Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
557 results · Feed
-
Unscored —
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcook…
-
Unscored —
Cross-site scripting (XSS) vulnerability in admin/global.php (aka the Admin CP login form) in MyBB (aka MyBulletinBoard…
-
Unscored —
Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterpri…
-
Unscored —
The Remote UI in Canon imageRUNNER includes usernames and passwords when exporting an address book, which allows contex…
-
Unscored —CVE-2006-4681 Public exploit
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary…
-
Unscored —
Multiple unspecified vulnerabilities in IBM Director before 5.10 allow remote attackers to cause a denial of service (c…
-
Unscored —CVE-2006-4676 Public exploit
TIBCO RendezVous 7.4.11 and earlier logs base64-encoded usernames and passwords in rvrd.db, which allows local users to…
-
Unscored —CVE-2006-4678 Public exploit
PHP remote file inclusion vulnerability in News Evolution 3.0.3 allows remote attackers to execute arbitrary PHP code v…
-
Unscored —
DokuWiki before 2006-03-09c enables the debug feature by default, which allows remote attackers to obtain sensitive inf…
-
Unscored —
IBM Director before 5.10 allows remote attackers to obtain sensitive information from HTTP headers via HTTP TRACE.
-
Unscored —
The Unidirectional Lightweight Encapsulation (ULE) decapsulation component in dvb-core/dvb_net.c in the dvb driver in t…
-
Unscored —
Direct static code injection vulnerability in doku.php in DokuWiki before 2006-030-09c allows remote attackers to execu…
-
Unscored —
Unrestricted file upload vulnerability in lib/exe/media.php in DokuWiki before 2006-03-09c allows remote attackers to u…
-
Unscored —
PHP remote file inclusion vulnerability in contrib/yabbse/poc.php in phpopenchat before 3.0.2 allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote …
-
Unscored —CVE-2006-4673 Public exploit
Global variable overwrite vulnerability in maincore.php in PHP-Fusion 6.01.4 and earlier uses the extract function on t…
-
Unscored —CVE-2006-4671 Public exploit
PHP remote file inclusion vulnerability in headlines.php in Fantastic News 2.1.4, and possibly earlier, allows remote a…
-
Unscored —CVE-2006-4672 Public exploit
PHP remote file inclusion vulnerability in profitCode ppalCart 2.5 EE, possibly a component of PayProCart, allows remot…
-
Unscored —
Cisco IOS 12.0, 12.1, and 12.2, when GRE IP tunneling is used and the RFC2784 compliance fixes are missing, does not ve…
-
Unscored —
Multiple SQL injection vulnerabilities in RunCMS 1.4.1 allow remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2006-4666 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5 beta allow remote attac…
-
Unscored —
AOL ICQ Toolbar 1.3 for Internet Explorer (toolbaru.dll) does not properly validate the origin of the configuration web…
-
Unscored —
PHP remote file inclusion vulnerability in admin/editeur/spaw_control.class.php in Web Provence SL_Site 1.0 and earlier…
-
High 7.8
The source code tar archive of the Linux kernel 2.6.16, 2.6.17.11, and possibly other versions specifies weak permissio…
-
Unscored —
The Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses predictable URLs for the spam classification …
-
Unscored —CVE-2006-4669 Public exploit
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PhotoKorn Gallery 1.52 and earlier allow remote attackers to exec…
-
Unscored —
Heap-based buffer overflow in the MCRegEx__Search function in AOL ICQ Pro 2003b Build 3916 and earlier allows remote at…
-
Unscored —
Directory traversal vulnerability in download/index.php, and possibly download.php, in threesquared.net (aka Ben Speakm…
-
Unscored —
(1) Amazing Little Poll and (2) Amazing Little Picture Poll store sensitive information under the web root with insuffi…
-
Unscored —
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that…
-
Unscored —CVE-2006-4664 Public exploit
PHP remote file inclusion vulnerability in includes/functions_portal.php in Premod Shadow 2.7.1 and earlier allows remo…
-
Unscored —CVE-2006-4294 Public exploit
Directory traversal vulnerability in viewfile in TWiki 4.0.0 through 4.0.4 allows remote attackers to read arbitrary fi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in MKPortal M1.1 Rc1 allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-4654 Public exploit
Format string vulnerability in Easy Address Book Web Server 1.2 allows remote attackers to cause a denial of service (c…
-
Unscored —
(1) Amazing Little Poll and (2) Amazing Little Picture Poll have a default password of "dsapoll", which allows remote a…
-
Unscored —
Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 stores service executables under the product's install…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the RSS Feed module in AOL ICQ Toolbar 1.3 for Internet Explorer…
-
Unscored —CVE-2006-4655 Public exploit
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SC…
-
Unscored —CVE-2006-4668 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Rob Hensley AckerTodo 4.0 allows remote attackers to inject ar…