Archive
1 December 2006
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
Heap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0.2 as used by Borland D…
-
Unscored —
Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.ph…
-
Unscored —CVE-2006-6198 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated us…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in dev4u CMS allow remote attackers to inject arbitrar…
-
Unscored —CVE-2006-6207 Public exploit
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to ex…
-
Unscored —CVE-2006-6216 Public exploit
SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remo…
-
Unscored —CVE-2006-6197 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inj…
-
Unscored —CVE-2006-6209 Public exploit
Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers …
-
Unscored —CVE-2006-6220 Public exploit
Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to e…
-
Unscored —CVE-2006-6202 Public exploit
PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pr…
-
Unscored —CVE-2006-6211 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-6208 Public exploit
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Multiple SQL injection vulnerabilities in Wallpaper Website (Wallpaper Complete Website) 1.0.09 and earlier allow remot…
-
Unscored —CVE-2006-6203 Public exploit
Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows r…
-
Unscored —CVE-2006-6212 Public exploit
PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remot…
-
Unscored —CVE-2006-6210 Public exploit
SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-6213 Public exploit
index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduc…
-
Unscored —CVE-2006-6214 Public exploit
SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote att…
-
Unscored —CVE-2006-6204 Public exploit
Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —
PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers …
-
Unscored —CVE-2006-6205 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to injec…
-
Unscored —
SQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers to execute arbitrary …
-
Unscored —
Multiple SQL injection vulnerabilities in index.php in dev4u CMS allow remote attackers to execute arbitrary SQL comman…
-
Unscored —
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote a…
-
Unscored —
SQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice) allows remote attackers to execute ar…
-
Unscored —CVE-2006-6193 Public exploit
SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image Gallery allows remote atta…
-
Unscored —
The Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in plaintext in the %SYSTEMDRIV…
-
Unscored —CVE-2006-6195 Public exploit
Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-6181 Public exploit
Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbit…
-
Unscored —
Multiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to execute arbitrary SQL comma…
-
Unscored —
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a …
-
Unscored —
Multiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers to execute arbitrary …
-
Unscored —
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows remote attackers to injec…
-
Unscored —CVE-2006-6191 Public exploit
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execu…
-
Unscored —
Unspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not properly perform authenticat…
-
Unscored —
Multiple directory traversal vulnerabilities in enomphp 4.0 allow remote attackers to read arbitrary files via a .. (do…
-
Unscored —
Cross-site scripting (XSS) vulnerability in articles.asp in Expinion.net iNews Publisher (iNP) 2.5 and earlier allows r…
-
Unscored —CVE-2006-6185 Public exploit
Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary fil…