Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
207 results · Clear filters · Feed
-
Unscored —CVE-2006-1781 Public exploit
PHP remote file inclusion vulnerability in functions.php in Circle R Monster Top List (MTL) 1.4 allows remote attackers…
-
Unscored —CVE-2006-1765 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web scri…
-
Unscored —
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote att…
-
Unscored —CVE-2006-1778 Public exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-1779 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attack…
-
Unscored —CVE-2006-1768 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in register.php in Tritanium Bulletin Board (TBB) 1.2.3 allow remot…
-
Unscored —CVE-2006-1767 Public exploit
Multiple PHP remote file inclusion vulnerabilities in nicecoder.com INDEXU 5.0.0 and 5.0.1 allow remote attackers to ex…
-
Unscored —CVE-2006-1783 Public exploit
Cross-site scripting (XSS) vulnerability in PatroNet CMS allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remot…
-
Unscored —CVE-2006-1771 Public exploit
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) al…
-
Unscored —CVE-2006-1773 Public exploit
SQL injection vulnerability in include.php in PHPKIT 1.6.1 Release 2 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2006-1777 Public exploit
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers…
-
Unscored —CVE-2005-4774 Public exploit
Cross-site scripting (XSS) vulnerability in Xerver 4.17 allows remote attackers to inject arbitrary web script or HTML …
-
Unscored —CVE-2006-1758 Public exploit
SQL injection vulnerability in index.php in Vegadns 0.99 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-1760 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JetPhoto allow remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2006-1755 Public exploit
SQL injection vulnerability in admin.php in MD News 1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-1759 Public exploit
Cross-site scripting (XSS) vulnerability in allgemein_transfer.php in SWSoft Confixx 3.1.2 allows remote attackers to i…
-
Unscored —CVE-2006-1754 Public exploit
SQL injection vulnerability in index.php in SWSoft Confixx 3.0.6, 3.0.8, and 3.1.2 allows remote attackers to execute a…
-
Unscored —CVE-2006-1747 Public exploit
PHP remote file inclusion vulnerability in Virtual War (VWar) 1.5.0 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2006-1745 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Bitweaver 1.3 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-1749 Public exploit
PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute …
-
Unscored —
Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and di…
-
Unscored —
Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 200…
-
Unscored —
Microsoft Internet Explorer 5.01 through 6 does not always return the correct IOleClientSite information when dynamical…
-
Unscored —CVE-2006-1714 Public exploit
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP hea…
-
Unscored —CVE-2006-1713 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inj…
-
Unscored —
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address …
-
Unscored —
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via HTML elements with a c…
-
Unscored —CVE-2006-1718 Public exploit
Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access contro…
-
Unscored —
Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a brow…
-
Unscored —
Buffer overflow in URLMON.DLL in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrar…
-
Unscored —
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via by instantiating the (…
-
Unscored —
Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2006-1710 Public exploit
SQL injection vulnerability in admin.php in Design Nation DNGuestbook 2.0 allows remote attackers to execute arbitrary …
-
Medium —CVE-2006-1711 Public exploit
Plone allows remote users to modify arbitrary portraits
Plone 2.0.5, 2.1.2, and 2.5-beta1 does not restrict access to the (1) changeMemberPortrait, (2) deletePersonalPortrait, and (3) testCurrentPassword methods, which allows remote attackers to modify portraits.
-
Unscored —CVE-2006-1706 Public exploit
Multiple SQL injection vulnerabilities in Shopweezle 2.0 allow remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2006-1708 Public exploit
SQL injection vulnerability in member.php in Clansys 1.1 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-1694 Public exploit
SQL injection vulnerability in members.php in XBrite Members 1.1 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-1697 Public exploit
Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary we…
-
Unscored —CVE-2006-1699 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Aweb Banner Generator 3.0 and earlier allows remote attackers …