Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
226 results · Clear filters · Feed
-
Unscored —CVE-2006-5883 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel 10 allow remote authenticated users to inject arbitrary w…
-
Unscored —CVE-2006-5881 Public exploit
SQL injection vulnerability in cl_CatListing.asp in Dynamic Dataworx NuCommunity 1.0 allows remote attackers to execute…
-
Unscored —CVE-2006-5880 Public exploit
SQL injection vulnerability on the subMenu page in switch.asp in Munch Pro 1.0 allows remote attackers to execute arbit…
-
Unscored —
Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC3…
-
Unscored —CVE-2006-5879 Public exploit
SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-5866 Public exploit
Directory traversal vulnerability in Mdoc/view-sourcecode.php for phpManta 1.0.2 and earlier allows remote attackers to…
-
Unscored —CVE-2006-5863 Public exploit
PHP remote file inclusion vulnerability in inc/session.php for LetterIt 2 allows remote attackers to execute arbitrary …
-
Unscored —
Stack-based buffer overflow in the ps_gettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows …
-
Unscored —CVE-2006-5865 Public exploit
PHP remote file inclusion vulnerability in language.inc.php in MyAlbum 3.02 and earlier allows remote attackers to exec…
-
Unscored —CVE-2006-5839 Public exploit
PHP remote file inclusion vulnerability in ad_main.php in PHPAdventure 1.1-Alpha and earlier allows remote attackers to…
-
Unscored —CVE-2006-5850 Public exploit
Stack-based buffer overflow in Essentia Web Server 2.15 for Windows allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2006-5847 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to injec…
-
Unscored —
Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and inc…
-
Unscored —CVE-2006-5853 Public exploit
Cross-site scripting (XSS) vulnerability in logon.aspx in Immediacy CMS (Immediacy .NET CMS) 5.2 allows remote attacker…
-
Unscored —CVE-2006-5841 Public exploit
Multiple PHP remote file inclusion vulnerabilities in dodosmail.php in DodosMail 2.0.1 and earlier, and possibly 2.1, a…
-
Unscored —CVE-2006-5851 Public exploit
openexec in OpenBase SQL before 10.0.1 allows local users to create arbitrary files via a symlink attack on the /tmp/ou…
-
Unscored —CVE-2006-5849 Public exploit
PHP remote file inclusion vulnerability in inc/irayofuncs.php in IrayoBlog alpha-0.2.4 allows remote attackers to execu…
-
Unscored —CVE-2006-5852 Public exploit
Untrusted search path vulnerability in openexec in OpenBase SQL before 10.0.1 allows local users to gain privileges via…
-
Unscored —CVE-2006-5825 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Kayako SupportSuite 3.00.32 allows remote attackers to inject …
-
Unscored —CVE-2006-5834 Public exploit
Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include …
-
Unscored —CVE-2006-5832 Public exploit
All In One Control Panel (AIOCP) 1.3.007 and earlier allows remote attackers to obtain the full path of the web server …
-
Unscored —CVE-2006-5837 Public exploit
Static code injection vulnerability in chat_panel.php in the SimpleChat 1.0.0 module for iWare Professional CMS allows …
-
Unscored —CVE-2006-5831 Public exploit
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel (AIOCP) 1.3.007 and earlier…
-
Unscored —CVE-2006-5829 Public exploit
Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remote attackers t…
-
Unscored —CVE-2006-5828 Public exploit
SQL injection vulnerability in detail.php in DeltaScripts PHP Classifieds 7.1 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-5838 Public exploit
PHP remote file inclusion vulnerability in lib/class.Database.php in NewP News Publication System 1.0.0, when register_…
-
Unscored —
Buffer overflow in Texas Imperial Software WFTPD Pro Server 3.23.1.1 allows remote authenticated users to execute arbit…
-
Unscored —CVE-2006-5830 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier allow remot…
-
Unscored —CVE-2006-5836 Public exploit
The fpathconf syscall function in bsd/kern/kern_descrip.c in the Darwin kernel (XNU) 8.8.1 in Apple Mac OS X allows loc…
-
Unscored —CVE-2006-5810 Public exploit
Cross-site scripting (XSS) vulnerability in modules/wfdownloads/newlist.php in XOOPS 1.0 allows remote attackers to inj…
-
Unscored —
Stack-based buffer overflow in the sreplace function in ProFTPD 1.3.0 and earlier allows remote attackers, probably aut…
-
Unscored —CVE-2006-5811 Public exploit
PHP remote file inclusion vulnerability in library/translation.inc.php in OpenEMR 2.8.1, with register_globals enabled,…
-
Unscored —CVE-2006-5796 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Soholaunch Pro Edition 4.9 r46 and earlier, when register_globals…
-
Unscored —CVE-2006-5795 Public exploit
Multiple PHP remote file inclusion vulnerabilities in OpenEMR 2.8.1 and earlier, when register_globals is enabled, allo…
-
Unscored —CVE-2006-5802 Public exploit
SQL injection vulnerability in message_details.php in The Web Drivers Simple Forum, dated 20060318, allows remote attac…
-
Unscored —CVE-2006-5788 Public exploit
PHP remote file inclusion vulnerability in (1) index.php and (2) admin/index.php in IPrimal Forums as of 20061105 allow…
-
Unscored —CVE-2006-5784 Public exploit
Unspecified vulnerability in enserver.exe in SAP Web Application Server 6.40 before patch 136 and 7.00 before patch 66 …
-
Unscored —CVE-2006-5789 Public exploit
War FTP Daemon (WarFTPd) 1.82.00-RC11 allows remote authenticated users to cause a denial of service via a large number…
-
Unscored —CVE-2006-5786 Public exploit
Directory traversal vulnerability in class2.php in e107 0.7.5 and earlier allows remote attackers to read and execute P…
-
Unscored —CVE-2006-5787 Public exploit
admin/index.php in IPrimal Forums as of 20061105 allows remote attackers to bypass authentication and modify user passw…