Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —CVE-2006-6810 Public exploit
Unspecified vulnerability in the clear_user_list function in src/main.c in DB Hub 0.3 allows remote attackers to cause …
-
Unscored —CVE-2006-6824 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jim Hu and Chad Little PHP iCalendar 2.23 rc1 and earlier allow …
-
Unscored —CVE-2006-6814 Public exploit
Directory traversal vulnerability in FolderManager/FolderManager.aspx in Hosting Controller 7c allows remote authentica…
-
Unscored —CVE-2006-6822 Public exploit
myprofile.asp in Enthrallweb eClassifieds does not properly validate the MM_recordId parameter during profile updates, …
-
Unscored —CVE-2006-6812 Public exploit
Multiple PHP remote file inclusion vulnerabilities in myPHPCalendar 10.1 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2006-6813 Public exploit
SQL injection vulnerability in detail.asp in Mxmania File Upload Manager (FUM) 1.0.6 and earlier allows remote attacker…
-
Unscored —CVE-2006-6809 Public exploit
Multiple PHP remote file inclusion vulnerabilities in process.php in Vladimir Menshakov buratinable templator (aka bubl…
-
Unscored —CVE-2006-6816 Public exploit
Multiple SQL injection vulnerabilities in DMXReady Secure Login Manager 1.0 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6820 Public exploit
myprofile.asp in Enthrallweb eCoupons does not properly validate the MM_recordId parameter during profile updates, whic…
-
Unscored —CVE-2006-6819 Public exploit
AlstraSoft Web Host Directory stores sensitive information under the web root with insufficient access control, which a…
-
Unscored —CVE-2006-6821 Public exploit
myprofile.asp in Enthrallweb eNews does not properly validate the MM_recordId parameter during profile updates, which a…
-
Unscored —
KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to …
-
Unscored —CVE-2006-6823 Public exploit
PHP remote file inclusion vulnerability in plugins/metasearch/plug.inc.php in Yrch! 1.0 allows remote attackers to exec…
-
Unscored —CVE-2005-4821 Public exploit
Multiple SQL injection vulnerabilities in Land Down Under (LDU) v801 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2006-6807 Public exploit
SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier al…
-
Unscored —CVE-2006-6800 Public exploit
PHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS allows remote attackers to…
-
Unscored —CVE-2006-6801 Public exploit
PHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is enabled, allows remote at…
-
Unscored —CVE-2006-6805 Public exploit
SQL injection vulnerability in newsdetail.asp in Enthrallweb eJobs allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6808 Public exploit
Cross-site scripting (XSS) vulnerability in wp-admin/templates.php in WordPress 2.0.5 allows remote attackers to inject…
-
Unscored —CVE-2006-6804 Public exploit
SQL injection vulnerability in bus_details.asp in Dragon Business Directory - Pro (aka Dragon Internet Business Search …
-
Unscored —CVE-2006-6802 Public exploit
SQL injection vulnerability in actualpic.asp in Enthrallweb ePages allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-6806 Public exploit
SQL injection vulnerability in newsdetail.asp in Enthrallweb eMates 1.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-6803 Public exploit
SQL injection vulnerability in Types.asp in Enthrallweb eCars 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6797 Public exploit
The Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a denial of service (cras…
-
Unscored —CVE-2006-6786 Public exploit
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting t…
-
Unscored —CVE-2006-6779 Public exploit
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2006-6778 Public exploit
Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-6794 Public exploit
SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-6780 Public exploit
SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6795 Public exploit
PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MP…
-
Unscored —CVE-2006-6792 Public exploit
SQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-6796 Public exploit
PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to…
-
Unscored —CVE-2006-6781 Public exploit
HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain value…
-
Unscored —CVE-2006-6776 Public exploit
Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-6777 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-6787 Public exploit
SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers…
-
Unscored —CVE-2006-6790 Public exploit
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remot…
-
Unscored —CVE-2006-6785 Public exploit
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication…
-
Unscored —CVE-2006-6791 Public exploit
SQL injection vulnerability in SelGruFra.asp in chatwm 1.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2006-6788 Public exploit
Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code v…