Archive
6 July 2006
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
Unscored —CVE-2006-3355 Public exploit
Heap-based buffer overflow in httpdget.c in mpg123 before 0.59s-rll allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2006-3394 Public exploit
SQL injection vulnerability in the files mod in index.php in BXCP 0.3.0.4 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-3366 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in V3 Chat allow remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2006-3359 Public exploit
Multiple SQL injection vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-3362 Public exploit
Unrestricted file upload vulnerability in connectors/php/connector.php in FCKeditor mcpuk file manager, as used in (1) …
-
Unscored —CVE-2006-3358 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in NewsPHP 2006 PRO allow remote attackers to inject a…
-
Unscored —CVE-2006-3387 Public exploit
Directory traversal vulnerability in sources/post.php in Fusion News 1.0, when register_globals is enabled, allows remo…
-
Unscored —CVE-2006-3361 Public exploit
PHP remote file inclusion vulnerability in Stud.IP 1.3.0-2 and earlier, when register_globals is enabled, allows remote…
-
Unscored —
Webmin before 1.290 and Usermin before 1.220 calls the simplify_path function before decoding HTML, which allows remote…
-
Unscored —CVE-2006-3395 Public exploit
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-3372 Public exploit
Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttrib…
-
Unscored —CVE-2006-3375 Public exploit
PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute…
-
Unscored —CVE-2006-3381 Public exploit
SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then d…
-
Unscored —CVE-2006-3401 Public exploit
Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to caus…
-
Unscored —CVE-2006-3364 Public exploit
SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execu…
-
Unscored —CVE-2006-3374 Public exploit
PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attack…
-
Unscored —CVE-2006-3400 Public exploit
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)…
-
Unscored —CVE-2006-3385 Public exploit
Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject a…
-
Unscored —CVE-2006-3402 Public exploit
SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the passwo…
-
Unscored —CVE-2006-3396 Public exploit
PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows …
-
Unscored —CVE-2006-3363 Public exploit
PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to e…
-
Unscored —CVE-2006-3353 Public exploit
Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bou…
-
Unscored —
Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter proper…