Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities by asbru_software

    CVE-2006-5258 (GCVE-0-2006-5258)

    Vulnerability from nvd – Published: 2006-10-12 22:00 – Updated: 2024-08-07 19:41
    VLAI
    Summary
    The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.vupen.com/english/advisories/2006/4061 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/22472 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2006/4004 vdb-entryx_refsource_VUPEN
    http://www.vupen.com/english/advisories/2006/4060 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/22353 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/22344 third-party-advisoryx_refsource_SECUNIA
    http://wcm.asbrusoft.com/page.php/id=791 x_refsource_CONFIRM
    http://editor.asbrusoft.com/page.php/id=727 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/20544 vdb-entryx_refsource_BID
    http://archives.neohapsis.com/archives/fulldisclo… mailing-listx_refsource_FULLDISC
    Date Public
    2006-10-09 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:41:05.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-4061",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4061"
          },
          {
            "name": "22472",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22472"
          },
          {
            "name": "ADV-2006-4004",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4004"
          },
          {
            "name": "ADV-2006-4060",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4060"
          },
          {
            "name": "22353",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22353"
          },
          {
            "name": "22344",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22344"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wcm.asbrusoft.com/page.php/id=791"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://editor.asbrusoft.com/page.php/id=727"
          },
          {
            "name": "20544",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20544"
          },
          {
            "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-10-24T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-4061",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4061"
        },
        {
          "name": "22472",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22472"
        },
        {
          "name": "ADV-2006-4004",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4004"
        },
        {
          "name": "ADV-2006-4060",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4060"
        },
        {
          "name": "22353",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22353"
        },
        {
          "name": "22344",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22344"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wcm.asbrusoft.com/page.php/id=791"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://editor.asbrusoft.com/page.php/id=727"
        },
        {
          "name": "20544",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20544"
        },
        {
          "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-4061",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4061"
            },
            {
              "name": "22472",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22472"
            },
            {
              "name": "ADV-2006-4004",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4004"
            },
            {
              "name": "ADV-2006-4060",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4060"
            },
            {
              "name": "22353",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22353"
            },
            {
              "name": "22344",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22344"
            },
            {
              "name": "http://wcm.asbrusoft.com/page.php/id=791",
              "refsource": "CONFIRM",
              "url": "http://wcm.asbrusoft.com/page.php/id=791"
            },
            {
              "name": "http://editor.asbrusoft.com/page.php/id=727",
              "refsource": "CONFIRM",
              "url": "http://editor.asbrusoft.com/page.php/id=727"
            },
            {
              "name": "20544",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20544"
            },
            {
              "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-5258",
    "datePublished": "2006-10-12T22:00:00.000Z",
    "dateReserved": "2006-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:41:05.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2006-5258 (GCVE-0-2006-5258)

    Vulnerability from cvelistv5 – Published: 2006-10-12 22:00 – Updated: 2024-08-07 19:41
    VLAI
    Summary
    The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.vupen.com/english/advisories/2006/4061 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/22472 third-party-advisoryx_refsource_SECUNIA
    http://www.vupen.com/english/advisories/2006/4004 vdb-entryx_refsource_VUPEN
    http://www.vupen.com/english/advisories/2006/4060 vdb-entryx_refsource_VUPEN
    http://secunia.com/advisories/22353 third-party-advisoryx_refsource_SECUNIA
    http://secunia.com/advisories/22344 third-party-advisoryx_refsource_SECUNIA
    http://wcm.asbrusoft.com/page.php/id=791 x_refsource_CONFIRM
    http://editor.asbrusoft.com/page.php/id=727 x_refsource_CONFIRM
    http://www.securityfocus.com/bid/20544 vdb-entryx_refsource_BID
    http://archives.neohapsis.com/archives/fulldisclo… mailing-listx_refsource_FULLDISC
    Date Public
    2006-10-09 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:41:05.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-4061",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4061"
          },
          {
            "name": "22472",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22472"
          },
          {
            "name": "ADV-2006-4004",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4004"
          },
          {
            "name": "ADV-2006-4060",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/4060"
          },
          {
            "name": "22353",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22353"
          },
          {
            "name": "22344",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/22344"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wcm.asbrusoft.com/page.php/id=791"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://editor.asbrusoft.com/page.php/id=727"
          },
          {
            "name": "20544",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/20544"
          },
          {
            "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-10-09T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-10-24T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-4061",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4061"
        },
        {
          "name": "22472",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22472"
        },
        {
          "name": "ADV-2006-4004",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4004"
        },
        {
          "name": "ADV-2006-4060",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/4060"
        },
        {
          "name": "22353",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22353"
        },
        {
          "name": "22344",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/22344"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wcm.asbrusoft.com/page.php/id=791"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://editor.asbrusoft.com/page.php/id=727"
        },
        {
          "name": "20544",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/20544"
        },
        {
          "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-5258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The spell checking component of (1) Asbru Web Content Management before 6.1.22, (2) Asbru Web Content Editor before 6.0.22, and (3) Asbru Website Manager before 6.0.22 allows remote attackers to execute arbitrary commands via an unspecified parameter that is not sanitized before Aspell is invoked."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-4061",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4061"
            },
            {
              "name": "22472",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22472"
            },
            {
              "name": "ADV-2006-4004",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4004"
            },
            {
              "name": "ADV-2006-4060",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/4060"
            },
            {
              "name": "22353",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22353"
            },
            {
              "name": "22344",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/22344"
            },
            {
              "name": "http://wcm.asbrusoft.com/page.php/id=791",
              "refsource": "CONFIRM",
              "url": "http://wcm.asbrusoft.com/page.php/id=791"
            },
            {
              "name": "http://editor.asbrusoft.com/page.php/id=727",
              "refsource": "CONFIRM",
              "url": "http://editor.asbrusoft.com/page.php/id=727"
            },
            {
              "name": "20544",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/20544"
            },
            {
              "name": "20061016 Asbru HardCore Web Content Editor - Command Injection",
              "refsource": "FULLDISC",
              "url": "http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0306.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-5258",
    "datePublished": "2006-10-12T22:00:00.000Z",
    "dateReserved": "2006-10-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T19:41:05.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}