Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —
Heap-based buffer overflow in the SendChannelData function in wfica.ocx in Citrix Presentation Server Client before 9.2…
-
Unscored —CVE-2006-6380 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Ultimate HelpDesk allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6381 Public exploit
Directory traversal vulnerability in getfile.asp in Ultimate HelpDesk allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2006-6377 Public exploit
Uploadscript 1.2 and earlier stores sensitive data under the web root with insufficient access control, which allows re…
-
Unscored —CVE-2006-6376 Public exploit
Multiple directory traversal vulnerabilities in fm.php in Simple File Manager (SFM) 0.24a allow remote attackers to use…
-
Unscored —CVE-2006-6369 Public exploit
SQL injection vulnerability in lib/entry_reply_entry.php in Invision Community Blog Mod 1.2.4 allows remote attackers t…
-
Unscored —CVE-2006-6365 Public exploit
SQL injection vulnerability in detail.asp in DUware DUpaypal 3.1, and possibly earlier, allows remote attackers to exec…
-
Unscored —CVE-2006-6360 Public exploit
PHP remote file inclusion vulnerability in activate.php in PHP Upload Center 2.0 allows remote attackers to execute arb…
-
Unscored —CVE-2006-6363 Public exploit
Cross-site scripting (XSS) vulnerability in admin.pl in BlueSocket Secure Controller (BSC) before 5.2, or without 5.1.1…
-
Unscored —CVE-2006-6367 Public exploit
Multiple SQL injection vulnerabilities in detail.asp in DUware DUdownload 1.1, and possibly earlier, allow remote attac…
-
Unscored —CVE-2006-6364 Public exploit
Cross-site scripting (XSS) vulnerability in error.php in Inside Systems Mail (ISMail) 2.0 and earlier allows remote att…
-
Unscored —CVE-2006-6366 Public exploit
Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 …
-
Unscored —CVE-2006-6368 Public exploit
PHP remote file inclusion vulnerability in login.php.inc in awrate 1.0 allows remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2006-6341 Public exploit
Multiple PHP remote file inclusion vulnerabilities in mg.applanix 1.3.1 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2006-6343 Public exploit
SQL injection vulnerability in polls.php in Neocrome Seditio 1.10 and earlier allows remote attackers to execute arbitr…
-
Unscored —CVE-2006-6342 Public exploit
Multiple SQL injection vulnerabilities in KLF-DESIGN (aka Kim L. Fraser) KLF-REALTY allow remote attackers to execute a…
-
Unscored —CVE-2006-6339 Public exploit
SQL injection vulnerability in sites/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote attackers to e…
-
Unscored —CVE-2006-6356 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in templates/link_temp.php in PHPNews 1.3.0 allow remote attackers …
-
Unscored —CVE-2006-6355 Public exploit
SQL injection vulnerability in default.asp in DuWare DuClassmate allows remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2006-6349 Public exploit
Multiple SQL injection vulnerabilities in PWP Technologies The Classified Ad System allow remote attackers to execute a…
-
Unscored —CVE-2006-6337 Public exploit
Multiple SQL injection vulnerabilities in giris.asp in Aspee and Dogantepe Ziyaretci Defteri allow remote attackers to …
-
Unscored —CVE-2006-6338 Public exploit
Unrestricted file upload vulnerability in upload/index.php in deV!L`z Clanportal (DZCP) before 1.3.6.1 allows remote at…
-
Unscored —
FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to cause a denial of service (infini…
-
Unscored —CVE-2006-6340 Public exploit
keystone.exe in nVIDIA nView allows attackers to cause a denial of service via a long command line argument. NOTE: it i…
-
Unscored —CVE-2006-6328 Public exploit
Directory traversal vulnerability in index.php for TorrentFlux 2.2 allows remote attackers to create or overwrite arbit…
-
Unscored —CVE-2006-6330 Public exploit
index.php for TorrentFlux 2.2 allows remote registered users to execute arbitrary commands via shell metacharacters in …
-
Unscored —CVE-2006-6329 Public exploit
index.php for TorrentFlux 2.2 allows remote attackers to delete files by specifying the target filename in the delfile …
-
Unscored —
Microsoft Internet Explorer 6.0.2900.2180 allows remote attackers to cause a denial of service via a style attribute in…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 and earlier allows remote attackers to cause a denial of service (crash) via an inv…
-
Unscored —CVE-2006-6298 Public exploit
SQL injection vulnerability in uye_giris_islem.asp in Metyus Okul Yonetim Sistemi 1.0 allows remote attackers to execut…
-
Unscored —CVE-2006-6289 Public exploit
Woltlab Burning Board (wBB) Lite 1.0.2 does not properly unset variables when the input data includes a numeric paramet…
-
Unscored —CVE-2006-6300 Public exploit
Cross-site scripting (XSS) vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HT…
-
Unscored —
The RpcGetPrinterData function in the Print Spooler (spoolsv.exe) service in Microsoft Windows 2000 SP4 and earlier, an…
-
Unscored —CVE-2006-6295 Public exploit
PHP remote file inclusion vulnerability in includes/mx_common.php in the mx_tinies 1.3.0 Module for MxBB Portal 1.06 al…
-
Unscored —
Heap-based buffer overflow in FRISK Software F-Prot Antivirus before 4.6.7 allows user-assisted remote attackers to exe…
-
Unscored —CVE-2006-6280 Public exploit
SQL injection vulnerability in viewthread.php in Oxygen (O2PHP Bulletin Board) 1.1.3 and earlier allows remote attacker…
-
Unscored —CVE-2006-6281 Public exploit
PHP remote file inclusion vulnerability in check_status.php in dicshunary 0.1 alpha allows remote attackers to execute …
-
Unscored —CVE-2006-6247 Public exploit
Multiple SQL injection vulnerabilities in Uapplication UPhotoGallery 1.1 allow remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2006-6243 Public exploit
Multiple SQL injection vulnerabilities in index.asp in FipsSHOP allow remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2006-6288 Public exploit
Multiple buffer overflows in Niek Albers CoolPlayer 216 and earlier allow remote attackers to execute arbitrary code vi…