Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
199 results · Clear filters · Feed
-
Unscored —CVE-2006-2681 Public exploit
PHP remote file inclusion vulnerability in SocketMail Lite and Pro 2.2.6 and earlier, when register_globals and magic_q…
-
Unscored —
PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_g…
-
Unscored —CVE-2006-2697 Public exploit
Multiple SQL injection vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-2696 Public exploit
Cross-site scripting (XSS) vulnerabilities in Easy-Content Forums 1.0 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-2699 Public exploit
Cross-site scripting (XSS) vulnerability in getimage.php in Geeklog 1.4.0sr2 and earlier allows remote attackers to inj…
-
Unscored —CVE-2006-2689 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EVA-Web 2.1.2 and earlier allow remote attackers to inject arbit…
-
Unscored —CVE-2006-2682 Public exploit
PHP remote file inclusion vulnerability in BE_config.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to…
-
Unscored —CVE-2006-2680 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject ar…
-
Unscored —
PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2006-2683 Public exploit
PHP remote file inclusion vulnerability in 404.php in open-medium.CMS 0.25 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-2668 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 2.05 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-2666 Public exploit
PHP remote file inclusion vulnerability in includes/mailaccess/pop3.php in V-Webmail 1.5 through 1.6.4 allows remote at…
-
Unscored —CVE-2006-2675 Public exploit
PHP remote file inclusion vulnerability in ubbt.inc.php in UBBThreads 5.x and 6.x allows remote attackers to execute ar…
-
Unscored —
Direct static code injection vulnerability in WordPress 2.0.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-2665 Public exploit
PHP remote file inclusion vulnerability in includes/mailaccess/pop3/core.php in V-Webmail 1.3 allows remote attackers t…
-
Unscored —
ftutil.c in Freetype before 2.2 allows remote attackers to cause a denial of service (crash) via a crafted font file th…
-
Unscored —
Stack-based buffer overflow in the tiffsplit command in libtiff 3.8.2 and earlier might might allow attackers to execut…
-
Unscored —CVE-2006-2635 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Tikiwiki (aka Tiki CMS/Groupware) 1.9.x allow remote attackers t…
-
Unscored —CVE-2006-2653 Public exploit
Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arb…
-
Unscored —CVE-2006-2646 Public exploit
Buffer overflow in Alt-N MDaemon, possibly 9.0.1 and earlier, allows remote attackers to execute arbitrary code via a l…
-
Unscored —CVE-2006-2645 Public exploit
PHP remote file inclusion vulnerability in manager/frontinc/prepend.php for Plume 1.0.3 allows remote attackers to exec…
-
Unscored —CVE-2006-2648 Public exploit
Cross-site scripting (XSS) vulnerability in perform_search.asp for ASPBB 0.52 and earlier allows remote attackers to in…
-
Unscored —CVE-2006-2638 Public exploit
SQL injection vulnerability in member.asp in qjForum allows remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2006-2636 Public exploit
newsadmin.asp in Katy Whitton NewsCMSLite allows remote attackers to bypass authentication and gain administrative acce…
-
Unscored —CVE-2006-2650 Public exploit
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary…
-
Unscored —
Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-2629 Public exploit
Race condition in Linux kernel 2.6.15 to 2.6.17, when running on SMP platforms, allows local users to cause a denial of…
-
Unscored —CVE-2006-2608 Public exploit
artmedic newsletter 4.1 and possibly other versions, when register_globals is enabled, allows remote attackers to modif…
-
Unscored —CVE-2006-2587 Public exploit
Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple products inclu…
-
Unscored —
The snmp_trap_decode function in the SNMP NAT helper for Linux kernel before 2.6.16.18 allows remote attackers to cause…
-
Unscored —CVE-2006-2583 Public exploit
PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attac…
-
Unscored —CVE-2006-2570 Public exploit
PHP remote file inclusion vulnerability in CaLogic Calendars 1.2.2 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2006-2577 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow…
-
Unscored —CVE-2006-2568 Public exploit
PHP remote file inclusion vulnerability in addpost_newpoll.php in UBB.threads 6.4 through 6.5.2 and 6.5.1.1 (trial) all…
-
Unscored —CVE-2006-2576 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when register_globals is enabled, allow…
-
Unscored —CVE-2006-2575 Public exploit
The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of …
-
Unscored —CVE-2006-2569 Public exploit
SQL injection vulnerability in links.php in 4R Linklist 1.0 RC2 and earlier, a module for Woltlab Burning Board, allows…
-
Unscored —
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to exe…
-
Unscored —CVE-2006-2555 Public exploit
The parse_command function in Genecys 0.2 and earlier allows remote attackers to cause a denial of service (crash) via …
-
Unscored —
PHP remote file inclusion vulnerability in extras/poll/poll.php in Florian Amrhein NewsPortal before 0.37, and TR Newsp…