Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —
Unspecified vulnerability in the tab editor for Personal .NET Portal before 2.0.0 has unknown impact and attack vectors…
-
Unscored —
Calendar MX BASIC 1.0.2 and earlier store sensitive information under the web root with insufficient access control, wh…
-
Unscored —
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v701 allow remote attackers to execute arbitrary SQL co…
-
Unscored —
SQL injection vulnerability in Interchange before 4.8.9 allows remote attackers to execute arbitrary SQL commands via u…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lotus Domino 6.0.x before 6.0.4 and 6.5.x before 6.5.2 allows remote attack…
-
Unscored —CVE-2006-6810 Public exploit
Unspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause …
-
Unscored —CVE-2006-6824 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow …
-
Unscored —CVE-2006-6814 Public exploit
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authentica…
-
Unscored —CVE-2006-6822 Public exploit
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, …
-
Unscored —CVE-2006-6812 Public exploit
Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PH…
-
Unscored —
AlstraSoft Web Host Directory allows remote attackers to obtain sensitive information by requesting any invalid URI, wh…
-
Unscored —CVE-2006-6813 Public exploit
SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attacker…
-
Unscored —CVE-2006-6809 Public exploit
Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubl…
-
Unscored —CVE-2006-6816 Public exploit
Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6820 Public exploit
myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, whic…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote authenticated adm…
-
Unscored —CVE-2006-6819 Public exploit
AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —
AlstraSoft Web Host Directory allows remote attackers to bypass authentication and change the admin password via a dire…
-
Unscored —CVE-2006-6821 Public exploit
myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which a…
-
Unscored —
KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to …
-
Unscored —CVE-2006-6823 Public exploit
PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to exec…
-
Unscored —CVE-2005-4821 Public exploit
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbi…
-
Unscored —
Format string vulnerability in ui.c in Textbased MSN Client (TMSNC) before 0.2.5 allows attackers to cause a denial of …
-
Unscored —
SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source (IOS) version 2.7.2 a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lotus Domino versions before 6.5.4 fix pack 1 (FP1) and versions before 7.0…
-
Unscored —
Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
SMC Wireless Router model SMC7904WBRA allows remote attackers to cause a denial of service (reboot) by flooding the rou…
-
Unscored —
SQL injection vulnerability in auth.php in Land Down Under (LDU) v601 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2006-6807 Public exploit
SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier al…
-
Unscored —
SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to…
-
Unscored —CVE-2006-6800 Public exploit
PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to…
-
Unscored —CVE-2006-6801 Public exploit
PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote at…
-
Unscored —CVE-2006-6805 Public exploit
SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6808 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject…
-
Unscored —CVE-2006-6804 Public exploit
SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search …
-
Unscored —CVE-2006-6802 Public exploit
SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6806 Public exploit
SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-6803 Public exploit
SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of…
-
Unscored —CVE-2006-6797 Public exploit
The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (cras…