22 June 2006

37 results · Feed

• Unscored —
  CVE-2006-3141

  Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to in…

  Jun 22, 2006
• Unscored —
  CVE-2006-3147 Public exploit

  Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to ga…

  Jun 22, 2006
• Unscored —
  CVE-2006-3156

  Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inje…

  Jun 22, 2006
• Unscored —
  CVE-2006-3163

  Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute ar…

  Jun 22, 2006
• Unscored —
  CVE-2006-3148

  SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitr…

  Jun 22, 2006
• Unscored —
  CVE-2006-3137

  Cross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows remote attackers to inject …

  Jun 22, 2006
• Unscored —
  CVE-2006-3151 Public exploit

  Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attacker…

  Jun 22, 2006
• Unscored —
  CVE-2006-3162 Public exploit

  PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers…

  Jun 22, 2006
• Unscored —
  CVE-2006-3150

  SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQ…

  Jun 22, 2006
• Unscored —
  CVE-2006-3139

  Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to…

  Jun 22, 2006
• Unscored —
  CVE-2006-3145

  Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash)…

  Jun 22, 2006
• Critical 9.8
  CVE-2006-3136

  Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote attackers to execute arbitrary PHP code…

  Jun 22, 2006
• Unscored —
  CVE-2006-3157

  Cross-site scripting (XSS) vulnerability in index.php in Thinkfactory UltimateGoogle 1.00 and earlier allows remote att…

  Jun 22, 2006
• Unscored —
  CVE-2006-3167

  Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified …

  Jun 22, 2006
• Unscored —
  CVE-2006-3142 Public exploit

  SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via t…

  Jun 22, 2006
• Unscored —
  CVE-2006-3159

  pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions…

  Jun 22, 2006
• Unscored —
  CVE-2006-3154

  SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary…

  Jun 22, 2006
• Unscored —
  CVE-2006-3143 Public exploit

  Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent appl…

  Jun 22, 2006
• Unscored —
  CVE-2006-3138

  Multiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow remote attackers to inje…

  Jun 22, 2006
• Unscored —
  CVE-2006-3158 Public exploit

  index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows rem…

  Jun 22, 2006
• Unscored —
  CVE-2006-3153

  Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inje…

  Jun 22, 2006
• Unscored —
  CVE-2006-3149

  Cross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows remote attackers to inject…

  Jun 22, 2006
• Unscored —
  CVE-2006-3146

  The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a de…

  Jun 22, 2006
• Unscored —
  CVE-2006-3164

  SQL injection vulnerability in category.php in TPL Design tplShop 2.0 and earlier allows remote attackers to execute ar…

  Jun 22, 2006
• Unscored —
  CVE-2006-3160

  Cross-site scripting (XSS) vulnerability in fm.php in ONEdotOH Simple File Manager (SFM) 0.24a and earlier allows remot…

  Jun 22, 2006
• Unscored —
  CVE-2006-3166

  Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to …

  Jun 22, 2006
• Unscored —
  CVE-2006-3165

  SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbit…

  Jun 22, 2006
• Unscored —
  CVE-2006-3140

  SQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote attackers to execute arbit…

  Jun 22, 2006
• Unscored —
  CVE-2006-3161 Public exploit

  SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL…

  Jun 22, 2006
• Unscored —
  CVE-2006-3155

  Multiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow remote attackers to injec…

  Jun 22, 2006
• Unscored —
  CVE-2006-3152

  Multiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to execute arbitrary SQL…

  Jun 22, 2006
• Unscored —
  CVE-2006-3144 Public exploit

  PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.…

  Jun 22, 2006
• Unscored —
  CVE-2006-3132

  Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrar…

  Jun 22, 2006
• Unscored —
  CVE-2006-3131

  Multiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject arbitrary web script o…

  Jun 22, 2006
• Unscored —
  CVE-2006-3129

  Multiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier allow remote attackers …

  Jun 22, 2006
• Unscored —
  CVE-2006-3130

  SQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary SQL commands via the …

  Jun 22, 2006
• Unscored —
  CVE-2006-3014 Public exploit EPSS 30%

  Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites vi…

  Jun 22, 2006