Search

Find a vulnerability

Search criteria

    4 vulnerabilities by six_offene_systeme_gmbh

    CVE-2006-3050 (GCVE-0-2006-3050)

    Vulnerability from nvd – Published: 2006-06-16 10:00 – Updated: 2024-08-07 18:16
    VLAI
    Summary
    Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the template parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    Date Public
    2006-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:16:05.125Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "sixcms-detail-directory-traversal(27107)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
          },
          {
            "name": "18395",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18395"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
          },
          {
            "name": "1016282",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016282"
          },
          {
            "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
          },
          {
            "name": "1101",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1101"
          },
          {
            "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a ..  (dot dot) sequence and trailing null (%00) byte in the template parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "sixcms-detail-directory-traversal(27107)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
        },
        {
          "name": "18395",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18395"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
        },
        {
          "name": "1016282",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016282"
        },
        {
          "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
        },
        {
          "name": "1101",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1101"
        },
        {
          "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3050",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a ..  (dot dot) sequence and trailing null (%00) byte in the template parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "sixcms-detail-directory-traversal(27107)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
            },
            {
              "name": "18395",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18395"
            },
            {
              "name": "http://www.majorsecurity.de/advisory/major_rls17.txt",
              "refsource": "MISC",
              "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
            },
            {
              "name": "1016282",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016282"
            },
            {
              "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
            },
            {
              "name": "1101",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1101"
            },
            {
              "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3050",
    "datePublished": "2006-06-16T10:00:00.000Z",
    "dateReserved": "2006-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:16:05.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2006-3051 (GCVE-0-2006-3051)

    Vulnerability from nvd – Published: 2006-06-16 10:00 – Updated: 2024-08-07 18:16
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://www.majorsecurity.de/advisory/major_rls17.txt x_refsource_MISC
    http://secunia.com/advisories/20655 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1016282 vdb-entryx_refsource_SECTRACK
    http://www.securityfocus.com/archive/1/437639/100… mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/18393 vdb-entryx_refsource_BID
    http://securityreason.com/securityalert/1101 third-party-advisoryx_refsource_SREASON
    http://www.securityfocus.com/archive/1/437047/100… mailing-listx_refsource_BUGTRAQ
    http://www.vupen.com/english/advisories/2006/2386 vdb-entryx_refsource_VUPEN
    Date Public
    2006-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:16:05.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
          },
          {
            "name": "20655",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20655"
          },
          {
            "name": "1016282",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016282"
          },
          {
            "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
          },
          {
            "name": "sixcms-list-xss(27108)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
          },
          {
            "name": "18393",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18393"
          },
          {
            "name": "1101",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1101"
          },
          {
            "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
          },
          {
            "name": "ADV-2006-2386",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2386"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
        },
        {
          "name": "20655",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20655"
        },
        {
          "name": "1016282",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016282"
        },
        {
          "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
        },
        {
          "name": "sixcms-list-xss(27108)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
        },
        {
          "name": "18393",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18393"
        },
        {
          "name": "1101",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1101"
        },
        {
          "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
        },
        {
          "name": "ADV-2006-2386",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2386"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3051",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.majorsecurity.de/advisory/major_rls17.txt",
              "refsource": "MISC",
              "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
            },
            {
              "name": "20655",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20655"
            },
            {
              "name": "1016282",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016282"
            },
            {
              "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
            },
            {
              "name": "sixcms-list-xss(27108)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
            },
            {
              "name": "18393",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18393"
            },
            {
              "name": "1101",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1101"
            },
            {
              "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
            },
            {
              "name": "ADV-2006-2386",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2386"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3051",
    "datePublished": "2006-06-16T10:00:00.000Z",
    "dateReserved": "2006-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:16:05.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2006-3050 (GCVE-0-2006-3050)

    Vulnerability from cvelistv5 – Published: 2006-06-16 10:00 – Updated: 2024-08-07 18:16
    VLAI
    Summary
    Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a .. (dot dot) sequence and trailing null (%00) byte in the template parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    Date Public
    2006-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:16:05.125Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "sixcms-detail-directory-traversal(27107)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
          },
          {
            "name": "18395",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18395"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
          },
          {
            "name": "1016282",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016282"
          },
          {
            "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
          },
          {
            "name": "1101",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1101"
          },
          {
            "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a ..  (dot dot) sequence and trailing null (%00) byte in the template parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "sixcms-detail-directory-traversal(27107)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
        },
        {
          "name": "18395",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18395"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
        },
        {
          "name": "1016282",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016282"
        },
        {
          "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
        },
        {
          "name": "1101",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1101"
        },
        {
          "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3050",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrary files via a ..  (dot dot) sequence and trailing null (%00) byte in the template parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "sixcms-detail-directory-traversal(27107)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27107"
            },
            {
              "name": "18395",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18395"
            },
            {
              "name": "http://www.majorsecurity.de/advisory/major_rls17.txt",
              "refsource": "MISC",
              "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
            },
            {
              "name": "1016282",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016282"
            },
            {
              "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
            },
            {
              "name": "1101",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1101"
            },
            {
              "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3050",
    "datePublished": "2006-06-16T10:00:00.000Z",
    "dateReserved": "2006-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:16:05.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2006-3051 (GCVE-0-2006-3051)

    Vulnerability from cvelistv5 – Published: 2006-06-16 10:00 – Updated: 2024-08-07 18:16
    VLAI
    Summary
    Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2146 records in the last 180 days details
    References
    URL Tags
    http://www.majorsecurity.de/advisory/major_rls17.txt x_refsource_MISC
    http://secunia.com/advisories/20655 third-party-advisoryx_refsource_SECUNIA
    http://securitytracker.com/id?1016282 vdb-entryx_refsource_SECTRACK
    http://www.securityfocus.com/archive/1/437639/100… mailing-listx_refsource_BUGTRAQ
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/18393 vdb-entryx_refsource_BID
    http://securityreason.com/securityalert/1101 third-party-advisoryx_refsource_SREASON
    http://www.securityfocus.com/archive/1/437047/100… mailing-listx_refsource_BUGTRAQ
    http://www.vupen.com/english/advisories/2006/2386 vdb-entryx_refsource_VUPEN
    Date Public
    2006-06-12 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:16:05.428Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
          },
          {
            "name": "20655",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20655"
          },
          {
            "name": "1016282",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016282"
          },
          {
            "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
          },
          {
            "name": "sixcms-list-xss(27108)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
          },
          {
            "name": "18393",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18393"
          },
          {
            "name": "1101",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/1101"
          },
          {
            "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
          },
          {
            "name": "ADV-2006-2386",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2386"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-06-12T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
        },
        {
          "name": "20655",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20655"
        },
        {
          "name": "1016282",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016282"
        },
        {
          "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
        },
        {
          "name": "sixcms-list-xss(27108)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
        },
        {
          "name": "18393",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18393"
        },
        {
          "name": "1101",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/1101"
        },
        {
          "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
        },
        {
          "name": "ADV-2006-2386",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2386"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3051",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to inject arbitrary script code or HTML via the page parameter."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.majorsecurity.de/advisory/major_rls17.txt",
              "refsource": "MISC",
              "url": "http://www.majorsecurity.de/advisory/major_rls17.txt"
            },
            {
              "name": "20655",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20655"
            },
            {
              "name": "1016282",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016282"
            },
            {
              "name": "20060619 Re: [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437639/100/0/threaded"
            },
            {
              "name": "sixcms-list-xss(27108)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27108"
            },
            {
              "name": "18393",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18393"
            },
            {
              "name": "1101",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/1101"
            },
            {
              "name": "20060612 [MajorSecurity #17] SixCMS \u003c= 6 - Multiple XSS and directory traversal vulnerabilities",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/437047/100/0/threaded"
            },
            {
              "name": "ADV-2006-2386",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2386"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3051",
    "datePublished": "2006-06-16T10:00:00.000Z",
    "dateReserved": "2006-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-07T18:16:05.428Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}