Archive
November 2006
Vulnerabilities first published in this month (UTC), newest first.
511 results · Feed
-
Unscored —CVE-2006-6109 Public exploit
Multiple SQL injection vulnerabilities in CandyPress Store 3.5.2.14 allow remote attackers to execute arbitrary SQL com…
-
Unscored —
Cross-site scripting (XSS) vulnerability in EC-CUBE before 1.0.1a-beta allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2006-6118 Public exploit
Cross-site scripting (XSS) vulnerability in thumbs.php in mmgallery 1.55 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-6111 Public exploit
Multiple SQL injection vulnerabilities in Alan Ward A-Cart Pro 2.0 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6117 Public exploit
SQL injection vulnerability in index1.asp in fipsGallery 1.5 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-6116 Public exploit
SQL injection vulnerability in default2.asp in fipsForum 2.6 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —
Multiple SQL injection vulnerabilities in an unspecified BPG-InfoTech Content Management System product allow remote at…
-
Unscored —
mmgallery 1.55 allows remote attackers to obtain sensitive information via a direct request for thumbs.php, which revea…
-
Unscored —CVE-2006-6115 Public exploit
SQL injection vulnerability in index.asp in fipsCMS 4.5 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —
pstotext before 1.9 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a file nam…
-
Unscored —CVE-2006-6083 Public exploit
SQL injection vulnerability in search.asp in CreaScripts Creadirectory allows remote attackers to execute arbitrary SQL…
-
Unscored —
Kile before 1.9.3 does not assign a backup file the same permissions as the original file, which might allow local user…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Grim Pirate GrimBB before 2006_11_21 allows remote attackers to inject arbi…
-
Unscored —CVE-2006-6088 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BlueCollar i-Gallery 3.4 allow remote attackers to inject arbitr…
-
Unscored —
GNU tar 1.16 and 1.15.1, and possibly other versions, allows user-assisted attackers to overwrite arbitrary files via a…
-
Unscored —CVE-2006-6084 Public exploit
Directory traversal vulnerability in abitwhizzy.php in aBitWhizzy allows remote attackers to read arbitrary files via a…
-
Unscored —CVE-2006-6092 Public exploit
Multiple SQL injection vulnerabilities in vehiclelistings.asp in 20/20 Auto Gallery allow remote attackers to execute a…
-
Unscored —CVE-2006-6096 Public exploit
Cross-site scripting (XSS) vulnerability in activenews_search.asp in ActiveNews Manager allows remote attackers to inje…
-
Unscored —CVE-2006-6087 Public exploit
Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in addpost1.asp in BaalAsp forum allow remote attackers to inject a…
-
Unscored —
Multiple SQL injection vulnerabilities in BaalAsp forum allow remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2006-6093 Public exploit
Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attacke…
-
Unscored —CVE-2006-6086 Public exploit
PHP remote file inclusion vulnerability in src/ark_inc.php in e-Ark 1.0 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-6082 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in CreaScripts Creadirectory allow remote attackers to inject arbit…
-
Unscored —CVE-2006-6095 Public exploit
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-6094 Public exploit
Multiple SQL injection vulnerabilities in ActiveNews Manager allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in addpost1.asp in BaalAsp forum allows remote attackers to inject arbitrary w…
-
Unscored —
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL co…
-
Unscored —
PHP remote file inclusion vulnerability in Smarty_Compiler.class.php in Telaen 1.1.0 and earlier allows remote attacker…
-
Unscored —
Buffer overflow in the Tape Engine (tapeeng.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 a…
-
Unscored —CVE-2006-6078 Public exploit
PHP remote file inclusion vulnerability in common.inc.php in a-ConMan 3.2 beta allows remote attackers to execute arbit…
-
Unscored —
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.…
-
Unscored —
Multiple SQL injection vulnerabilities in Enthrallweb eShopping Cart allow remote attackers to execute arbitrary SQL co…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP cod…
-
Unscored —
SQL injection vulnerability in bpg/publications_list.asp in BPG-InfoTech Easy Publisher and Smart Publisher//Pro 2.7.7 …
-
Unscored —CVE-2006-6080 Public exploit
Multiple SQL injection vulnerabilities in categories.asp in gNews Publisher allow remote attackers to execute arbitrary…
-
Unscored —
My Firewall Plus 5.0 Build 1119 does not verify if explorer.exe is running before launching iexplore.exe from the "Test…
-
Unscored —CVE-2006-6067 Public exploit
Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to exe…
-
Unscored —
Directory traversal vulnerability in the cached_album function in functions.php for mAlbum 0.3 and earlier allows remot…
-
Unscored —
Stack-based buffer overflow in Un4seen XMPlay 3.3.0.5 and earlier allows remote attackers to execute arbitrary code via…