Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2006-3051 Public exploit
Cross-site scripting (XSS) vulnerability in list.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remot…
-
Unscored —CVE-2006-2909 Public exploit
Stack-based buffer overflow in the info tip shell extension (zipinfo.dll) in PicoZip 4.01 allows remote attackers to ex…
-
Unscored —CVE-2006-3042 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ISPConfig 2.2.3 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-3028 Public exploit
PHP remote file inclusion vulnerability in stat_modules/users_age/module.php in Minerva 2.0.8a Build 237 and earlier al…
-
Unscored —CVE-2006-3027 Public exploit
Multiple SQL injection vulnerabilities in Enthrallwebe ePhotos 2.2 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-3019 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpCMS 1.2.1pl2 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-3036 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 35mmslidegallery 6.0 allow remote attackers to inject arbitrary …
-
Unscored —CVE-2006-3015 Public exploit
Argument injection vulnerability in WinSCP 3.8.1 build 328 allows remote attackers to upload or download arbitrary file…
-
Unscored —CVE-2006-3009 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Business Management (OBM) 1.0.3 pl1 allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2000 SP1 through SP3, when running Outlook Web Ac…
-
Unscored —CVE-2006-2374 Public exploit
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…
-
Unscored —
Buffer overflow in the Routing and Remote Access service (RRAS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Serv…
-
Unscored —
Buffer overflow in the TCP/IP Protocol driver in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 and ea…
-
Unscored —
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to exec…
-
Unscored —
The Server Message Block (SMB) driver (MRXSMB.SYS) in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 SP1 a…
-
Unscored —CVE-2006-3006 Public exploit
Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attacker…
-
Unscored —CVE-2006-2998 Public exploit
PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to exe…
-
Unscored —CVE-2006-2996 Public exploit
PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote …
-
Unscored —CVE-2006-2995 Public exploit
Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute …
-
Unscored —CVE-2006-2908 Public exploit
The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows re…
-
Unscored —CVE-2006-2982 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier al…
-
Unscored —CVE-2006-2986 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) …
-
Unscored —CVE-2006-2973 Public exploit
Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute …
-
Unscored —
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2006-2955 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject …
-
Unscored —CVE-2006-2962 Public exploit
PHP remote file inclusion vulnerability in sql_fcnsOLD.php in Emergenices Personnel Information System (Empris) 2002092…
-
Unscored —CVE-2006-2946 Public exploit
Dmx Forum 2.1a stores _includes/bd.inc under the web root with insufficient access control, which allows remote attacke…
-
Unscored —CVE-2006-2971 Public exploit
Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (dae…
-
Unscored —CVE-2006-2947 Public exploit
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.ph…
-
Unscored —CVE-2006-2929 Public exploit
PHP remote file inclusion vulnerability in contrib/forms/evaluation/C_FormEvaluation.class.php in OpenEMR 2.8.1 and ear…
-
Unscored —CVE-2006-2928 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CMS-Bandits 2.5 and earlier, when register_globals is enabled, al…
-
Unscored —
Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denia…
-
Unscored —CVE-2006-2922 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MiraksGalerie 2.62 allow remote attackers to execute arbitrary PH…
-
Unscored —
The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw (GD) library (aka libgd) 2…
-
Unscored —CVE-2006-2901 Public exploit
The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obt…
-
Unscored —CVE-2006-2888 Public exploit
PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-2889 Public exploit
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute…
-
Unscored —CVE-2006-2892 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML …
-
Unscored —CVE-2006-2884 Public exploit
SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2006-2883 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web…