Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —CVE-2006-6635 Public exploit
PHP remote file inclusion vulnerability in includes/functions.php in JumbaCMS 0.0.1 allows remote attackers to execute …
-
Unscored —CVE-2006-6632 Public exploit
PHP remote file inclusion vulnerability in genepi.php in Genepi 1.6 and earlier allows remote attackers to execute arbi…
-
Unscored —CVE-2006-6625 Public exploit
Cross-site scripting (XSS) vulnerability in mod/forum/discuss.php in Moodle 1.6.1 allows remote attackers to inject arb…
-
Unscored —CVE-2006-6633 Public exploit
PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attac…
-
Unscored —CVE-2006-6619 Public exploit
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows …
-
Unscored —CVE-2006-6613 Public exploit
Directory traversal vulnerability in language.php in phpAlbum 0.4.1 Beta 6 and earlier, when magic_quotes_gpc is disabl…
-
Unscored —CVE-2006-6611 Public exploit
PHP remote file inclusion vulnerability in interface.php in Barman 0.0.1r3 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6615 Public exploit
PHP remote file inclusion vulnerability in includes/act_constants.php in the Activity Games (mx_act) 0.92 module for mx…
-
Unscored —CVE-2006-6612 Public exploit
PHP remote file inclusion vulnerability in basic.inc.php in PhpMyCms 0.3 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2006-6604 Public exploit
Directory traversal vulnerability in downloaddetails.php in TorrentFlux 2.2 allows remote authenticated users to read a…
-
Unscored —
explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to ca…
-
Unscored —CVE-2006-6598 Public exploit
Directory traversal vulnerability in viewnfo.php in (1) TorrentFlux before 2.2 and (2) torrentflux-b4rt before 2.1-b4rt…
-
Unscored —CVE-2006-6597 Public exploit
Argument injection vulnerability in HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript…
-
Unscored —
Windows Media Player 10.00.00.4036 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial …
-
Unscored —CVE-2006-6599 Public exploit
maketorrent.php in TorrentFlux 2.2 allows remote authenticated users to execute arbitrary commands via shell metacharac…
-
Unscored —CVE-2006-6586 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers …
-
Unscored —
Heap-based buffer overflow in Golden FTP Server (goldenftpd) 1.92 allows remote attackers to cause a denial of service …
-
Unscored —CVE-2006-6575 Public exploit
PHP remote file inclusion vulnerability in ldap.php in Brian Drawert Yet Another PHP LDAP Admin Project (yaplap) 0.6 an…
-
Unscored —CVE-2006-6581 Public exploit
PHP remote file inclusion vulnerability in tests/debug_test.php in Vernet Loic PHP_Debug 1.1.0 allows remote attackers …
-
Unscored —CVE-2006-6590 Public exploit
PHP remote file inclusion vulnerability in usercp_menu.php in AR Memberscript allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-6577 Public exploit
SQL injection vulnerability in polls.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to e…
-
Unscored —CVE-2006-6593 Public exploit
PHP remote file inclusion vulnerability in zufallscodepart.php in AMAZONIA MOD for phpBB allows remote attackers to exe…
-
Unscored —CVE-2006-6592 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2006-6568 Public exploit
Directory traversal vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxBB allo…
-
Unscored —
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a wildcard argument to …
-
Unscored —CVE-2006-6564 Public exploit
FileZilla Server before 0.9.22 allows remote attackers to cause a denial of service (crash) via a malformed argument to…
-
Unscored —CVE-2006-6571 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in form.php in GenesisTrader 1.0 allow remote attackers to inject a…
-
Unscored —CVE-2006-6566 Public exploit
PHP remote file inclusion vulnerability in includes/profilcp_constants.php in the Profile Control Panel (CPanel) module…
-
Unscored —CVE-2006-6567 Public exploit
PHP remote file inclusion vulnerability in includes/kb_constants.php in the Knowledge Base (mx_kb) 2.0.2 module for mxB…
-
Unscored —CVE-2006-6563 Public exploit
Stack-based buffer overflow in the pr_ctrls_recv_request function in ctrls.c in the mod_ctrls module in ProFTPD before …
-
Unscored —CVE-2006-6569 Public exploit
form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive info…
-
Unscored —CVE-2006-6551 Public exploit
PHP remote file inclusion vulnerability in libs/tucows/api/cartridges/crt_TUCOWS_domains/lib/domainutils.inc.php in Tuc…
-
Unscored —CVE-2006-6560 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in the mx_modsdb 1.0.0 module for MxBB (aka MX-System) P…
-
Unscored —
Unspecified vulnerability in Microsoft Word 2000, 2002, and Word Viewer 2003 allows user-assisted remote attackers to e…
-
Unscored —CVE-2006-6553 Public exploit
PHP remote file inclusion vulnerability in includes/newssuite_constants.php in the NewsSuite 1.03 module for mxBB allow…
-
Unscored —CVE-2006-6550 Public exploit
PHP remote file inclusion vulnerability in common.php in Phorum 3.2.11 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2006-6558 Public exploit
Crob FTP Server 3.6.1 b.263 allows remote attackers to cause a denial of service via a long series of "?A" sequences in…
-
Unscored —CVE-2006-6552 Public exploit
PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote…
-
Unscored —CVE-2006-6559 Public exploit
SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute …
-
Unscored —CVE-2006-6543 Public exploit
Multiple SQL injection vulnerabilities in login.asp in AppIntellect SpotLight CRM 1.0 allow remote attackers to execute…