Archive
May 2006
Vulnerabilities first published in this month (UTC), newest first.
609 results · Feed
-
Unscored —CVE-2006-2156 Public exploit
Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Russcom Network Loginphp (Russcom.Loginphp) allows remote attackers to inje…
-
Unscored —
PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is ena…
-
Unscored —CVE-2006-2149 Public exploit
PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register…
-
Unscored —
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges be…
-
Unscored —
SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
Dynamic variable evaluation vulnerability in index.php in Stadtaus Guestbook Script 1.7 and earlier, when register_glob…
-
Unscored —CVE-2006-2152 Public exploit
PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regis…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HTM_PASSWD in DirectAdmin Hosting Management allows remote attackers to inj…
-
Unscored —
Buffer overflow in the X render (Xrender) extension in X.org X server 6.8.0 up to allows attackers to cause a denial of…
-
Unscored —
Multiple buffer overflows in client.c in CGI:IRC (CGIIRC) before 0.5.8 might allow remote attackers to execute arbitrar…
-
Unscored —
resmgrd in resmgr for SUSE Linux and other distributions does not properly handle when access to a USB device is grante…
-
Unscored —
Cisco IP Phones 7902/7905/7912, ATA 186/188, Unity Express, ACNS, and Subscriber Edge Services Manager (SESM) allows re…
-
Unscored —CVE-2006-2143 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-2138 Public exploit
Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web …
-
Unscored —
SQL injection vulnerability in login.php in Ruperts News allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-2142 Public exploit
PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers…
-
Unscored —CVE-2006-2144 Public exploit
PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary P…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-2134 Public exploit
PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier…
-
Unscored —
SQL injection vulnerability in news.php in AZNEWS allows remote attackers to execute arbitrary SQL commands via the ID …
-
Unscored —CVE-2006-2137 Public exploit
PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execu…
-
Unscored —CVE-2006-2109 Public exploit
Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0…
-
Unscored —CVE-2006-2141 Public exploit
Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows r…
-
Unscored —CVE-2006-2140 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in HB-NS 1.1.6 allow remote attackers to inject arbitr…
-
Unscored —
Multiple SQL injection vulnerabilities in PHP Newsfeed 20040723 allow remote attackers to execute arbitrary SQL command…
-
Unscored —
Multiple SQL injection vulnerabilities in Pro Publish 2.0 allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —
SQL injection vulnerability in include/class_poll.php in Advanced Poll 2.0.4 allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-2127 Public exploit
SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arb…
-
Unscored —CVE-2006-2132 Public exploit
SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —
SQL injection vulnerability in index.php in BoonEx Barracuda 1.1 and earlier allows remote attackers to execute arbitra…
-
Unscored —
include/class_poll.php in Advanced Poll 2.0.4 uses the HTTP_X_FORWARDED_FOR (X-Forwarded-For HTTP header) to identify t…
-
Unscored —CVE-2006-2124 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitra…
-
Unscored —CVE-2006-2122 Public exploit
PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via…
-
Unscored —
The TIFFToRGB function in libtiff before 3.8.1 allows remote attackers to cause a denial of service (crash) via a craft…
-
Unscored —CVE-2006-2121 Public exploit
PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to e…
-
Unscored —CVE-2006-2126 Public exploit
SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitr…
-
Unscored —
Multiple SQL injection vulnerabilities in the report interface in Network Administration Visualized (NAV) before 3.0.1 …