Archive
April 2006
Vulnerabilities first published in this month (UTC), newest first.
207 results · Clear filters · Feed
-
Unscored —CVE-2006-1709 Public exploit
Cross-site scripting (XSS) vulnerability in shop_main.cgi in interaktiv.shop 5 allows remote attackers to inject arbitr…
-
Unscored —CVE-2006-1702 Public exploit
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-1701 Public exploit
Cross-site scripting (XSS) vulnerability in the Pages module in Shadowed Portal allows remote attackers to inject arbit…
-
Unscored —CVE-2006-1704 Public exploit
Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upl…
-
Unscored —CVE-2006-1682 Public exploit
Cross-site scripting (XSS) vulnerability in webplus.exe in TalentSoft Web+Shop 5.0 and earlier allows remote attackers …
-
Unscored —CVE-2006-1679 Public exploit
Cross-site scripting (XSS) vulnerability in modules/online.php in Jupiter CMS 1.1.5 allows remote attackers to inject a…
-
Unscored —CVE-2006-1685 Public exploit
Multiple SQL injection vulnerabilities in modules.php in APT-webshop-system 4.0 PRO, 3.0 BASIC, and 3.0 LIGHT allow rem…
-
Unscored —CVE-2006-1676 Public exploit
SQL injection vulnerability in the display function in the Topics module for MAXdev MDPro (MD-Pro) 1.0.73 and 1.0.72, a…
-
Unscored —CVE-2006-1688 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SQuery 4.5 and earlier, as used in products such as Autonomous LA…
-
Unscored —CVE-2006-1683 Public exploit
SQL injection vulnerability in admin/login.php in Chipmunk Guestbook allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-1549 Public exploit
PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive func…
-
Unscored —CVE-2006-1675 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHPWebGallery 1.4.1 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-1608 Public exploit
The copy function in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass safe mode and read arbitrary files via …
-
Unscored —CVE-2006-1494 Public exploit
Directory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass open_basedir restrictio…
-
Unscored —CVE-2006-0053 Public exploit
Imager (libimager-perl) before 0.50 allows user-assisted attackers to cause a denial of service (segmentation fault) by…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote attackers to inject a…
-
Unscored —CVE-2006-1662 Public exploit
The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the…
-
Unscored —CVE-2006-1661 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2006-1659 Public exploit
Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-1673 Public exploit
Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attac…
-
Unscored —
Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, …
-
Unscored —CVE-2006-1668 Public exploit
newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allow…
-
Unscored —CVE-2006-1667 Public exploit
SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Ga…
-
Unscored —CVE-2005-4770 Public exploit
SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solution…
-
Unscored —CVE-2005-4769 Public exploit
SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitr…
-
Unscored —
Multiple buffer overflows in (a) UltraVNC (aka Ultr@VNC) 1.0.1 and earlier and (b) tabbed_viewer 1.29 (1) allow user-as…
-
Unscored —CVE-2006-1645 Public exploit
Cross-site scripting (XSS) vulnerability in Anton Vlasov and Rostislav Gaitkuloff ReloadCMS 1.2.5 and earlier allows re…
-
Unscored —CVE-2006-1634 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2006-1654 Public exploit
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Wi…
-
Unscored —
Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 a…
-
Unscored —
Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduc…
-
Unscored —CVE-2006-1613 Public exploit
Multiple SQL injection vulnerabilities in aWebNews 1.0 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-1610 Public exploit
PHP remote file inclusion vulnerability in lib/armygame.php in SQuery 4.5 and earlier, as used in products such as Auto…
-
Unscored —CVE-2006-1593 Public exploit
The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.0…
-
Unscored —CVE-2006-1590 Public exploit
Cross-site scripting (XSS) vulnerability in the PrintFreshPage function in (1) Basic Analysis and Security Engine (BASE…
-
Unscored —CVE-2006-1595 Public exploit
Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attacker…
-
Unscored —CVE-2006-1579 Public exploit
SQL injection vulnerability in topics.php in Dynamic Bulletin Board System (DbbS) 2.0-alpha and earlier allows remote a…
-
Unscored —CVE-2006-1584 Public exploit
Unspecified vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arb…
-
Unscored —CVE-2006-1586 Public exploit
SQL injection vulnerability in admin_login.asp in ISP of Egypt SiteMan allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-1580 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Bugzero 4.3.1 and other versions allow remote attackers to injec…