10 April 2006

22 results · Feed

• Unscored —
  CVE-2006-1677

  MAXdev MDPro 1.0.73 and 1.0.72, and possibly other versions before 1.076, allows remote attackers to obtain the full pa…

  Apr 10, 2006
• Unscored —
  CVE-2006-1682 Public exploit

  Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers …

  Apr 10, 2006
• Unscored —
  CVE-2006-1678

  Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.8.0.3 allow remote attackers to inject arbit…

  phpmyadmin Debian
  Apr 10, 2006
• Unscored —
  CVE-2006-1679 Public exploit

  Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject a…

  Apr 10, 2006
• Unscored —
  CVE-2006-1686

  Unspecified vulnerability in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attacker…

  Apr 10, 2006
• Unscored —
  CVE-2006-1681 Scanner template

  Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary …

  Apr 10, 2006
• Unscored —
  CVE-2006-1685 Public exploit

  Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow rem…

  Apr 10, 2006
• Unscored —
  CVE-2006-1687

  Cross-site scripting (XSS) vulnerability in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allows remote attacker…

  Apr 10, 2006
• Unscored —
  CVE-2006-1680

  Jupiter CMS 1.1.5, when display_errors is enabled, allows remote attackers to obtain the full server path via a direct …

  Apr 10, 2006
• Unscored —
  CVE-2006-1676 Public exploit

  SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, a…

  Apr 10, 2006
• Unscored —
  CVE-2006-1688 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LA…

  Apr 10, 2006
• Unscored —
  CVE-2006-1689

  Unspecified vulnerability in su in HP HP-UX B.11.11, when using the LDAP netgroup feature, allows local users to gain u…

  Apr 10, 2006
• Unscored —
  CVE-2006-1684

  Unspecified vulnerability in ecotwo Shopsystem 1.0-192 and earlier allows remote attackers to include arbitrary local f…

  Apr 10, 2006
• Unscored —
  CVE-2006-1683 Public exploit

  SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL c…

  Apr 10, 2006
• Unscored —
  CVE-2006-1549 Public exploit

  PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive func…

  Apr 10, 2006
• Unscored —
  CVE-2006-1522

  The sys_add_key function in the keyring code in Linux kernel 2.6.16.1 and 2.6.17-rc1, and possibly earlier versions, al…

  Apr 10, 2006
• Unscored —
  CVE-2006-1675 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary w…

  Apr 10, 2006
• Unscored —
  CVE-2006-1674

  Cross-site scripting (XSS) vulnerability in search.php in PHPWebGallery 1.4.1 allows remote attackers to inject arbitra…

  Apr 10, 2006
• Unscored —
  CVE-2006-1608 Public exploit

  The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via …

  Apr 10, 2006
• Unscored —
  CVE-2006-1494 Public exploit

  Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictio…

  Apr 10, 2006
• Unscored —
  CVE-2006-0053 Public exploit

  Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by…

  libimager-perl Debian
  Apr 10, 2006
• Unscored —
  CVE-2006-0996 Public exploit EPSS 11%

  Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject a…

  Apr 10, 2006