5 June 2006

26 results · Feed

• Unscored —
  CVE-2006-2828 Public exploit

  Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attack…

  Jun 5, 2006
• Unscored —
  CVE-2006-2830

  Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows re…

  Jun 5, 2006
• Unscored —
  CVE-2006-2829

  Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 all…

  Jun 5, 2006
• Unscored —
  CVE-2005-1976

  Novell NetMail 3.5.2a, 3.5.2b, and 3.5.2c, when running on Linux, sets the owner and group ID to 500 for certain files,…

  Jun 5, 2006
• Unscored —
  CVE-2006-2813

  Directory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read arbitrary files via a …

  Jun 5, 2006
• Unscored —
  CVE-2006-2809

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote attackers to inject arbitr…

  Jun 5, 2006
• Unscored —
  CVE-2006-2812

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 all…

  Jun 5, 2006
• Unscored —
  CVE-2006-2807 Public exploit

  ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified acc…

  Jun 5, 2006
• Unscored —
  CVE-2006-2816

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote attackers to inject a…

  Jun 5, 2006
• Unscored —
  CVE-2006-2822

  SQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka CAForum) 1.0 allows remot…

  Jun 5, 2006
• Unscored —
  CVE-2006-2815

  Multiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1.0 Stable (aka com_sim…

  Jun 5, 2006
• Unscored —
  CVE-2006-2817 Public exploit

  SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via …

  Jun 5, 2006
• Unscored —
  CVE-2006-2826 Public exploit

  SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute…

  Jun 5, 2006
• Unscored —
  CVE-2006-2824

  Logicalware MailManager before 2.0.10 does not remove 0xc8 0x27 (0xc8 followed by a single-quote character) from the da…

  Jun 5, 2006
• Critical 9.8
  CVE-2006-2827

  SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attacke…

  Jun 5, 2006
• Unscored —
  CVE-2006-2821 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitr…

  Jun 5, 2006
• Unscored —
  CVE-2006-2825

  cPanel does not automatically synchronize the PHP open_basedir configuration directive between the main server and virt…

  Jun 5, 2006
• Unscored —
  CVE-2006-2810

  Multiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote attackers to inject arbi…

  Jun 5, 2006
• Unscored —
  CVE-2006-2823

  Katrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web root with insufficient ac…

  Jun 5, 2006
• Unscored —
  CVE-2006-2820

  Cross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote attackers to inject arbitra…

  Jun 5, 2006
• Unscored —
  CVE-2006-2806

  The SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote attackers to cause a denia…

  Jun 5, 2006
• Unscored —
  CVE-2006-2811 Public exploit EPSS 17%

  Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitra…

  Jun 5, 2006
• Unscored —
  CVE-2006-2819 Public exploit

  PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to ex…

  Jun 5, 2006
• Unscored —
  CVE-2006-2818 Public exploit

  PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to…

  Jun 5, 2006
• Unscored —
  CVE-2006-2808

  Cross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear) allows remote attackers to…

  Jun 5, 2006
• Unscored —
  CVE-2006-2814 Public exploit

  Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart…

  Jun 5, 2006