Archive
January 2006
Vulnerabilities first published in this month (UTC), newest first.
134 results · Clear filters · Feed
-
Unscored —CVE-2006-0177 Public exploit
Multiple buffer overflows in Cray UNICOS 9.0.2.2 might allow local users to gain privileges by (1) invoking /usr/bin/sc…
-
Unscored —CVE-2006-0167 Public exploit
SQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_…
-
Unscored —CVE-2006-0171 Public exploit
PHP remote file include vulnerability in index.php in OrjinWeb E-commerce allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-0163 Public exploit
SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attacke…
-
Unscored —CVE-2006-0173 Public exploit
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrep…
-
Unscored —CVE-2006-0174 Public exploit
Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain…
-
Unscored —CVE-2006-0164 Public exploit
phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary…
-
Unscored —CVE-2006-0175 Public exploit
Cross-site scripting (XSS) vulnerability in search_form.asp in Web Wiz Forums 6.34 allows remote attackers to inject ar…
-
Unscored —CVE-2006-0176 Public exploit
Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame before 11 January 2006 may allow lo…
-
Unscored —CVE-2005-4647 Public exploit
Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2005-4646 Public exploit
Unspecified vulnerability in index.php in PEARLINGER Pearl Forums 2.4 allows remote attackers to include arbitrary file…
-
Unscored —
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a craf…
-
Unscored —CVE-2006-0154 Public exploit
SQL injection vulnerability in showthread.php in 427BB 2.2 and 2.2.1 allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-0160 Public exploit
SQL injection vulnerability in add_post.php3 in Venom Board 1.22 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-0157 Public exploit
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password …
-
Unscored —CVE-2006-0153 Public exploit
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, whi…
-
Unscored —
The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuk…
-
Unscored —
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple…
-
Unscored —CVE-2005-4637 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remot…
-
Unscored —
Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of servi…
-
Unscored —CVE-2006-0136 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimer…
-
Unscored —CVE-2006-0137 Public exploit
SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attac…
-
Unscored —CVE-2006-0123 Public exploit
Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2006-0115 Public exploit
Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-0138 Public exploit
aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of clie…
-
Unscored —CVE-2006-0133 Public exploit
Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and …
-
Unscored —CVE-2006-0125 Public exploit
Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via t…
-
Unscored —CVE-2006-0135 Public exploit
SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-0110 Public exploit
Cross-site scripting (XSS) vulnerability in escribir.php in Foro Domus 2.10 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-0103 Public exploit
TinyPHPForum 3.6 and earlier stores the (1) users/[USERNAME].hash and (2) users/[USERNAME].email files under the web ro…
-
Unscored —
Stack-based buffer overflow in the create_named_pipe function in libmysql.c in PHP 4.3.10 and 4.4.x before 4.4.3 for Wi…
-
Unscored —CVE-2006-0099 Public exploit
PHP remote file include vulnerability in (1) include/templates/categories/default.php and (2) certain other include/tem…
-
Unscored —CVE-2005-4627 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in (1) GmailSite 1.0 through 1.0.4 and (2) GFHost 0.1.1 through 0…
-
Unscored —CVE-2005-4620 Public exploit
Buffer overflow in WinRAR 3.50 and earlier allows local users to execute arbitrary code via a long command-line argumen…
-
Unscored —CVE-2005-4622 Public exploit
Directory traversal vulnerability in eFileGo 3.01 allows remote attackers to execute arbitrary code, read arbitrary fil…
-
Unscored —
Buffer overflow in BlueCoat (a) WinProxy before 6.1a and (b) the web console access functionality in ProxyAV before 2.4…
-
Unscored —
Multiple eval injection vulnerabilities in HylaFAX 4.2.3 and earlier allow remote attackers to execute arbitrary comman…
-
Unscored —CVE-2005-3187 Public exploit
The listening daemon in Blue Coat Systems Inc. WinProxy before 6.1a allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2006-0088 Public exploit
SQL injection vulnerability in intouch.lib.php in inTouch 0.5.1 Alpha allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-0087 Public exploit
SQL injection vulnerability in (1) pages.php and (2) detail.php in Lizard Cart CMS 1.04 allows remote attackers to exec…