Archive
March 2006
Vulnerabilities first published in this month (UTC), newest first.
195 results · Clear filters · Feed
-
Unscored —CVE-2006-1033 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Dragonfly CMS before 9.0.6.1 allow remote attackers to inject ar…
-
Unscored —
Stack-based buffer overflow in Microsoft Visual Studio 6.0 and Microsoft Visual InterDev 6.0 allows user-assisted attac…
-
Unscored —CVE-2006-1045 Public exploit
The HTML rendering engine in Mozilla Thunderbird 1.5, when "Block loading of remote images in mail messages" is enabled…
-
Unscored —
Buffer overflow in the IsComponentInstalled method in Internet Explorer 6.0, when used on Windows 2000 before SP4 or Wi…
-
Unscored —CVE-2006-1022 Public exploit
PHP remote file include vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System…
-
Unscored —CVE-2006-1014 Public exploit
Argument injection vulnerability in certain PHP 4.x and 5.x applications, when used with sendmail and when accepting re…
-
Unscored —CVE-2006-1013 Public exploit
PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and…
-
Unscored —
Argument injection vulnerability in certain PHP 3.x, 4.x, and 5.x applications, when used with sendmail and when accept…
-
Unscored —CVE-2006-1021 Public exploit
Cross-site scripting (XSS) vulnerability in sol_menu.php in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management Sys…
-
Unscored —CVE-2006-1018 Public exploit
SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers t…
-
Unscored —CVE-2006-1007 Public exploit
Multiple SQL injection vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2006-1000 Public exploit
Multiple SQL injection vulnerabilities in Pentacle In-Out Board 3.0 and earlier allow remote attackers to execute arbit…
-
Unscored —CVE-2006-1001 Public exploit
SQL injection vulnerability in the board module in LanSuite LanParty Intranet System 2.0.6 and 2.1.0 beta allows remote…
-
Unscored —CVE-2006-1008 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in N8cms 1.1 and 1.2 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-0983 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in QwikiWiki 1.4 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-0976 Public exploit
Directory traversal vulnerability in scan_lang_insert.php in Boris Herbiniere-Seve SPiD 1.3.1 allows remote attackers t…
-
Unscored —CVE-2006-0971 Public exploit
Directory traversal vulnerability in Lionel Reyero DirectContact 0.3b allows remote attackers to read arbitrary files v…
-
Unscored —
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queri…
-
Unscored —CVE-2006-0984 Public exploit
Cross-site scripting (XSS) vulnerability in inc_header.php in EJ3 TOPo 2.2.178 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-0973 Public exploit
SQL injection vulnerability in topics.php in Appalachian State University phpWebSite 0.10.2 and earlier allows remote a…
-
Unscored —CVE-2006-0974 Public exploit
Cross-site scripting (XSS) vulnerability in failure.asp in Battleaxe bttlxeForum 2.0 allows remote attackers to inject …
-
Unscored —CVE-2006-0972 Public exploit
SQL injection vulnerability in news.php in Tony Baird Fantastic News 2.1.1 allows remote attackers to execute arbitrary…
-
Unscored —
The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Serv…
-
Unscored —CVE-2006-0962 Public exploit
SQL injection vulnerability in vuBB 0.2 allows remote attackers to execute arbitrary SQL commands via the pass paramete…
-
Unscored —CVE-2006-0959 Public exploit
SQL injection vulnerability in misc.php in MyBulletinBoard (MyBB) 1.03, when register_globals is enabled, allows remote…
-
Unscored —CVE-2006-0961 Public exploit
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2005-2713 Public exploit
passwd in Directory Services in Mac OS X 10.3.x before 10.3.9 and 10.4.x before 10.4.5 allows local users to create arb…
-
Unscored —CVE-2006-0939 Public exploit
SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) i…
-
Unscored —CVE-2006-0943 Public exploit
SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbi…
-
Unscored —CVE-2006-0944 Public exploit
Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.
-
Unscored —CVE-2006-0942 Public exploit
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to ex…
-
Unscored —CVE-2006-0947 Public exploit
Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via …
-
Unscored —CVE-2006-0940 Public exploit
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to …
-
Unscored —CVE-2006-0946 Public exploit
Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attacker…