Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
255 results · Clear filters · Feed
-
Unscored —CVE-2006-5094 Public exploit
PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote at…
-
Unscored —CVE-2006-5096 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in VirtueMart (formerly known as mambo-phpShop) Joomla…
-
Unscored —CVE-2006-5093 Public exploit
PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows r…
-
Unscored —CVE-2006-5087 Public exploit
Multiple PHP remote file inclusion vulnerabilities in evoBB 0.3 and earlier allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-5089 Public exploit
PHP remote file inclusion vulnerability in mybic_server.php in Jim Plush My-BIC 0.6.5 allows remote attackers to execut…
-
Unscored —CVE-2006-5090 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Phoenix Evolution CMS (PECMS) allow remote attackers to inject a…
-
Unscored —CVE-2006-5092 Public exploit
PHP remote file inclusion vulnerability in navigation/menu.php in A-Blog 2 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-5086 Public exploit
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct req…
-
Unscored —
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitra…
-
Unscored —
Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote at…
-
Unscored —CVE-2006-5076 Public exploit
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End 0.4.5 allow remote attackers to execute arbi…
-
Unscored —CVE-2006-5074 Public exploit
Cross-site scripting (XSS) vulnerability in home.php in PHP Invoice 2.2 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-5078 Public exploit
PHP remote file inclusion vulnerability in view/general.php in Kristian Niemi Polaring 00.04.03 and earlier allows remo…
-
Unscored —CVE-2006-5077 Public exploit
PHP remote file inclusion vulnerability in admin/admin_topic_action_logging.php in Chris Smith Minerva Build 238 and ea…
-
Unscored —CVE-2006-5079 Public exploit
PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote…
-
Unscored —
The get_server_hello function in the SSLv2 client code in OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier…
-
Unscored —
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call…
-
Unscored —CVE-2006-5062 Public exploit
PHP remote file inclusion vulnerability in templates/pb/language/lang_nl.php in PBLang (PBL) 4.66z and earlier allows r…
-
Unscored —CVE-2006-5057 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Ktools.net PhotoStore allow remote attackers to inject arbitrary…
-
Unscored —CVE-2006-5061 Public exploit
PHP remote file inclusion vulnerability in mcf.php in Advanced-Clan-Script (AVCX) 3.4 and earlier allows remote attacke…
-
Unscored —CVE-2006-5056 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Opial Audio/Video Download Management 1.0 allows remote attack…
-
Unscored —CVE-2006-5068 Public exploit
PHP remote file inclusion vulnerability in admin/index.php in Brudaswen (1) BrudaNews 1.1 and earlier and (2) BrudaGB 1…
-
Unscored —CVE-2006-5066 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in DanPHPSupport 0.5, and other versions before 1.0, allow remote a…
-
Unscored —CVE-2006-5053 Public exploit
PHP remote file inclusion vulnerability in webnews/template.php in Web-News 1.6.3 and earlier allows remote attackers t…
-
Unscored —CVE-2006-5054 Public exploit
SQL injection vulnerability in uye/uye_ayrinti.asp in iyzi Forum 1 Beta 2 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-5065 Public exploit
PHP remote file inclusion vulnerability in libs/dbmax/mysql.php in ZoomStats 1.0.2 and earlier, when register_globals i…
-
Unscored —CVE-2006-5060 Public exploit
Cross-site scripting (XSS) vulnerability in login.php in Jamroom 3.0.16 and possibly earlier allows remote attackers to…
-
Unscored —CVE-2006-5064 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4 and earlier allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-5070 Public exploit
PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier all…
-
Unscored —CVE-2006-5055 Public exploit
PHP remote file inclusion vulnerability in admin/testing/tests/0004_init_urls.php in syntaxCMS 1.1.1 through 1.3 allows…
-
Unscored —
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and p…
-
Unscored —CVE-2006-5045 Public exploit
Unspecified vulnerability in PollXT component (com_pollxt) 1.22.07 and earlier for Joomla! has unspecified impact and a…
-
Unscored —CVE-2006-5033 Public exploit
Unspecified vulnerability in StoresAndCalendarsList.cgi in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier all…
-
Unscored —CVE-2006-5023 Public exploit
SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2006-5030 Public exploit
SQL injection vulnerability in modules/messages/index.php in exV2 2.0.4.3 and earlier allows remote authenticated users…
-
Unscored —CVE-2006-5044 Public exploit
Unspecified vulnerability in Prince Clan (Princeclan) Chess component (com_pcchess) 0.8 and earlier for Mambo and Jooml…
-
Unscored —CVE-2006-5032 Public exploit
PHP remote file inclusion vulnerability in dix.php3 in PHPartenaire 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-5034 Public exploit
Directory traversal vulnerability in Paul Smith Computer Services vCAP 1.9.0 Beta and earlier allows remote attackers t…
-
Unscored —CVE-2006-5019 Public exploit
Google Mini 4.4.102.M.36 and earlier allows remote attackers to obtain sensitive information via a direct request for /…
-
Medium —CVE-2006-5031 Public exploit
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js …