Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
255 results · Clear filters · Feed
-
Unscored —CVE-2006-4944 Public exploit
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote atta…
-
Unscored —
Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows r…
-
Unscored —
The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when runnin…
-
Unscored —CVE-2006-4900 Public exploit
Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, …
-
Unscored —CVE-2006-3507 Public exploit
Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physical…
-
Unscored —CVE-2006-4918 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute a…
-
Unscored —CVE-2006-4922 Public exploit
Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ea…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to ex…
-
Unscored —CVE-2006-4923 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arb…
-
Unscored —CVE-2006-4917 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-4915 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-4921 Public exploit
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-4916 Public exploit
SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-4913 Public exploit
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to i…
-
Unscored —CVE-2006-4906 Public exploit
SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbi…
-
Unscored —CVE-2006-4912 Public exploit
PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-4904 Public exploit
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote at…
-
Unscored —CVE-2006-4891 Public exploit
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows …
-
Unscored —CVE-2006-4894 Public exploit
Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows re…
-
Unscored —CVE-2006-4898 Public exploit
PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attacke…
-
Unscored —CVE-2006-4897 Public exploit
CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, whi…
-
Unscored —CVE-2006-4892 Public exploit
SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute …
-
Unscored —CVE-2006-4890 Public exploit
Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitr…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_g…
-
Unscored —CVE-2006-4881 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attac…
-
Unscored —CVE-2006-4876 Public exploit
Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) …
-
Unscored —CVE-2006-4885 Public exploit
PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2006-4875 Public exploit
Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to u…
-
Unscored —CVE-2006-4877 Public exploit
Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite …
-
Unscored —CVE-2006-4882 Public exploit
SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-4871 Public exploit
SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attack…
-
Unscored —CVE-2006-4872 Public exploit
SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to e…
-
Unscored —CVE-2006-4874 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-4884 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary…
-
Unscored —CVE-2006-4867 Public exploit
SQL injection vulnerability in mods.php in GNUTurk 2G and earlier allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-4866 Public exploit
Buffer overflow in kextload in Apple OS X, as used by TDIXSupport in Roxio Toast Titanium and possibly other products, …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attacke…
-
Unscored —CVE-2006-4869 Public exploit
PHP remote file inclusion vulnerability in phpunity-postcard.php in phpunity.postcard allows remote attackers to execut…
-
Unscored —
Stack-based buffer overflow in the Vector Graphics Rendering engine (vgx.dll), as used in Microsoft Outlook and Interne…