'name': 'revilloc-user-bo(25072)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25072'}, {'name': 'ADV-2006-0867', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0867'}, {'name': '1015739', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015739'}, {'name': '23735', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1124?


Explain the CVE ID: What does the identifier CVE-2006-1125 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1125.

Grisoft AVG Free 7.1, and other versions including 7.0.308, sets Everyone/Full Control permissions for certain update files including (1) upd_vers.cfg, (2) incavi.avm, and (3) unspecified drivers, which might allow local users to gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2006-1125?

{'name': '16952', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16952'}, {'name': '20060303 AVG 7 granting Everyone Full Control to updated files... even its drivers', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0631.html'}, {'name': '19118', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19118'}, {'name': '1015728', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015728'}, {'name': 'avg-update-gain-privilieges(25139)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25139'}, {'name': 'ADV-2006-0845', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0845'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.dslreports.com/forum/remark%2C15601404'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1125?


Explain the CVE ID: What does the identifier CVE-2006-1126 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1126.

Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTE_ADDR.


Provide references for further information: Can you share references or external links related to CVE-2006-1126?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00106-03022006'}, {'name': 'gallery-header-spoofing(25120)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/gallery_2.0.3_released'}, {'name': 'ADV-2006-0813', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0813'}, {'name': '20060303 Gallery 2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html'}, {'name': '19104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19104'}, {'name': '1015717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1126?


Explain the CVE ID: What does the identifier CVE-2006-1127 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1127.

Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For (X_FORWARDED_FOR) HTTP header, which is not properly handled when adding a comment to an album.


Provide references for further information: Can you share references or external links related to CVE-2006-1127?

{'name': '16940', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16940'}, {'name': '23596', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23596'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00106-03022006'}, {'name': 'gallery-getremotehostaddress-xss(25117)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25117'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/gallery_2.0.3_released'}, {'name': 'ADV-2006-0813', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0813'}, {'name': '20060303 Gallery 2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html'}, {'name': '19104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19104'}, {'name': '1015717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1127?


Explain the CVE ID: What does the identifier CVE-2006-1128 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1128.

Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows remote attackers to access and delete files by specifying the session in a cookie, which is used in constructing file paths before the session value is sanitized.


Provide references for further information: Can you share references or external links related to CVE-2006-1128?

{'name': 'gallery-sessionid-bypass-security(25118)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25118'}, {'name': '23597', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23597'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00106-03022006'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/gallery_2.0.3_released'}, {'name': '16948', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16948'}, {'name': 'ADV-2006-0813', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0813'}, {'name': '20060303 Gallery 2 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0621.html'}, {'name': '19104', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19104'}, {'name': '1015717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015717'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1128?


Explain the CVE ID: What does the identifier CVE-2006-1129 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1129.

SQL injection vulnerability in config.php in EKINboard 1.0.3 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the username cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-1129?

{'name': "20060308 [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427073/100/0/threaded'}, {'name': 'ADV-2006-0758', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0758'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/88/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ekinboard.com/forums/v1/viewtopic.php?id=469'}, {'name': '16861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16861'}, {'name': 'ekinboard-config-sql-injection(24922)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24922'}, {'name': '19045', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19045'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ekinboard.com/patch_for_1.0.3.txt'}, {'name': '23547', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23547'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1129?


Explain the CVE ID: What does the identifier CVE-2006-1130 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1130.

Cross-site scripting (XSS) vulnerability in EKINboard 1.0.3 allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in a BBCode img tag.


Provide references for further information: Can you share references or external links related to CVE-2006-1130?

{'name': "20060308 [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427073/100/0/threaded'}, {'name': '558', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/558'}, {'name': 'ADV-2006-0758', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0758'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/88/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ekinboard.com/forums/v1/viewtopic.php?id=469'}, {'name': '16861', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16861'}, {'name': '19045', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19045'}, {'name': '23546', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23546'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ekinboard.com/patch_for_1.0.3.txt'}, {'name': 'ekinboard-bbcode-xss(24921)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24921'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1130?


Explain the CVE ID: What does the identifier CVE-2006-1131 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1131.

Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the comment_title parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1131?

{'name': '16973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16973'}, {'name': 'bitweaver-titlefield-xss(25053)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25053'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kiki91.altervista.org/exploit/bitweaver_1.2.1_XSS.txt'}, {'name': 'ADV-2006-0837', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0837'}, {'name': '19101', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19101'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1131?


Explain the CVE ID: What does the identifier CVE-2006-1132 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1132.

SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the MainID parameter. NOTE: the SubjectID vector is already covered by CVE-2005-4729.


Provide references for further information: Can you share references or external links related to CVE-2006-1132?

{'name': '20060306 SQL injection & XSS IN vbzoom v1.11', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426874/100/0/threaded'}, {'name': '16955', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16955'}, {'name': '552', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/552'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1132?


Explain the CVE ID: What does the identifier CVE-2006-1133 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1133.

Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web script or HTML via the UserID parameter to (1) comment.php or (2) contact.php.  NOTE: the profile.php/UserName vector is already covered by CVE-2005-2441.


Provide references for further information: Can you share references or external links related to CVE-2006-1133?

{'name': '16956', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16956'}, {'name': '20060306 SQL injection & XSS IN vbzoom v1.11', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426874/100/0/threaded'}, {'name': 'vbzoom-comment-contact-xss(25090)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25090'}, {'name': '23813', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23813'}, {'name': '552', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/552'}, {'name': '16969', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16969'}, {'name': '23812', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23812'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1133?


Explain the CVE ID: What does the identifier CVE-2006-1134 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1134.

SQL injection vulnerability in CyBoards PHP Lite 1.25, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the parent parameter to (1) post.php and possibly (2) process_post.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1134?

{'name': '19135', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19135'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gold-sonata.com/forums/read.php?board=1&id=17271'}, {'name': '582', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/582'}, {'name': '23692', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23692'}, {'name': '20060314 [eVuln] CyBoards PHP Lite SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427623/100/0/threaded'}, {'name': '17107', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17107'}, {'name': 'ADV-2006-0820', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0820'}, {'name': '16987', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16987'}, {'name': 'cyboards-processpost-sql-injection(25061)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25061'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/91/description.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1134?


Explain the CVE ID: What does the identifier CVE-2006-1135 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1135.

Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) keyword parameter to search.php or (2) username parameter to comments_do.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1135?

{'name': '17044', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17044'}, {'name': 'sblog-username-xss(25111)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25111'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kiki91.altervista.org/exploit/sBlog_0.72_xss.txt'}, {'name': 'ADV-2006-0883', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0883'}, {'name': '19151', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19151'}, {'name': '23759', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23759'}, {'name': '23760', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23760'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1135?


Explain the CVE ID: What does the identifier CVE-2006-1136 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1136.

Buffer overflow in the PostScript file interpreter code for Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows attackers to cause a denial of service via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1136?

{'name': '23724', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23724'}, {'name': 'xerox-postscript-interpreter-dos(25172)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25172'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf'}, {'name': 'ADV-2006-0857', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0857'}, {'name': '19146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19146'}, {'name': '17014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17014'}, {'name': '1015738', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015738'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1136?


Explain the CVE ID: What does the identifier CVE-2006-1137 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1137.

Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports".


Provide references for further information: Can you share references or external links related to CVE-2006-1137?

{'name': '23726', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23726'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf'}, {'name': 'ADV-2006-0857', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0857'}, {'name': '19146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19146'}, {'name': '17014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17014'}, {'name': 'xerox-postscript-tcpip-dos(25174)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25174'}, {'name': '23725', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23725'}, {'name': '1015738', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015738'}, {'name': 'xerox-postscript-navigate-dos(25173)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25173'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1137?


Explain the CVE ID: What does the identifier CVE-2006-1138 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1138.

Unspecified vulnerability in the web server code in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allows remote attackers to cause a denial of service (memory corruption) via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1138?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf'}, {'name': 'ADV-2006-0857', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0857'}, {'name': '19146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19146'}, {'name': 'xerox-web-corruption-dos(25175)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25175'}, {'name': '23727', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23727'}, {'name': '17014', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17014'}, {'name': '1015738', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015738'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1138?


Explain the CVE ID: What does the identifier CVE-2006-1139 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1139.

Unspecified vulnerability in the ESS/ Network Controller in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, causes the Immediate Image Overwrite feature to fail after a power loss, which could leave data exposed to attack.


Provide references for further information: Can you share references or external links related to CVE-2006-1139?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf'}, {'name': 'ADV-2006-0857', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0857'}, {'name': '19146', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19146'}, {'name': 'xerox-image-overwrite-dos(25176)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25176'}, {'name': '23728', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23728'}, {'name': '1015738', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015738'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1139?


Explain the CVE ID: What does the identifier CVE-2006-1140 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1140.

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the cat_id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1140?

{'name': '19181', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19181'}, {'name': 'redblog-catid-sql-injection(25122)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25122'}, {'name': '17041', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17041'}, {'name': 'ADV-2006-0894', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0894'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.x128.net/redblog-05-remote-sql-injection.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1140?


Explain the CVE ID: What does the identifier CVE-2006-1141 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1141.

Buffer overflow in qmailadmin.c in QmailAdmin before 1.2.10 allows remote attackers to execute arbitrary code via a long PATH_INFO environment variable.