Provide references for further information: Can you share references or external links related to CVE-2006-0817?

{'name': '1016514', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016514'}, {'name': '19002', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19002'}, {'name': '1016513', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016513'}, {'name': '18966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18966'}, {'name': '18953', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18953'}, {'name': '20060717 Secunia Research: VisNetic Mail Server Two File InclusionVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/440302/100/0/threaded'}, {'name': '27328', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/27328'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-12/advisory/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-14/advisory/'}, {'name': '20060717 Secunia Research: IceWarp Web Mail Two File InclusionVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/440297/100/0/threaded'}, {'name': 'ADV-2006-2826', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2826'}, {'name': 'ADV-2006-2825', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2825'}, {'name': '19007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19007'}, {'name': 'visnetic-include-file-include(27773)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/27773'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0817?


Explain the CVE ID: What does the identifier CVE-2006-0818 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0818.

Absolute path directory traversal vulnerability in (1) MERAK Mail Server for Windows 8.3.8r with before IceWarp Web Mail 5.6.1 and (2) VisNetic MailServer before 8.5.0.5 allows remote authenticated users to include arbitrary files via a modified language parameter and a full Windows or UNC pathname in the lang_settings parameter to mail/index.html, which is not properly sanitized by the validatefolder PHP function, possibly due to an incomplete fix for CVE-2005-4558.


Provide references for further information: Can you share references or external links related to CVE-2006-0818?

{'name': '1016514', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016514'}, {'name': '19002', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19002'}, {'name': '1016513', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1016513'}, {'name': '18966', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18966'}, {'name': '18953', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18953'}, {'name': '20060717 Secunia Research: VisNetic Mail Server Two File InclusionVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/440302/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-12/advisory/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-14/advisory/'}, {'name': '20060717 Secunia Research: IceWarp Web Mail Two File InclusionVulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/440297/100/0/threaded'}, {'name': 'ADV-2006-2825', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/2825'}, {'name': '19007', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/19007'}, {'name': 'visnetic-language-file-include(27780)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/27780'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0818?


Explain the CVE ID: What does the identifier CVE-2006-0819 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0819.

Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in the filename extension of an HTTP request.


Provide references for further information: Can you share references or external links related to CVE-2006-0819?

{'name': 'ADV-2006-0937', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0937'}, {'name': '1015779', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015779'}, {'name': '17123', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17123'}, {'name': 'dwarfhttp-extension-information-disclosure(25178)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25178'}, {'name': '20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427478/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-13/advisory'}, {'name': '23836', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23836'}, {'name': '576', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/576'}, {'name': '18962', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18962'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0819?


Explain the CVE ID: What does the identifier CVE-2006-0820 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0820.

Cross-site scripting (XSS) vulnerability in Dwarf HTTP Server 1.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified error messages.


Provide references for further information: Can you share references or external links related to CVE-2006-0820?

{'name': 'ADV-2006-0937', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0937'}, {'name': '1015779', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015779'}, {'name': '17123', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17123'}, {'name': '23837', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23837'}, {'name': '20060313 Secunia Research: Dwarf HTTP Server Source Disclosure andCross-Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/427478/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2006-13/advisory'}, {'name': 'dwarfhttp-url-xss(25179)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/25179'}, {'name': '18962', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18962'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0820?


Explain the CVE ID: What does the identifier CVE-2006-0821 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0821.

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0821?

{'name': '18929', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18929'}, {'name': 'ADV-2006-0660', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0660'}, {'name': '1513', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1513'}, {'name': 'bxcp-tid-sql-injection(24783)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24783'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0821?


Explain the CVE ID: What does the identifier CVE-2006-0822 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0822.

Unspecified vulnerability in EmuLinker Kaillera Server before 0.99.17 allows remote attackers to cause a denial of service (probably resource consumption) via a crafted packet that causes a "ghost game" to be left on the server.


Provide references for further information: Can you share references or external links related to CVE-2006-0822?

{'name': '18938', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18938'}, {'name': '16733', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16733'}, {'name': 'emulinker-packet-handling-dos(24784)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24784'}, {'name': 'ADV-2006-0665', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0665'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=394690&group_id=127754'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0822?


Explain the CVE ID: What does the identifier CVE-2006-0823 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0823.

Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to inject arbitrary SQL commands via the (1) userid variable to users.php or (2) sessid variable to lib-sessions.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0823?

{'name': 'ADV-2006-0661', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0661'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.geeklog.net/article.php/geeklog-1.4.0sr1'}, {'name': '23348', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23348'}, {'name': '16755', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16755'}, {'name': '20060219 Geeklog Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425506/100/0/threaded'}, {'name': 'geeklog-users-sessions-sql-injection(24775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24775'}, {'name': '18920', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18920'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00102-02192006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0823?


Explain the CVE ID: What does the identifier CVE-2006-0824 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0824.

Multiple unspecified vulnerabilities in lib-common.php in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attackers to include arbitrary local files and execute arbitrary code via (1) absolute paths in unspecified parameters and (2) the language cookie, as demonstrated for code execution using error.log.


Provide references for further information: Can you share references or external links related to CVE-2006-0824?

{'name': 'ADV-2006-0661', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0661'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.geeklog.net/article.php/geeklog-1.4.0sr1'}, {'name': '23349', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23349'}, {'name': '16755', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16755'}, {'name': '20060219 Geeklog Remote Code Execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425506/100/0/threaded'}, {'name': '18920', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18920'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00102-02192006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0824?


Explain the CVE ID: What does the identifier CVE-2006-0825 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0825.

Multiple unspecified vulnerabilities in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allow remote attackers to bypass authentication or gain "unauthorized network access" via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0825?

{'name': '16726', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16726'}, {'name': 'ADV-2006-0668', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0668'}, {'name': '1015648', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015648'}, {'name': '18952', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18952'}, {'name': 'xerox-workcentre-auth-bypass(24804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24804'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf'}, {'name': '23359', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23359'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0825?


Explain the CVE ID: What does the identifier CVE-2006-0826 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0826.

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to cause a denial of service via a crafted Postscript request.


Provide references for further information: Can you share references or external links related to CVE-2006-0826?

{'name': 'ADV-2006-0668', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0668'}, {'name': '1015648', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015648'}, {'name': '18952', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18952'}, {'name': '16723', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16723'}, {'name': 'xerox-workcentre-postscript-dos(24805)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24805'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0826?


Explain the CVE ID: What does the identifier CVE-2006-0827 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0827.

Cross-site scripting vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0827?

{'name': 'ADV-2006-0668', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0668'}, {'name': '18952', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18952'}, {'name': 'xerox-workcentre-xss(24806)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24806'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf'}, {'name': '16727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0827?


Explain the CVE ID: What does the identifier CVE-2006-0828 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0828.

Unspecified vulnerability in ESS/ Network Controller and MicroServer Web Server in Xerox WorkCentre Pro and Xerox WorkCentre running software 13.027.24.015 and 14.027.24.015 allows remote attackers to "reduce effectiveness of security features" via unknown attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0828?

{'name': 'ADV-2006-0668', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0668'}, {'name': '1015648', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015648'}, {'name': '18952', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18952'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.xerox.com/downloads/usa/en/c/cert_XRX06_001.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0828?


Explain the CVE ID: What does the identifier CVE-2006-0829 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0829.

Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".


Provide references for further information: Can you share references or external links related to CVE-2006-0829?

{'name': 'eblah-httpreferer-xss(24777)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24777'}, {'name': 'ADV-2006-0638', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0638'}, {'name': '18992', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18992'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/83/summary.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.eblah.com/forum/m-1140116897/'}, {'name': '23299', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23299'}, {'name': '528', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/528'}, {'name': '16713', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16713'}, {'name': "20060302 [eVuln] E-Blah Platinum 'Referer' XSS Vulnerability", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426582/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0829?


Explain the CVE ID: What does the identifier CVE-2006-0830 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0830.

The scripting engine in Internet Explorer allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary code via a web page that contains a recurrent call to an infinite loop in Javascript or VBscript, which consumes the stack, as demonstrated by resetting the "location" variable within the loop.


Provide references for further information: Can you share references or external links related to CVE-2006-0830?

{'name': '20060218 Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425378/100/0/threaded'}, {'name': 'ie-script-engine-stack-dos(24788)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24788'}, {'name': '20060216 Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425283/100/0/threaded'}, {'name': '16687', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16687'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0830?


Explain the CVE ID: What does the identifier CVE-2006-0831 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0831.

PHP remote file include vulnerability in index.php in Tasarim Rehberi allows remote attackers to execute arbitrary PHP code via a URL in the (1) sayfaadi or (2) sayfa parameter.  NOTE: this might be a site-specific issue.  If so, it should not be included in CVE.


Provide references for further information: Can you share references or external links related to CVE-2006-0831?

{'name': '20060218 Tasarim Rehberi Index.PHP Remote Command Exucetion', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425389/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0831?


Explain the CVE ID: What does the identifier CVE-2006-0832 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0832.

Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0832?

{'name': '456', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/456'}, {'name': '20060218 SLQ Injection vulnerability in WPCeasy', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425395/100/0/threaded'}, {'name': 'ADV-2006-0662', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0662'}, {'name': '16721', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16721'}, {'name': '18945', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18945'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0832?


Explain the CVE ID: What does the identifier CVE-2006-0833 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0833.

Multiple cross-site scripting (XSS) vulnerabilities in Barracuda Directory 1.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) Add URL and (2) Suggest Category module.  NOTE: the provenance of this information is unknown; portions of the details are obtained from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0833?

{'name': '18965', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18965'}, {'name': 'barracuda-multiple-xss(24807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24807'}, {'name': '16746', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16746'}, {'name': 'ADV-2006-0674', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0674'}, {'name': '23372', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23372'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0833?


Explain the CVE ID: What does the identifier CVE-2006-0834 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0834.

Uniden UIP1868P VoIP Telephone and Router has a default password of admin for the web-based configuration utility, which allows remote attackers to obtain sensitive information on the device such as telephone numbers called, and possibly connect to other hosts.  NOTE: it is possible that this password was configured by a reseller, not the original vendor; if so, then this is not a vulnerability in the product.


Provide references for further information: Can you share references or external links related to CVE-2006-0834?

{'name': '20060216 Uniden UIP1868P (VoIP phone/gateway) default easy-to-guess password vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425362/100/0/threaded'}, {'name': 'uniden-uip1868p-default-account(24786)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24786'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0834?


Explain the CVE ID: What does the identifier CVE-2006-0835 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0835.

SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL queries and cause a denial of service (inaccessible database) via the tabls parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0835?

{'name': '20060215 Web Calendar Pro - Denial of Service SQL Injection Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0340.html'}, {'name': '18902', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18902'}, {'name': 'ADV-2006-0700', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0700'}, {'name': 'webcalendarpro-dropbase-sql-injection(24729)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24729'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xorcrew.net/xpa/XPA-WebCalendarPro.txt'}, {'name': '16789', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16789'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0835?


Explain the CVE ID: What does the identifier CVE-2006-0836 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0836.

Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user into importing an LDIF file with a long field into the address book, as demonstrated by a long homePhone field.


Provide references for further information: Can you share references or external links related to CVE-2006-0836?

{'name': 'thunderbird-address-book-dos(24810)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24810'}, {'name': '20060217 Mozila Thunderbird 1.5 Address Book DoS', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0399.html'}, {'name': '20060221 Mozila Thunderbird 1.5 Address Book DoS', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425602/100/0/threaded'}, {'name': '16716', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16716'}, {'name': '469', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/469'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0836?


Explain the CVE ID: What does the identifier CVE-2006-0837 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0837.

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for (1) /etc/neusecure.conf, (2) /opt/NeuSecure/etc/cms-3.0.236.buildconf, and (3) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to read sensitive information such as passwords.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.


Provide references for further information: Can you share references or external links related to CVE-2006-0837?

{'name': 'netcool-neosecure-config-weak-permission(24785)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24785'}, {'name': '20060216 Password disclosure and remote access in Netcool/NeuSecure Security information management platform', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425304/100/0/threaded'}, {'name': '23914', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23914'}, {'name': '16693', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16693'}, {'name': '23270', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23270'}, {'name': '23271', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23271'}, {'name': '18922', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18922'}, {'name': '20060216 Password disclosure and remote access in Netcool/NeuSecure Security information management platform', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html'}, {'name': '1015642', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015642'}, {'name': '16700', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16700'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0837?


Explain the CVE ID: What does the identifier CVE-2006-0838 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0838.

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the (1) CMS_DBPASS, (2) CMSM_DBPASS, and (3) RPT_DBPASS fields in /etc/neusecure.conf, and in (4) /opt/NeuSecure/bin/ns_archiver.log, which allows local users to gain privileges.  NOTE: IBM has privately confirmed to CVE that a fix is available for these issues.


Provide references for further information: Can you share references or external links related to CVE-2006-0838?

{'name': 'netcool-neosecure-config-weak-permission(24785)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24785'}, {'name': '20060216 Password disclosure and remote access in Netcool/NeuSecure Security information management platform', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425304/100/0/threaded'}, {'name': '16698', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16698'}, {'name': '16693', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16693'}, {'name': '23270', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23270'}, {'name': '23271', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23271'}, {'name': '18922', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18922'}, {'name': '20060216 Password disclosure and remote access in Netcool/NeuSecure Security information management platform', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0364.html'}, {'name': 'netcool-neosecure-plaintext-password(24787)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24787'}, {'name': '1015642', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015642'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0838?


Explain the CVE ID: What does the identifier CVE-2006-0839 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0839.

The frag3 preprocessor in Sourcefire Snort 2.4.3 does not properly reassemble certain fragmented packets with IP options, which allows remote attackers to evade detection of certain attacks, possibly related to IP option lengths.


Provide references for further information: Can you share references or external links related to CVE-2006-0839?

{'name': '20060217 SNORT Incorrect fragmented packet reassembly', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425290/100/0/threaded'}, {'name': '16705', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16705'}, {'name': '18959', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18959'}, {'name': 'snort-frag3-detection-bypass(24811)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24811'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0839?


Explain the CVE ID: What does the identifier CVE-2006-0840 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0840.

manage_user_page.php in Mantis 1.00rc4 and earlier does not properly handle a sort parameter containing a ' (quote) character, which allows remote attackers to trigger a SQL error that may be repeatedly reported to a user who makes subsequent web accesses with the MANTIS_MANAGE_COOKIE cookie.  NOTE: this issue might be the same as vector 2 in CVE-2005-4519.


Provide references for further information: Can you share references or external links related to CVE-2006-0840?

{'name': '16657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16657'}, {'name': 'mantis-manageuserpagesql-injection(24726)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24726'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963'}, {'name': '20060215 [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425046/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://morph3us.org/advisories/20060214-mantis-100rc4.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0840?


Explain the CVE ID: What does the identifier CVE-2006-0841 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0841.

Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) hide_status, (2) handler_id, (3) user_monitor, (4) reporter_id, (5) view_type, (6) show_severity, (7) show_category, (8) show_status, (9) show_resolution, (10) show_build, (11) show_profile, (12) show_priority, (13) highlight_changed, (14) relationship_type, and (15) relationship_bug parameters in (a) view_all_set.php; the (16) sort parameter in (b) manage_user_page.php; the (17) view_type parameter in (c) view_filters_page.php; and the (18) title parameter in (d) proj_doc_delete.php.  NOTE: item 17 might be subsumed by CVE-2005-4522.


Provide references for further information: Can you share references or external links related to CVE-2006-0841?

{'name': '16657', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16657'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=386059&group_id=14963'}, {'name': '21400', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/21400'}, {'name': 'DSA-1133', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1133'}, {'name': '20060215 [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425046/100/0/threaded'}, {'name': '23248', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23248'}, {'tags': ['x_refsource_MISC'], 'url': 'http://morph3us.org/advisories/20060214-mantis-100rc4.txt'}, {'name': '22487', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/22487'}, {'tags': ['x_refsource_MISC'], 'url': 'http://sourceforge.net/project/showfiles.php?group_id=14963&package_id=12175&release_id=386059'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0841?


Explain the CVE ID: What does the identifier CVE-2006-0842 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0842.

Cross-site scripting (XSS) vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "java	script:."  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0842?

{'name': '@mail-html-image-xss(24742)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24742'}, {'name': '16683', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16683'}, {'name': '18874', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18874'}, {'name': '23236', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23236'}, {'name': 'ADV-2006-0617', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0617'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0842?


Explain the CVE ID: What does the identifier CVE-2006-0843 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0843.

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.


Provide references for further information: Can you share references or external links related to CVE-2006-0843?

{'name': '16712', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16712'}, {'name': 'webblog-txt-obtain-information(24752)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24752'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/82/summary.html'}, {'name': '18923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18923'}, {'name': '522', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0843?


Explain the CVE ID: What does the identifier CVE-2006-0844 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0844.

Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-0844?

{'name': 'webblog-cookie-auth-bypass(24755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24755'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/82/summary.html'}, {'name': '16714', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16714'}, {'name': '18923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18923'}, {'name': '522', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0844?


Explain the CVE ID: What does the identifier CVE-2006-0845 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0845.

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.


Provide references for further information: Can you share references or external links related to CVE-2006-0845?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/82/summary.html'}, {'name': 'webblog-sendmail-command-execution(24757)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24757'}, {'name': '18923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18923'}, {'name': '522', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0845?


Explain the CVE ID: What does the identifier CVE-2006-0846 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0846.

Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, which are stored in a log file and not sanitized when the administrator views the "Log" page, possibly using the ViewCommentsLog function.


Provide references for further information: Can you share references or external links related to CVE-2006-0846?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/82/summary.html'}, {'name': '16715', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16715'}, {'name': '18923', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18923'}, {'name': 'webblog-headers-xss(24758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24758'}, {'name': '522', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/522'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0846?


Explain the CVE ID: What does the identifier CVE-2006-0847 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0847.

Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0847?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.cherrypy.org/'}, {'name': '16760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16760'}, {'name': '18944', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18944'}, {'name': '20344', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20344'}, {'name': 'ADV-2006-0677', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0677'}, {'name': 'GLSA-200605-16', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml'}, {'name': 'cherrypy-staticfilter-directory-traversal(24809)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24809'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=384316&group_id=56099'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://groups.google.com/group/cherrypy-announce/browse_thread/thread/92b2972f774fe6df/2f63afc9433dc306#2f63afc9433dc306'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0847?


Explain the CVE ID: What does the identifier CVE-2006-0848 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0848.

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension.


Provide references for further information: Can you share references or external links related to CVE-2006-0848?

{'name': '18963', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18963'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.mathematik.uni-ulm.de/numerik/staff/lehn/macosx.html'}, {'name': 'VU#999708', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/999708'}, {'name': '16736', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16736'}, {'name': '1015652', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015652'}, {'name': 'TA06-053A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-053A.html'}, {'name': 'ADV-2006-0671', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0671'}, {'name': 'TA06-062A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA06-062A.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.heise.de/english/newsticker/news/69862'}, {'name': '23510', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23510'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.frsirt.com/exploits/20060222.safari_safefiles_exec.pm.php'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=303382'}, {'name': 'macosx-zip-command-execution(24808)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24808'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0848?


Explain the CVE ID: What does the identifier CVE-2006-0849 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0849.


Provide references for further information: Can you share references or external links related to CVE-2006-0849?


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0849?


Explain the CVE ID: What does the identifier CVE-2006-0850 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0850.

SQL injection vulnerability in include/includes/user/login.php in ilchClan before 1.05g allows remote attackers to execute arbitrary SQL commands via the login_name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2006-0850?

{'name': 'ilchclan-login-sql-injection(24830)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24830'}, {'name': 'ADV-2006-0676', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0676'}, {'name': '18951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18951'}, {'name': '23370', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23370'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.ilch.de/news-134.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0850?


Explain the CVE ID: What does the identifier CVE-2006-0851 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0851.

SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, when creating a newpost.


Provide references for further information: Can you share references or external links related to CVE-2006-0851?

{'name': 'ADV-2006-0672', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0672'}, {'name': 'ilchclan-index-sql-injection(24829)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24829'}, {'name': '23369', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23369'}, {'name': '1516', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1516'}, {'name': '18951', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18951'}, {'name': '16735', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16735'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0851?


Explain the CVE ID: What does the identifier CVE-2006-0852 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0852.

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0852?

{'name': 'admbook-index-command-execution(24771)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24771'}, {'name': '16753', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16753'}, {'name': '18930', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18930'}, {'name': 'ADV-2006-0663', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0663'}, {'name': '1512', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/1512'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0852?


Explain the CVE ID: What does the identifier CVE-2006-0853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0853.

Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long SEARCH argument.


Provide references for further information: Can you share references or external links related to CVE-2006-0853?

{'name': '23377', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23377'}, {'name': 'ia-emailserver-imap-bo(24812)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24812'}, {'name': 'ADV-2006-0686', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0686'}, {'name': '20060220 [AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425586/100/0/threaded'}, {'name': '16744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16744'}, {'name': '18986', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18986'}, {'name': '1015664', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015664'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0853?


Explain the CVE ID: What does the identifier CVE-2006-0854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0854.

PHP remote file inclusion vulnerability in common.php in Intensive Point iUser Ecommerce allows remote attackers to include arbitrary files via a URL in the include_path variable, which is not initialized before being used.


Provide references for further information: Can you share references or external links related to CVE-2006-0854?

{'name': '23429', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23429'}, {'name': '16787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16787'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.xorcrew.net/xpa/XPA-iUser.txt'}, {'name': 'iuser-ecommerce-file-include(24724)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24724'}, {'name': '20060215 iUser Ecommerce - Remote Command Execution Vulnerability', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0339.html'}, {'name': 'ADV-2006-0699', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0699'}, {'name': '18903', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18903'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0854?


Explain the CVE ID: What does the identifier CVE-2006-0855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0855.

Stack-based buffer overflow in the fullpath function in misc.c for zoo 2.10 and earlier, as used in products such as Barracuda Spam Firewall, allows user-assisted attackers to execute arbitrary code via a crafted ZOO file that causes the combine function to return a longer string than expected.


Provide references for further information: Can you share references or external links related to CVE-2006-0855?

{'name': '1015866', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015866'}, {'name': '19408', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19408'}, {'name': 'SUSE-SR:2006:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_05_sr.html'}, {'name': '19166', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19166'}, {'name': 'SUSE-SR:2006:006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2006_06_sr.html'}, {'name': 'ADV-2006-1220', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/1220'}, {'name': '19514', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19514'}, {'name': '546', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/546'}, {'name': 'GLSA-200603-05', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-05.xml'}, {'name': '1015668', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015668'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guay-leroux.com/projects/barracuda-advisory-ZOO.txt'}, {'name': '19130', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19130'}, {'name': 'zoo-misc-bo(24904)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24904'}, {'name': 'ADV-2006-0705', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0705'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.guay-leroux.com/projects/zoo-advisory.txt'}, {'name': 'DSA-991', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-991'}, {'name': '20060403 Barracuda ZOO archiver security bug leads to remote compromise', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-04/0061.html'}, {'name': '20060223 zoo contains exploitable buffer overflows', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425887/100/0/threaded'}, {'name': '19002', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19002'}, {'name': '19148', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19148'}, {'name': '16790', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16790'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0855?


Explain the CVE ID: What does the identifier CVE-2006-0856 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0856.

SQL injection vulnerability in login.php in Scriptme SmE GB Host 1.21 allows remote attackers to execute arbitrary SQL commands and bypass authentication via the Username parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0856?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.evuln.com/vulns/66/summary.html'}, {'name': 'ADV-2006-0543', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0543'}, {'name': '16609', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16609'}, {'name': 'smegbhost-login-sql-injection(24544)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24544'}, {'name': '20060216 [eVuln] SmE GB Host Authentication Bypass Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425317/100/0/threaded'}, {'name': '18823', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18823'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0856?


Explain the CVE ID: What does the identifier CVE-2006-0857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0857.

Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.


Provide references for further information: Can you share references or external links related to CVE-2006-0857?

{'name': '20060218 e107 CMS 0.7.2 Chatbox plugin XSS vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425388/100/0/threaded'}, {'name': '16719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16719'}, {'name': 'e107-chatbox-xss(24815)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24815'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0857?


Explain the CVE ID: What does the identifier CVE-2006-0858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0858.

Unquoted Windows search path vulnerability in (1) snsmcon.exe, (2) the autostartup mechanism, and (3) an unspecified installation component in StarForce Safe'n'Sec Personal + Anti-Spyware 2.0 and earlier, and possibly other StarForce Safe'n'Sec products, might allow local users to gain privileges via a malicious "program" file in the C: folder.


Provide references for further information: Can you share references or external links related to CVE-2006-0858?

{'name': '16762', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16762'}, {'name': "20060219 [TZO-062006] Safe'nVulnerable", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425504/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secdev.zoller.lu/research/safnsec.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0858?


Explain the CVE ID: What does the identifier CVE-2006-0859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0859.

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to post an admin comment to a guestbook entry via a certain modified form, possibly related to the nummer parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0859?

{'name': '20060302 Re: Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426663/100/0/threaded'}, {'name': '20060220 Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425495/100/0/threaded'}, {'name': 'ADV-2006-0675', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0675'}, {'name': '23374', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23374'}, {'name': '18946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18946'}, {'name': 'guestbox-admin-access(24797)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24797'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0859?


Explain the CVE ID: What does the identifier CVE-2006-0860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0860.

Multiple cross-site scripting (XSS) vulnerabilities in Michael Salzer Guestbox 0.6, and other versions before 0.8, allow remote attackers to inject arbitrary web script or HTML via (1) HTML tags that follow a "http://" string, which bypasses a regular expression check, and (2) other unspecified attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0860?

{'name': '20060302 Re: Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426663/100/0/threaded'}, {'name': '20060220 Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425495/100/0/threaded'}, {'name': 'ADV-2006-0675', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0675'}, {'name': '16751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16751'}, {'name': '18946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18946'}, {'name': 'guestbox-gbshow-xss(24798)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24798'}, {'name': '23375', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23375'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0860?


Explain the CVE ID: What does the identifier CVE-2006-0861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0861.

Michael Salzer Guestbox 0.6, and other versions before 0.8, allows remote attackers to obtain the source IP addresses of guestbook entries via a direct request to /gb/gblog.


Provide references for further information: Can you share references or external links related to CVE-2006-0861?

{'name': '20060302 Re: Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426663/100/0/threaded'}, {'name': '20060220 Guestbox XSS/an admin bypass', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425495/100/0/threaded'}, {'name': 'ADV-2006-0675', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0675'}, {'name': '23376', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23376'}, {'name': 'guestbox-gblog-obtain-information(24799)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24799'}, {'name': '460', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/460'}, {'name': '18946', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18946'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0861?


Explain the CVE ID: What does the identifier CVE-2006-0862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0862.

Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2006-0862?

{'name': '16776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16776'}, {'name': 'vistaportal-parameter-directory-traversal(24893)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24893'}, {'name': '1015669', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015669'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.irmplc.com/advisory017.htm'}, {'name': 'ADV-2006-0695', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0695'}, {'name': '20060222 IRM 017: Multiple Vulnerabilities in Infovista Portal SE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425779/100/0/threaded'}, {'name': '18994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18994'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0862?


Explain the CVE ID: What does the identifier CVE-2006-0863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0863.

InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message.


Provide references for further information: Can you share references or external links related to CVE-2006-0863?

{'name': '16776', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16776'}, {'name': '1015669', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015669'}, {'name': '473', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/473'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.irmplc.com/advisory017.htm'}, {'name': 'vistaportal-server-path-disclosure(24894)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24894'}, {'name': 'ADV-2006-0695', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0695'}, {'name': '20060222 IRM 017: Multiple Vulnerabilities in Infovista Portal SE', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425779/100/0/threaded'}, {'name': '18994', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18994'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0863?


Explain the CVE ID: What does the identifier CVE-2006-0864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0864.

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value.


Provide references for further information: Can you share references or external links related to CVE-2006-0864?

{'name': '1015658', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015658'}, {'name': '16768', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16768'}, {'name': 'ADV-2006-0691', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0691'}, {'tags': ['x_refsource_MISC'], 'url': 'http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2006-0x82-028-VIROBOT.txt'}, {'name': 'virobot-filescan-auth-bypass(24850)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24850'}, {'name': '20060222 [INetCop Security Advisory] Global Hauri Virobot cookie exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425788/100/0/threaded'}, {'name': '18974', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18974'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0864?


Explain the CVE ID: What does the identifier CVE-2006-0865 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0865.

PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering many user accounts quickly.


Provide references for further information: Can you share references or external links related to CVE-2006-0865?

{'name': '20060219 PunBB 1.2.10 Multiple DoS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425630/100/0/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.neosecurityteam.net/advisories/Advisory-15.txt'}, {'name': 'punbb-register-ip-dos(24837)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24837'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0865?


Explain the CVE ID: What does the identifier CVE-2006-0866 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0866.

PunBB 1.2.10 and earlier allows remote attackers to conduct brute force guessing attacks for an account's password, which may be as short as 4 characters.


Provide references for further information: Can you share references or external links related to CVE-2006-0866?

{'name': '20060219 PunBB 1.2.10 Multiple DoS Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425630/100/0/threaded'}, {'name': 'punbb-login-bruteforce(24838)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24838'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.neosecurityteam.net/advisories/Advisory-15.txt'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0866?


Explain the CVE ID: What does the identifier CVE-2006-0867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0867.

Buffer overflow in certain versions of South River (aka SRT) WebDrive, possibly version 6.08 build 1131 and version 8, allows remote attackers to cause a denial of service (application crash and persistent erratic behavior) via a long string in the name entry field.


Provide references for further information: Can you share references or external links related to CVE-2006-0867?

{'name': 'webdrive-name-bo(24903)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24903'}, {'name': '20060222 South River WebDrive Buffer Overflow Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425785/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0867?


Explain the CVE ID: What does the identifier CVE-2006-0868 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0868.

Multiple unspecified injection vulnerabilities in unspecified Auth Container back ends for PEAR::Auth before 1.2.4, and 1.3.x before 1.3.0r4, allow remote attackers to "falsify authentication credentials," related to the "underlying storage containers."


Provide references for further information: Can you share references or external links related to CVE-2006-0868?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pear.php.net/package/Auth/download/1.3.0r4'}, {'name': '1015666', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015666'}, {'name': '20060222 Multiple Injection Vulnerabilities in PHP PEAR::Auth Module', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425796/100/0/threaded'}, {'name': 'auth-multiple-injections(24854)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24854'}, {'name': '19301', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19301'}, {'name': 'ADV-2006-0696', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0696'}, {'name': 'GLSA-200603-13', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200603-13.xml'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://pear.php.net/package/Auth/download/1.2.4'}, {'name': '19008', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19008'}, {'name': '16758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0868?


Explain the CVE ID: What does the identifier CVE-2006-0869 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0869.

Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Repository (PEAR) LiveUser 0.16.8 and earlier allows remote attackers to determine file existence, and possibly delete arbitrary files with short pathnames or possibly read arbitrary files, via a .. (dot dot) in the store_id value of a cookie.


Provide references for further information: Can you share references or external links related to CVE-2006-0869?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://pear.php.net/package/LiveUser/download/'}, {'name': '1015659', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015659'}, {'name': '16761', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16761'}, {'name': 'liveuser-liveuser-file-deletion(24853)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24853'}, {'name': 'liveuser-liveuser-file-access(24852)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24852'}, {'name': '20060221 PEAR LiveUser File Access Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425711/100/0/threaded'}, {'name': '466', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/466'}, {'name': 'ADV-2006-0697', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0697'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00103-02212006'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0869?


Explain the CVE ID: What does the identifier CVE-2006-0870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0870.

SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.  NOTE: version 2.3 was later reported to be vulnerable as well.


Provide references for further information: Can you share references or external links related to CVE-2006-0870?

{'name': '16730', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16730'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.nukedx.com/?viewdoc=9'}, {'name': '20060421 Re: Mini-NUKE v2.3<<--- SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431714/100/0/threaded'}, {'name': '18439', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18439'}, {'name': 'mininuke-pages-sql-injection(24803)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24803'}, {'name': '17636', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/17636'}, {'name': '20060220 MiniNuke CMS System all versions (pages.asp) SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425599/100/0/threaded'}, {'name': '20060420 Mini-NUKE v2.3<<--- SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/431602/100/0/threaded'}, {'name': '20060321 Mini-Nuke<=1.8.2 SQL injection (6)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/428361/100/0/threaded'}, {'name': '23438', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23438'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0870?


Explain the CVE ID: What does the identifier CVE-2006-0871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0871.

Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter.  NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.


Provide references for further information: Can you share references or external links related to CVE-2006-0871?

{'name': '18935', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18935'}, {'name': 'ADV-2006-0719', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0719'}, {'name': '20060224 Mambo Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://archives.neohapsis.com/archives/bugtraq/2006-02/0463.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.gulftech.org/?node=research&article_id=00104-02242006'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.mambo-foundation.org/view/news/Announcements/Security_Patch_Released/'}, {'name': '493', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/493'}, {'name': '23505', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23505'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0871?


Explain the CVE ID: What does the identifier CVE-2006-0872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0872.

Directory traversal vulnerability in init.inc.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) sequence and trailing NULL (%00) byte in the lang parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0872?

{'name': 'ADV-2006-0669', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0669'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/cpg_143_incl_xpl.html'}, {'name': '16718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16718'}, {'name': '20060218 Coppermine Photo Gallery <=1.4.3 remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425387'}, {'name': '18941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/cpg_143_adv.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine-gallery.net/forum/index.php?topic=28062.0'}, {'name': 'coppermine-init-file-include(24814)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24814'}, {'name': '1015646', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015646'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0872?


Explain the CVE ID: What does the identifier CVE-2006-0873 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0873.

Absolute path traversal vulnerability in docs/showdocs.php in Coppermine Photo Gallery 1.4.3 and earlier allows remote attackers to include arbitrary files via the f parameter, and possibly remote files using UNC share pathnames.


Provide references for further information: Can you share references or external links related to CVE-2006-0873?

{'name': 'ADV-2006-0669', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0669'}, {'name': 'coppermine-showdoc-file-include(24816)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24816'}, {'name': '16718', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16718'}, {'name': '20060218 Coppermine Photo Gallery <=1.4.3 remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425387'}, {'name': '18941', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18941'}, {'tags': ['x_refsource_MISC'], 'url': 'http://retrogod.altervista.org/cpg_143_adv.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://coppermine-gallery.net/forum/index.php?topic=28062.0'}, {'name': '1015646', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015646'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0873?


Explain the CVE ID: What does the identifier CVE-2006-0874 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0874.

Multiple unspecified vulnerabilities in Intensive Point iUser Ecommerce before 2.2 have unspecified vectors and impact, as addressed by "Urgent secure fixes".  NOTE: this might be a duplicate of CVE-2006-0854, but the vendor announcement for this issue (from January 8, 2005) is too vague to be sure, and CVE-2006-0854 does not provide version information.


Provide references for further information: Can you share references or external links related to CVE-2006-0874?

{'name': 'iuser-ecommerce-undisclosed(24906)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24906'}, {'name': '16787', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16787'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.intensivepoint.com/iuser-document.shtml'}, {'name': '19003', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/19003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0874?


Explain the CVE ID: What does the identifier CVE-2006-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0875.

Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web script or HTML via the lid parameter.


Provide references for further information: Can you share references or external links related to CVE-2006-0875?

{'name': '1015663', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015663'}, {'name': '16769', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16769'}, {'tags': ['x_refsource_MISC'], 'url': 'http://kapda.ir/advisory-267.html'}, {'name': '18997', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18997'}, {'name': '20060222 [KAPDA::#27] - Runcms 1.x Cross_Site_Scripting vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425775/100/0/threaded'}, {'name': '23388', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23388'}, {'name': 'runcms-ratefile-xss(24871)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24871'}, {'name': 'ADV-2006-0694', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0694'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0875?


Explain the CVE ID: What does the identifier CVE-2006-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0876.

POPFile before 0.22.4 allows remote attackers to cause a denial of service (application crash) via unspecified vectors involving character sets within e-mail messages.


Provide references for further information: Can you share references or external links related to CVE-2006-0876?

{'name': '20205', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/20205'}, {'name': '16792', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16792'}, {'name': '18975', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18975'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://popfile.sourceforge.net/cgi-bin/wiki.pl?ReleaseNotes/0.22.4'}, {'name': 'ADV-2006-0698', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0698'}, {'name': 'DSA-1061', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2006/dsa-1061'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0876?


Explain the CVE ID: What does the identifier CVE-2006-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0877.

Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable.


Provide references for further information: Can you share references or external links related to CVE-2006-0877?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://hot-things.net/forum/show.php?f=2&topic=20060224080919'}, {'name': '16958', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16958'}, {'name': '18996', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/18996'}, {'name': 'easyforum-join-xss(24831)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24831'}, {'tags': ['x_refsource_MISC'], 'url': 'http://evuln.com/vulns/85/summary.html'}, {'name': '23430', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/23430'}, {'name': 'ADV-2006-0706', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0706'}, {'name': '20060304 [eVuln] Easy Forum XSS Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/426760/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0877?


Explain the CVE ID: What does the identifier CVE-2006-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0878.

Noah's Classifieds 1.3 allows remote attackers to obtain the installation path via a direct request to include files, as demonstrated by classifieds/gorum/category.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0878?

{'name': "20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425783/100/0/threaded'}, {'name': '1015667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015667'}, {'name': 'noahs-category-path-disclosure(24898)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24898'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-268.html'}, {'name': 'ADV-2006-0703', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0703'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0878?


Explain the CVE ID: What does the identifier CVE-2006-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0879.

SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2006-0879?

{'name': 'noahs-search-sql-injection(24896)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24896'}, {'name': "20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425783/100/0/threaded'}, {'name': '1015667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015667'}, {'name': '16773', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16773'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-268.html'}, {'name': 'ADV-2006-0703', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0703'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0879?


Explain the CVE ID: What does the identifier CVE-2006-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0880.

Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) inf parameter; or, when register_globals is enabled, the (2) upperTemplate and (3) lowerTemplate parameters.


Provide references for further information: Can you share references or external links related to CVE-2006-0880?

{'name': 'noahs-indexphp-xss(24895)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24895'}, {'name': "20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425783/100/0/threaded'}, {'name': '1015667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015667'}, {'name': '16772', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16772'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-268.html'}, {'name': 'ADV-2006-0703', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0703'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0880?


Explain the CVE ID: What does the identifier CVE-2006-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0881.

Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals is enabled, allow remote attackers to include arbitrary PHP files via the (1) upperTemplate and (2) lowerTemplate parameters, as demonstrated using the lowerTemplate parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2006-0881?

{'name': '16780', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/16780'}, {'name': "20060222 [KAPDA::#29]Noah's classifieds multiple vulnerabilities", 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/425783/100/0/threaded'}, {'name': '1015667', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://securitytracker.com/id?1015667'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.kapda.ir/advisory-268.html'}, {'name': 'ADV-2006-0703', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2006/0703'}, {'name': 'noahs-gorumlib-file-include(24899)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/24899'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2006-0881?


Explain the CVE ID: What does the identifier CVE-2006-0882 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2006-0882.

Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the otherTemplate parameter to index.php.