Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
279 results · Clear filters · Feed
-
Unscored —CVE-2006-6255 Public exploit
Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is a…
-
Unscored —
Stack-based buffer overflow in VUPlayer 2.44 and earlier allows remote attackers to execute arbitrary code via a long s…
-
Unscored —CVE-2006-6254 Public exploit
administration/telecharger.php in Cahier de texte 2.0 allows remote attackers to obtain unparsed content (source code) …
-
Unscored —CVE-2006-6277 Public exploit
Directory traversal vulnerability in admin/FileServer.php in ContentServ 4.x allows remote attackers to read arbitrary …
-
Unscored —CVE-2006-6250 Public exploit
Format string vulnerability in Songbird Media Player 0.2 and earlier allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2006-6272 Public exploit
Cross-site scripting (XSS) vulnerability in sp_index.php in Simple PHP Gallery 1.1 allows remote attackers to inject ar…
-
Unscored —CVE-2006-6284 Public exploit
Directory traversal vulnerability in admin.php in Vikingboard 0.1.2 allows remote authenticated administrators to inclu…
-
Unscored —
Stack-based buffer overflow in AtomixMP3 2.3 and earlier allows remote attackers to execute arbitrary code via a long p…
-
Unscored —CVE-2006-6261 Public exploit
Buffer overflow in Quintessential Player 4.50.1.82 and earlier allows remote attackers to cause a denial of service (cr…
-
Unscored —CVE-2006-6242 Public exploit
Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include…
-
Unscored —CVE-2006-6237 Public exploit
SQL injection vulnerability in the decode_cookie function in thread.php in Woltlab Burning Board Lite 1.0.2 allows remo…
-
Unscored —
Multiple buffer overflows in the Spooler service (nwspool.dll) in Novell Netware Client 4.91 through 4.91 SP2 allow rem…
-
Unscored —CVE-2006-6232 Public exploit
PHP remote file inclusion vulnerability in admin/index.php in DreamAccount 3.1 allows remote attackers to execute arbit…
-
Unscored —CVE-2006-6225 Public exploit
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via …
-
Unscored —CVE-2006-6198 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow remote authenticated us…
-
Unscored —CVE-2006-6207 Public exploit
SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve Merchant) allows remote attackers to ex…
-
Unscored —CVE-2006-6216 Public exploit
SQL injection vulnerability in admin_hacks_list.php in the Nivisec Hacks List 1.21 and earlier phpBB module allows remo…
-
Unscored —CVE-2006-6197 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow remote attackers to inj…
-
Unscored —CVE-2006-6209 Public exploit
Multiple SQL injection vulnerabilities in MidiCart ASP Shopping Cart and ASP Plus Shopping Cart allow remote attackers …
-
Unscored —CVE-2006-6220 Public exploit
Multiple SQL injection vulnerabilities in Recipes Website (Recipes Complete Website) 1.1.14 allow remote attackers to e…
-
Unscored —CVE-2006-6202 Public exploit
PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Pr…
-
Unscored —CVE-2006-6211 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in BirdBlog 1.4.0 allow remote attackers to inject arbitrary web sc…
-
Unscored —CVE-2006-6208 Public exploit
Multiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2006-6203 Public exploit
Directory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray) component for Mambo allows r…
-
Unscored —CVE-2006-6212 Public exploit
PHP remote file inclusion vulnerability in centre.php in Site News (site_news) 2.00, and possibly earlier, allows remot…
-
Unscored —CVE-2006-6210 Public exploit
SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2006-6213 Public exploit
index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduc…
-
Unscored —CVE-2006-6214 Public exploit
SQL injection vulnerability in wallpaper.php in Wallpaper Website (Wallpaper Complete Website) 1.0.09 allows remote att…
-
Unscored —CVE-2006-6204 Public exploit
Multiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2006-6205 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow remote attackers to injec…
-
Unscored —
Stack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly earlier, allows remote a…
-
Unscored —CVE-2006-6193 Public exploit
SQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-6195 Public exploit
Multiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2006-6181 Public exploit
Multiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote attackers to execute arbit…
-
Unscored —
Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a …
-
Unscored —
Multiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly earlier, allow remote a…
-
Unscored —CVE-2006-6191 Public exploit
SQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows remote attackers to execu…
-
Unscored —CVE-2006-6185 Public exploit
Directory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers to read arbitrary fil…
-
Unscored —CVE-2006-6189 Public exploit
SQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote attackers to execute arbitrary…