Archive
4 December 2006
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —
Teredo clients, when located behind a restricted NAT, allow remote attackers to establish an inbound connection without…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary we…
-
Unscored —
The phpmyadmin subsystem in AlternC 0.9.5 and earlier transmits the SQL password in cleartext in a cookie, which might …
-
Unscored —
index.php in GPhotos 1.5 allows remote attackers to obtain sensitive information via an invalid rep parameter, which re…
-
Unscored —CVE-2006-6280 Public exploit
SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attacker…
-
Unscored —
Multiple SQL injection vulnerabilities in Infinitytechs Restaurants CM allow remote attackers to execute arbitrary SQL …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in @lex Guestbook 4.0.1 allows remote attackers to inject arbitra…
-
Unscored —CVE-2006-6281 Public exploit
PHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote attackers to execute …
-
Unscored —
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via un…
-
Unscored —CVE-2006-6247 Public exploit
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQ…
-
Unscored —
SQL injection vulnerability in system/core/profile/profile.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier al…
-
Unscored —
members.php in Vikingboard 0.1.2 allows remote attackers to trigger a forced SQL error via an invalid s parameter, a di…
-
Unscored —
index.php in @lex Guestbook 4.0.1 allows remote attackers to obtain sensitive information via a skin parameter referenc…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) …
-
Unscored —CVE-2006-6266 EPSS 12%
Teredo clients, when following item 6 of RFC4380 section 5.2.3, start direct IPv6 connectivity tests (aka ping tests) i…
-
Unscored —
SQL injection vulnerability in login.asp in Redbinaria Sistema Integrado de Administracion de Portales (SIAP) allows re…
-
Unscored —
Multiple SQL injection vulnerabilities in Photo Organizer (PO) 2.32b and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-6243 Public exploit
Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-6288 Public exploit
Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2006-6263 EPSS 13%
Teredo clients, when source routing is enabled, recognize a Routing header in an encapsulated IPv6 packet and send the …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHPOLL 0.96 allow remote attackers to inject arbitrary web scrip…
-
Unscored —
The file manager in AlternC 0.9.5 and earlier, when warnings are enabled in PHP, allows remote attackers to obtain sens…
-
Unscored —
sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to obtain sensitive information via an invalid dir param…
-
Unscored —
Directory traversal vulnerability in mboard.php in PHPJunkYard (aka Klemen Stirn) MBoard 1.22 and earlier allows remote…
-
Unscored —
Multiple directory traversal vulnerabilities in (a) class/functions.php and (b) class/m_bro.php in AlternC 0.9.5 and ea…
-
Unscored —CVE-2006-6255 Public exploit
Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is a…
-
Unscored —
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the file manager in admin/bro_main.php in AlternC 0.9.5 and earlier allows …
-
Unscored —CVE-2006-6264 EPSS 15%
Teredo creates trusted peer entries for arbitrary incoming source Teredo addresses, even if the low 32 bits represent a…
-
Unscored —
Multiple SQL injection vulnerabilities in ASPMForum allow remote attackers to execute arbitrary SQL commands via (1) th…
-
Unscored —
HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Ap…
-
Unscored —
SQL injection vulnerability in articles.asp in Expinion.net iNews (1) Publisher (iNP) 2.5 and earlier, and possibly (2)…
-
Unscored —
Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attacke…
-
Unscored —CVE-2006-6254 Public exploit
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) …
-
Unscored —CVE-2006-6277 Public exploit
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary …
-
Unscored —CVE-2006-6250 Public exploit
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2006-6272 Public exploit
Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject ar…
-
Unscored —CVE-2006-6284 Public exploit
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to inclu…
-
Unscored —
Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long p…