Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —CVE-2006-2848 Public exploit
links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reque…
-
Unscored —CVE-2006-2861 Public exploit
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-2844 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —
PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote atta…
-
Unscored —
Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Sec…
-
Unscored —CVE-2006-2857 Public exploit
SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.
-
Unscored —CVE-2006-2873 Public exploit
Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary we…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web sc…
-
Unscored —
PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows re…
-
Unscored —CVE-2006-2871 Public exploit
PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to exec…
-
Unscored —
Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery …
-
Unscored —CVE-2006-2867 Public exploit
SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-2866 Public exploit
PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote atta…
-
Unscored —CVE-2006-2858 Public exploit
SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary…
-
Unscored —
SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute a…
-
Unscored —
SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to …
-
Unscored —
ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for chang…
-
Unscored —CVE-2006-2835 Public exploit
SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) fo…
-
Unscored —CVE-2006-2854 Public exploit
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitra…
-
Unscored —CVE-2006-2834 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to…
-
Unscored —CVE-2006-2843 Public exploit
PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL…
-
Unscored —CVE-2006-2847 Public exploit
SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-2841 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arb…
-
Unscored —CVE-2006-2865 Public exploit
PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP cod…
-
Unscored —CVE-2006-2863 Public exploit
PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows …
-
Unscored —CVE-2005-2468 Public exploit
Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —
login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cooki…
-
Unscored —CVE-2005-2460 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitra…
-
Unscored —CVE-2005-2461 Public exploit
Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to exe…
-
Unscored —CVE-2005-2466 Public exploit
Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers …
-
Unscored —
Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php…
-
Unscored —
Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users…
-
Unscored —
Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2005-2467 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject…