Search
Find a vulnerability
Search criteria
4 vulnerabilities by wordcircle
CVE-2006-0205 (GCVE-0-2006-0205)
Vulnerability from nvd – Published: 2006-01-13 23:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0185 | vdb-entryx_refsource_VUPEN |
| http://securityreason.com/securityalert/346 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/27/summary.html | x_refsource_MISC |
| http://securityreason.com/securityalert/345 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/421745/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/18440 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16227 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22358 | vdb-entryx_refsource_OSVDB |
| http://evuln.com/vulns/28/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/421746/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2006-01-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.981Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/346"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22358"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/346"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22358"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0205",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0185",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/346"
},
{
"name": "http://evuln.com/vulns/27/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22358"
},
{
"name": "http://evuln.com/vulns/28/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0205",
"datePublished": "2006-01-13T23:00:00.000Z",
"dateReserved": "2006-01-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.981Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0204 (GCVE-0-2006-0204)
Vulnerability from nvd – Published: 2006-01-13 23:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0185 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/22359 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/345 | third-party-advisoryx_refsource_SREASON |
| http://secunia.com/advisories/18440 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16227 | vdb-entryx_refsource_BID |
| http://evuln.com/vulns/28/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/421746/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-01-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:34.080Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \"Course name\" field in index.php when the frm parameter has the value \"mine\" and (2) possibly certain other fields in unspecified scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0204",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \"Course name\" field in index.php when the frm parameter has the value \"mine\" and (2) possibly certain other fields in unspecified scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0185",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "http://evuln.com/vulns/28/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0204",
"datePublished": "2006-01-13T23:00:00.000Z",
"dateReserved": "2006-01-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:34.080Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0205 (GCVE-0-2006-0205)
Vulnerability from cvelistv5 – Published: 2006-01-13 23:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
12 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0185 | vdb-entryx_refsource_VUPEN |
| http://securityreason.com/securityalert/346 | third-party-advisoryx_refsource_SREASON |
| http://evuln.com/vulns/27/summary.html | x_refsource_MISC |
| http://securityreason.com/securityalert/345 | third-party-advisoryx_refsource_SREASON |
| http://www.securityfocus.com/archive/1/421745/100… | mailing-listx_refsource_BUGTRAQ |
| http://secunia.com/advisories/18440 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16227 | vdb-entryx_refsource_BID |
| http://www.osvdb.org/22358 | vdb-entryx_refsource_OSVDB |
| http://evuln.com/vulns/28/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/421746/100… | mailing-listx_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
Date Public
2006-01-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:33.981Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/346"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22358"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/346"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22358"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0205",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple SQL injection vulnerabilities in Wordcircle 2.17 allow remote attackers to (1) execute arbitrary SQL commands and bypass authentication via the password field in the login action to index.php (involving v_login.php and s_user.php) and (2) have other unknown impact via certain other fields in unspecified scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0185",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "346",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/346"
},
{
"name": "http://evuln.com/vulns/27/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/27/summary.html"
},
{
"name": "345",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "20060112 [eVuln] Wordcircle Authentication Bypass",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421745/100/0/threaded"
},
{
"name": "18440",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "22358",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22358"
},
{
"name": "http://evuln.com/vulns/28/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
},
{
"name": "wordcircle-sql-injection(24105)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24105"
},
{
"name": "wordcircle-login-security-bypass(24108)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24108"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0205",
"datePublished": "2006-01-13T23:00:00.000Z",
"dateReserved": "2006-01-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:33.981Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2006-0204 (GCVE-0-2006-0204)
Vulnerability from cvelistv5 – Published: 2006-01-13 23:00 – Updated: 2024-08-07 16:25
VLAI
EPSS
VEX
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the "Course name" field in index.php when the frm parameter has the value "mine" and (2) possibly certain other fields in unspecified scripts.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
8 references
| URL | Tags |
|---|---|
| http://www.vupen.com/english/advisories/2006/0185 | vdb-entryx_refsource_VUPEN |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.osvdb.org/22359 | vdb-entryx_refsource_OSVDB |
| http://securityreason.com/securityalert/345 | third-party-advisoryx_refsource_SREASON |
| http://secunia.com/advisories/18440 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/bid/16227 | vdb-entryx_refsource_BID |
| http://evuln.com/vulns/28/summary.html | x_refsource_MISC |
| http://www.securityfocus.com/archive/1/421746/100… | mailing-listx_refsource_BUGTRAQ |
Date Public
2006-01-12 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:25:34.080Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"tags": [
"vdb-entry",
"x_refsource_OSVDB",
"x_transferred"
],
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON",
"x_transferred"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2006-01-12T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \"Course name\" field in index.php when the frm parameter has the value \"mine\" and (2) possibly certain other fields in unspecified scripts."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-19T14:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "ADV-2006-0185",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"tags": [
"vdb-entry",
"x_refsource_OSVDB"
],
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"tags": [
"third-party-advisory",
"x_refsource_SREASON"
],
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/16227"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2006-0204",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Multiple cross-site scripting (XSS) vulnerabilities in Wordcircle 2.17 allow remote attackers to inject arbitrary web script or HTML via (1) the \"Course name\" field in index.php when the frm parameter has the value \"mine\" and (2) possibly certain other fields in unspecified scripts."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "ADV-2006-0185",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2006/0185"
},
{
"name": "wordcircle-index-xss(24106)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/24106"
},
{
"name": "22359",
"refsource": "OSVDB",
"url": "http://www.osvdb.org/22359"
},
{
"name": "345",
"refsource": "SREASON",
"url": "http://securityreason.com/securityalert/345"
},
{
"name": "18440",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/18440"
},
{
"name": "16227",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/16227"
},
{
"name": "http://evuln.com/vulns/28/summary.html",
"refsource": "MISC",
"url": "http://evuln.com/vulns/28/summary.html"
},
{
"name": "20060112 [eVuln] Wordcircle Multiple SQL Injection \u0026 XSS Vulnerabilities",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/421746/100/0/threaded"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2006-0204",
"datePublished": "2006-01-13T23:00:00.000Z",
"dateReserved": "2006-01-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:25:34.080Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}