Archive
13 September 2006
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote authenticated administrative use…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote attackers to inject arbit…
-
Unscored —CVE-2006-4764 Public exploit
PHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows remote attackers to execu…
-
Unscored —CVE-2006-4769 Public exploit
PHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to execute arbitrary PHP co…
-
Unscored —
Multiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta allow remote attackers to…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl allow remote attackers…
-
Unscored —
NETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial of service (device han…
-
Unscored —CVE-2006-4770 Public exploit
PHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote attackers to execute ar…
-
Unscored —
PunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows remote authenticated adm…
-
Unscored —
phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to inject arbitrary web s…
-
Unscored —CVE-2006-4766 Public exploit
Directory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allows remote attacker…
-
Unscored —
Multiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta a…
-
Unscored —
IBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party Authentication token (LtpaTo…
-
Unscored —
CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integra…
-
Unscored —
Jetbox CMS allows remote attackers to obtain sensitive information via a direct request for certain files, which reveal…
-
Unscored —
Abidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext, which allows remote att…
-
Unscored —
PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2006-4741 Public exploit
PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to…
-
Unscored —
Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the installation path via a quer…
-
Unscored —CVE-2006-4751 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows re…
-
Unscored —
WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for (1) 404.…
-
Unscored —CVE-2006-4733 Public exploit
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing syst…
-
Unscored —
Multiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-4747 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-4750 Public exploit
PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, al…
-
Unscored —
ScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose contents are stored in p…
-
Unscored —
Unspecified vulnerability in Microsoft Visual Basic (VB) 6 has an unknown impact ("overflow") via a project that contai…
-
Unscored —
SQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-4742 Public exploit
Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inj…
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in CMS.R. 5.5 allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-4749 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attacker…
-
Unscored —CVE-2006-4746 Public exploit
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers…
-
Unscored —
Kellan Elliott-McCrea MagpieRSS allows remote attackers to obtain sensitive information via a direct request for (1) rs…
-
Unscored —CVE-2006-4754 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary …
-
Unscored —
SQL injection vulnerability in index.php in Jetbox CMS allows remote attackers to inject arbitrary web script or HTML v…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script…
-
Unscored —
Cross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote attackers to i…
-
Unscored —CVE-2006-4753 Public exploit
Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via…
-
Unscored —
Multiple SQL injection vulnerabilities in tiki-g-admin_processes.php in Tikiwiki 1.9.4 allow remote attackers to execut…