Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
557 results · Feed
-
Unscored —CVE-2006-4985 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Grayscale BandSite CMS allow remote attackers to inject arbitrar…
-
Unscored —
Grayscale BandSite CMS allows remote attackers to obtain sensitive information via a direct request for (1) certain fil…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS allow remote attackers to execute arbitrar…
-
Unscored —
Integer overflow vulnerability in the i386_set_ldt call in FreeBSD 5.5, and possibly earlier versions down to 5.2, allo…
-
Unscored —CVE-2006-4993 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.4.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-4979 Public exploit
Direct static code injection vulnerability in cfgphpquiz/install.php in Walter Beschmout PhpQuiz 1.2 and earlier allows…
-
Unscored —
Cross-site scripting (XSS) vulnerability in archive/index.php/forum-4.html in MyBB (aka MyBulletinBoard) allows remote …
-
Unscored —CVE-2006-4973 Public exploit
Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.…
-
Unscored —
MyBB (aka MyBulletinBoard) allows remote attackers to obtain sensitive information via a direct request for inc/plugins…
-
Unscored —CVE-2006-4970 Public exploit
PHP remote file inclusion vulnerability in enc/content.php in WAHM E-Commerce Pie Cart Pro allows remote attackers to e…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in WAHM E-Commerce Pie Cart Pro allow remote attackers to execute ar…
-
Unscored —CVE-2006-4978 Public exploit
Multiple SQL injection vulnerabilities in Walter Beschmout PhpQuiz 1.2 and earlier allow remote attackers to execute ar…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in NextAge Cart allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2006-4977 Public exploit
Multiple unrestricted file upload vulnerabilities in (1) back/upload_img.php and (2) admin/upload_img.php in Walter Bes…
-
Unscored —
The Date Library in John Lim ADOdb Library for PHP allows remote attackers to obtain sensitive information via a direct…
-
Unscored —CVE-2006-4968 Public exploit
PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to exec…
-
Unscored —
Yahoo! Messenger for WAP permits saving messages that contain JavaScript, which allows user-assisted remote attackers t…
-
Unscored —CVE-2006-4974 Public exploit
Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a …
-
Unscored —
Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly cond…
-
Unscored —CVE-2006-4966 Public exploit
PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire (phpQ) 3.12 allows remote a…
-
Unscored —CVE-2006-4955 Public exploit
Directory traversal vulnerability in the downloadfile servlet in Neon WebMail for Java before 5.08 allows remote attack…
-
Unscored —CVE-2006-4952 Public exploit
The updatemail servlet in Neon WebMail for Java before 5.08 allows remote attackers to move e-mail messages of arbitrar…
-
Unscored —CVE-2006-4957 Public exploit
SQL injection vulnerability in the GetMember function in functions.php in MyReview 1.9.4 allows remote attackers to exe…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983…
-
Unscored —
Neon WebMail for Java before 5.08 allows remote attackers to execute arbitrary Java (JSP) code by sending an e-mail mes…
-
Unscored —
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, …
-
Unscored —CVE-2006-4954 Public exploit
The updateuser servlet in Neon WebMail for Java before 5.08 does not validate the in_id parameter, which allows remote …
-
Unscored —CVE-2006-4962 Public exploit
Directory traversal vulnerability in pbd_engine.php in Php Blue Dragon 2.9.1 and earlier allows remote attackers to rea…
-
Unscored —
Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, in…
-
Unscored —CVE-2006-4963 Public exploit
Directory traversal vulnerability in index.php in Exponent CMS 0.96.3 allows remote attackers to read and execute arbit…
-
Unscored —CVE-2006-4956 Public exploit
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote a…
-
Unscored —CVE-2006-4960 Public exploit
Cross-site scripting (XSS) vulnerability in index.php Php Blue Dragon 2.9.1 and earlier allows remote attackers to inje…
-
Unscored —
Cross-site scripting (XSS) vulnerability in MAXdev MDPro 1.0.76 before 20060918 allows remote attackers to inject arbit…
-
Unscored —CVE-2006-4961 Public exploit
SQL injection vulnerability in the GetModuleConfig function in public_includes/pub_kernel/pbd_modules.php in Php Blue D…
-
Unscored —CVE-2006-4953 Public exploit
Multiple SQL injection vulnerabilities in Neon WebMail for Java before 5.08 allow remote attackers to execute arbitrary…
-
Unscored —
The SISCO OSI stack for Windows, as used by MMS-EASE 7.10 and earlier, AX-S4 MMS 5.01 and earlier, AX-S4 ICCP 3.0103 an…
-
Unscored —CVE-2006-4945 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Drupal 4.6 Site Profile Directory (profile_pages.module) before 1.1.2.1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Drupal 4.7 Search Keywords module before 1.15 2006/09/15 allows remote …
-
Unscored —
Stack-based buffer overflow in tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 and earlier allows remote attackers t…