Archive
7 December 2006
Vulnerabilities first published on this day (UTC), newest first.
23 results · Clear filters · Feed
-
Unscored —CVE-2006-6380 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6381 Public exploit
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2006-6377 Public exploit
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2006-6376 Public exploit
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use…
-
Unscored —CVE-2006-6369 Public exploit
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers t…
-
Unscored —CVE-2006-6365 Public exploit
SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to exec…
-
Unscored —CVE-2006-6360 Public exploit
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arb…
-
Unscored —CVE-2006-6363 Public exploit
Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before 5.2, or without 5.1.1…
-
Unscored —CVE-2006-6367 Public exploit
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attac…
-
Unscored —CVE-2006-6364 Public exploit
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote att…
-
Unscored —CVE-2006-6366 Public exploit
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 …
-
Unscored —CVE-2006-6368 Public exploit
PHP remote file inclusion vulnerability in login.php.inc in awrate 1.0 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2006-6341 Public exploit
Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-6343 Public exploit
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-6342 Public exploit
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute a…
-
Unscored —CVE-2006-6339 Public exploit
SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to e…
-
Unscored —CVE-2006-6356 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers …
-
Unscored —CVE-2006-6355 Public exploit
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-6349 Public exploit
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute a…
-
Unscored —CVE-2006-6337 Public exploit
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to …
-
Unscored —CVE-2006-6338 Public exploit
Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote at…
-
Unscored —
FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infini…
-
Unscored —CVE-2006-6340 Public exploit
keystone.exe in nVIDIA nView allows attackers to cause a denial of service via a long command line argument. NOTE: it i…