Search

Find a vulnerability

Search criteria

    4 vulnerabilities by vihor

    CVE-2006-1496 (GCVE-0-2006-1496)

    Vulnerability from nvd – Published: 2006-03-30 00:00 – Updated: 2024-08-07 17:12
    VLAI
    Summary
    Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2132 records in the last 180 days details
    References
    URL Tags
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://www.securityfocus.com/archive/1/428737 mailing-listx_refsource_BUGTRAQ
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://secunia.com/advisories/19403 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17226 vdb-entryx_refsource_BID
    Date Public
    2006-03-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:12:22.231Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "vihordesign-index-xss(25483)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
              },
              {
                "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/428737"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
              },
              {
                "name": "19403",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/19403"
              },
              {
                "name": "17226",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17226"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-03-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "vihordesign-index-xss(25483)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
            },
            {
              "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/428737"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
            },
            {
              "name": "19403",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/19403"
            },
            {
              "name": "17226",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17226"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-1496",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "vihordesign-index-xss(25483)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
                },
                {
                  "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/428737"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
                },
                {
                  "name": "19403",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/19403"
                },
                {
                  "name": "17226",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17226"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-1496",
        "datePublished": "2006-03-30T00:00:00.000Z",
        "dateReserved": "2006-03-29T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:12:22.231Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-1497 (GCVE-0-2006-1497)

    Vulnerability from nvd – Published: 2006-03-30 00:00 – Updated: 2024-08-07 17:12
    VLAI
    Summary
    Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2132 records in the last 180 days details
    References
    URL Tags
    http://securityreason.com/securityalert/625 third-party-advisoryx_refsource_SREASON
    http://www.vupen.com/english/advisories/2006/1114 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/17227 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/428737 mailing-listx_refsource_BUGTRAQ
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://secunia.com/advisories/19403 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17226 vdb-entryx_refsource_BID
    Date Public
    2006-03-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:12:22.204Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "625",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/625"
              },
              {
                "name": "ADV-2006-1114",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/1114"
              },
              {
                "name": "17227",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17227"
              },
              {
                "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/428737"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
              },
              {
                "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
              },
              {
                "name": "19403",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/19403"
              },
              {
                "name": "17226",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17226"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-03-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-04-04T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "625",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/625"
            },
            {
              "name": "ADV-2006-1114",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/1114"
            },
            {
              "name": "17227",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17227"
            },
            {
              "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/428737"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
            },
            {
              "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
            },
            {
              "name": "19403",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/19403"
            },
            {
              "name": "17226",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17226"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-1497",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "625",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/625"
                },
                {
                  "name": "ADV-2006-1114",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/1114"
                },
                {
                  "name": "17227",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17227"
                },
                {
                  "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/428737"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
                },
                {
                  "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
                },
                {
                  "name": "19403",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/19403"
                },
                {
                  "name": "17226",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17226"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-1497",
        "datePublished": "2006-03-30T00:00:00.000Z",
        "dateReserved": "2006-03-29T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:12:22.204Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-1496 (GCVE-0-2006-1496)

    Vulnerability from cvelistv5 – Published: 2006-03-30 00:00 – Updated: 2024-08-07 17:12
    VLAI
    Summary
    Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2132 records in the last 180 days details
    References
    URL Tags
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://www.securityfocus.com/archive/1/428737 mailing-listx_refsource_BUGTRAQ
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://secunia.com/advisories/19403 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17226 vdb-entryx_refsource_BID
    Date Public
    2006-03-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:12:22.231Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "vihordesign-index-xss(25483)",
                "tags": [
                  "vdb-entry",
                  "x_refsource_XF",
                  "x_transferred"
                ],
                "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
              },
              {
                "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/428737"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
              },
              {
                "name": "19403",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/19403"
              },
              {
                "name": "17226",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17226"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-03-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-07-19T15:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "vihordesign-index-xss(25483)",
              "tags": [
                "vdb-entry",
                "x_refsource_XF"
              ],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
            },
            {
              "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/428737"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
            },
            {
              "name": "19403",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/19403"
            },
            {
              "name": "17226",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17226"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-1496",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote attackers to inject arbitrary web script or HTML via (1) a remote URL in the page parameter, which is processed by an fopen call, or (2) HTML or script in the page parameter, which is returned to the client in an error message for the failed fopen call."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "vihordesign-index-xss(25483)",
                  "refsource": "XF",
                  "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/25483"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000651.html"
                },
                {
                  "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/428737"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
                },
                {
                  "name": "19403",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/19403"
                },
                {
                  "name": "17226",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17226"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-1496",
        "datePublished": "2006-03-30T00:00:00.000Z",
        "dateReserved": "2006-03-29T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:12:22.231Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2006-1497 (GCVE-0-2006-1497)

    Vulnerability from cvelistv5 – Published: 2006-03-30 00:00 – Updated: 2024-08-07 17:12
    VLAI
    Summary
    Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    mitre CNA under the mitre root
    CNA scorecard E 29/100 over 2132 records in the last 180 days details
    References
    URL Tags
    http://securityreason.com/securityalert/625 third-party-advisoryx_refsource_SREASON
    http://www.vupen.com/english/advisories/2006/1114 vdb-entryx_refsource_VUPEN
    http://www.securityfocus.com/bid/17227 vdb-entryx_refsource_BID
    http://www.securityfocus.com/archive/1/428737 mailing-listx_refsource_BUGTRAQ
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://www.attrition.org/pipermail/vim/2006-March… mailing-listx_refsource_VIM
    http://secunia.com/advisories/19403 third-party-advisoryx_refsource_SECUNIA
    http://www.securityfocus.com/bid/17226 vdb-entryx_refsource_BID
    Date Public
    2006-03-24 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-07T17:12:22.204Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "625",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SREASON",
                  "x_transferred"
                ],
                "url": "http://securityreason.com/securityalert/625"
              },
              {
                "name": "ADV-2006-1114",
                "tags": [
                  "vdb-entry",
                  "x_refsource_VUPEN",
                  "x_transferred"
                ],
                "url": "http://www.vupen.com/english/advisories/2006/1114"
              },
              {
                "name": "17227",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17227"
              },
              {
                "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                "tags": [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/428737"
              },
              {
                "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
              },
              {
                "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
                "tags": [
                  "mailing-list",
                  "x_refsource_VIM",
                  "x_transferred"
                ],
                "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
              },
              {
                "name": "19403",
                "tags": [
                  "third-party-advisory",
                  "x_refsource_SECUNIA",
                  "x_transferred"
                ],
                "url": "http://secunia.com/advisories/19403"
              },
              {
                "name": "17226",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/17226"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2006-03-24T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2006-04-04T09:00:00.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "625",
              "tags": [
                "third-party-advisory",
                "x_refsource_SREASON"
              ],
              "url": "http://securityreason.com/securityalert/625"
            },
            {
              "name": "ADV-2006-1114",
              "tags": [
                "vdb-entry",
                "x_refsource_VUPEN"
              ],
              "url": "http://www.vupen.com/english/advisories/2006/1114"
            },
            {
              "name": "17227",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17227"
            },
            {
              "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
              "tags": [
                "mailing-list",
                "x_refsource_BUGTRAQ"
              ],
              "url": "http://www.securityfocus.com/archive/1/428737"
            },
            {
              "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
            },
            {
              "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
              "tags": [
                "mailing-list",
                "x_refsource_VIM"
              ],
              "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
            },
            {
              "name": "19403",
              "tags": [
                "third-party-advisory",
                "x_refsource_SECUNIA"
              ],
              "url": "http://secunia.com/advisories/19403"
            },
            {
              "name": "17226",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/17226"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2006-1497",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Directory traversal vulnerability in index.php in ViHor Design allows remote attackers to read arbitrary files via the page parameter."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "625",
                  "refsource": "SREASON",
                  "url": "http://securityreason.com/securityalert/625"
                },
                {
                  "name": "ADV-2006-1114",
                  "refsource": "VUPEN",
                  "url": "http://www.vupen.com/english/advisories/2006/1114"
                },
                {
                  "name": "17227",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17227"
                },
                {
                  "name": "20060324 VihorDesing Script Remote Command Exucetion And Cross Scripting Attack",
                  "refsource": "BUGTRAQ",
                  "url": "http://www.securityfocus.com/archive/1/428737"
                },
                {
                  "name": "20060326 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000650.html"
                },
                {
                  "name": "20060327 clarification of \"VihorDesign\" (not VihorDesing) issues",
                  "refsource": "VIM",
                  "url": "http://www.attrition.org/pipermail/vim/2006-March/000652.html"
                },
                {
                  "name": "19403",
                  "refsource": "SECUNIA",
                  "url": "http://secunia.com/advisories/19403"
                },
                {
                  "name": "17226",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/17226"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2006-1497",
        "datePublished": "2006-03-30T00:00:00.000Z",
        "dateReserved": "2006-03-29T00:00:00.000Z",
        "dateUpdated": "2024-08-07T17:12:22.204Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }