Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
255 results · Clear filters · Feed
-
Unscored —CVE-2006-4741 Public exploit
PHP remote file inclusion vulnerability in bits_listings.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to…
-
Unscored —CVE-2006-4751 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows re…
-
Unscored —CVE-2006-4733 Public exploit
PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing syst…
-
Unscored —CVE-2006-4747 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-4750 Public exploit
PHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1, and possibly earlier, al…
-
Unscored —CVE-2006-4742 Public exploit
Cross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to inj…
-
Unscored —CVE-2006-4749 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20 allow remote attacker…
-
Unscored —CVE-2006-4746 Public exploit
PHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1 allows remote attackers…
-
Unscored —CVE-2006-4754 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-4753 Public exploit
Directory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2006-4731 Public exploit
Multiple directory traversal vulnerabilities in (1) login.pl and (2) admin.pl in (a) SQL-Ledger before 2.6.19 and (b) L…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when t…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c…
-
Unscored —CVE-2006-4721 Public exploit
Directory traversal vulnerability in admin.php in CCleague Pro Sports CMS 1.0.1 RC1 allows remote attackers to read and…
-
Unscored —CVE-2006-4720 Public exploit
PHP remote file inclusion vulnerability in random2.php in mcGalleryPRO 2006 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-4716 Public exploit
PHP remote file inclusion vulnerability in demarrage.php in Fire Soft Board (FSB) RC3 and earlier allows remote attacke…
-
Unscored —CVE-2006-4713 Public exploit
PHP remote file inclusion vulnerability in config.php in PSYWERKS PUMA 1.0 RC2 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-4708 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1b allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-4625 Public exploit
PHP 4.x up to 4.4.4 and PHP 5 up to 5.1.6 allows local users to bypass certain Apache HTTP Server httpd.conf options, s…
-
Unscored —CVE-2006-4709 Public exploit
SQL injection vulnerability in topic.php in Vikingboard 0.1b allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-4714 Public exploit
PHP remote file inclusion vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 a…
-
Unscored —CVE-2006-4715 Public exploit
SQL injection vulnerability in pdf_version.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.2 and ear…
-
Unscored —CVE-2006-4722 Public exploit
PHP remote file inclusion vulnerability in Open Bulletin Board (OpenBB) 1.0.8 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-4723 Public exploit
PHP remote file inclusion vulnerability in raidenhttpd-admin/slice/check.php in RaidenHTTPD 1.1.49, when register_globa…
-
Unscored —CVE-2006-4719 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MyABraCaDaWeb 1.0.3, when register_globals is enabled, allow remo…
-
Unscored —CVE-2006-4681 Public exploit
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary…
-
Unscored —CVE-2006-4676 Public exploit
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to…
-
Unscored —CVE-2006-4678 Public exploit
PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2006-4673 Public exploit
Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on t…
-
Unscored —CVE-2006-4671 Public exploit
PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote a…
-
Unscored —CVE-2006-4672 Public exploit
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remot…
-
Unscored —CVE-2006-4666 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attac…
-
Unscored —
PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier…
-
Unscored —CVE-2006-4669 Public exploit
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to exec…
-
Unscored —CVE-2006-4664 Public exploit
PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remo…
-
Unscored —CVE-2006-4294 Public exploit
Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2006-4654 Public exploit
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (c…
-
Unscored —CVE-2006-4655 Public exploit
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SC…
-
Unscored —CVE-2006-4668 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject ar…