Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
255 results · Clear filters · Feed
-
Unscored —CVE-2006-5043 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 fo…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Security Images (com_securityimages) component 3.0.5 and earlier …
-
Unscored —CVE-2006-5017 Public exploit
SQL injection vulnerability in admin/all_users.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, allows re…
-
Critical 9.8CVE-2006-5021 Public exploit
Multiple PHP remote file inclusion vulnerabilities in redgun RedBLoG 0.5 allow remote attackers to execute arbitrary PH…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in SolidState 0.4 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-5016 Public exploit
Unrestricted file upload vulnerability in admin/x_image.php in Szava Gyula and Csaba Tamas e-Vision CMS, probably 1.0, …
-
Unscored —
Directory traversal vulnerability in filemanager/filemanager.php in SWsoft Plesk 7.5 Reload and Plesk 7.6 for Microsoft…
-
Unscored —CVE-2006-5022 Public exploit
PHP remote file inclusion vulnerability in includes/global.php in Joshua Wilson pNews System 1.1.0 (aka PowerNews) allo…
-
Unscored —
sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial of service…
-
High 8.8CVE-2006-5014 Public exploit
Unspecified vulnerability in cPanel before 10.9.0 12 Tree allows remote authenticated users to gain privileges via unsp…
-
Unscored —CVE-2006-4992 Public exploit
Multiple PHP remote file inclusion vulnerabilities in JD-WordPress for Joomla! (com_jd-wp) 2.0-1.0 RC2 allow remote att…
-
Unscored —CVE-2006-4987 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to execute arbi…
-
Unscored —CVE-2006-4178 Public exploit
Integer signedness error in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allows loc…
-
Unscored —CVE-2006-4989 Public exploit
Patrick Michaelis Wili-CMS allows remote attackers to obtain sensitive information via a direct request for (1) thumbna…
-
Unscored —CVE-2006-4988 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbi…
-
Unscored —CVE-2006-4985 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-4993 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-4979 Public exploit
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows…
-
Unscored —CVE-2006-4973 Public exploit
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.…
-
Unscored —CVE-2006-4970 Public exploit
PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to e…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute ar…
-
Unscored —CVE-2006-4978 Public exploit
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute ar…
-
Unscored —CVE-2006-4977 Public exploit
Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Bes…
-
Unscored —CVE-2006-4968 Public exploit
PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to exec…
-
Unscored —CVE-2006-4974 Public exploit
Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a …
-
Unscored —
Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly cond…
-
Unscored —CVE-2006-4966 Public exploit
PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote a…
-
Unscored —CVE-2006-4955 Public exploit
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attack…
-
Unscored —CVE-2006-4952 Public exploit
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrar…
-
Unscored —CVE-2006-4957 Public exploit
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to exe…
-
Unscored —CVE-2006-4954 Public exploit
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote …
-
Unscored —CVE-2006-4962 Public exploit
Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to rea…
-
Unscored —CVE-2006-4963 Public exploit
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbit…
-
Unscored —CVE-2006-4956 Public exploit
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote a…
-
Unscored —CVE-2006-4960 Public exploit
Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inje…
-
Unscored —CVE-2006-4961 Public exploit
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue D…
-
Unscored —CVE-2006-4953 Public exploit
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-4945 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier a…
-
Unscored —
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers t…
-
Unscored —CVE-2006-4946 Public exploit
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0…