28 December 2006

33 results · Feed

• Unscored —
  CVE-2006-6807 Public exploit

  SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier al…

  Dec 28, 2006
• Unscored —
  CVE-2006-6799

  SQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled, allows remote attackers to…

  cacti Debian
  Dec 28, 2006
• Unscored —
  CVE-2006-6800 Public exploit

  PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to…

  Dec 28, 2006
• Unscored —
  CVE-2006-6801 Public exploit

  PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote at…

  Dec 28, 2006
• Unscored —
  CVE-2006-6805 Public exploit

  SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL com…

  Dec 28, 2006
• Unscored —
  CVE-2006-6808 Public exploit

  Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject…

  wordpress Debian
  Dec 28, 2006
• Unscored —
  CVE-2006-6804 Public exploit

  SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search …

  Dec 28, 2006
• Unscored —
  CVE-2006-6802 Public exploit

  SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL com…

  Dec 28, 2006
• Unscored —
  CVE-2006-6806 Public exploit

  SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQ…

  Dec 28, 2006
• Unscored —
  CVE-2006-6803 Public exploit

  SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comm…

  Dec 28, 2006
• Unscored —
  CVE-2006-6318

  The show_elog_list function in elogd.c in elog 2.6.2 and earlier allows remote authenticated users to cause a denial of…

  Dec 28, 2006
• Unscored —
  CVE-2006-6797 Public exploit

  The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (cras…

  Dec 28, 2006
• Unscored —
  CVE-2006-6782

  Cross-site scripting (XSS) vulnerability in pnamazu 2006.02.28 and earlier allows remote attackers to inject arbitrary …

  Dec 28, 2006
• Unscored —
  CVE-2006-6786 Public exploit

  Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting t…

  Dec 28, 2006
• Unscored —
  CVE-2006-6779 Public exploit

  Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or…

  Dec 28, 2006
• Unscored —
  CVE-2006-6778 Public exploit

  Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrar…

  Dec 28, 2006
• Unscored —
  CVE-2006-6794 Public exploit

  SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands…

  Dec 28, 2006
• Unscored —
  CVE-2006-6780 Public exploit

  SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary…

  Dec 28, 2006
• Unscored —
  CVE-2006-6795 Public exploit

  PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MP…

  Dec 28, 2006
• Unscored —
  CVE-2006-6792 Public exploit

  SQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to ex…

  Dec 28, 2006
• Unscored —
  CVE-2006-6796 Public exploit

  PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to…

  Dec 28, 2006
• Unscored —
  CVE-2006-6781 Public exploit

  HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain value…

  Dec 28, 2006
• Unscored —
  CVE-2006-6776 Public exploit

  Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via …

  Dec 28, 2006
• Unscored —
  CVE-2006-6777 Public exploit

  Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary we…

  Dec 28, 2006
• Unscored —
  CVE-2006-6787 Public exploit

  SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers…

  Dec 28, 2006
• Unscored —
  CVE-2006-6783

  logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to p…

  Dec 28, 2006
• Unscored —
  CVE-2006-6790 Public exploit

  Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remot…

  Dec 28, 2006
• Unscored —
  CVE-2006-6785 Public exploit

  The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication…

  Dec 28, 2006
• Unscored —
  CVE-2006-6791 Public exploit

  SQL injection vulnerability in SelGruFra.asp in chatwm 1.0 allows remote attackers to execute arbitrary SQL commands vi…

  Dec 28, 2006
• Unscored —
  CVE-2006-6784

  SQL injection vulnerability in Netbula Anyboard allows remote attackers to execute arbitrary SQL commands via the user …

  Dec 28, 2006
• Unscored —
  CVE-2006-6788 Public exploit

  Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code v…

  Dec 28, 2006
• Unscored —
  CVE-2006-6789 Public exploit

  PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Phpbbxtra 2.0 allows remote attackers …

  Dec 28, 2006
• Unscored —
  CVE-2006-6793 Public exploit

  PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute ar…

  Dec 28, 2006