Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1609.

Unspecified vulnerability in Hitachi XFIT/S, XFIT/S/JCA, XFIT/S/ZGN, and XFIT/S ZENGIN TCP/IP Procedure allows remote attackers to cause a denial of service (server process and transfer control process stop) when the products "receive data unexpectedly".


Provide references for further information: Can you share references or external links related to CVE-2006-1609?

{'name': '17329', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17329'}, {'name': '19472', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19472'}, {'name': 'xfits-data-dos(25567)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25567'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi-support.com/security_e/vuls_e/HS06-004_e/index-e.html'}, {'name': '24309', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24309'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1609?


Explain the CVE ID: What does the identifier CVE-2006-1610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1610.

PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Autonomous LAN party (ALP), allows remote attackers to execute arbitrary PHP code via a URL in the libpath parameter.  NOTE: this only occurs when register_globals is disabled.


Provide references for further information: Can you share references or external links related to CVE-2006-1610?

{'name': '17434', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17434'}, {'name': 'squery-file-include(25605)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25605'}, {'name': 'ADV-2006-1204', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1204'}, {'name': '1629', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1629'}, {'name': '19482', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19482'}, {'name': '20060401 SQuery <= 4.5 Remote File Inclusion Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429611/100/0/threaded'}, {'name': '24400', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24400'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1610?


Explain the CVE ID: What does the identifier CVE-2006-1611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1611.

Directory traversal vulnerability in KGB Archiver before 1.1.5.22 allows remote attackers to overwrite arbitrary files wile decompressing an archive, possibly due to directory traversal sequences in a filename.


Provide references for further information: Can you share references or external links related to CVE-2006-1611?

{'name': 'ADV-2006-1207', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1207'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=162546&release_id=406411'}, {'name': '17363', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17363'}, {'name': 'kgb-archiver-archive-directory-traversal(25606)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25606'}, {'name': '19511', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19511'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1611?


Explain the CVE ID: What does the identifier CVE-2006-1612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1612.

Multiple cross-site scripting (XSS) vulnerabilities in visview.php in aWebNews 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) yname, (2) emailadd, (3) subject, and (4) comment parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-1612?

{'name': 'ADV-2006-1196', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1196'}, {'name': '20060414 [eVuln] aWebNews Multiple XSS and SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431007/100/0/threaded'}, {'name': '19487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19487'}, {'name': '24333', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24333'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/116/summary.html'}, {'name': 'awebnews-visview-xss(25589)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25589'}, {'name': '707', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/707'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1612?


Explain the CVE ID: What does the identifier CVE-2006-1613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1613.

Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user123 variable in (a) login.php or (b) fpass.php; or (2) cid parameter to (c) visview.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1613?

{'name': 'ADV-2006-1196', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1196'}, {'name': '24336', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24336'}, {'name': '24334', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24334'}, {'name': '24335', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24335'}, {'name': '20060414 [eVuln] aWebNews Multiple XSS and SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431007/100/0/threaded'}, {'name': '19487', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19487'}, {'name': 'awebnews-multiple-sql-injection(25590)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25590'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/116/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1613?


Explain the CVE ID: What does the identifier CVE-2006-1614 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1614.

Integer overflow in the cli_scanpe function in the PE header parser (libclamav/pe.c) in Clam AntiVirus (ClamAV) before 0.88.1, when ArchiveMaxFileSize is disabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2006-1614?

{'name': '19567', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19567'}, {'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1258', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1258'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638'}, {'name': 'clamav-pe-overflow(25660)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25660'}, {'name': '24457', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24457'}, {'name': '1015887', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015887'}, {'name': '19570', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19570'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://up2date.astaro.com/2006/05/low_up2date_6202.html'}, {'name': 'GLSA-200604-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml'}, {'name': '19608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19608'}, {'name': '19534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19534'}, {'name': '19564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19564'}, {'name': '19536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19536'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'SUSE-SA:2006:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html'}, {'name': 'MDKSA-2006:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:067'}, {'name': '17388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17388'}, {'name': 'DSA-1024', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1024'}, {'name': '23719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23719'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '2006-0020', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0020'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.overflow.pl/adv/clamavupxinteger.txt'}, {'name': '20060406 [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430405/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1614?


Explain the CVE ID: What does the identifier CVE-2006-1615 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1615.

Multiple format string vulnerabilities in the logging code in Clam AntiVirus (ClamAV) before 0.88.1 might allow remote attackers to execute arbitrary code.  NOTE: as of 20060410, it is unclear whether this is a vulnerability, as there is some evidence that the arguments are actually being sanitized properly.


Provide references for further information: Can you share references or external links related to CVE-2006-1615?

{'name': '19567', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19567'}, {'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1258', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1258'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638'}, {'name': '24458', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24458'}, {'name': '19570', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19570'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://up2date.astaro.com/2006/05/low_up2date_6202.html'}, {'name': 'GLSA-200604-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml'}, {'name': '19608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19608'}, {'name': '19534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19534'}, {'name': '19564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19564'}, {'name': '19536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19536'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'SUSE-SA:2006:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html'}, {'name': 'MDKSA-2006:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:067'}, {'name': '17388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17388'}, {'name': 'DSA-1024', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1024'}, {'name': '23719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23719'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': 'clamav-output-format-string(25661)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25661'}, {'name': '2006-0020', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1615?


Explain the CVE ID: What does the identifier CVE-2006-1616 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1616.

Multiple SQL injection vulnerabilities in Advanced Poll 2.02 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1616?

{'tags': ['x_refsource_MISC'], 'url': 'http://ns79.hosteur.com/~secuti/advancedpoll.txt'}, {'name': 'advancedpoll-comments-page-sql-injection(25676)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25676'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1616?


Explain the CVE ID: What does the identifier CVE-2006-1617 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1617.

Multiple cross-site scripting (XSS) vulnerabilities in Advanced Poll 2.02 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to comments.php or (2) poll_id parameter to page.php.  NOTE: it is possible that this issue is resultant from CVE-2006-1616.


Provide references for further information: Can you share references or external links related to CVE-2006-1617?

{'tags': ['x_refsource_MISC'], 'url': 'http://ns79.hosteur.com/~secuti/advancedpoll.txt'}, {'name': 'advancedpoll-comments-page-xss(25677)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25677'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1617?


Explain the CVE ID: What does the identifier CVE-2006-1618 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1618.

Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments.


Provide references for further information: Can you share references or external links related to CVE-2006-1618?

{'name': '20060403 Format string in Doomsday 1.8.6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429857/100/0/threaded'}, {'name': '1015860', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015860'}, {'name': 'GLSA-200604-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-05.xml'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/doomsdayfs-adv.txt'}, {'name': 'doomsday-conmessage-conprintf-format-string(25622)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25622'}, {'name': '20060403 Format string in Doomsday 1.8.6', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044865.html'}, {'name': '19519', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19519'}, {'name': '17369', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17369'}, {'name': '19515', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19515'}, {'name': 'ADV-2006-1221', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1221'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1618?


Explain the CVE ID: What does the identifier CVE-2006-1619 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1619.

IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a large header.


Provide references for further information: Can you share references or external links related to CVE-2006-1619?

{'name': 'websphere-http-header-dos(25619)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25619'}, {'name': 'ADV-2006-1214', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1214'}, {'name': '1015857', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015857'}, {'name': 'PQ62144', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg21053738'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1619?


Explain the CVE ID: What does the identifier CVE-2006-1620 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1620.

admin/accounts/AccountActions.asp in Hosting Controller 2002 RC 1 allows remote attackers to modify passwords of other users, probably via an "Update User" ActionType with a modified UserName parameter and the PassCheck parameter set to TRUE.  It was later reported that the vulnerability is present in 6.1 Hotfix 3.3 and earlier.


Provide references for further information: Can you share references or external links related to CVE-2006-1620?

{'name': '28973', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28973'}, {'name': '20071213 Hosting Controller - Multiple Security Bugs (Extremely Critical)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/485028/100/0/threaded'}, {'name': '20060402 Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429731/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://hostingcontroller.com/english/logs/Post-Hotfix-3_3-sec-Patch-ReleaseNotes.html'}, {'name': '4730', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/4730'}, {'name': '26862', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/26862'}, {'name': '24773', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24773'}, {'name': 'hosting-controller-accountactions-password(25673)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25673'}, {'name': 'hostingcontroller-multiple-security-bypass(39038)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/39038'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1620?


Explain the CVE ID: What does the identifier CVE-2006-1621 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1621.

Directory traversal vulnerability in admin/folders/saveuploadfiles.asp in Hosting Controller 2002 RC 1 allows remote authenticated users to overwrite arbitrary files via an absolute path in the OpenPath parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1621?

{'name': 'hosting-controller-Saveupload-file-upload(25675)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25675'}, {'name': '20060402 Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429731/100/0/threaded'}, {'name': '24772', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24772'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1621?


Explain the CVE ID: What does the identifier CVE-2006-1622 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1622.

Cross-site scripting (XSS) vulnerability in PHPSelect linksubmit allows remote attackers to inject arbitrary web script or HTML via (1) the description parameter to linklist.php and possibly other vectors involving (2) index.php and (3) linksubmit.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1622?

{'name': '20060401 linksubmit <= All version Html Tag Injector in index.php', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429608/100/0/threaded'}, {'name': 'linksubmit-linksubmit-xss(25607)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25607'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1622?


Explain the CVE ID: What does the identifier CVE-2006-1623 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1623.

Unspecified vulnerability in main.php in an unspecified "file created by Andries Bruinsma," possibly a FleXiBle Development (FXB) application, allows remote attackers to include and execute arbitrary PHP code.  NOTE: this disclosure is extremely vague and has very little information about the specific vulnerability type.  In addition, there is little public information on the named product. Finally, an XSS vector is implied in the subject line, but because there is no other information and evidence of a cut-and-paste error, it will not be assigned a separate CVE identifier unless additional information is provided.


Provide references for further information: Can you share references or external links related to CVE-2006-1623?

{'name': '20060404 FleXiBle Development Script Remote Command Exucetion And XSS Attacking', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-April/000680.html'}, {'name': '20060401 FleXiBle Development Script Remote Command Exucetion And XSS Attacking', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429613/100/0/threaded'}, {'name': 'flexible-development-main-xss(25603)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25603'}, {'name': '20060405 Re: FleXiBle Development Script Remote Command Exucetion And XSS Attacking', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430334/100/0/threaded'}, {'name': 'flexible-development-main-command-execution(25600)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25600'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1623?


Explain the CVE ID: What does the identifier CVE-2006-1624 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1624.

The default configuration of syslogd in the Linux sysklogd package does not enable the -x (disable name lookups) option, which allows remote attackers to cause a denial of service (traffic amplification) via messages with spoofed source IP addresses.


Provide references for further information: Can you share references or external links related to CVE-2006-1624?

{'name': '20060331 DoS-ing sysklogd?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429618/100/0/threaded'}, {'name': '20060402 RE: DoS-ing sysklogd?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429739/100/0/threaded'}, {'name': 'sysklogd-sourceip-dos(25672)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25672'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1624?


Explain the CVE ID: What does the identifier CVE-2006-1625 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1625.

Cross-site scripting (XSS) vulnerability in inc/functions_post.php in MyBB (aka MyBulletinBoard) 1.10 allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in a BBCode email tag, as demonstrated using the onmousemove event.


Provide references for further information: Can you share references or external links related to CVE-2006-1625?

{'name': '17368', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17368'}, {'name': '19516', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19516'}, {'name': 'mybb-email-img-bbcode-xss(25615)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25615'}, {'name': '24375', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24375'}, {'name': 'ADV-2006-1216', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1216'}, {'name': '20060402 MyBB 1.10 New CrossSiteScripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429748/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1625?


Explain the CVE ID: What does the identifier CVE-2006-1626 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1626.

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: this is a different vulnerability than CVE-2006-1192.


Provide references for further information: Can you share references or external links related to CVE-2006-1626?

{'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/'}, {'name': '17404', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17404'}, {'name': 'ADV-2006-2319', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2319'}, {'name': '1016291', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016291'}, {'name': 'oval:org.mitre.oval:def:1842', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1842'}, {'name': 'oval:org.mitre.oval:def:1881', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1881'}, {'name': 'oval:org.mitre.oval:def:1604', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1604'}, {'name': 'oval:org.mitre.oval:def:1806', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1806'}, {'name': 'ADV-2006-1218', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1218'}, {'name': 'MS06-021', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021'}, {'name': '19521', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19521'}, {'name': '20060403 Another Internet Explorer Address Bar Spoofing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429719/100/0/threaded'}, {'name': '20060721 about bid 17404', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/440851/100/100/threaded'}, {'name': '20060404 Another way to spoof Internet Explorer Address Bar', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429891/100/0/threaded'}, {'name': 'oval:org.mitre.oval:def:1600', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1600'}, {'name': 'oval:org.mitre.oval:def:1918', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1918'}, {'name': 'ie-swf-addressbar-spoofing(25634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1626?


Explain the CVE ID: What does the identifier CVE-2006-1627 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1627.

Adobe Document Server for Reader Extensions 6.0 does not provide proper access control, which allows remote authenticated users to perform privileged actions by modifying the (1) actionID and (2) pageID parameters.  NOTE: due to an error during reservation, this identifier was inadvertently associated with multiple issues.  Other CVE identifiers have been assigned to handle other problems that are covered by the same disclosure.


Provide references for further information: Can you share references or external links related to CVE-2006-1627?

{'name': '20060413 Secunia Research: Adobe Document Server for Reader ExtensionsMultiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430869/100/0/threaded'}, {'name': 'adobe-access-control-bypass(25769)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25769'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/322699.html'}, {'name': '1015905', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015905'}, {'name': '15924', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/15924'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2005-68/advisory/'}, {'name': 'ADV-2006-1342', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1342'}, {'name': '17500', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17500'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1627?


Explain the CVE ID: What does the identifier CVE-2006-1628 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1628.

Adobe LiveCycle Workflow 7.01 and LiveCycle Forum Manager 7.01 allows users to authenticate and perform privileged actions when their account is marked "OBSOLETE" but the account is also active, within the authentication system.


Provide references for further information: Can you share references or external links related to CVE-2006-1628?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.adobe.com/support/techdocs/333036.html'}, {'name': '1015906', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015906'}, {'name': '19620', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19620'}, {'name': 'ADV-2006-1343', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1343'}, {'name': 'adobe-livecycle-information-disclosure(25779)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25779'}, {'name': '17511', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17511'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1628?


Explain the CVE ID: What does the identifier CVE-2006-1629 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1629.

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.


Provide references for further information: Can you share references or external links related to CVE-2006-1629?

{'name': 'openvpn-ldpreload-code-execution(25667)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25667'}, {'name': 'MDKSA-2006:069', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:069'}, {'name': 'ADV-2006-1261', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1261'}, {'name': '17392', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17392'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://openvpn.net/changelog.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.osreviews.net/reviews/security/openvpn-print'}, {'name': '19531', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19531'}, {'name': 'DSA-1045', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1045'}, {'name': '19598', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19598'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/mailarchive/forum.php?thread_id=10093825&forum_id=8482'}, {'name': '19837', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19837'}, {'name': '24444', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24444'}, {'name': '19897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19897'}, {'name': 'SUSE-SR:2006:009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_04_28.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1629?


Explain the CVE ID: What does the identifier CVE-2006-1630 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1630.

The cli_bitset_set function in libclamav/others.c in Clam AntiVirus (ClamAV) before 0.88.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger an "invalid memory access."


Provide references for further information: Can you share references or external links related to CVE-2006-1630?

{'name': '19567', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19567'}, {'name': '17951', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17951'}, {'name': 'ADV-2006-1258', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1258'}, {'name': 'ADV-2006-1779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1779'}, {'name': 'TA06-132A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132A.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=407078&group_id=86638'}, {'name': '19570', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19570'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://up2date.astaro.com/2006/05/low_up2date_6202.html'}, {'name': '24459', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24459'}, {'name': 'GLSA-200604-06', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-06.xml'}, {'name': '19608', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19608'}, {'name': '19534', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19534'}, {'name': '19564', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19564'}, {'name': '19536', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19536'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00003.html'}, {'name': 'SUSE-SA:2006:020', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2006-Apr/0002.html'}, {'name': 'MDKSA-2006:067', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:067'}, {'name': '17388', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17388'}, {'name': 'DSA-1024', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1024'}, {'name': '23719', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/23719'}, {'name': '20077', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20077'}, {'name': '2006-0020', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2006/0020'}, {'name': 'clamav-others-dos(25662)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25662'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1630?


Explain the CVE ID: What does the identifier CVE-2006-1631 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1631.

Unspecified vulnerability in the HTTP compression functionality in Cisco CSS 11500 Series Content Services switches allows remote attackers to cause a denial of service (device reload) via (1) "valid, but obsolete" or (2) "specially crafted" HTTP requests.


Provide references for further information: Can you share references or external links related to CVE-2006-1631?

{'name': 'ADV-2006-1257', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1257'}, {'name': '1015870', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015870'}, {'name': '20060405 Cisco 11500 Content Services Switch HTTP Request Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20060405-css.shtml'}, {'name': 'cisco-css-http-comp-dos(25642)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25642'}, {'name': '19552', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19552'}, {'name': '24433', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24433'}, {'name': '17383', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17383'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1631?


Explain the CVE ID: What does the identifier CVE-2006-1634 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1634.

Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1634?

{'name': '17360', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17360'}, {'name': '20060402 Multiple Vulnerabilities in LucidCMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429744'}, {'name': 'lucidcms-index-login-panel-xss(25632)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25632'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1634?


Explain the CVE ID: What does the identifier CVE-2006-1635 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1635.

LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/translator.php, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2006-1635?

{'name': '20060402 Multiple Vulnerabilities in LucidCMS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429744'}, {'name': 'lucidcms-translator-path-disclosure(25633)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25633'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1635?


Explain the CVE ID: What does the identifier CVE-2006-1636 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1636.

PHP remote file inclusion vulnerability in get_header.php in VWar 1.5.0 R12 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwar_root parameter.  NOTE: this is a different vulnerability than CVE-2006-1503.


Provide references for further information: Can you share references or external links related to CVE-2006-1636?

{'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/VWar_1.5.0_R12.pl'}, {'name': '24480', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24480'}, {'name': 'ADV-2006-1228', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1228'}, {'name': '20060402 VWar <= 1.5.0 R12 Remote File Inclusion Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429742/100/0/threaded'}, {'name': '19524', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19524'}, {'name': '17358', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17358'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1636?


Explain the CVE ID: What does the identifier CVE-2006-1637 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1637.

Multiple cross-site scripting (XSS) vulnerabilities in aWebBB 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) tname or (2) fpost parameters to (a) post.php; (3) fullname, (4) emailadd, (5) country, (6) sig, or (7) otherav parameters to (b) editac.php; or (8) fullname, (9) emailadd, or (10) country parameters to (c) register.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1637?

{'name': '24339', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24339'}, {'name': 'awebbb-multiple-xss(25585)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25585'}, {'name': '19486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19486'}, {'name': '20060415 [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431064/100/0/threaded'}, {'name': '24338', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24338'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/117/summary.html'}, {'name': 'ADV-2006-1197', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1197'}, {'name': '17352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17352'}, {'name': '24337', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24337'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1637?


Explain the CVE ID: What does the identifier CVE-2006-1638 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1638.

Multiple SQL injection vulnerabilities in aWebBB 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter to (a) accounts.php, (b) changep.php, (c) editac.php, (d) feedback.php, (e) fpass.php, (f) login.php, (g) post.php, (h) reply.php, or (i) reply_log.php; (2) p parameter to (j) dpost.php; (3) c parameter to (k) list.php or (l) ndis.php; or (12) q parameter to (m) search.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1638?

{'name': '24348', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24348'}, {'name': '24351', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24351'}, {'name': '24345', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24345'}, {'name': '24346', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24346'}, {'name': '19486', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19486'}, {'name': '24343', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24343'}, {'name': '20060415 [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431064/100/0/threaded'}, {'name': '24342', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24342'}, {'name': '24349', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24349'}, {'name': 'awebbb-multiple-sql-injection(25587)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25587'}, {'name': '24352', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24352'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/117/summary.html'}, {'name': 'ADV-2006-1197', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1197'}, {'name': '24347', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24347'}, {'name': '24350', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24350'}, {'name': '24341', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24341'}, {'name': '17352', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17352'}, {'name': '24340', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24340'}, {'name': '24344', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24344'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1638?


Explain the CVE ID: What does the identifier CVE-2006-1639 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1639.

SQL injection vulnerability in index.php in wpBlog 0.4 allows remote attackers to execute arbitrary SQL commands via the postid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1639?

{'name': '24385', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24385'}, {'name': 'wpblog-index-sql-injection(25628)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25628'}, {'name': '17381', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17381'}, {'name': 'ADV-2006-1238', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1238'}, {'name': '1015951', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015951'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/119/summary.html'}, {'name': '734', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/734'}, {'name': '19538', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19538'}, {'name': '20060417 [eVuln] Wire Plastik wpBlog SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431186/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1639?


Explain the CVE ID: What does the identifier CVE-2006-1640 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1640.

Cross-site scripting (XSS) vulnerability in news.php in CzarNews 1.14 allows remote attackers to inject arbitrary web script or HTML via the email parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1640?

{'name': '1015957', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015957'}, {'name': 'ADV-2006-1237', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1237'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/118/summary.html'}, {'name': '19541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19541'}, {'name': '732', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/732'}, {'name': '20060417 [eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431132/100/0/threaded'}, {'name': '24381', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24381'}, {'name': '17380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17380'}, {'name': 'czarnews-news-xss(25623)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25623'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1640?


Explain the CVE ID: What does the identifier CVE-2006-1641 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1641.

Multiple SQL injection vulnerabilities in CzarNews 1.14 allow remote attackers to execute arbitrary SQL commands via the (1) usern or (2) passw parameters to (a) cn_auth.php, (3) s parameter to (b) news.php, or (4) a parameter to (c) dpost.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1641?

{'name': '1015957', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015957'}, {'name': '24383', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24383'}, {'name': 'ADV-2006-1237', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1237'}, {'name': 'czarnews-multiple-sql-injection(25624)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25624'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/118/summary.html'}, {'name': '19541', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19541'}, {'name': '20060417 [eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431132/100/0/threaded'}, {'name': '17380', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17380'}, {'name': '24382', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24382'}, {'name': '24384', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24384'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1641?


Explain the CVE ID: What does the identifier CVE-2006-1642 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1642.

Cross-site scripting (XSS) vulnerability in Interact 2.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) the search_terms parameter to (a) search.php, and (2) the first_name, (3) last_name, (4) email, (5) password, and (6) confirm_password parameters to (b) userinput.php.  NOTE: the provenance of this information is unknown; the details are obtained from third party.  In addition, the lack of precision in the third party descriptions makes it unclear whether the named vectors are correct.


Provide references for further information: Can you share references or external links related to CVE-2006-1642?

{'name': '19488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19488'}, {'name': '24461', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24461'}, {'name': 'interact-search-xss(25652)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25652'}, {'name': '24389', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24389'}, {'name': 'ADV-2006-1244', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1244'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1642?


Explain the CVE ID: What does the identifier CVE-2006-1643 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1643.

SQL injection vulnerability in login.php in Interact 2.1.1 allows remote attackers to execute arbitrary SQL commands via the user_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party.


Provide references for further information: Can you share references or external links related to CVE-2006-1643?

{'name': '19488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19488'}, {'name': '17385', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17385'}, {'name': 'interact-login-sql-injection(25653)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25653'}, {'name': 'ADV-2006-1244', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1244'}, {'name': '24390', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24390'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1643?


Explain the CVE ID: What does the identifier CVE-2006-1644 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1644.

login.php in Interact 2.1.1 generates different responses depending on whether or not a username is valid, which allows remote attackers to determine valid usernames.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1644?

{'name': '19488', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19488'}, {'name': 'ADV-2006-1244', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1244'}, {'name': '24388', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24388'}, {'name': 'interact-login-error-info-disclosure(25651)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25651'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1644?


Explain the CVE ID: What does the identifier CVE-2006-1645 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1645.

Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows remote attackers to inject arbitrary web script or HTML and gain leverage to execute arbitrary PHP code via the User-Agent HTTP header, which is displayed by admin/modules/general/statistic.php in the administration panel.


Provide references for further information: Can you share references or external links related to CVE-2006-1645?

{'name': '19470', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19470'}, {'name': '24327', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24327'}, {'name': '17353', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17353'}, {'name': 'reloadcms-useragent-xss(25604)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25604'}, {'name': 'ADV-2006-1193', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1193'}, {'name': '20060402 ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429666/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1645?


Explain the CVE ID: What does the identifier CVE-2006-1646 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1646.

The Internet Key Exchange version 1 (IKEv1) implementation (isakmp_agg.c) in the Shoichi Sakane KAME Project racoon, as used by NetBSD 1.6, 2.x before 20060119, certain FreeBSD releases, and possibly other distributions of BSD or Linux operating systems, when running in aggressive mode, allows remote attackers to cause a denial of service (daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.


Provide references for further information: Can you share references or external links related to CVE-2006-1646?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en'}, {'name': 'NetBSD-SA2006-003', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2006-003.txt.asc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://mail-index.netbsd.org/source-changes/2006/01/19/0017.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/'}, {'name': '19463', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19463'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1646?


Explain the CVE ID: What does the identifier CVE-2006-1647 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1647.

An unspecified "logical programming mistake" in SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service via a large packet to the Teacher discovery port (UDP port 5496), which causes a thread to terminate and prevents communications on that port.


Provide references for further information: Can you share references or external links related to CVE-2006-1647?

{'name': '20060404 SMART Technologies SynchronEyes Remote Denial of Services', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429843/100/0/threaded'}, {'name': '17373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17373'}, {'name': 'synchroneyes-datagram-dos(25659)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25659'}, {'name': 'ADV-2006-1241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1241'}, {'name': '1015869', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015869'}, {'name': '19535', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19535'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1647?


Explain the CVE ID: What does the identifier CVE-2006-1648 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1648.

SMART SynchronEyes Student and Teacher 6.0, and possibly earlier versions, allows remote attackers to cause a denial of service (memory consumption) via a certain packet to the Teacher discovery port that causes SynchronEyes to connect to the attacker's machine and read a value that is used as a parameter to malloc.


Provide references for further information: Can you share references or external links related to CVE-2006-1648?

{'name': '20060404 SMART Technologies SynchronEyes Remote Denial of Services', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429843/100/0/threaded'}, {'name': '17373', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17373'}, {'name': 'ADV-2006-1241', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1241'}, {'name': '1015869', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015869'}, {'name': '24392', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24392'}, {'name': '19535', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19535'}, {'name': 'synchroneyes-packet-dos(25663)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25663'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1648?


Explain the CVE ID: What does the identifier CVE-2006-1649 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1649.

The "restore to" selection in the "quarantine a file" capability of ESET NOD32 before 2.51.26 allows a restore to any directory that permits read access by the invoking user, which allows local users to create new files despite write-access directory permissions.


Provide references for further information: Can you share references or external links related to CVE-2006-1649?

{'name': '24393', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24393'}, {'name': '1015867', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015867'}, {'name': '17374', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17374'}, {'name': '672', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/672'}, {'name': 'nod32-restoreto-file-upload(25640)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25640'}, {'name': 'ADV-2006-1242', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1242'}, {'name': '20060404 NOD32 local privilege escalation vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429892/100/0/threaded'}, {'name': '19054', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19054'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1649?


Explain the CVE ID: What does the identifier CVE-2006-1650 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1650.

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.  NOTE: a followup was unable to replicate this issue.


Provide references for further information: Can you share references or external links related to CVE-2006-1650?

{'name': '20060404 Re: Another Internet Explorer Address Bar Spoofing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429927/100/0/threaded'}, {'name': '20060406 Re: Re: Another Internet Explorer Address Bar Spoofing Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430348/30/5730/threaded'}, {'name': 'ie-swf-addressbar-spoofing(25634)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1650?


Explain the CVE ID: What does the identifier CVE-2006-1651 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1651.

Microsoft ISA Server 2004 allows remote attackers to bypass certain filtering rules, including ones for (1) ICMP and (2) TCP, via IPv6 packets.  NOTE: An established researcher has disputed this issue, saying that "Neither ISA Server 2004 nor Windows 2003 Basic Firewall support IPv6 filtering ... This is different network protocol.


Provide references for further information: Can you share references or external links related to CVE-2006-1651?

{'name': '20060403 Bypassing ISA Server 2004 with IPv6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429816/100/0/threaded'}, {'name': '20060404 Re: Bypassing ISA Server 2004 with IPv6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429846/100/0/threaded'}, {'name': '20060405 Re: Re: Bypassing ISA Server 2004 with IPv6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430281/100/0/threaded'}, {'name': '20060410 Re: Bypassing ISA Server 2004 with IPv6', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430684/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1651?


Explain the CVE ID: What does the identifier CVE-2006-1652 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1652.

Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-assisted remote attackers to execute arbitrary code via a malicious server that sends a long string to a client that connects on TCP port 5900, which triggers an overflow in Log::ReallyPrint; and (2) allow remote attackers to cause a denial of service (server crash) via a long HTTP GET request to TCP port 5800, which triggers an overflow in VNCLog::ReallyPrint.


Provide references for further information: Can you share references or external links related to CVE-2006-1652?

{'name': '1642', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1642'}, {'name': 'untr@vnc-error-bo(25648)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25648'}, {'name': '1643', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1643'}, {'name': 'ultr@vnc-vnclogreallyprint-bo(25650)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25650'}, {'name': '19513', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19513'}, {'name': '20060411 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer POC', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430711/100/0/threaded'}, {'name': '20060405 Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430287/100/0/threaded'}, {'name': 'ADV-2006-1240', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1240'}, {'name': '674', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/674'}, {'name': '20060404 Buffer-overflow in Ultr@VNC 1.0.1 viewer and server', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429930/100/0/threaded'}, {'name': '20060404 Buffer-overflow in Ultr@VNC 1.0.1 viewer and server', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/044901.html'}, {'name': '17378', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17378'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1652?


Explain the CVE ID: What does the identifier CVE-2006-1653 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1653.

PHP remote file inclusion vulnerability in loadkernel.php in AngelineCMS 0.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the installPath parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1653?

{'name': 'angelinecms-loadkernel-file-include(25658)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25658'}, {'name': '17371', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17371'}, {'tags': ['x_refsource_MISC'], 'url': 'http://advisories.echo.or.id/adv/adv27-K-159-2006.txt'}, {'name': '20060404 [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429983/100/0/threaded'}, {'name': '24610', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24610'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1653?


Explain the CVE ID: What does the identifier CVE-2006-1654 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1654.

Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request to TCP port 5225.


Provide references for further information: Can you share references or external links related to CVE-2006-1654?

{'name': '20060404 [SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429984/100/0/threaded'}, {'name': '24396', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24396'}, {'name': '17367', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17367'}, {'name': '20060404 [SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-04/0085.html'}, {'name': 'hp-laserjet-toolbox-directory-traversal(25627)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25627'}, {'name': '19529', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19529'}, {'name': '1015862', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015862'}, {'name': 'HPSBPI2109', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/429893/100/0/threaded'}, {'name': 'SSRT061141', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://www.securityfocus.com/archive/1/429893/100/0/threaded'}, {'name': 'ADV-2006-1230', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1230'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1654?


Explain the CVE ID: What does the identifier CVE-2006-1655 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1655.

Multiple buffer overflows in mpg123 0.59r allow user-assisted attackers to trigger a segmentation fault and possibly have other impacts via a certain MP3 file, as demonstrated by mpg1DoS3.  NOTE: this issue might be related to CVE-2004-0991, but it is not clear.


Provide references for further information: Can you share references or external links related to CVE-2006-1655?

{'name': 'DSA-1074', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1074'}, {'name': '20281', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20281'}, {'name': '20240', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20240'}, {'name': '17365', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17365'}, {'name': 'MDKSA-2006:092', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:092'}, {'name': '20275', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20275'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/mpg1DoS3.pl'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1655?


Explain the CVE ID: What does the identifier CVE-2006-1656 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1656.

vserver in util-vserver 0.30.209 executes a command as root when the suexec userid parameter is invalid and non-numeric, which might cause local users to inadvertently execute dangerous commands as root.


Provide references for further information: Can you share references or external links related to CVE-2006-1656?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://savannah.nongnu.org/patch/?func=detailitem&item_id=4966'}, {'name': '17361', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17361'}, {'tags': ['x_refsource_MISC'], 'url': 'https://savannah.nongnu.org/bugs/?func=detailitem&item_id=15996'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=360438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1656?


Explain the CVE ID: What does the identifier CVE-2006-1657 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1657.

Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter, which is not filtered when the administrator views the "Login Log" page.


Provide references for further information: Can you share references or external links related to CVE-2006-1657?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/121/summary.html'}, {'name': 'ADV-2006-1243', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1243'}, {'name': '24397', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24397'}, {'name': '20060419 [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431344/100/0/threaded'}, {'name': '741', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/741'}, {'name': '19526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19526'}, {'name': 'nt-index-xss(25638)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25638'}, {'name': '17387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17387'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1657?


Explain the CVE ID: What does the identifier CVE-2006-1658 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1658.

Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T.  1.1.0 allows remote administrators to insert arbitrary PHP code into the config file, which is included other N.T. scripts.


Provide references for further information: Can you share references or external links related to CVE-2006-1658?

{'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/121/summary.html'}, {'name': 'ADV-2006-1243', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1243'}, {'name': '24398', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24398'}, {'name': '20060419 [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431344/100/0/threaded'}, {'name': '19526', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19526'}, {'name': 'nt-ticker-file-include(25639)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25639'}, {'name': '17387', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17387'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1658?


Explain the CVE ID: What does the identifier CVE-2006-1659 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1659.

Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in image_desc.php, (2) provided parameter in template.php, (3) cid parameter in suggest_image.php, (4) img_id parameter in insert_rating.php, and (5) cid parameter in images.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1659?

{'name': '24371', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24371'}, {'name': '24368', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24368'}, {'name': 'softbizimagegallery-multiple-sql-injection(25616)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25616'}, {'name': '17339', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17339'}, {'name': '20060331 SQL Injection in Softbiz Image Gallery', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429763/100/0/threaded'}, {'name': '19523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19523'}, {'name': '24370', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24370'}, {'name': 'ADV-2006-1217', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1217'}, {'name': '24372', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24372'}, {'name': '24369', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24369'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1659?


Explain the CVE ID: What does the identifier CVE-2006-1660 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1660.

Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject arbitrary web script or HTML via msg parameter.  NOTE: the provenance of this information is unknown; the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1660?

{'name': '19523', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19523'}, {'name': 'ADV-2006-1217', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1217'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1660?


Explain the CVE ID: What does the identifier CVE-2006-1661 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1661.

Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) areaID parameter in area.View.action, (2) time parameter in planning.View.action, and (3) userID parameter in user.View.action.


Provide references for further information: Can you share references or external links related to CVE-2006-1661?

{'name': '17389', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17389'}, {'name': '24432', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24432'}, {'tags': ['x_refsource_MISC'], 'url': 'http://pridels0.blogspot.com/2006/04/skforum-xss-vuln.html'}, {'name': '19484', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19484'}, {'name': '24430', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24430'}, {'name': '24431', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24431'}, {'name': 'ADV-2006-1260', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1260'}, {'name': 'skforum-multiple-xss(25641)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25641'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1661?


Explain the CVE ID: What does the identifier CVE-2006-1662 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1662.

The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the Itemid parameter in index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1662?

{'name': '519', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/519'}, {'name': '20060228 Limbo CMS code execution', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0728.html'}, {'name': '16902', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16902'}, {'name': '20060404 Re: Limbo CMS code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429946/100/0/threaded'}, {'name': '20060228 Limbo CMS code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426428'}, {'name': 'limbocms-index-code-execution(24992)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24992'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1662?


Explain the CVE ID: What does the identifier CVE-2006-1663 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1663.


Provide references for further information: Can you share references or external links related to CVE-2006-1663?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1663?


Explain the CVE ID: What does the identifier CVE-2006-1664 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1664.

Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, allows remote attackers to execute arbitrary code via a crafted MPEG stream.


Provide references for further information: Can you share references or external links related to CVE-2006-1664?

{'name': '19856', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19856'}, {'name': '28666', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28666'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.securityfocus.com/data/vulnerabilities/exploits/xinelib_poc.pl'}, {'name': 'xinelib-mpeg-bo(25670)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25670'}, {'name': 'FEDORA-2008-1047', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00976.html'}, {'name': 'FEDORA-2008-1043', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00956.html'}, {'name': '19853', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19853'}, {'name': '17370', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.gentoo.org/show_bug.cgi?id=128838'}, {'name': '1015868', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015868'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=9655&release_id=571608'}, {'name': '1641', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1641'}, {'name': 'GLSA-200604-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200604-16.xml'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1664?


Explain the CVE ID: What does the identifier CVE-2006-1665 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1665.

Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitrary web script or HTML via the (1) adminJump and (2) forum_middle parameters in (a) forum.php, and the (3) form parameter in (b) members.php, (c) pm.php, and (d) mail.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1665?

{'name': '17375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17375'}, {'name': 'arabportal-multiple-xss(25657)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25657'}, {'name': '20060404 ArabPortal 2.0.1 Stable [ 9 CrossSiteScripting & 1 SQL Injection ] MultBugz', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429940/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1665?


Explain the CVE ID: What does the identifier CVE-2006-1666 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1666.

SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL commands via the mineID parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1666?

{'name': '17375', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17375'}, {'name': '644', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/644'}, {'name': '20060404 ArabPortal 2.0.1 Stable [ 9 CrossSiteScripting & 1 SQL Injection ] MultBugz', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429940/100/0/threaded'}, {'name': 'arabportal-forum-sql-injection(25656)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25656'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1666?


Explain the CVE ID: What does the identifier CVE-2006-1667 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1667.

SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to execute arbitrary SQL commands via the limitquery_s parameter when the $projectid variable is less than 1, which prevents the $limitquery_s from being set within slides.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1667?

{'name': 'ADV-2006-1239', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1239'}, {'name': '17379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17379'}, {'name': '24386', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24386'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bash-x.net/undef/exploits/crappy_syntax.txt'}, {'name': 'crafty-slides-sql-injection(25654)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25654'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bash-x.net/undef/adv/craftygallery.html'}, {'name': '1645', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1645'}, {'name': '19478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1667?


Explain the CVE ID: What does the identifier CVE-2006-1668 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1668.

newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allows remote authenticated users to upload and execute arbitrary PHP code via a multipart/form-data POST with a .jpg filename in the fullimage parameter and the ext parameter set to .php.


Provide references for further information: Can you share references or external links related to CVE-2006-1668?

{'name': 'ADV-2006-1239', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1239'}, {'name': '17379', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17379'}, {'name': '24387', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24387'}, {'name': 'crafty-http-post-code-execution(25655)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25655'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bash-x.net/undef/exploits/crappy_syntax.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bash-x.net/undef/adv/craftygallery.html'}, {'name': '1645', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1645'}, {'name': '19478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19478'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1668?


Explain the CVE ID: What does the identifier CVE-2006-1669 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1669.

SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attackers to execute arbitrary SQL commands via the T parameter.  NOTE: this issue can be leveraged to execute arbitrary shell commands since the username is later processed in an eval() call, but since the username originated from the SQL injection, it could be a resultant issue.


Provide references for further information: Can you share references or external links related to CVE-2006-1669?

{'name': '17382', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17382'}, {'name': 'phpmychat-messagesl-sql-injection(25687)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25687'}, {'name': '1646', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1646'}, {'name': '1015873', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015873'}, {'name': '20060405 PHPMyChat <= 0.14.5 remote commands execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430358/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1669?


Explain the CVE ID: What does the identifier CVE-2006-1670 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1670.

Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to cause a denial of service (memory exhaustion and possibly card reset) by sending an invalid response when the final ACK is expected, aka bug ID CSCei45910.