Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2006-2807 Public exploit
ASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any account via a modified acc…
-
Unscored —CVE-2006-2817 Public exploit
SQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-2826 Public exploit
SQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows remote attackers to execute…
-
Unscored —CVE-2006-2821 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote attackers to inject arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote attackers to execute arbitra…
-
Unscored —CVE-2006-2819 Public exploit
PHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-2818 Public exploit
PHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0 allows remote attackers to…
-
Unscored —CVE-2006-2814 Public exploit
Multiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy-scart6.c in iShopCart…
-
Unscored —CVE-2006-2805 Public exploit
SQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL commands via the featu…
-
Unscored —
Buffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote attackers to cause a denial …
-
Unscored —CVE-2006-2803 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-2793 Public exploit
SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-2798 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to inject arbi…
-
Unscored —CVE-2006-2797 Public exploit
Multiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-2794 Public exploit
Hesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other users via a modified …
-
Unscored —CVE-2006-2767 Public exploit
PHP remote file inclusion vulnerability in Ottoman 1.1.2, when register_globals is enabled, allows remote attackers to …
-
Unscored —
The HTTP Inspect preprocessor (http_inspect) in Snort 2.4.0 through 2.4.4 allows remote attackers to bypass "uricontent…
-
Unscored —CVE-2006-2770 Public exploit
Directory traversal vulnerability in randompic.php in pppBLOG 0.3.8 and earlier, when register_globals is enabled, allo…
-
Unscored —CVE-2006-2771 Public exploit
admin/radera/tabort.asp in Hogstorps hogstorp guestbook 2.0 does not verify user credentials, which allows remote attac…
-
Unscored —CVE-2006-2768 Public exploit
PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to e…
-
Unscored —
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook …
-
Unscored —CVE-2006-2755 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject a…
-
Medium —CVE-2006-2758 Public exploit
Jetty Directory Traversal Vulnerability
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
-
Unscored —CVE-2006-2763 Public exploit
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —CVE-2006-2744 Public exploit
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows rem…
-
Unscored —CVE-2006-2730 Public exploit
PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when reg…
-
Unscored —CVE-2006-2737 Public exploit
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary gr…
-
Unscored —CVE-2006-2735 Public exploit
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, a…
-
Unscored —
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files v…
-
Unscored —CVE-2006-2745 Public exploit
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals i…
-
Unscored —CVE-2006-2746 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers …
-
Unscored —CVE-2006-2739 Public exploit
PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, all…
-
Unscored —CVE-2006-2732 Public exploit
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-2740 Public exploit
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-2725 Public exploit
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-2736 Public exploit
PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when r…
-
Unscored —
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple…
-
Unscored —CVE-2006-2747 Public exploit
Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitra…
-
Unscored —CVE-2006-2728 Public exploit
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to injec…
-
Unscored —CVE-2006-2731 Public exploit
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL …