Archive
20 April 2006
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
Unscored —
Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, …
-
Unscored —CVE-2006-1943 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote at…
-
Unscored —CVE-2006-1941 Public exploit
Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craf…
-
Unscored —CVE-2006-1944 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to in…
-
Unscored —CVE-2006-1945 Public exploit
Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…
-
Unscored —CVE-2006-1950 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remot…
-
Unscored —CVE-2006-1946 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-1947 Public exploit
Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute…
-
Unscored —
Mozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2, and K-Meleon 0.9.13 a…
-
Unscored —
The "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM Lotus Notes 6.0 and 6…
-
Unscored —
SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitr…
-
Unscored —
The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service …
-
Unscored —
SQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 or Cisco 12000 serie…
-
Unscored —
DbbS 2.0-alpha and earlier allows remote attackers to obtain sensitive information via an invalid (1) fcategoryid param…
-
Unscored —CVE-2006-1913 Public exploit
Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attack…
-
Unscored —
Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to exec…
-
Unscored —CVE-2006-1917 Public exploit
SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-1921 Public exploit
nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t…
-
Unscored —CVE-2006-1922 Public exploit
PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to ex…
-
Unscored —
SQL injection vulnerability in topics.php in DbbS 2.0-alpha and earlier allows remote attackers to execute arbitrary SQ…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MyBB (MyBulletinBoard) 1.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-1918 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1909 Public exploit
Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2006-1929 Public exploit
PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute ar…
-
Unscored —
Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-1912 Public exploit
MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, whi…
-
Unscored —
Cisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS-1 routers, allows remo…
-
Unscored —CVE-2006-1919 Public exploit
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbit…
-
Unscored —
SQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
config.php in S9Y Serendipity 1.0 beta 2 allows remote attackers to inject arbitrary PHP code by editing values that ar…
-
Unscored —CVE-2006-1916 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers…
-
Unscored —CVE-2006-1925 Public exploit
Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remot…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers to inject arbitrary w…
-
Unscored —
Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the e…
-
Unscored —CVE-2006-1926 Public exploit
SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arb…
-
Unscored —
Unspecified vulnerability in Oracle Database Server 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors in the Or…
-
Unscored —
Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.46.12 and 8.47.04 has unknown …
-
Unscored —
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 …
-
Unscored —CVE-2006-1906 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arb…