Archive
7 December 2006
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Medium 5.9
Plone allows a user to masquerade as a group
Unspecified vulnerability in PlonePAS in Plone 2.5 and 2.5.1, when anonymous member registration is enabled, allows an attacker to "masquerade as a group."
-
Unscored —
Absolute path traversal vulnerability in abitwhizzy.php before 20061204 allows remote attackers to read arbitrary files…
-
Unscored —CVE-2006-6380 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6381 Public exploit
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files v…
-
Unscored —
The control panel for Positive Software H-Sphere before 2.5.0 RC3 creates log files in a user's directory with insecure…
-
Unscored —
Cross-site scripting (XSS) vulnerability in pbguestbook.php in JAB Guest Book allows remote attackers to inject arbitra…
-
Unscored —
Cross-site scripting (XSS) vulnerability in display.php in Simple Machines Forum (SMF) 1.1 Final and earlier allows rem…
-
Unscored —CVE-2006-6377 Public exploit
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows re…
-
Unscored —
Multiple CRLF injection vulnerabilities in PhpMyAdmin 2.7.0-pl2 allow remote attackers to inject arbitrary HTTP headers…
-
Unscored —
PhpMyAdmin 2.7.0-pl2 allows remote attackers to obtain sensitive information via a direct request for libraries/common.…
-
Unscored —
SQL injection vulnerability in forum/modules/gallery/post.php in Invision Gallery 2.0.7 allows remote attackers to caus…
-
Unscored —CVE-2006-6376 Public exploit
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use…
-
Unscored —
BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which allows remote attacker…
-
Unscored —CVE-2006-6369 Public exploit
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in pbguestbook.php in JAB Guest Book 20061205 allow remote attacker…
-
Unscored —CVE-2006-6365 Public exploit
SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to exec…
-
Unscored —
SQL injection vulnerability in the login function in auth.inc in Stefan Frech online-bookmarks 0.6.12 allows remote att…
-
Unscored —
Heap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in Bitflux Upload Progre…
-
Unscored —CVE-2006-6360 Public exploit
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arb…
-
Unscored —CVE-2006-6363 Public exploit
Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before 5.2, or without 5.1.1…
-
Unscored —
A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows at…
-
Unscored —CVE-2006-6367 Public exploit
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attac…
-
Unscored —CVE-2006-6364 Public exploit
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote att…
-
Unscored —CVE-2006-6366 Public exploit
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 …
-
Unscored —CVE-2006-6368 Public exploit
PHP remote file inclusion vulnerability in login.php.inc in awrate 1.0 allows remote attackers to execute arbitrary PHP…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Stefan Frech online-bookmarks 0.6.12 allows remote attackers to inject arbi…
-
Unscored —
Multiple SQL injection vulnerabilities in detail.asp in DuWare DuNews allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-6341 Public exploit
Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-6343 Public exploit
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-6342 Public exploit
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute a…
-
Unscored —
listpics 5 stores sensitive data under the web root with insufficient access control, which allows remote attackers to …
-
Unscored —CVE-2006-6339 Public exploit
SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to e…
-
Unscored —
Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors relate…
-
Unscored —
Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .p…
-
Unscored —CVE-2006-6356 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers …
-
Unscored —
Unspecified vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 15 and earlier, and 7.00 Patchlevel 3 …
-
Unscored —CVE-2006-6355 Public exploit
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL comma…
-
Unscored —
Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patch…
-
Unscored —
Cross-site scripting (XSS) vulnerability in templates/cat_temp.php in PHPNews 1.3.0 and earlier allows remote attackers…
-
Unscored —CVE-2006-6349 Public exploit
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute a…