Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
255 results · Clear filters · Feed
-
Unscored —CVE-2006-4644 Public exploit
PHP remote file inclusion vulnerability in modules/home.module.php in phpFullAnnu 5.1 and earlier allows remote attacke…
-
Unscored —
Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMai…
-
Unscored —CVE-2006-4645 Public exploit
PHP remote file inclusion vulnerability in akarru.gui/main_content.php in Akarru Social BookMarking Engine 0.4.3.34 and…
-
Unscored —CVE-2006-4649 Public exploit
PHP remote file inclusion vulnerability in bp_news.php in BinGo News (BP News) 3.01 and earlier allows remote attackers…
-
Unscored —CVE-2006-4647 Public exploit
PHP remote file inclusion vulnerability in news.php in Sponge News 2.2 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-4648 Public exploit
PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers…
-
Unscored —CVE-2006-4643 Public exploit
SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-4641 Public exploit
SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-4630 Public exploit
PHP remote file inclusion vulnerability in jscript.php in Sky GUNNING MySpeach 3.0.2 and earlier, when register_globals…
-
Unscored —CVE-2006-4632 Public exploit
Multiple SQL injection vulnerabilities in SoftBB 0.1, and possibly earlier, allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-4634 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in VBZooM allows remote attackers to inject arbitrary web script …
-
Unscored —CVE-2006-4629 Public exploit
PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remo…
-
Unscored —CVE-2006-4633 Public exploit
index.php in SoftBB 0.1, and possibly earlier, allows remote attackers to obtain the installation path via a null or in…
-
Unscored —CVE-2006-4636 Public exploit
Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute …
-
Unscored —CVE-2006-4631 Public exploit
Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote aut…
-
Unscored —CVE-2006-4637 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ACGV News 0.9.1 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2006-4638 Public exploit
PHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execut…
-
Unscored —CVE-2006-4610 Public exploit
PHP remote file inclusion vulnerability in index.php in GrapAgenda 0.11 and earlier, when register_globals is enabled, …
-
Unscored —
Unrestricted file upload vulnerability in jhot.php in TikiWiki 1.9.4 Sirius and earlier allows remote attackers to exec…
-
Unscored —CVE-2006-4597 Public exploit
SQL injection vulnerability in devam.asp in ICBlogger 2.0 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-4605 Public exploit
PHP remote file inclusion vulnerability in index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to exe…
-
Unscored —CVE-2006-4609 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0…
-
Unscored —CVE-2006-4607 Public exploit
admin/index.php in Longino Jacome php-Revista 1.1.2 allows remote attackers to bypass authentication controls by settin…
-
Unscored —CVE-2006-4622 Public exploit
PHP remote file inclusion vulnerability in annonce.php in AnnonceV (aka annoncesV) 1.1 allows remote attackers to execu…
-
Unscored —CVE-2006-4608 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to injec…
-
Unscored —CVE-2006-4604 Public exploit
PHP remote file inclusion vulnerability in LFXlib/access_manager.php in Lanifex Database of Managed Objects (DMO) 2.3 B…
-
Unscored —CVE-2006-4599 Public exploit
SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-4596 Public exploit
PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute a…
-
Unscored —CVE-2006-4612 Public exploit
SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-4611 Public exploit
Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-4606 Public exploit
Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-4601 Public exploit
SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-4593 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2006-4594 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow rem…
-
Unscored —CVE-2006-4583 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2006-4586 Public exploit
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authentica…
-
Unscored —CVE-2006-4592 Public exploit
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to …
-
Unscored —CVE-2006-4589 Public exploit
PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allow…
-
Unscored —CVE-2006-4584 Public exploit
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passw…
-
Unscored —CVE-2006-4591 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Selle…