Skip to content
OpenAdvisories

Archive

1 December 2006

Vulnerabilities first published on this day (UTC), newest first.

25 results · Clear filters · Feed

  • Unscored —
    CVE-2006-6198 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated us…

  • Unscored —
    CVE-2006-6207 Public exploit

    SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to ex…

  • Unscored —
    CVE-2006-6216 Public exploit

    SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remo…

  • Unscored —
    CVE-2006-6197 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inj…

  • Unscored —
    CVE-2006-6209 Public exploit

    Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers …

  • Unscored —
    CVE-2006-6220 Public exploit

    Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to e…

  • Unscored —
    CVE-2006-6202 Public exploit

    PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pr…

  • Unscored —
    CVE-2006-6211 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-6208 Public exploit

    Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-6203 Public exploit

    Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows r…

  • Unscored —
    CVE-2006-6212 Public exploit

    PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remot…

  • Unscored —
    CVE-2006-6210 Public exploit

    SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2006-6213 Public exploit

    index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduc…

  • Unscored —
    CVE-2006-6214 Public exploit

    SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote att…

  • Unscored —
    CVE-2006-6204 Public exploit

    Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-6205 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to injec…

  • Unscored —
    CVE-2006-6199 Public exploit EPSS 66%

    Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote a…

  • Unscored —
    CVE-2006-6193 Public exploit

    SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-6195 Public exploit

    Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2006-6181 Public exploit

    Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbit…

  • Unscored —
    CVE-2006-6183 Public exploit EPSS 70%

    Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a …

  • Unscored —
    CVE-2006-6184 Public exploit EPSS 67%

    Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote a…

  • Unscored —
    CVE-2006-6191 Public exploit

    SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-6185 Public exploit

    Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary fil…

  • Unscored —
    CVE-2006-6189 Public exploit

    SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary…