Archive
December 2006
Vulnerabilities first published in this month (UTC), newest first.
675 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in pnamazu 2006.02.28 and earlier allows remote attackers to inject arbitrary …
-
Unscored —CVE-2006-6786 Public exploit
Open Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary PHP code by inserting t…
-
Unscored —CVE-2006-6779 Public exploit
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject arbitrary web script or…
-
Unscored —CVE-2006-6778 Public exploit
Cross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote attackers to inject arbitrar…
-
Unscored —CVE-2006-6794 Public exploit
SQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2006-6780 Public exploit
SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary…
-
Unscored —CVE-2006-6795 Public exploit
PHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6 module in myPHPNuke (MP…
-
Unscored —CVE-2006-6792 Public exploit
SQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-6796 Public exploit
PHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier allows remote attackers to…
-
Unscored —CVE-2006-6781 Public exploit
HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain value…
-
Unscored —CVE-2006-6776 Public exploit
Multiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2006-6777 Public exploit
Cross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2006-6787 Public exploit
SQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier allows remote attackers…
-
Unscored —
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to p…
-
Unscored —CVE-2006-6790 Public exploit
Direct static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1 and earlier allows remot…
-
Unscored —CVE-2006-6785 Public exploit
The (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not exit when authentication…
-
Unscored —CVE-2006-6791 Public exploit
SQL injection vulnerability in SelGruFra.asp in chatwm 1.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
SQL injection vulnerability in Netbula Anyboard allows remote attackers to execute arbitrary SQL commands via the user …
-
Unscored —CVE-2006-6788 Public exploit
Multiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2006-6789 Public exploit
PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Phpbbxtra 2.0 allows remote attackers …
-
Unscored —CVE-2006-6793 Public exploit
PHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote attackers to execute ar…
-
Unscored —
Format string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run with the dump or backen…
-
Unscored —CVE-2006-6775 Public exploit
acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the (1) REST or (2) …
-
Unscored —CVE-2006-6774 Public exploit
PHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members/maquetacion_member.php) in Ciberia Con…
-
Unscored —CVE-2006-6771 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when register_globals is enabled, a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote attackers to inject arb…
-
Unscored —CVE-2006-6770 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when register_globals is e…
-
Unscored —CVE-2006-6773 Public exploit
pages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary administrative users b…
-
Unscored —CVE-2006-6768 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The Classified Ad System allow r…
-
Unscored —CVE-2006-6764 Public exploit
PHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB), when executing PHP th…
-
Unscored —CVE-2006-6763 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow remote attackers to e…
-
Unscored —
The IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to cause a denial of serv…
-
Unscored —
Stack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated …
-
Unscored —CVE-2006-6765 Public exploit
Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execu…
-
Unscored —
Multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to execute arbitrary SQL…
-
Unscored —
Event Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains '%' (percent) charact…
-
Unscored —CVE-2006-6760 Public exploit
Multiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and earlier allow remote attacke…
-
Unscored —
Multiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary SQL commands via the s…
-
Unscored —CVE-2006-6757 Public exploit
Directory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read arbitrary files and s…
-
Unscored —CVE-2006-6758 Public exploit
Directory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary files via a .. (dot d…