Archive
6 September 2006
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —CVE-2006-4593 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers t…
-
Unscored —CVE-2006-4594 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow rem…
-
Unscored —CVE-2006-4583 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrar…
-
Unscored —
vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modu…
-
Unscored —
SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary …
-
Unscored —CVE-2006-4586 Public exploit
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authentica…
-
Unscored —CVE-2006-4592 Public exploit
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to …
-
Unscored —
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attac…
-
Unscored —CVE-2006-4589 Public exploit
PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allow…
-
Unscored —CVE-2006-4584 Public exploit
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passw…
-
Unscored —CVE-2006-4591 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Selle…
-
Unscored —
The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login…
-
Unscored —
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to exe…
-
Unscored —CVE-2006-4563 Public exploit
Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to…
-
Unscored —
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to…
-
Unscored —
Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers…
-
Unscored —
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus befo…
-
Unscored —
The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third…
-
Unscored —
Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash) via a 1 byte header s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary we…
-
Unscored —
e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value m…
-
Unscored —CVE-2006-4545 Public exploit
PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on t…
-
Unscored —
Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2006-4559 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Yet Another Community System (YACS) CMS 6.6.1 allow remote attack…
-
Unscored —
Lyris ListManager 8.95 allows remote authenticated users to obtain sensitive information by attempting to add a user wi…
-
Unscored —CVE-2006-4553 Public exploit
PHP remote file inclusion vulnerability in plugin.class.php in the com_comprofiler Components 1.0 RC2 for Mambo and Joo…
-
Unscored —CVE-2006-4543 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-4560 EPSS 19%
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the bro…
-
Unscored —CVE-2006-4558 Public exploit
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to exec…
-
Unscored —
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via a flood…
-
Unscored —
Directory traversal vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to read arbitrary XML files v…
-
Unscored —CVE-2006-4095 EPSS 12%
BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service (crash) via certain…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in ExBB 1.9.1, when register_globals is enabled, allow remote attack…
-
Unscored —
CHXO Feedsplitter 2006-01-21 allows remote attackers to read the source code of feedsplitter.php via the showsource fun…
-
Unscored —
Buffer overflow in the Retro64 / Miniclip CR64Loader ActiveX control allows remote attackers to execute arbitrary code …
-
Unscored —
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metach…
-
Unscored —CVE-2006-3636 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.9rc1 allow remote attackers to inject arbitra…