Archive
1 June 2006
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to …
-
Unscored —
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary cod…
-
Unscored —CVE-2006-2744 Public exploit
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows rem…
-
Unscored —CVE-2006-2730 Public exploit
PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when reg…
-
Unscored —
SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote a…
-
Unscored —CVE-2006-2737 Public exploit
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary gr…
-
Unscored —CVE-2006-2735 Public exploit
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, a…
-
Unscored —
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files v…
-
Unscored —CVE-2006-2745 Public exploit
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote at…
-
Unscored —CVE-2006-2746 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers …
-
Unscored —CVE-2006-2739 Public exploit
PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, all…
-
Unscored —CVE-2006-2732 Public exploit
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-2740 Public exploit
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-2725 Public exploit
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-2736 Public exploit
PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when r…
-
Unscored —
SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) befor…
-
Unscored —
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register mu…
-
Unscored —
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple…
-
Unscored —
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly o…
-
Unscored —CVE-2006-2747 Public exploit
Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitra…
-
Unscored —
The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to injec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue…
-
Unscored —CVE-2006-2728 Public exploit
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to injec…
-
Unscored —
The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable perm…
-
Unscored —
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid logi…
-
Unscored —CVE-2006-2731 Public exploit
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by set…
-
Unscored —CVE-2006-2439 Public exploit
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZI…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary…
-
Unscored —
SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
JIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the HR_Staff table in Microsoft …
-
Unscored —
SQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary SQL commands via the s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to inject arbitrary HTML or we…
-
Unscored —CVE-2006-2723 Public exploit
Unspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service (crash) via a web page that…
-
Unscored —
JIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the name of a data source, to…
-
Unscored —
The Linux kernel before 2.6.11 on the Itanium IA64 platform has certain "ptrace corner cases" that allow local users to…