Archive
1 February 2006
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Unscored —CVE-2006-0510 Public exploit
SQL injection vulnerability in userlogin.jsp in Daffodil CRM 1.5 allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-0509 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in clients.php in Cerberus Helpdesk, possibly 2.7, allow remote att…
-
Unscored —CVE-2006-0502 Public exploit
PHP remote file inclusion vulnerability in loginout.php in FarsiNews 2.1 Beta 2 and earlier, with register_globals enab…
-
Medium —
Apache Tomcat Discloses MS-DOS Pathname
Apache Tomcat 4.0.3, when running on Windows, allows remote attackers to obtain sensitive information via a request for a file that contains an MS-DOS device name such as lpt9, which leaks the pathname in an error message, as demonstrated by lpt9.xtp using Ni…
-
Unscored —CVE-2005-4696 Public exploit
The Microsoft Wireless Zero Configuration system (WZCS) stores WEP keys and pair-wise Master Keys (PMK) of the WPA pre-…
-
Unscored —CVE-2005-4694 Public exploit
Unspecified vulnerability in the www_add method in Asset.pm in Plain Black WebGUI 6.3.0 and other versions before 6.7.6…
-
Unscored —CVE-2005-4702 Public exploit
SQL injection vulnerability in the favorites module in index.php in IPBProArcade 2.5.2 allows remote attackers to injec…
-
Unscored —CVE-2005-4698 Public exploit
Cross-site scripting (XSS) vulnerability in TellMe 1.2 and earlier allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-0491 Public exploit
SQL injection vulnerability in SZUserMgnt.class.php in SZUserMgnt 1.4 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-0496 Public exploit
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly ear…