Archive
October 2006
Vulnerabilities first published in this month (UTC), newest first.
235 results · Clear filters · Feed
-
Unscored —CVE-2006-5178 Public exploit
Race condition in the symlink function in PHP 5.1.6 and earlier allows local users to bypass the open_basedir restricti…
-
Unscored —CVE-2006-5177 Public exploit
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to (1) execute arbitr…
-
Unscored —CVE-2006-5180 Public exploit
PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1…
-
Unscored —CVE-2006-4927 Public exploit
The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec An…
-
Unscored —CVE-2006-5164 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cart.php in Sum Effect Software digiSHOP 4.0 allow remote attack…
-
Unscored —CVE-2006-5165 Public exploit
PHP remote file inclusion vulnerability in inc/functions.inc.php in Skrypty PPA Gallery 1.0 and earlier allows remote a…
-
Unscored —CVE-2006-5166 Public exploit
PHP remote file inclusion vulnerability in functions.php in PHP Web Scripts Easy Banner Free allows remote attackers to…
-
Unscored —CVE-2006-5167 Public exploit
Multiple PHP remote file inclusion vulnerabilities in BasiliX 1.1.1 and earlier allow remote attackers to execute arbit…
-
Unscored —CVE-2006-5155 Public exploit
PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute…
-
Unscored —
wininet.dll in Microsoft Internet Explorer 6.0 SP2 and earlier allows remote attackers to cause a denial of service (un…
-
Unscored —CVE-2006-5154 Public exploit
PHP remote file inclusion vulnerability in cp/sig.php in DeluxeBB 1.09 and earlier allows remote attackers to execute a…
-
Unscored —
Buffer overflow in McAfee ePolicy Orchestrator before 3.5.0.720 and ProtectionPilot before 1.1.1.126 allows remote atta…
-
Unscored —CVE-2006-5148 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Forum82 2.5.2b and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-5146 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Yblog allow remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2006-5145 Public exploit
Multiple SQL injection vulnerabilities in OlateDownload 3.4.0 allow remote attackers to execute arbitrary SQL commands …
-
Unscored —CVE-2006-5147 Public exploit
PHP remote file inclusion vulnerability in wamp_dir/setup/yesno.phtml in VAMP Webmail 2.0beta1 and earlier allows remot…
-
Unscored —CVE-2006-4392 Public exploit
The Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, a…
-
Unscored —CVE-2006-5103 Public exploit
PHP remote file inclusion vulnerability in admin/index2.php in bbsNew 2.0.1 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5108 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to inject arbitr…
-
Unscored —CVE-2006-5126 Public exploit
PHP remote file inclusion vulnerability in index.php in John Himmelman (aka DaRk2k1) PowerPortal 1.3a allows remote att…
-
Unscored —CVE-2006-5141 Public exploit
PHP remote file inclusion vulnerability in script.php in Kevin A. Gordon Open Geo Targeting (aka geotarget) allows remo…
-
Unscored —CVE-2006-5120 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Scott Metoyer Red Mombin 0.7 allow remote attackers to inject ar…
-
Unscored —
Buffer overflow in InterVations NaviCOPA Web Server 2.01 allows remote attackers to execute arbitrary code via a long H…
-
Unscored —CVE-2006-5104 Public exploit
SQL injection vulnerability in global.php in Jelsoft vBulletin 2.x allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-5137 Public exploit
Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1 allow remote attackers to (1) inje…
-
Unscored —CVE-2006-5140 Public exploit
SQL injection vulnerability in display.php in Lappy512 PHP Krazy Image Host Script (phpkimagehost) 0.7a allows remote a…
-
Unscored —CVE-2006-5125 Public exploit
Directory traversal vulnerability in window.php, possibly used by home.php, in Joshua Muheim phpMyWebmin 1.0 allows rem…
-
Unscored —CVE-2006-5114 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in wgate in SAP Internet Transaction Server (ITS) 6.1 and 6.2 allow…
-
Unscored —CVE-2006-5102 Public exploit
PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter …
-
Unscored —CVE-2006-5135 Public exploit
Multiple PHP remote file inclusion vulnerabilities in A-Blog 2 allow remote attackers to execute arbitrary PHP code via…
-
Unscored —CVE-2006-5100 Public exploit
PHP remote file inclusion vulnerability in parse/parser.php in WEB//NEWS (aka webnews) 1.4 and earlier allows remote at…
-
Unscored —CVE-2006-5124 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Joshua Muheim phpMyWebmin 1.0 allow remote attackers to execute a…
-
Unscored —CVE-2006-5115 Public exploit
Directory traversal vulnerability in kgcall.php in KGB 1.87 allows remote attackers to include and execute arbitrary lo…
-
Unscored —CVE-2006-5118 Public exploit
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows …
-
Unscored —CVE-2006-5107 Public exploit
Multiple SQL injection vulnerabilities in Devellion CubeCart 2.0.x allow remote attackers to execute arbitrary SQL comm…