Provide references for further information: Can you share references or external links related to CVE-2006-1200?

{'name': '19154', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19154'}, {'name': '553', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/553'}, {'name': '23750', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23750'}, {'name': '17004', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17004'}, {'name': '20060306 link bank code execution and xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426932/100/0/threaded'}, {'name': 'ADV-2006-0885', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0885'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1200?


Explain the CVE ID: What does the identifier CVE-2006-1201 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1201.

Directory traversal vulnerability in resetpw.php in eschew.net phpBannerExchange 2.0 and earlier, and other versions before 2.0 Update 5, allows remote attackers to read arbitrary files via a .. (dot dot) in the email parameter during a "Recover password" operation (recoverpw.php).


Provide references for further information: Can you share references or external links related to CVE-2006-1201?

{'name': '19127', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19127'}, {'name': '20060307 phpBannerExchange 2.0 Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426940/100/0/threaded'}, {'name': 'ADV-2006-0869', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0869'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eschew.net/scripts/phpbe/2.0/releasenotes.php'}, {'name': '23720', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23720'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.h4cky0u.org/advisories/HYSA-2006-004-phpbanner.txt'}, {'name': '20060307 phpBannerExchange 2.0 Directory Traversal Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0879.html'}, {'name': 'phpbannerexchange-resetpw-dir-traversal(25071)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25071'}, {'name': 'phpbannerexchange-recoverpw-dir-traversal(25080)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25080'}, {'name': '16996', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16996'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1201?


Explain the CVE ID: What does the identifier CVE-2006-1202 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1202.

Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) mess and (2) user parameters in messanger.php, possibly requiring a URL encoded value.


Provide references for further information: Can you share references or external links related to CVE-2006-1202?

{'name': '17029', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17029'}, {'name': 'ADV-2006-0897', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0897'}, {'tags': ['x_refsource_MISC'], 'url': 'http://notlegal.ws/textfilebbmessanger.txt'}, {'name': '20060308 textfileBB <= 1.0 Multiple XSS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427081/100/0/threaded'}, {'name': 'textbb-messanger-xss(25091)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25091'}, {'name': '1015744', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015744'}, {'name': '19149', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19149'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1202?


Explain the CVE ID: What does the identifier CVE-2006-1203 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1203.

PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1203?

{'name': '17061', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17061'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-004.txt'}, {'name': 'txtforum-login-file-include(25131)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25131'}, {'name': '23952', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23952'}, {'name': '20060309 txtForum: Script Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427188/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1203?


Explain the CVE ID: What does the identifier CVE-2006-1204 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1204.

Multiple cross-site scripting (XSS) vulnerabilities in txtForum 1.0.4-dev and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) prev, (2) next, and (3) rand5 parameters in (a) index.php; the (4) r_username and (5) r_loc parameters in (b) new_topic.php; the (6) r_num, (7) r_family_name, (8) r_icq, (9) r_yahoo, (10) r_aim, (11) r_homepage, (12) r_interests, (13) r_about, (14) selected1, (15) selected0, (16) signature_selected1, (17) signature_selected0, (18) smile_selected1, (19) smile_selected0, (20) ubb_selected1, and (21) ubb_selected0 parameters in (c) profile.php; the (22) quote and (23) tid parameters in (d) reply.php; and the (24) tid, (25) sticked, and (26) mid parameters in (e) view_topic.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1204?

{'name': '23957', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23957'}, {'name': '17054', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17054'}, {'name': '23953', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23953'}, {'name': '23956', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23956'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-003.txt'}, {'name': '23955', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23955'}, {'name': 'txtforum-multiple-xss(25132)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25132'}, {'name': '23954', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23954'}, {'name': '20060309 txtForum: Multiple XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427186/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1204?


Explain the CVE ID: What does the identifier CVE-2006-1205 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1205.

Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) confirmredirect and (2) post_id parameters in (a) delcomment.php, as reachable when mode=delcom from index.php; and the (3) del and (4) message parameters in (b) upload.php, the (5) errormsg parameter in (c) addcat.php, (d) edituser.php, (e) adduser.php, and (f) editcat.php, the (6) trackback_url parameter in (g) add.php, (7) id parameter in (h) deluser.php, (8) cat_id parameter in (i) delcat.php, and (9) post_id parameter in (j) del.php, as reachable from admin.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1205?

{'name': '23990', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23990'}, {'name': 'mybloggie-index-admin-xss(25134)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25134'}, {'name': '23975', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23975'}, {'name': '17048', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17048'}, {'name': '23987', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23987'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.seclab.tuwien.ac.at/advisories/TUVSA-0603-002.txt'}, {'name': '23989', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23989'}, {'name': '20060309 MyBloggie: Multiple XSS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427182/100/0/threaded'}, {'name': '23991', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23991'}, {'name': '23992', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23992'}, {'name': '23988', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23988'}, {'name': '23973', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23973'}, {'name': '23974', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23974'}, {'name': '23986', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23986'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1205?


Explain the CVE ID: What does the identifier CVE-2006-1206 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1206.

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.


Provide references for further information: Can you share references or external links related to CVE-2006-1206?

{'name': '20060307 Dropbear SSH server Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426999/100/0/threaded'}, {'name': '17024', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17024'}, {'name': 'dropbear-connection-dos(25075)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25075'}, {'name': '1015742', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015742'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1206?


Explain the CVE ID: What does the identifier CVE-2006-1207 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1207.

PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for the upload/users/[USERNAME] file.


Provide references for further information: Can you share references or external links related to CVE-2006-1207?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.blogcu.com/Liz0ziM/317250/'}, {'name': '20060309 PHP Upload Center Download users password hashes And phpshell Upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427215/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/phpuploadcenter2.txt'}, {'name': '23627', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23627'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1207?


Explain the CVE ID: What does the identifier CVE-2006-1208 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1208.

Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory.


Provide references for further information: Can you share references or external links related to CVE-2006-1208?

{'name': 'ADV-2006-0817', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0817'}, {'name': '564', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/564'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.blogcu.com/Liz0ziM/317250/'}, {'name': '19107', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19107'}, {'name': '20060309 PHP Upload Center Download users password hashes And phpshell Upload', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427215/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/phpuploadcenter2.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.scripts-by.net/PHP/File-Manipulation/php-upload-center.html'}, {'name': '23626', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23626'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1208?


Explain the CVE ID: What does the identifier CVE-2006-1209 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1209.

PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web root with insufficient access control, which allows remote attackers to download each password hash via a direct request for a users/[USERNAME] file.


Provide references for further information: Can you share references or external links related to CVE-2006-1209?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.blogcu.com/Liz0ziM/316652/'}, {'name': '20060309 PHP Advanced Transfer Manager Download users password hashes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427216/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/patm.txt'}, {'name': '20060613 Re: PHP Advanced Transfer Manager Download users password hashes', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/437513/100/200/threaded'}, {'name': '565', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/565'}, {'name': '17134', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/17134'}, {'name': 'phpatm-password-hash-disclosure(25127)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25127'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1209?


Explain the CVE ID: What does the identifier CVE-2006-1210 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1210.

The web interface for IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 includes the MySQL database username and password in cleartext in body.phtml, which allows remote attackers to gain privileges by reading the source.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.


Provide references for further information: Can you share references or external links related to CVE-2006-1210?

{'name': 'netcool-neusecure-ns-unauth-access(25270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25270'}, {'name': '17032', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17032'}, {'name': '20060308 Remote access to NeuSecure/Netcool backend database via web interface credentials leakage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427155/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1210?


Explain the CVE ID: What does the identifier CVE-2006-1211 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1211.

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 configures a MySQL database to allow connections from any source IP address with the ns database account, which allows remote attackers to bypass the Netcool/NeuSecure application layer and perform unauthorized database actions.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.


Provide references for further information: Can you share references or external links related to CVE-2006-1211?

{'name': 'netcool-neusecure-ns-unauth-access(25270)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25270'}, {'name': '20060308 Remote access to NeuSecure/Netcool backend database via web interface credentials leakage', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427155/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1211?


Explain the CVE ID: What does the identifier CVE-2006-1212 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1212.

Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via the page parameter, possibly due to a PHP remote file include vulnerability.  NOTE: this vulnerability could not be confirmed by source code inspection of CoreNews 2.0.1, which does not appear to use a "page" parameter or variable.


Provide references for further information: Can you share references or external links related to CVE-2006-1212?

{'tags': ['x_refsource_MISC'], 'url': 'http://web.archive.org/web/20050323212004/www.coreslawn.de/?show=downloads&cat_id=1'}, {'name': '754', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/754'}, {'name': 'corenews-index-command-execution(25180)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25180'}, {'name': '20060309 CoreNews 2.0.1 Remote Command Exucetion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427387/100/0/threaded'}, {'name': '17067', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17067'}, {'name': '24080', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24080'}, {'name': '20060313 Oddness - CoreNews 2.0.1 Remote Command Exucetion', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-March/000602.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1212?


Explain the CVE ID: What does the identifier CVE-2006-1213 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1213.

JiRo's Banner System Experience and Professional 1.0 and earlier allows remote attackers to bypass access restrictions and gain privileges via a direct request to certain scripts in the files directory, as demonstrated by using addadmin.asp to create a new administrator account.


Provide references for further information: Can you share references or external links related to CVE-2006-1213?

{'name': '20060309 Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427326/100/0/threaded'}, {'name': '17060', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17060'}, {'name': 'jbspro-security-bypass(25169)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25169'}, {'name': 'ADV-2006-0911', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0911'}, {'name': '20060309 Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-03/0211.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=19'}, {'name': '23780', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23780'}, {'name': '19184', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19184'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1213?


Explain the CVE ID: What does the identifier CVE-2006-1214 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1214.

UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send malformed TKL Q:Line commands, as demonstrated by "TKL - q\x08Q *\x08PoC."


Provide references for further information: Can you share references or external links related to CVE-2006-1214?

{'tags': ['x_refsource_MISC'], 'url': 'http://forums.unrealircd.com/viewtopic.php?t=2985'}, {'name': 'unrealircd-server-link-dos(25130)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25130'}, {'name': '19188', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19188'}, {'name': '23778', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23778'}, {'name': '17057', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17057'}, {'name': '20060309 UnrealIRCd3.2.3 Server-Link Denial of Service', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427213/100/0/threaded'}, {'name': 'ADV-2006-0908', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0908'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1214?


Explain the CVE ID: What does the identifier CVE-2006-1215 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1215.

Cross-site scripting (XSS) vulnerability in misc.php in Woltlab Burning Board (wBB) 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the percent parameter.  NOTE: this issue has been disputed in a followup post, although the original disclosure might be related to reflected XSS.


Provide references for further information: Can you share references or external links related to CVE-2006-1215?

{'name': 'wbb-misc-xss(25156)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25156'}, {'name': '20060304 Wbb 2.3. xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426766'}, {'name': '20060304 Re: Wbb 2.3. xss', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426816/30/0/threaded'}, {'name': '16959', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16959'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1215?


Explain the CVE ID: What does the identifier CVE-2006-1216 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1216.

Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1216?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-280.html'}, {'name': '16970', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16970'}, {'name': '18997', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18997'}, {'name': '23823', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23823'}, {'name': '474', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/474'}, {'name': '20060304 [KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426829'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1216?


Explain the CVE ID: What does the identifier CVE-2006-1217 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1217.

SQL injection vulnerability in DSPoll 1.1 allows remote attackers to execute arbitrary SQL commands via the pollid parameter to (1) results.php, (2) topolls.php, (3) pollit.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1217?

{'name': '23881', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23881'}, {'name': '19209', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19209'}, {'name': '1015758', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015758'}, {'name': '23879', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23879'}, {'name': '17103', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17103'}, {'name': '23880', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23880'}, {'name': 'dspoll-pollid-sql-injection(25192)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25192'}, {'name': '620', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/620'}, {'name': '20060324 [eVuln] DSPoll Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428663/100/0/threaded'}, {'name': '622', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/622'}, {'name': 'ADV-2006-0932', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0932'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/96/summary.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1217?


Explain the CVE ID: What does the identifier CVE-2006-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1218.

Unspecified vulnerability in the HTTP proxy in Novell BorderManager 3.8 and earlier allows remote attackers to cause a denial of service (CPU consumption and ABEND) via unknown attack vectors related to "media streaming over HTTP 1.1".


Provide references for further information: Can you share references or external links related to CVE-2006-1218?

{'name': 'ADV-2006-0879', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0879'}, {'name': '17031', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17031'}, {'name': '19163', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19163'}, {'name': '23752', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23752'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.novell.com/cgi-bin/search/searchtid.cgi?/2972993.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1218?


Explain the CVE ID: What does the identifier CVE-2006-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1219.

Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." (dot dot) sequences in the stepOrder parameter to (1) upgrade/index.php or (2) install/index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1219?

{'name': 'ADV-2006-0895', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0895'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://gallery.menalto.com/2.0.4_and_2.1_rc_2a_update'}, {'name': 'gallery-multiple-index-file-include(25129)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25129'}, {'name': '1566', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1566'}, {'name': '17051', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17051'}, {'name': '19175', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19175'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1219?


Explain the CVE ID: What does the identifier CVE-2006-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1220.

Integer overflow in the mach_msg_send function in the kernel for Mac OS X might allow local users to execute arbitrary code via unknown attack vectors related to a large message header size, which leads to a heap-based buffer overflow.


Provide references for further information: Can you share references or external links related to CVE-2006-1220?

{'name': '17056', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17056'}, {'name': '28453', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/28453'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.felinemenace.org/~nemo/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1220?


Explain the CVE ID: What does the identifier CVE-2006-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1221.

Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder.  NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.


Provide references for further information: Can you share references or external links related to CVE-2006-1221?

{'name': 'zonealarm-path-gain-privileges(25097)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25097'}, {'tags': ['x_refsource_MISC'], 'url': 'http://reedarvin.thearvins.com/20060308-01.html'}, {'name': '17037', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17037'}, {'name': '1015743', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015743'}, {'name': '20060309 Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427145/100/0/threaded'}, {'name': '20060309 Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427309/100/0/threaded'}, {'name': 'ADV-2006-0947', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0947'}, {'name': '20060308 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427122/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1221?


Explain the CVE ID: What does the identifier CVE-2006-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1222.

Multiple cross-site scripting (XSS) vulnerabilities in zeroboard 4.1 pl7 allows allow remote attackers to inject arbitrary web script or HTML via the (1) memo box title, (2) user email, and (3) homepage fields.


Provide references for further information: Can you share references or external links related to CVE-2006-1222?

{'name': '19214', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19214'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.inetcop.org/upfiles/33INCSA.2006-0x82-029-zeroboard.pdf'}, {'name': 'ADV-2006-0944', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0944'}, {'name': '20060312 [INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/042872.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.nzeo.com/bbs/zboard.php?id=cgi_bugreport2&no=5406'}, {'name': '17075', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17075'}, {'name': '23847', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23847'}, {'name': '20060312 [INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427466/100/0/threaded'}, {'name': 'zeroboard-multiple-fields-xss(25212)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25212'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1222?


Explain the CVE ID: What does the identifier CVE-2006-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1223.

Cross-site scripting (XSS) vulnerability in Jupiter Content Manager 1.1.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URI in the image BBcode tag.


Provide references for further information: Can you share references or external links related to CVE-2006-1223?

{'name': '20060311 Jupiter CMS <= 1.1.5 multiple XSS attack vectors.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427406/100/0/threaded'}, {'name': 'ADV-2006-0942', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0942'}, {'name': '17072', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17072'}, {'name': '572', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/572'}, {'name': 'jupitercm-bbcodetag-xss(25241)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25241'}, {'name': '23839', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23839'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.jupiterportal.com/index.php?n=modules/forum&a=3&d=11&o=5&q=313'}, {'name': '20060412 Re: Jupiter CMS <= 1.1.5 multiple XSS attack vectors.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/430903/100/0/threaded'}, {'name': '19215', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19215'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1223?


Explain the CVE ID: What does the identifier CVE-2006-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1224.

Directory traversal vulnerability in dwnld.php in GuppY 4.5.11 allows remote attackers to overwrite arbitrary files via a "%2E." (mixed encoding) in the pg parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1224?

{'name': '569', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/569'}, {'name': 'ADV-2006-0936', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0936'}, {'name': '23993', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23993'}, {'name': '1015753', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015753'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.freeguppy.org/?lng=en'}, {'name': '17068', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17068'}, {'name': '23846', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23846'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-291.html'}, {'name': '20060310 [KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427329/100/0/threaded'}, {'name': 'guppy-dwnld-file-deletion(25141)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25141'}, {'name': '19222', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19222'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1224?


Explain the CVE ID: What does the identifier CVE-2006-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1225.

CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy.


Provide references for further information: Can you share references or external links related to CVE-2006-1225?

{'name': '20060314 [DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427591/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/53806'}, {'name': 'drupal-header-data-manipulation(25206)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25206'}, {'name': 'DSA-1007', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1007'}, {'name': '23912', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23912'}, {'name': '17104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17104'}, {'name': '19245', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19245'}, {'name': '19257', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19257'}, {'name': '579', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/579'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1225?


Explain the CVE ID: What does the identifier CVE-2006-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1226.

Cross-site scripting (XSS) vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1226?

{'name': '23910', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23910'}, {'name': '581', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/581'}, {'name': 'drupal-undisclosed-xss(25202)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25202'}, {'name': 'DSA-1007', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1007'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/53803'}, {'name': '17104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17104'}, {'name': '20060314 [DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427588/100/0/threaded'}, {'name': '19245', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19245'}, {'name': '19257', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1226?


Explain the CVE ID: What does the identifier CVE-2006-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1227.

Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8, when menu.module is used to create a menu item, does not implement access control for the page that is referenced, which might allow remote attackers to access administrator pages.


Provide references for further information: Can you share references or external links related to CVE-2006-1227?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/53796'}, {'name': '23909', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23909'}, {'name': '20060314 [DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427587/100/0/threaded'}, {'name': 'DSA-1007', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1007'}, {'name': 'drupal-menumodule-bypass-security(25197)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25197'}, {'name': '17104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17104'}, {'name': '19245', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19245'}, {'name': '578', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/578'}, {'name': '19257', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19257'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1227?


Explain the CVE ID: What does the identifier CVE-2006-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1228.

Session fixation vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to gain privileges by tricking a user to click on a URL that fixes the session identifier.


Provide references for further information: Can you share references or external links related to CVE-2006-1228?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://drupal.org/node/53805'}, {'name': '580', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/580'}, {'name': '23911', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23911'}, {'name': 'DSA-1007', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1007'}, {'name': '17104', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17104'}, {'name': 'drupal-login-session-hijacking(25205)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25205'}, {'name': '19245', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19245'}, {'name': '19257', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19257'}, {'name': '20060314 [DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427589/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1228?


Explain the CVE ID: What does the identifier CVE-2006-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1229.

SQL injection vulnerability in search.asp in Hosting Controller 6.1 (Hotfix 2.9) allows remote attackers to execute arbitrary SQL commands via the search parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1229?

{'name': '19191', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19191'}, {'name': 'hosting-controller-search-sql-injection(25140)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25140'}, {'name': '23802', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23802'}, {'name': 'ADV-2006-0914', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1229?


Explain the CVE ID: What does the identifier CVE-2006-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1230.

Multiple cross-site scripting (XSS) vulnerabilities in create.php in vCard 2.x allow remote attackers to inject arbitrary web script or HTML via the (1) card_id, (2) uploaded, (3) card_fontsize, or (4) card_color parameter.  NOTE: the card_id vector was later reported to affect vCard 2.9, and the uploaded vector for 2.6.


Provide references for further information: Can you share references or external links related to CVE-2006-1230?

{'name': '1016183', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016183'}, {'name': 'vcard-create-xss(25181)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25181'}, {'name': '17073', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17073'}, {'name': '23838', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23838'}, {'name': '20060311 XSS in vCard', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427408/100/0/threaded'}, {'name': '20070304 XSS Remote In vCard 2.6 (c)2002', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461922/100/0/threaded'}, {'name': 'ADV-2006-0945', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0945'}, {'name': '20060527 multiple Xss exploits in : vCard 2.9', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/435310/100/0/threaded'}, {'name': '19216', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19216'}, {'name': '22819', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22819'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1230?


Explain the CVE ID: What does the identifier CVE-2006-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1231.

CAPI4HylaFAX 1.3, when compiled with GENERATE_DEBUGSFFDATAFILE set, allows local users to modify arbitrary files via a symlink attack on the c2faxrecv_dbgdatafile.sff temporary file.


Provide references for further information: Can you share references or external links related to CVE-2006-1231?

{'name': '20060307 capi4hylafax insecure manipulation with tmp files', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=114176689513438&w=2'}, {'name': 'capi4hylafax-c2faxrecvdbgdatafile-symlink(25262)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25262'}, {'name': '17034', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17034'}, {'name': '20060307 capi4hylafax insecure manipulation with tmp files', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427084/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1231?


Explain the CVE ID: What does the identifier CVE-2006-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1232.

Multiple SQL injection vulnerabilities in DSDownload 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the (1) key and (2) category parameters to (a) search.php and (b) downloads.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1232?

{'name': '23886', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23886'}, {'name': '1015755', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015755'}, {'name': 'dsdownload-multiple-sql-injection(25193)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25193'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/99/summary.html'}, {'name': '17116', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17116'}, {'name': '19202', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19202'}, {'name': '23887', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23887'}, {'name': '626', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/626'}, {'name': 'ADV-2006-0934', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0934'}, {'name': '20060325 [eVuln] DSDownload Multiple SQL Injection Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428808/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1232?


Explain the CVE ID: What does the identifier CVE-2006-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1233.

Multiple cross-site scripting (XSS) vulnerabilities in WMNews allow remote attackers to inject arbitrary web script or HTML via the (1) ArtCat parameter to wmview.php, (2) ctrrowcol parameter to footer.php, or (3) ArtID parameter to wmcomments.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1233?

{'name': '23840', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23840'}, {'tags': ['x_refsource_MISC'], 'url': 'http://biyosecurity.be/bugs/wmnews.txt'}, {'name': '23842', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23842'}, {'name': '23841', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23841'}, {'name': '19204', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19204'}, {'name': '17076', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17076'}, {'name': 'ADV-2006-0939', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0939'}, {'name': '20060312 WMNews Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427479/100/0/threaded'}, {'name': 'wmnews-multiple-scripts-xss(25210)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25210'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1233?


Explain the CVE ID: What does the identifier CVE-2006-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1234.

SQL injection vulnerability in index.php in DSCounter 1.2, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For field (HTTP_X_FORWARDED_FOR environment variable) in an HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2006-1234?

{'name': '23882', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23882'}, {'name': "20060325 [eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428807/100/0/threaded'}, {'name': '1015756', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015756'}, {'name': '19206', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19206'}, {'name': '627', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/627'}, {'name': 'dscounter-index-sql-injection(25190)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25190'}, {'name': 'ADV-2006-0933', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0933'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/98/summary.html'}, {'name': '17112', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1234?


Explain the CVE ID: What does the identifier CVE-2006-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1235.

Directory traversal vulnerability in admin/deleteuser.php in HitHost 1.0.0 might allow remote attackers to delete directories (possibly only empty directories) via the $deleteuser variable.  NOTE: the initial disclosure for this issue indicated that the researcher was unable to prove this issue; however, this might have been due to certain behaviors of rmdir.


Provide references for further information: Can you share references or external links related to CVE-2006-1235?

{'name': '19155', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19155'}, {'name': 'hithost-deleteuser-directory-deletion(25106)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25106'}, {'name': '20060306 histhost v1.0.0 xss and possible rmdir', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426931/100/0/threaded'}, {'name': '20060314 Re: histhost v1.0.0 xss and possible rmdir', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427631/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1235?


Explain the CVE ID: What does the identifier CVE-2006-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1236.

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.


Provide references for further information: Can you share references or external links related to CVE-2006-1236?

{'name': 'ADV-2006-0951', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0951'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log'}, {'name': '19276', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19276'}, {'name': '1582', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1582'}, {'name': 'DSA-1009', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1009'}, {'name': '19237', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19237'}, {'name': '17093', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17093'}, {'name': '23904', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23904'}, {'name': 'crossfire-setup-bo(25252)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25252'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1236?


Explain the CVE ID: What does the identifier CVE-2006-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1237.

Multiple SQL injection vulnerabilities in DSNewsletter 1.0, with magic_quotes_gpc disabled, allow remote attackers to execute arbitrary SQL commands via the email parameter to (1) include/sub.php, (2) include/confirm.php, or (3) include/unconfirm.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1237?

{'name': '19207', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19207'}, {'name': 'ADV-2006-0931', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0931'}, {'name': '17111', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17111'}, {'name': '623', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/623'}, {'name': '23883', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23883'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/97/summary.html'}, {'name': 'dsnewsletter-email-sql-injection(25188)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25188'}, {'name': '1015757', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015757'}, {'name': '20060324 [eVuln] DSNewsletter SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428664/100/0/threaded'}, {'name': '23885', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23885'}, {'name': '23884', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23884'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1237?


Explain the CVE ID: What does the identifier CVE-2006-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1238.

SQL injection vulnerability in DSLogin 1.0, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands and bypass authentication via the $log_userid variable in (1) index.php and (2) admin/index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1238?

{'name': 'ADV-2006-0953', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0953'}, {'name': '1015754', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015754'}, {'name': '17262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17262'}, {'name': '23896', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23896'}, {'name': '20060327 [eVuln] DSLogin Authentication Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428902/100/0/threaded'}, {'name': '637', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/637'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/100/summary.html'}, {'name': 'dslogin-index-sql-injection(25194)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25194'}, {'name': '19201', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19201'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1238?


Explain the CVE ID: What does the identifier CVE-2006-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1239.

Cross-site scripting (XSS) vulnerability in issue/createissue.aspx in Gemini 2.0 allows remote attackers to inject arbitrary web script or HTML via the rtcDescription$RadEditor1 field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1239?

{'name': 'gemini-createissue-xss(25195)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25195'}, {'name': '23907', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23907'}, {'name': '17092', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17092'}, {'name': '19049', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19049'}, {'name': 'ADV-2006-0954', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0954'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1239?


Explain the CVE ID: What does the identifier CVE-2006-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1240.

Buffer overflow in inet_server.cpp in (1) fb_inet_server and (2) fbserver in Firebird 1.5.2.4731 allows local users to gain privileges via a long value of the -p argument.


Provide references for further information: Can you share references or external links related to CVE-2006-1240?

{'name': '20060312 Buffer Overflow and Installation Script Error in Firebird 1.5.3', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427480/100/0/threaded'}, {'name': '17077', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17077'}, {'name': 'firebird-fbinetserver-fbserver-bo(25282)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25282'}, {'name': '20060312 Buffer Overflow and Installation Script Error in Firebird 1.5.3', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2006-March/043546.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1240?


Explain the CVE ID: What does the identifier CVE-2006-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1241.

Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, and (3) fb_inet_server with setuid firebird permissions, which might allow local users to gain privileges via a buffer overflow as identified by CVE-2006-1240, or possibly other vulnerabilities.


Provide references for further information: Can you share references or external links related to CVE-2006-1241?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1241?


Explain the CVE ID: What does the identifier CVE-2006-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1242.

The ip_push_pending_frames function in Linux 2.4.x and 2.6.x before 2.6.16 increments the IP ID field when sending a RST after receiving unsolicited TCP SYN-ACK packets, which allows remote attackers to conduct an Idle Scan (nmap -sI) attack, which bypasses intended protections against such attacks.


Provide references for further information: Can you share references or external links related to CVE-2006-1242?

{'name': 'RHSA-2006:0437', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0437.html'}, {'name': 'ADV-2006-2554', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2554'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.1'}, {'name': '20060315 Re: Linux zero IP ID vulnerability?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427753/100/0/threaded'}, {'name': 'USN-281-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/281-1/'}, {'name': '21136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21136'}, {'name': '19402', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19402'}, {'name': '20060316 Re: Linux zero IP ID vulnerability?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427893/100/0/threaded'}, {'name': '21983', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21983'}, {'name': '17109', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17109'}, {'name': 'DSA-1097', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1097'}, {'name': 'RHSA-2006:0575', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2006-0575.html'}, {'name': '20060314 Linux zero IP ID vulnerability?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427622/100/0/threaded'}, {'name': 'SUSE-SA:2006:028', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006-05-31.html'}, {'name': '19955', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19955'}, {'name': '20060323 Re: Linux zero IP ID vulnerability?', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428605/30/6210/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-180.htm'}, {'name': 'DSA-1103', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1103'}, {'name': '21465', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21465'}, {'name': 'oval:org.mitre.oval:def:10317', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10317'}, {'name': 'ADV-2006-1140', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1140'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2006-200.htm'}, {'name': '20398', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20398'}, {'name': '22417', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/22417'}, {'name': 'MDKSA-2006:086', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2006:086'}, {'name': '20671', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20671'}, {'name': '20157', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20157'}, {'name': '20914', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20914'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1242?


Explain the CVE ID: What does the identifier CVE-2006-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1243.

Directory traversal vulnerability in install05.php in Simple PHP Blog (SPB) 0.4.7.1 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL (%00) character in the blog_language parameter, as demonstrated by injecting PHP sequences into an Apache access_log file, which is then included using install05.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1243?

{'name': 'Vendor ACK for CVE-2006-1243 (older Simple PHP Blog)', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://www.attrition.org/pipermail/vim/2006-November/001138.html'}, {'name': 'simplephpblog-install05-file-include(25322)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25322'}, {'name': '19270', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19270'}, {'name': '1581', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1581'}, {'name': '17102', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17102'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/forum/forum.php?forum_id=564904'}, {'name': 'ADV-2006-1007', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1007'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1243?


Explain the CVE ID: What does the identifier CVE-2006-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1244.

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc.  NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed.  Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.


Provide references for further information: Can you share references or external links related to CVE-2006-1244?

{'name': '19644', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19644'}, {'name': 'DSA-979', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-979'}, {'name': 'DSA-998', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-998'}, {'name': '19164', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19164'}, {'tags': ['x_refsource_MISC'], 'url': 'http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz'}, {'name': '19364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19364'}, {'name': 'DSA-983', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-983'}, {'name': 'DSA-982', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-982'}, {'name': '19091', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19091'}, {'name': '19065', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19065'}, {'name': '23834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23834'}, {'name': 'DSA-1019', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1019'}, {'name': '16748', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16748'}, {'name': '18948', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18948'}, {'name': 'DSA-984', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-984'}, {'name': '19021', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19021'}, {'name': 'USN-270-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'https://usn.ubuntu.com/270-1/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1244?


Explain the CVE ID: What does the identifier CVE-2006-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1245.

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple Event Handler Memory Corruption Vulnerability."


Provide references for further information: Can you share references or external links related to CVE-2006-1245?

{'name': '1015794', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015794'}, {'name': '20061205 Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/453554/100/0/threaded'}, {'name': '18957', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18957'}, {'name': 'oval:org.mitre.oval:def:1569', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1569'}, {'name': '19269', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19269'}, {'name': 'oval:org.mitre.oval:def:1451', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1451'}, {'name': '20060325 Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428810/100/0/threaded'}, {'name': 'TA06-101A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-101A.html'}, {'name': 'oval:org.mitre.oval:def:1632', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1632'}, {'name': 'ie-mshtml-bo(25292)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25292'}, {'name': '17131', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17131'}, {'name': '20060316 Remote overflow in MSIE script action handlers (mshtml.dll)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0855.html'}, {'name': 'oval:org.mitre.oval:def:1599', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1599'}, {'name': '20061203 MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/453436/100/0/threaded'}, {'name': 'VU#984473', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/984473'}, {'name': 'MS06-013', 'tags': ['vendor-advisory', 'x_refsource_MS'], 'url': 'https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013'}, {'name': 'oval:org.mitre.oval:def:1766', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1766'}, {'name': 'ADV-2006-1318', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1318'}, {'name': '23964', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23964'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1245?


Explain the CVE ID: What does the identifier CVE-2006-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1246.

Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM AIX 5.3 allows local users to execute arbitrary commands when mklvcopy calls external commands, possibly due to an untrusted search path vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2006-1246?

{'name': '1015786', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015786'}, {'name': 'ADV-2006-0957', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0957'}, {'name': '17115', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17115'}, {'name': 'aix-mklvcopy-code-execution(25849)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25849'}, {'name': '23921', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23921'}, {'name': 'aix-bosrtelvm-gain-privileges(25299)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25299'}, {'name': 'IY82739', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IY82739'}, {'name': '20060323 IBM changing significant details?', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-March/000641.html'}, {'name': '19235', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19235'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0602.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1246?


Explain the CVE ID: What does the identifier CVE-2006-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1247.

rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files.


Provide references for further information: Can you share references or external links related to CVE-2006-1247?

{'name': '1015952', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015952'}, {'name': '19656', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19656'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nsfocus.com/english/homepage/research/0603.htm'}, {'name': 'ADV-2006-1389', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1389'}, {'name': 'IY82357', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=isg1IY82357'}, {'name': 'aix-rm-mlcache-file-overwrite(25848)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25848'}, {'name': '20060424 NSFOCUS SA2006-03 : IBM AIX rm_mlcache_file Local Race Condition Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431846/100/0/threaded'}, {'name': '24706', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/24706'}, {'name': '17576', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17576'}, {'name': '20060424 NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431848/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1247?


Explain the CVE ID: What does the identifier CVE-2006-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1248.

Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.11, and B.11.23, when run with certain options that involve a new home directory, might cause usermod to change the ownership of all directories and files under the new directory, which might result in less secure permissions than intended.


Provide references for further information: Can you share references or external links related to CVE-2006-1248?

{'name': 'HPSBUX02102', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838'}, {'name': '17143', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17143'}, {'name': '1015782', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015782'}, {'name': '1015834', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015834'}, {'name': 'hpux-usermod-unauthorized-access(25311)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25311'}, {'name': 'oval:org.mitre.oval:def:785', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A785'}, {'name': 'oval:org.mitre.oval:def:1098', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1098'}, {'name': 'oval:org.mitre.oval:def:772', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A772'}, {'name': 'ADV-2006-0997', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0997'}, {'name': '19305', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19305'}, {'name': 'SSRT051078', 'tags': ['vendor-advisory', 'x_refsource_HP'], 'url': 'http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c00614838'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1248?


Explain the CVE ID: What does the identifier CVE-2006-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1249.

Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.


Provide references for further information: Can you share references or external links related to CVE-2006-1249?

{'name': '20069', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20069'}, {'name': 'APPLE-SA-2006-05-11', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2006/May/msg00002.html'}, {'name': '1016067', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016067'}, {'name': 'TA06-132B', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-132B.html'}, {'name': 'VU#570689', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/570689'}, {'name': '17074', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17074'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.eeye.com/html/research/upcoming/20060307b.html'}, {'name': 'ADV-2006-1778', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1778'}, {'name': 'quicktime-flashpix-overflow(26398)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/26398'}, {'name': '20060512 Apple QuickDraw/QuickTime Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/433831/100/0/threaded'}, {'name': '20060511 [EEYEB-20060307] Apple QuickTime FPX Integer Overflow', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/433850/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1249?


Explain the CVE ID: What does the identifier CVE-2006-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1250.

Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-1250?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.magicwinmail.net/changelog.asp'}, {'name': 'ADV-2006-0858', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0858'}, {'name': '17009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1250?


Explain the CVE ID: What does the identifier CVE-2006-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1251.

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command.


Provide references for further information: Can you share references or external links related to CVE-2006-1251?

{'name': '19225', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19225'}, {'name': 'saexim-greylistclean-file-deletion(25286)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25286'}, {'name': '17110', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17110'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=345071'}, {'name': 'ADV-2006-0941', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0941'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1251?


Explain the CVE ID: What does the identifier CVE-2006-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1252.

Eval injection vulnerability in cal.php in Light Weight Calendar (LWC) 1.0 allows remote attackers to execute arbitrary PHP code via the date parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-1252?

{'name': '20060318 Source VERIFY - Light Weight Calendar issue is eval injection', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-March/000612.html'}, {'name': '1570', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1570'}, {'name': '17059', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1252?


Explain the CVE ID: What does the identifier CVE-2006-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1253.

Unspecified vulnerability in glFTPd before 2.01 RC5 allows remote attackers to bypass IP checks via a crafted DNS hostname, possibly a hostname that appears to be an IP address.


Provide references for further information: Can you share references or external links related to CVE-2006-1253?

{'name': '17118', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17118'}, {'name': '19221', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19221'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.glftpd.com/files/docs/changelog'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1253?


Explain the CVE ID: What does the identifier CVE-2006-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1254.

Unspecified vulnerability in BorderWare MXtreme 5.0 and 6.0 allows remote attackers to have an unknown impact via unknown attack vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-1254?

{'name': '1015787', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015787'}, {'name': '23939', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23939'}, {'name': 'ADV-2006-0972', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0972'}, {'name': '19223', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19223'}, {'name': 'borderware-mxtreme-web-admin(25325)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25325'}, {'name': '17140', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17140'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1254?


Explain the CVE ID: What does the identifier CVE-2006-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1255.

Stack-based buffer overflow in the IMAP service in Mercur Messaging 5.0 SP3 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string to the (1) LOGIN or (2) SELECT command, a different set of attack vectors and possibly a different vulnerability than CVE-2003-1177.


Provide references for further information: Can you share references or external links related to CVE-2006-1255?

{'name': 'ADV-2006-0977', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0977'}, {'name': '23950', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23950'}, {'name': 'mercur-imap-bo(25290)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25290'}, {'name': '20060316 Mercur IMAPD 5.0 SP3 DoS Exploit or more?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2006/Mar/1111'}, {'name': '20060316 Re: Mercur IMAPD 5.0 SP3 DoS Exploit or more?', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2006/Mar/1167'}, {'name': '19267', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19267'}, {'name': '17138', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17138'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1255?


Explain the CVE ID: What does the identifier CVE-2006-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1256.

Cross-site scripting (XSS) vulnerability in guestbook.php in Soren Boysen (SkullSplitter) PHP Guestbook 2.6 allows remote attackers to inject arbitrary web script or HTML via the url parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-1256?

{'name': '650', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/650'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/104/summary.html'}, {'name': '23941', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23941'}, {'name': 'ADV-2006-0974', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0974'}, {'name': '20060318 Vendor ACK for Skull-Splitter Guestbook XSS', 'tags': ['mailing-list', 'x_refsource_VIM'], 'url': 'http://attrition.org/pipermail/vim/2006-March/000613.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.boysen.be/en/'}, {'name': "20060329 [eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/429254/100/0/threaded'}, {'name': '19268', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19268'}, {'name': '17136', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17136'}, {'name': 'skullsplitter-guestbook-xss(25293)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25293'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-1256?


Explain the CVE ID: What does the identifier CVE-2006-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-1257.

The sample files in the authfiles directory in Microsoft Commerce Server 2002 before SP2 allow remote attackers to bypass authentication by logging in to authfiles/login.asp with a valid username and any password, then going to the main site twice.