Archive
6 July 2006
Vulnerabilities first published on this day (UTC), newest first.
53 results · Feed
-
Unscored —
passwd command in shadow in Ubuntu 5.04 through 6.06 LTS, when called with the -f, -g, or -s flag, does not check the r…
-
Unscored —
Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, w…
-
Unscored —
Kamikaze-QSCM 0.1 stores config.inc under the web document root with insufficient access control, which allows remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in search.php in mAds 1.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-3355 Public exploit
Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code v…
-
Unscored —
V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in wiki.php in MoniWiki before 1.1.2-20060702 allows remote attackers to injec…
-
Unscored —CVE-2006-3394 Public exploit
SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary …
-
Unscored —
Buffer overflow in the xcf_load_vector function in app/xcf/xcf-load.c for gimp before 2.2.12 allows user-assisted attac…
-
Unscored —CVE-2006-3366 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or…
-
Unscored —
Cross-site scripting (XSS) vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web scr…
-
Unscored —
Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary fil…
-
Unscored —CVE-2006-3359 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web …
-
Unscored —
Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allo…
-
Unscored —
index.php in WordPress 2.0.3 allows remote attackers to obtain sensitive information, such as SQL table prefixes, via a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in mAds 1.0 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers t…
-
Unscored —CVE-2006-3362 Public exploit
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) …
-
Unscored —CVE-2006-3358 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject a…
-
Unscored —
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier all…
-
Unscored —
WordPress 2.0.3 allows remote attackers to obtain the installation path via a direct request to various files, such as …
-
Unscored —CVE-2006-3387 Public exploit
Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remo…
-
Unscored —CVE-2006-3361 Public exploit
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote…
-
Unscored —
Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote atta…
-
Unscored —
Cross-site scripting (XSS) vulnerability in JMB Software AutoRank PHP 3.02 and earlier, and AutoRank Pro 5.01 and earli…
-
Unscored —
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote…
-
Unscored —CVE-2006-3395 Public exploit
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary P…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Taskjitsu before 2.0.1 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-3372 Public exploit
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttrib…
-
Unscored —
Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of servic…
-
Unscored —
The Execute function in iMBCContents ActiveX Control before 2.0.0.59 allows remote attackers to execute arbitrary files…
-
Unscored —CVE-2006-3357 EPSS 35%
Heap-based buffer overflow in HTML Help ActiveX control (hhctrl.ocx) in Microsoft Internet Explorer 6.0 allows remote a…
-
Unscored —CVE-2006-3375 Public exploit
PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute…
-
Unscored —CVE-2006-3381 Public exploit
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then d…
-
Unscored —CVE-2006-3401 Public exploit
Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to caus…
-
Unscored —CVE-2006-3364 Public exploit
SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2006-3374 Public exploit
PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attack…
-
Unscored —CVE-2006-3400 Public exploit
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)…
-
Unscored —
SQL injection vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-3385 Public exploit
Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject a…