Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2006-3173 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-3195 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject…
-
Unscored —CVE-2006-3189 Public exploit
Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attac…
-
Unscored —CVE-2006-3192 Public exploit
PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via…
-
Unscored —CVE-2006-3177 Public exploit
PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows rem…
-
Unscored —CVE-2006-3186 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-3176 Public exploit
SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-3184 Public exploit
Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to…
-
Unscored —CVE-2006-3175 Public exploit
Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP c…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, a…
-
Unscored —CVE-2006-3191 Public exploit
Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2006-3194 Public exploit
Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrar…
-
Unscored —CVE-2006-3147 Public exploit
Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to ga…
-
Unscored —CVE-2006-3151 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attacker…
-
Unscored —CVE-2006-3162 Public exploit
PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers…
-
Unscored —CVE-2006-3142 Public exploit
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2006-3143 Public exploit
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent appl…
-
Unscored —CVE-2006-3158 Public exploit
index.php in Eduha Meeting does not properly restrict file extensions before permitting a file upload, which allows rem…
-
Unscored —CVE-2006-3161 Public exploit
SQL injection vulnerability in misc.php in SaphpLesson 1.1 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-3144 Public exploit
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.…
-
Unscored —
Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites vi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4.1(3)SR4, 4.2 before 4.…
-
Unscored —CVE-2006-3103 Public exploit
Cross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject arbitrary web script or HTM…
-
Unscored —CVE-2006-3102 Public exploit
Race condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime extension, allows remo…
-
Unscored —CVE-2006-3105 Public exploit
CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via…
-
Unscored —CVE-2006-3104 Public exploit
users/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an invalid sort_mode param…
-
Unscored —
Stack-based buffer overflow in the HrShellOpenWithMonikerDisplayName function in Microsoft Hyperlink Object Library (hl…
-
Unscored —
mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to caus…
-
Unscored —CVE-2006-3082 Public exploit
parse-packet.c in GnuPG (gpg) 1.4.3 and 1.9.20, and earlier versions, allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2006-3076 Public exploit
PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBl…
-
Unscored —CVE-2006-3069 Public exploit
PHP remote file inclusion vulnerability in DoubleSpeak 0.1, when register_globals is enabled, allows remote attackers t…
-
Unscored —CVE-2006-3074 Public exploit
klif.sys in Kaspersky Internet Security 6.0 and 7.0, Kaspersky Anti-Virus (KAV) 6.0 and 7.0, KAV 6.0 for Windows Workst…
-
Unscored —CVE-2006-3065 Public exploit
SQL injection vulnerability in engine/shards/blog.php in blur6ex 0.3.462 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-3061 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 5 Star Review allow remote attackers to inject arbitrary web scr…
-
Unscored —
Unspecified vulnerability in Microsoft Excel 2000 through 2004 allows remote user-assisted attackers to execute arbitra…
-
Unscored —CVE-2006-3053 Public exploit
PHP remote file inclusion vulnerability in common.php in PHORUM 5.1.13 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-3050 Public exploit
Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote att…
-
Unscored —CVE-2006-3052 Public exploit
Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script o…