Archive
October 2006
Vulnerabilities first published in this month (UTC), newest first.
235 results · Clear filters · Feed
-
Unscored —CVE-2006-5629 Public exploit
Multiple SQL injection vulnerabilities in Hosting Controller 6.1 before Hotfix 3.3 allow remote attackers to execute ar…
-
Unscored —CVE-2006-5633 Public exploit
Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers to cause a denial of service (crash) by creating a…
-
Unscored —CVE-2006-5623 Public exploit
PHP remote file inclusion vulnerability in ip.inc.php in Electronic Engineering Tool (EE Tool) 0.4-1 and earlier allows…
-
Unscored —CVE-2006-5625 Public exploit
PHP remote file inclusion vulnerability in wwwdev/nxheader.inc.php in N/X 2002 Professional Edition Web Content Managem…
-
Unscored —CVE-2006-5626 Public exploit
Cross-site scripting (XSS) vulnerability in cms_images/js/htmlarea/htmlarea.php in phpFaber Content Management System (…
-
Unscored —CVE-2006-5624 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Multi-Page Comment System (MPCS) 1.0.0 and earlier allow remote a…
-
Unscored —CVE-2006-5620 Public exploit
PHP remote file inclusion vulnerability in include/menu_builder.php in MiniBILL 2006-10-10 (1.2.3) and earlier, when re…
-
Unscored —CVE-2006-5621 Public exploit
PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote at…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitr…
-
Unscored —CVE-2006-5622 Public exploit
SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5618 Public exploit
Directory traversal vulnerability in script/cat_for_aff.php in Netref 4 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2006-5613 Public exploit
PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enab…
-
Unscored —
Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, …
-
Unscored —CVE-2006-5612 Public exploit
PHP remote file inclusion vulnerability in aide.php3 (aka aide.php) in GestArt beta 1, when register_globals is enabled…
-
Unscored —CVE-2006-5615 Public exploit
PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows re…
-
Unscored —CVE-2006-5609 Public exploit
Directory traversal vulnerability in dir.php in TorrentFlux 2.1 allows remote attackers to list arbitrary directories v…
-
Critical 9.8CVE-2006-5603 Public exploit
SQL injection vulnerability in pop_mail.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-5597 Public exploit
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user acco…
-
Unscored —CVE-2006-5596 Public exploit
Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary…
-
Unscored —CVE-2006-5590 Public exploit
PHP remote file inclusion vulnerability in index.php in ArticleBeach Script 2.0 and earlier allows remote attackers to …
-
Unscored —CVE-2006-5587 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MDweb 1.3 and earlier (Mdweb132-postgres) allow remote attackers …
-
Unscored —CVE-2006-5588 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CMS Faethon 2.0 Ultimate and earlier, when register_globals and m…
-
Unscored —
Multiple heap-based buffer overflows in AOL Nullsoft WinAmp before 5.31 allow user-assisted remote attackers to execute…
-
Unscored —CVE-2006-5562 Public exploit
PHP remote file inclusion vulnerability in include/database.php in SourceForge (aka alexandria) 1.0.4 allows remote att…
-
Unscored —CVE-2006-5566 Public exploit
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP heade…
-
Unscored —
The Execute method in the ADODB.Connection 2.7 and 2.8 ActiveX control objects (ADODB.Connection.2.7 and ADODB.Connecti…
-
Unscored —CVE-2006-5557 Public exploit
Stack-based buffer overflow in the (1) swpackage and (2) swmodify commands in HP-UX B.11.11 and possibly other versions…
-
Unscored —CVE-2006-5571 Public exploit
Stack-based buffer overflow in /scripts/cruise/cws.exe in CruiseWorks 1.09c and 1.09d allows remote attackers to execut…
-
Unscored —CVE-2006-5558 Public exploit
Format string vulnerability in the swask command in HP-UX B.11.11 and possibly other versions allows local users to exe…
-
Unscored —CVE-2006-5556 Public exploit
Buffer overflow in the localtime_r function, and certain other functions, in libc in HP-UX B.11.11 and possibly other v…
-
Unscored —CVE-2006-5561 Public exploit
SQL injection vulnerability in admincp.php in Discuz! GBK 5.0.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-5564 Public exploit
Cross-site scripting (XSS) vulnerability in user.php in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-5568 Public exploit
FtpXQ Server 3.0.1 allows remote attackers to cause a denial of service (CPU exhaustion) via a long MKD command.
-
Unscored —CVE-2006-5526 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully Modded phpBB (phpbbfm) 20…
-
Unscored —CVE-2006-5555 Public exploit
PHP remote file inclusion vulnerability in constantes.inc.php in EPNadmin 0.7 and 0.7.1 allows remote attackers to exec…
-
Unscored —CVE-2006-5546 Public exploit
PHP remote file inclusion vulnerability in OTSCMS/OTSCMS.php in Open Tibia Server Content Management System (OTSCMS) 1.…
-
Unscored —
Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote …
-
Unscored —CVE-2006-5539 Public exploit
PHP remote file inclusion vulnerability in login/secure.php in UeberProject Management System 1.0 and earlier allows re…
-
Unscored —CVE-2006-5530 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Boesch SimpNews before 2.34.01 allow remote attackers to inject …
-
Unscored —CVE-2006-5552 Public exploit
Multiple heap-based buffer overflows in RevilloC MailServer 1.21 and earlier allow remote attackers to cause a denial o…