Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
134 results · Clear filters · Feed
-
Unscored —CVE-2006-0331 Public exploit
Buffer overflow in Change passwd 3.1 (chpasswd) SquirrelMail plugin allows local users to execute arbitrary code via lo…
-
Unscored —CVE-2006-0324 Public exploit
SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass…
-
Unscored —CVE-2006-0315 Public exploit
index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php…
-
Unscored —CVE-2006-0318 Public exploit
SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to …
-
Unscored —CVE-2006-0312 Public exploit
create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the…
-
Unscored —CVE-2006-0311 Public exploit
SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2006-0319 Public exploit
Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to…
-
Unscored —CVE-2006-0317 Public exploit
Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attacker…
-
Unscored —CVE-2006-0310 Public exploit
Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a …
-
Unscored —CVE-2006-0320 Public exploit
SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary S…
-
Unscored —
The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup…
-
Unscored —CVE-2006-0304 Public exploit
Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) an…
-
Unscored —CVE-2006-0308 Public exploit
PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, mod…
-
Unscored —
Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server…
-
Unscored —CVE-2006-0251 Public exploit
Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary we…
-
Medium —
Apache Geronimo console 1.0 vulnerable to cross-site scripting
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by t…
-
Unscored —CVE-2006-0249 Public exploit
SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0244 Public exploit
Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary f…
-
Unscored —CVE-2006-0237 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-0235 Public exploit
SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir par…
-
Unscored —CVE-2006-0240 Public exploit
Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-0234 Public exploit
SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-0222 Public exploit
Cross-site scripting (XSS) vulnerability in fullview.php in AlstraSoft Template Seller Pro allows remote attackers to i…
-
Unscored —CVE-2005-4664 Public exploit
SQL injection vulnerability in OcoMon 1.21, and possibly other versions, when magic_quotes_gpc is disabled, allows remo…
-
Unscored —CVE-2005-4656 Public exploit
SQL injection vulnerability in index.php in TClanPortal 1.1.3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2005-4657 Public exploit
Ocean12 Calendar Manager Pro 1.01 allows remote attackers to bypass authentication and obtain sensitive information via…
-
Unscored —CVE-2006-0217 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 3.67 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2006-0214 Public exploit
Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via th…
-
Unscored —
Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary fil…
-
Unscored —CVE-2006-0209 Public exploit
SQL injection vulnerability in general_functions.php in TankLogger 2.4 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-0211 Public exploit
Cross-site scripting (XSS) vulnerability in forgotPassword.asp in Helm Hosting Control Panel 3.2.8 and earlier allows r…
-
Unscored —CVE-2006-0210 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Interspire TrackPoint NX before 0.1 allows remote attackers to…
-
Unscored —CVE-2006-0199 Public exploit
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2006-0206 Public exploit
Eval injection vulnerability in Light Weight Calendar (LWC) 1.0 (20040909) and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-0198 Public exploit
Cross-site scripting (XSS) vulnerability in a certain module, possibly poll or Pool, for XOOPS allows remote attackers …
-
Unscored —CVE-2006-0194 Public exploit
Cross-site scripting (XSS) vulnerability in default.asp in FogBugz 4.029, and other versions before 4.0.33, allows remo…
-
Unscored —
Buffer overflow in eStara Softphone 3.0.1.14 through 3.0.1.46 allows remote attackers to execute arbitrary code via a l…
-
Unscored —
By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defined control (UserCo…
-
Unscored —CVE-2006-0185 Public exploit
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to…
-
Unscored —
The Cisco IP Phone 7940 allows remote attackers to cause a denial of service (reboot) via a large amount of TCP SYN pac…