Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
148 results · Clear filters · Feed
-
Unscored —CVE-2006-0933 Public exploit
Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —CVE-2006-0922 Public exploit
CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.…
-
Unscored —CVE-2006-0927 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burni…
-
Unscored —CVE-2006-0936 Public exploit
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and exe…
-
Unscored —CVE-2006-0920 Public exploit
Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, w…
-
Unscored —CVE-2006-0925 Public exploit
Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers t…
-
Unscored —
NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumpti…
-
Unscored —CVE-2006-0923 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to injec…
-
Unscored —CVE-2006-0906 Public exploit
SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid par…
-
Unscored —CVE-2006-0903 Public exploit
MySQL 5.0.18 and earlier allows local users to bypass logging mechanisms via SQL queries that contain the NULL characte…
-
Unscored —
nfsd in FreeBSD 6.0 kernel allows remote attackers to cause a denial of service via a crafted NFS mount request, as dem…
-
Unscored —CVE-2006-0899 Public exploit
Directory traversal vulnerability in index.php in 4Images 1.7.1 and earlier allows remote attackers to read and include…
-
Unscored —CVE-2006-0891 Public exploit
Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via …
-
Unscored —CVE-2006-0888 Public exploit
index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an uns…
-
Unscored —CVE-2006-0885 Public exploit
Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-0887 Public exploit
Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib …
-
Unscored —CVE-2006-0894 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-0884 Public exploit
The WYSIWYG rendering engine ("rich mail" editor) in Mozilla Thunderbird 1.0.7 and earlier allows user-assisted attacke…
-
Unscored —CVE-2006-0879 Public exploit
SQL injection vulnerability in the search tool in Noah's Classifieds 1.3 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-0875 Public exploit
Cross-site scripting vulnerability in ratefile.php in RunCMS 1.3a5 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-0877 Public exploit
Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via…
-
Unscored —CVE-2006-0881 Public exploit
Multiple PHP remote file include vulnerabilities in gorum/gorumlib.php in Noah's Classifieds 1.3, when register_globals…
-
Unscored —CVE-2006-0882 Public exploit
Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary…
-
Unscored —CVE-2006-0871 Public exploit
Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions al…
-
Unscored —CVE-2006-0880 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Noah's Classifieds 1.3 allow remote attackers to in…
-
Unscored —CVE-2005-2934 Public exploit
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecifi…
-
Unscored —CVE-2006-0857 Public exploit
Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-0865 Public exploit
PunBB 1.2.10 and earlier allows remote attackers to cause a denial of service (resource consumption) by registering man…
-
Unscored —CVE-2006-0869 Public exploit
Directory traversal vulnerability in the "remember me" feature in liveuser.php in PHP Extension and Application Reposit…
-
Unscored —CVE-2006-0870 Public exploit
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute a…
-
Unscored —
Stack-based buffer overflow in Nullsoft Winamp 5.12 and 5.13 allows user-assisted attackers to cause a denial of servic…
-
Unscored —CVE-2006-0851 Public exploit
SQL injection vulnerability in the forum module of ilchClan 1.05g and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-0852 Public exploit
Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute…
-
Unscored —
The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to e…
-
Unscored —CVE-2006-0841 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mantis 1.00rc4 and earlier allow remote attackers to inject arbi…
-
Unscored —CVE-2006-0836 Public exploit
Mozilla Thunderbird 1.5 allows user-assisted attackers to cause an unspecified denial of service by tricking the user i…
-
Unscored —CVE-2006-0835 Public exploit
SQL injection vulnerability in dropbase.php in MitriDAT Web Calendar Pro allows remote attackers to modify internal SQL…
-
Unscored —CVE-2006-0832 Public exploit
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-0823 Public exploit
Multiple SQL injection vulnerabilities in Geeklog 1.4.0 before 1.4.0sr1 and 1.3.11 before 1.3.11sr4 allow remote attack…
-
Unscored —CVE-2006-0821 Public exploit
SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via th…