Archive
February 2006
Vulnerabilities first published in this month (UTC), newest first.
148 results · Clear filters · Feed
-
Unscored —CVE-2006-0806 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ADOdb 4.71, as used in multiple packages such as phpESP, allow r…
-
Unscored —CVE-2006-0805 Public exploit
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day b…
-
Unscored —CVE-2006-0801 Public exploit
SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, al…
-
Unscored —CVE-2006-0800 Public exploit
Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) att…
-
Unscored —CVE-2006-0791 Public exploit
PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrar…
-
Unscored —CVE-2006-0797 Public exploit
Nokia N70 cell phone allows remote attackers to cause a denial of service (reboot or shutdown) through a wireless Bluet…
-
Unscored —CVE-2006-0792 Public exploit
Cross-site scripting (XSS) vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inje…
-
Unscored —CVE-2006-0783 Public exploit
Cross-site scripting (XSS) vulnerability in page.php in in Siteframe Beaumont, possibly 5.0.2 or 5.0.1a, allows remote …
-
Unscored —CVE-2006-0787 Public exploit
wimpy_trackplays.php in Plaino Wimpy MP3 Player, possibly 5.2 and earlier, allows remote attackers to insert arbitrary …
-
Unscored —CVE-2006-0786 Public exploit
Incomplete blacklist vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier, with allow_url_fopen enabled, …
-
Unscored —CVE-2006-0784 Public exploit
D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service …
-
Unscored —CVE-2006-0775 Public exploit
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-0774 Public exploit
SQL injection vulnerability in deleteSession() in DB_eSession library 1.0.2 and earlier, as used in multiple products, …
-
Unscored —CVE-2005-4724 Public exploit
SQL injection vulnerability in post.php in PhpTagCool 1.0.3 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-0757 Public exploit
Multiple eval injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2006-0758 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-0759 Public exploit
Multiple SQL injection vulnerabilities in HiveMail 1.3 and earlier allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-0750 Public exploit
SQL injection vulnerability in army.php in supersmashbrothers (SSB) Army System 2.1.0 for Invision Power Board (IPB) al…
-
Medium 5.6CVE-2006-0755 Public exploit
Multiple PHP remote file include vulnerabilities in dotProject 2.0.1 and earlier, when register_globals is enabled, all…
-
Unscored —CVE-2006-0737 Public exploit
eStara SIP softphone allows remote attackers to cause a denial of service (crash) via a SIP OPTIONS request with a nega…
-
Unscored —CVE-2006-0738 Public exploit
Multiple format string vulnerabilities in eStara SIP softphone allow remote attackers to cause a denial of service (han…
-
Unscored —
Multiple buffer overflows in BomberClone before 0.11.6.2 allow remote attackers to execute arbitrary code via long erro…
-
Unscored —CVE-2006-0721 Public exploit
SQL injection vulnerability in pmlite.php in RunCMS 1.2 and 1.3a allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-0728 Public exploit
SQL injection vulnerability in search.php in webSPELL 4.01.00 and earlier allows remote attackers to inject arbitrary S…
-
Unscored —CVE-2006-0735 Public exploit
Cross-site scripting (XSS) vulnerability in BBcode.pm in M. Blom HTML::BBCode 1.04 and earlier, as used in products suc…
-
Unscored —CVE-2006-0734 Public exploit
The SV_CheckForDuplicateNames function in Valve Software Half-Life CSTRIKE Dedicated Server 1.6 and earlier allows remo…
-
Unscored —CVE-2006-0733 Public exploit
Cross-site scripting (XSS) vulnerability in WordPress 2.0.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2006-0731 Public exploit
WmRoot/adapter-index.dsp in SAP Business Connector Core Fix 7 and earlier allows remote attackers to conduct spoofing (…
-
Unscored —CVE-2006-0725 Public exploit
PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows rem…
-
Unscored —CVE-2006-0455 Public exploit
gpgv in GnuPG before 1.4.2.1, when using unattended signature verification, returns a 0 exit code in certain cases even…
-
Unscored —CVE-2006-0719 Public exploit
SQL injection vulnerability in member_login.php in PHP Classifieds 6.18 through 6.20 allows remote attackers to execute…
-
Unscored —CVE-2006-0706 Public exploit
Cross-site scripting vulnerability in eintrag.php in Gästebuch (Gastebuch) before 1.3.3 allows remote attackers to inje…
-
Unscored —CVE-2006-0715 Public exploit
Cross-site scripting (XSS) vulnerability in sNews 1.3 allows remote attackers to inject arbitrary web script or HTML vi…
-
Unscored —CVE-2006-0710 Public exploit
Double free vulnerability in isode.eddy in Isode M-Vault Server 11.3 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2006-0717 Public exploit
IBM Tivoli Directory Server 6.0 allows remote attackers to cause a denial of service (crash) via a crafted LDAP request…
-
Unscored —CVE-2006-0714 Public exploit
Directory traversal vulnerability in the installation file (sql/install-0.9.7.php) in Flyspray 0.9.7 allows remote atta…
-
Unscored —CVE-2006-0702 Public exploit
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (…
-
Unscored —CVE-2006-0701 Public exploit
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
-
Unscored —CVE-2006-0688 Public exploit
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attacker…
-
Unscored —CVE-2006-0691 Public exploit
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows rem…