Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2006-1140 Public exploit
SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow re…
-
Unscored —CVE-2006-1151 Public exploit
Cross-site scripting vulnerability in index.php in M-Phorum 0.2 allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2006-1132 Public exploit
SQL injection vulnerability in show.php in vbzoom 1.11 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-1131 Public exploit
Cross-site scripting (XSS) vulnerability in read.php in bitweaver CMS 1.2.1 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-1133 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in vbzoom 1.11 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1135 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in sBlog 0.7.2 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1128 Public exploit
Directory traversal vulnerability in the session handling class (GallerySession.class) in Gallery 2 up to 2.0.2 allows …
-
Unscored —CVE-2006-1127 Public exploit
Cross-site scripting (XSS) vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1123 Public exploit
SQL injection vulnerability in D2KBlog 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-1121 Public exploit
Cross-site scripting (XSS) vulnerability in CuteNews 1.4.1 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —CVE-2006-1120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DCP-Portal 6.1.1 and earlier, with register_globals enabled, all…
-
Unscored —CVE-2006-1124 Public exploit
Buffer overflow in RevilloC MailServer and Proxy 1.21 allows remote attackers to execute arbitrary code via a long USER…
-
Unscored —CVE-2006-1100 Public exploit
Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cub…
-
Unscored —CVE-2006-1111 Public exploit
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a "*/*" in the msg parameter to index.php, …
-
Unscored —CVE-2006-1099 Public exploit
PHP remote file include vulnerability in logIT 1.3 and 1.4 allows remote attackers to execute arbitrary PHP code via a …
-
Unscored —CVE-2006-1098 Public exploit
Multiple SQL injection vulnerabilities in NZ Ecommerce allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-1101 Public exploit
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attac…
-
Unscored —CVE-2006-1103 Public exploit
engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial…
-
Unscored —CVE-2006-1109 Public exploit
SQL injection vulnerability in index.asp in Total Ecommerce 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-1110 Public exploit
Cross-site scripting (XSS) vulnerability in Aztek Forum 4.0 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2006-1094 Public exploit
SQL injection vulnerability in Datenbank MOD 2.7 and earlier for Woltlab Burning Board allows remote attackers to execu…
-
Unscored —CVE-2006-1113 Public exploit
SQL injection vulnerability in podcast.php in Loudblog before 0.42 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-1090 Public exploit
register.php in PunBB 1.2.10 allows remote attackers to cause an unspecified denial of service via a flood of new user …
-
Unscored —CVE-2006-1112 Public exploit
Aztek Forum 4.0 allows remote attackers to obtain sensitive information via a long login value in a register form, whic…
-
Unscored —CVE-2006-1102 Public exploit
Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client e…
-
Unscored —CVE-2006-1114 Public exploit
Multiple directory traversal vulnerabilities in Loudblog before 0.42 allow remote attackers to read or include arbitrar…
-
Unscored —CVE-2006-1076 Public exploit
SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 al…
-
Unscored —CVE-2006-1080 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Game-Panel 2.6.1 and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-1081 Public exploit
SQL injection vulnerability in forgotten_password.php in Jonathan Beckett PluggedOut Nexus 0.1 allows remote attackers …
-
Unscored —CVE-2006-1070 Public exploit
Cross-site scripting (XSS) vulnerability in dv_gbook.php in DVguestbook 1.0 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-1071 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in DVguestbook 1.2.2 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-1073 Public exploit
Directory traversal vulnerability in index.php in Daverave Simplog 1.0.2 and earlier allows remote attackers to include…
-
Unscored —CVE-2006-0047 Public exploit
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted p…
-
Unscored —CVE-2006-1039 Public exploit
SAP Web Application Server (WebAS) Kernel before 7.0 allows remote attackers to inject arbitrary bytes into the HTTP re…
-
Unscored —CVE-2006-1032 Public exploit
Eval injection vulnerability in the decode function in rpc_decoder.php for phpRPC 0.7 and earlier, as used by runcms, e…
-
Unscored —CVE-2006-1046 Public exploit
server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a stri…
-
Unscored —CVE-2006-1034 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arb…
-
Unscored —CVE-2006-1040 Public exploit
Cross-site scripting (XSS) vulnerability in vBulletin 3.0.12 and 3.5.3 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-1031 Public exploit
config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via t…