Archive
9 March 2006
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
Unscored —CVE-2006-1128 Public exploit
Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows …
-
Unscored —CVE-2006-1127 Public exploit
Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1123 Public exploit
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-1121 Public exploit
Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2006-1120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, all…
-
Unscored —CVE-2006-1124 Public exploit
Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER…
-
Unscored —CVE-2006-1100 Public exploit
Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cub…
-
Unscored —CVE-2006-1111 Public exploit
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, …
-
Unscored —CVE-2006-1099 Public exploit
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a …
-
Unscored —CVE-2006-1098 Public exploit
Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-1101 Public exploit
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attac…
-
Unscored —CVE-2006-1103 Public exploit
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial…
-
Unscored —CVE-2006-1109 Public exploit
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-1110 Public exploit
Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2006-1094 Public exploit
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execu…
-
Unscored —CVE-2006-1113 Public exploit
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-1090 Public exploit
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user …
-
Unscored —CVE-2006-1112 Public exploit
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, whic…
-
Unscored —CVE-2006-1102 Public exploit
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client e…
-
Unscored —CVE-2006-1114 Public exploit
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrar…
-
Unscored —CVE-2006-1076 Public exploit
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 al…
-
Unscored —CVE-2006-1080 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-1081 Public exploit
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers …