Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —
SQL injection vulnerability in Hitachi HITSENSER3 HITSENSER3/PRP, HITSENSER3/PUP, HITSENSER3/STP, and HITSENSER3/EUP al…
-
Unscored —
Cross-site scripting (XSS) vulnerability in news_information.php in Interlink Advantage allows remote attackers to inje…
-
Unscored —CVE-2006-2763 Public exploit
SQL injection vulnerability in Pre News Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the (…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2,…
-
Unscored —
Directory traversal vulnerability in the IMAP service in EServ/3 3.25 allows remote authenticated users to read other u…
-
Unscored —
The HTTP service in EServ/3 3.25 allows remote attackers to obtain sensitive information via crafted HTTP requests cont…
-
Unscored —
SQL injection vulnerability in MySQL 4.1.x before 4.1.20 and 5.0.x before 5.0.22 allows context-dependent attackers to …
-
Unscored —
Stack-based buffer overflow in st.c in slurpd for OpenLDAP before 2.3.22 might allow attackers to execute arbitrary cod…
-
Unscored —CVE-2006-2744 Public exploit
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 through 0.8.5 allows rem…
-
Unscored —CVE-2006-2730 Public exploit
PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when reg…
-
Unscored —
SQL injection vulnerability in search.php in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote a…
-
Unscored —CVE-2006-2737 Public exploit
utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary gr…
-
Unscored —CVE-2006-2735 Public exploit
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, a…
-
Unscored —
PHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to include arbitrary files v…
-
Unscored —CVE-2006-2745 Public exploit
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and earlier, when register_globals i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Open Searchable Image Catalogue (OSIC) 0.7.0.1 and earlier allows remote at…
-
Unscored —CVE-2006-2746 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and earlier allow remote attackers …
-
Unscored —CVE-2006-2739 Public exploit
PHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when register_globals is enabled, all…
-
Unscored —CVE-2006-2732 Public exploit
SQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-2740 Public exploit
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-2725 Public exploit
SQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-2736 Public exploit
PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when r…
-
Unscored —
SQL injection vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue (OSIC) befor…
-
Unscored —
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register mu…
-
Unscored —
Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly handle files with multiple…
-
Unscored —
home/register.php in Eggblog before 3.0 allows remote attackers to change the password of administrators and possibly o…
-
Unscored —CVE-2006-2747 Public exploit
Directory traversal vulnerability in index.php in PhpMyDesktop|arcade 1.0 FINAL allows remote attackers to read arbitra…
-
Unscored —
The RedCarpet command-line client (rug) does not verify SSL certificates from a server, which allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
SQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to injec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the do_mysql_query function in core.php for Open Searchable Image Catalogue…
-
Unscored —CVE-2006-2728 Public exploit
Cross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to injec…
-
Unscored —
The RedCarpet /etc/ximian/rcd.conf configuration file in Novell Linux Desktop 9 and SUSE SLES 9 has world-readable perm…
-
Unscored —
The open source version of Open-Xchange 0.8.2 and earlier uses a static default username and password with a valid logi…
-
Unscored —CVE-2006-2731 Public exploit
Multiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to execute arbitrary SQL …
-
Unscored —
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by set…
-
Unscored —CVE-2006-2439 Public exploit
Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZI…
-
Unscored —
Cross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated administrators to inject arbitrary…
-
Unscored —
SQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL comman…