Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
557 results · Feed
-
Unscored —
The useredit_account.wdm module in Alt-N WebAdmin 3.2.5 running with MDaemon 9.0.6, and possibly earlier versions, allo…
-
Unscored —
Multiple unspecified vulnerabilities in SnapGear before 3.1.4u1 allow remote attackers to cause a denial of service via…
-
Unscored —CVE-2006-4599 Public exploit
SQL injection vulnerability in aut_verifica.inc.php in Autentificator 2.01 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-4596 Public exploit
PHP remote file inclusion in MyBace Light Skrip, when register_globals is enabled, allows remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in adodb-postgres7.inc.php in John Lim ADOdb, possibly 4.01 and earlier, as use…
-
Unscored —CVE-2006-4612 Public exploit
SQL injection vulnerability in ReplyNew.asp in ZIXForum 1.12 allows remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-4611 Public exploit
Buffer overflow in the _tor_resolve function in dsocks.c in dsocks before 1.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-4606 Public exploit
Multiple SQL injection vulnerabilities in Longino Jacome php-Revista 1.1.2 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2006-4601 Public exploit
SQL injection vulnerability in index.php in Annuaire 1Two 2.2 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
The start update window in update.exe in Avira AntiVir PersonalEdition Classic 7.0 build 151 allows local users to gain…
-
Unscored —
slapd in OpenLDAP before 2.3.25 allows remote authenticated users with selfwrite Access Control List (ACL) privileges t…
-
Unscored —
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 (20060904) allows remote attackers to…
-
Unscored —
Shape Services IM+ Mobile Instant Messenger for Pocket PC 3.10 stores usernames and passwords in plaintext in %PROGRAMF…
-
Unscored —
muforum (µforum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which al…
-
Unscored —
PDAapps Verichat for Pocket PC 1.30bh stores usernames and passwords in plaintext in the Windows Mobile registry, which…
-
Unscored —CVE-2006-4593 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in SoftBB 0.1 and earlier allows remote attackers to inject arbit…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in vtiger CRM 4.2.4, and possibly earlier, allow remote attackers t…
-
Unscored —CVE-2006-4594 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpAtm) 1.21 and earlier allow rem…
-
Unscored —CVE-2006-4583 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FlashChat before 4.6.2 allow remote attackers to execute arbitrar…
-
Unscored —
vtiger CRM 4.2.4, and possibly earlier, allows remote attackers to bypass authentication and access administrative modu…
-
Unscored —
SQL injection vulnerability in admin/editer.php in Tr Forum 2.0 allows remote authenticated users to execute arbitrary …
-
Unscored —CVE-2006-4586 Public exploit
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authentica…
-
Unscored —CVE-2006-4592 Public exploit
Incomplete blacklist vulnerability in default.asp in 8pixel.net Simple Blog 2.3 and earlier allows remote attackers to …
-
Unscored —
SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attac…
-
Unscored —CVE-2006-4589 Public exploit
PHP remote file inclusion vulnerability in 0_admin/modules/Wochenkarte/frontend/index.php in DynCMS 6 and earlier allow…
-
Unscored —CVE-2006-4584 Public exploit
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and passw…
-
Unscored —CVE-2006-4591 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AlstraSoft Template Seller, and possibly AltraSoft Template Selle…
-
Unscored —
The KDE PAM configuration shipped with Fedora Core 5 causes KDM passwords to be cached, which allows attackers to login…
-
Unscored —
SQL injection vulnerability in Sources/ManageBoards.php in Simple Machines Forum 1.1 RC3 allows remote attackers to exe…
-
Unscored —CVE-2006-4563 Public exploit
Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to…
-
Unscored —
PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to…
-
Unscored —
Mozilla Firefox 1.5.0.6 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in the JIM component for Mambo and Joomla! allows remote attackers…
-
Unscored —
Stack-based buffer overflow in the ReadFile function in the ZOO-processing exports in the BeCubed Compression Plus befo…
-
Unscored —
The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third…
-
Unscored —
Integer overflow in AnywhereUSB/5 1.80.00 allows local users to cause a denial of service (crash) via a 1 byte header s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to inject arbitrary we…
-
Unscored —
e107 0.75 and earlier does not properly unset variables when the input data includes a numeric parameter with a value m…
-
Unscored —CVE-2006-4545 Public exploit
PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP c…
-
Unscored —
Lyris ListManager 8.95 allows remote authenticated users, who have administrative privileges for at least one list on t…