Archive
June 2006
Vulnerabilities first published in this month (UTC), newest first.
646 results · Feed
-
Unscored —CVE-2006-3294 Public exploit
PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to in…
-
Unscored —CVE-2006-3295 Public exploit
Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-3296 Public exploit
SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-3300 Public exploit
PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers t…
-
Unscored —
Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to…
-
Unscored —
PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register_globals i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine befo…
-
Unscored —CVE-2006-3309 Public exploit
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attac…
-
Unscored —
The web interface on Cisco IOS 12.3(8)JA and 12.3(8)JA1, as used on the Cisco Wireless Access Point and Wireless Bridge…
-
Unscored —
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded u…
-
Unscored —CVE-2006-3292 Public exploit
SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Unspecified vulnerability in the TFTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51…
-
Unscored —
HTTP server in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) stores sensitive information un…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the login page of the HTTP interface for the Cisco Wireless Control System …
-
Unscored —
Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "roo…
-
Unscored —CVE-2006-3276 EPSS 14%
Heap-based buffer overflow in RealNetworks Helix DNA Server 10.0 and 11.0 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitra…
-
Unscored —
Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information …
-
Unscored —CVE-2006-3271 Public exploit
Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)…
-
Unscored —CVE-2006-3277 Public exploit
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier …
-
Unscored —
Cross-site scripting (XSS) vulnerability in aeDating 4.1 allows remote attackers to inject arbitrary web script or HTML…
-
Unscored —
Directory traversal vulnerability in Webmin before 1.280, when run on Windows, allows remote attackers to read arbitrar…
-
Unscored —CVE-2006-3269 Public exploit
PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execu…
-
Unscored —
SQL injection vulnerability in cms_admin.php in THoRCMS 1.3.1 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
SQL injection vulnerability in profile.php in YaBB SE 1.5.5 and earlier allows remote attackers to execute SQL commands…
-
Unscored —
The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented,…
-
Unscored —
Cross-site scripting (XSS) vulnerability in menu.php in Some Chess 1.5 rc1 allows remote attackers to inject arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to inject arbitrary web scri…
-
Unscored —
requirements.php in Dating Agent PRO 4.7.1 allows remote attackers to obtain sensitive information via a direct request…
-
Unscored —
SQL injection vulnerability in Dating Agent PRO 4.7.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —
Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attack…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in menu.php in Some Chess 1.5 rc2 allows remote attackers to conduct ac…
-
Unscored —
The strnlen_user function in Linux kernel before 2.6.16 on IBM S/390 can return an incorrect value, which allows local …
-
Unscored —
Format string vulnerability in the CF_syslog function launchd in Apple Mac OS X 10.4 up to 10.4.6 allows local users to…
-
Unscored —CVE-2006-1470 Public exploit
OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invali…
-
Unscored —
Stack-based buffer overflow in ImageIO in Apple Mac OS X 10.4 up to 10.4.6 allows attackers to cause a denial of servic…
-
Unscored —
Unspecified vulnerability in Apple File Protocol (AFP) server in Apple Mac OS X 10.4 up to 10.4.6 includes the names of…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in vlbook 1.02 allows remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-3262 Public exploit
SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers t…