Archive
September 2006
Vulnerabilities first published in this month (UTC), newest first.
557 results · Feed
-
Unscored —CVE-2006-4946 Public exploit
PHP remote file inclusion vulnerability in include/startup.inc.php in CMSDevelopment Business Card Web Builder (BCWB) 0…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Moodle before 1.6.2 might allow remote attackers to inject arbit…
-
Unscored —
course/jumpto.php in Moodle before 1.6.2 does not validate the session key (sesskey) before providing content from arbi…
-
Unscored —CVE-2006-4944 Public exploit
PHP remote file inclusion vulnerability in includes/pear/Net/DNS/RR.php in ProgSys 0.151 and earlier allows remote atta…
-
Unscored —
help.php in Moodle before 1.6.2 does not check the existence of certain help files before including them, which might a…
-
Unscored —
lib/setup.php in Moodle before 1.6.2 sets the error reporting level to 7 to display E_WARNING messages to users even if…
-
Medium —
Moodle does not properly validate module instance id
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
-
Unscored —
backup/backup_scheduled.php in Moodle before 1.6.2 generates trace data with the full backup pathname even when debuggi…
-
Unscored —
login/forgot_password.php in Moodle before 1.6.2 allows remote attackers to obtain sensitive information (e-mail addres…
-
Unscored —
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and re…
-
Unscored —
Moodle before 1.6.2, when the configuration lacks (1) algebra or (2) tex filters, allows remote authenticated users to …
-
Unscored —
Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, and eTrust Audit 1.5 and r8, allows r…
-
Unscored —
The ePPIServlet script in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, when runnin…
-
Unscored —CVE-2006-4900 Public exploit
Directory traversal vulnerability in Computer Associates (CA) eTrust Security Command Center 1.0 and r8 up to SP1 CR2, …
-
Unscored —
The hugepage code (hugetlb.c) in Linux kernel 2.6, possibly 2.6.12 and 2.6.13, in certain configurations, allows local …
-
Unscored —CVE-2006-3507 Public exploit
Multiple stack-based buffer overflows in the AirPort wireless driver on Apple Mac OS X 10.3.9 and 10.4.7 allow physical…
-
Unscored —
Heap-based buffer overflow in the AirPort wireless driver on Apple Mac OS X 10.4.7 allows physically proximate attacker…
-
Unscored —
Integer overflow in the API for the AirPort wireless driver on Apple Mac OS X 10.4.7 might allow physically proximate a…
-
Unscored —CVE-2006-4918 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Simple Discussion Board 0.1.0 allow remote attackers to execute a…
-
Unscored —CVE-2006-4922 Public exploit
Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and ea…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to ex…
-
Unscored —CVE-2006-4923 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arb…
-
Unscored —
Directory traversal vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier…
-
Unscored —CVE-2006-4917 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in PT News 1.7.8 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2006-4915 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Innovate Portal 2.0 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-4921 Public exploit
PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-4916 Public exploit
SQL injection vulnerability in uye_profil.asp in Tekman Portal (TR) 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-4913 Public exploit
Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to i…
-
Unscored —
Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences…
-
Unscored —CVE-2006-4906 Public exploit
SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is …
-
Unscored —
PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary…
-
Unscored —
Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous…
-
Unscored —
OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which…
-
Unscored —
The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(…
-
Unscored —
OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wi…
-
Unscored —CVE-2006-4912 Public exploit
PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-4904 Public exploit
Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to …
-
Unscored —
Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote at…
-
Unscored —CVE-2006-4891 Public exploit
SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows …