Archive
6 November 2006
Vulnerabilities first published on this day (UTC), newest first.
40 results · Feed
-
Unscored —CVE-2006-5767 Public exploit
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remot…
-
Unscored —CVE-2006-5765 Public exploit
SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Arkoon SSL360 1.0 and 2.0 before 2.0/2 allows remote attackers to inject ar…
-
Unscored —CVE-2006-5773 Public exploit
Directory traversal vulnerability in index.php in FreeWebshop 2.2.1 and earlier allows remote attackers to read arbitra…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Cyberfolio 2.0 RC1 and earlier, when register_globals is enabled,…
-
Unscored —CVE-2006-5766 Public exploit
PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrar…
-
Unscored —CVE-2006-5761 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Rhadrix If-CMS 1.01 and 2.07 allows remote attackers to inject…
-
Unscored —CVE-2006-5764 Public exploit
PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in profile.php in FunkBoard 0.71 before 4 November 2006 at 18:16 GMT allows re…
-
Unscored —CVE-2006-5763 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_global…
-
Unscored —CVE-2006-5760 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpDynaSite 3.2.2 and earlier allow remote attackers to execute a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in admin.tool CMS 3 and earlier allow remote attackers to inject ar…
-
Unscored —CVE-2006-5770 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ac4p Mobile allow remote attackers to inject arbitrary web scrip…
-
Unscored —CVE-2006-5762 Public exploit
PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers…
-
Unscored —CVE-2006-5772 Public exploit
Multiple SQL injection vulnerabilities in index.php in FreeWebshop 2.2.1 and earlier allow remote attackers to execute …
-
Unscored —
index.php in Rhadrix If-CMS, possibly 1.01 and 2.07, allows remote attackers to obtain the full path of the web server …
-
Unscored —CVE-2006-5758 Public exploit
The Graphics Rendering Engine in Microsoft Windows 2000 through 2000 SP4 and Windows XP through SP2 maps GDI Kernel str…
-
Unscored —CVE-2006-5757 Public exploit
Race condition in the __find_get_block_slow function in the ISO9660 filesystem in Linux 2.6.18 and possibly other versi…
-
Medium —
PHPMailer Local file inclusion
Multiple PHP remote file inclusion vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) section parameter in (a) documentation/common/frame_toc.php and (b) documentation/common/search.php, the (2) req_lan…
-
Unscored —
PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account …
-
Unscored —
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management…
-
Unscored —CVE-2006-5731 Public exploit
Directory traversal vulnerability in classes/index.php in Lithium CMS 4.04c and earlier allows remote attackers to incl…
-
Unscored —
The console in AirMagnet Enterprise before 7.5 build 6307 does not properly validate the Enterprise Server certificate,…
-
Unscored —CVE-2006-5733 Public exploit
Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and exe…
-
Unscored —CVE-2006-5735 EPSS 14%
Directory traversal vulnerability in include/common.php in PunBB before 1.2.14 allows remote authenticated users to inc…
-
Unscored —
Multiple SQL injection vulnerabilities in Highwall Enterprise and Highwall Endpoint 4.0.2.11045 management interface al…
-
Unscored —
Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated use…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attacker…
-
Unscored —
SQL injection vulnerability in search.php in PunBB before 1.2.14, when the PHP installation is vulnerable to CVE-2006-3…
-
Unscored —CVE-2006-5732 Public exploit
SQL injection vulnerability in logout.php in T.G.S. CMS 0.1.7 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2006-5739 Public exploit
PHP remote file inclusion vulnerability in cpadmin/cpa_index.php in Leicestershire communityPortals 1.0_2005-10-18_12-3…
-
Unscored —
The AirMagnet Enterprise console and Remote Sensor console (Laptop) in AirMagnet Enterprise before 7.5 build 6307 allow…
-
High 7.2
Multiple SQL injection vulnerabilities in PunBB before 1.2.14 allow remote authenticated administrators to execute arbi…
-
Unscored —CVE-2006-5730 Public exploit
PHP remote file inclusion vulnerability in manager/media/browser/mcpuk/connectors/php/Commands/Thumbnail.php in Modx CM…
-
Unscored —CVE-2006-5727 Public exploit
PHP remote file inclusion vulnerability in admin/controls/cart.php in sazcart 1.5 allows remote attackers to execute ar…
-
Unscored —
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG envir…
-
Unscored —CVE-2006-5728 Public exploit
XM Easy Personal FTP Server 5.2.1 and earlier allows remote authenticated users to cause a denial of service via a long…
-
Unscored —CVE-2006-5726 Public exploit
alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by m…