Archive
August 2006
Vulnerabilities first published in this month (UTC), newest first.
554 results · Feed
-
Unscored —
The Cisco Network Admission Control (NAC) 3.6.4.1 and earlier allows remote attackers to prevent installation of the Ci…
-
Unscored —CVE-2006-4421 Public exploit
Cross-site scripting (XSS) vulnerability in template/default/thanks_comment.php in Yet Another PHP Image Gallery (YaPIG…
-
Unscored —CVE-2006-4425 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpCOIN 1.2.3 allow remote attackers to execute arbitrary PHP cod…
-
Critical 9.8CVE-2006-4428 Public exploit
PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-4423 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Bigace 1.8.2 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2006-4424 Public exploit
PHP remote file inclusion vulnerability in coin_includes/constants.php in phpCOIN 1.2.3 allows remote attackers to exec…
-
Unscored —
isakmpd in OpenBSD 3.8, 3.9, and possibly earlier versions, creates Security Associations (SA) with a replay window of …
-
Unscored —
Use-after-free vulnerability in Sendmail before 8.13.8 allows remote attackers to cause a denial of service (crash) via…
-
Unscored —
PHP before 4.4.3 and 5.x before 5.1.4 does not limit the character set of the session identifier (PHPSESSID) for third …
-
Unscored —
Directory traversal vulnerability in Zend Platform 2.2.1 and earlier allows remote attackers to overwrite arbitrary fil…
-
Unscored —CVE-2006-4426 Public exploit
PHP remote file inclusion vulnerability in AES/modules/auth/phpsecurityadmin/include/logout.php in AlberT-EasySite (AES…
-
Unscored —CVE-2006-4422 Public exploit
PHP remote file inclusion vulnerability in includes/phpdig/libs/search_function.php in Jetbox CMS 2.1 allows remote att…
-
Unscored —CVE-2006-4418 Public exploit
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrar…
-
Unscored —
SQL injection vulnerability in edituser.php in Xoops before 2.0.15 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-4419 Public exploit
SQL injection vulnerability in note.php in ProManager 0.73 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2006-4420 Public exploit
Directory traversal vulnerability in include_lang.php in Phaos 0.9.2 allows remote attackers to include arbitrary local…
-
Unscored —
Untrusted search path vulnerability in the mkvg command in IBM AIX 5.2 and 5.3 allows local users to gain privileges by…
-
Unscored —
MySQL before 4.1.13 allows local users to cause a denial of service (persistent replication slave crash) via a query wi…
-
Unscored —
Buffer overflow in the HTTP header parsing in Streamripper before 1.61.26 allows remote attackers to cause a denial of …
-
Unscored —CVE-2006-4369 Public exploit
Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote atta…
-
Unscored —
Multiple directory traversal vulnerabilities in Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly…
-
Unscored —
PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_con…
-
Unscored —
Multiple SQL injection vulnerabilities in Guder und Koch Netzwerktechnik Eichhorn Portal allow remote attackers to exec…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! (com_rssxt), possibly 2.0 Beta 1 …
-
Unscored —CVE-2006-4365 Public exploit
Multiple PHP remote file inclusion vulnerabilities in VistaBB 2.0.33 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-4367 Public exploit
SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote at…
-
Unscored —CVE-2006-4374 Public exploit
IrfanView 3.98 (with plugins) allows user-assisted attackers to cause a denial of service (application crash) via a cra…
-
Unscored —
Alt-N WebAdmin 3.2.3 and 3.2.4 running with MDaemon 9.0.5, and possibly earlier, allow remote authenticated domain admi…
-
Unscored —CVE-2006-4366 Public exploit
PHP remote file inclusion vulnerability in index.php in RedBLoG 0.5 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2006-4368 Public exploit
PHP remote file inclusion vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier allows re…
-
Unscored —CVE-2006-4372 Public exploit
PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_const…
-
Unscored —CVE-2006-4373 Public exploit
PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in E-commerce 4.7 for Drupal before file.module 1.37.2.4 (20060812) allows rem…
-
Unscored —CVE-2006-4363 Public exploit
PHP remote file inclusion vulnerability in admin.cropcanvas.php in the CropImage component (com_cropimage) 1.0 for Mamb…
-
Unscored —CVE-2006-4357 Public exploit
PHP remote file inclusion vulnerability in clients/index.php in Diesel Smart Traffic allows remote attackers to execute…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in jobseekers/forgot.php in Diesel Job Site allow remote attackers …
-
Unscored —CVE-2006-4362 Public exploit
Cross-site scripting (XSS) vulnerability in getad.php in Diesel Paid Mail allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2006-4359 Public exploit
Stack-based buffer overflow in Trident Software PowerZip 7.06 Build 3895 on Windows 2000 allows remote attackers to exe…
-
Unscored —CVE-2006-4358 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Diesel Pay allows remote attackers to inject arbitrary web scr…