Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
March

CVEs published in March 2006

542 vulnerabilities, 23 critical, 1 exploited.

Known exploitedIn KEVPublic exploitFix available

vihor vihordesignMultiple cross-site scripting (XSS) vulnerabilities in index.php in ViHor Design allow remote...CVE-2006-1496Public exploit4.3 MediumMarch 30, 2006
netoffice, phpcollab +1 moreSQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2)...CVE-2006-1495Public exploit7.5 HighMarch 30, 2006
nikolay avrionov explorer xpCross-site scripting (XSS) vulnerability in dir.php in Explorer XP allows remote attackers to...CVE-2006-14934.3 MediumMarch 29, 2006
nikolay avrionov explorer xpDirectory traversal vulnerability in dir.php in Explorer XP allows remote attackers to read...CVE-2006-14925.0 MediumMarch 29, 2006
horde application frameworkEval injection vulnerability in Horde Application Framework versions 3.0 before 3.0.10 and 3.1...CVE-2006-1491Public exploitEPSS 39.2%7.5 HighMarch 29, 2006
phpPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...CVE-2006-1490Public exploitEPSS 21.0%5.0 MediumMarch 29, 2006
fusionzone couponzoneMultiple SQL injection vulnerabilities in FusionZONE CouponZONE local.cfm in 4.2 and earlier...CVE-2006-1489Public exploit7.5 HighMarch 29, 2006
activecampaign supporttrioActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via...CVE-2006-14885.0 MediumMarch 29, 2006
activecampaign supporttrioCross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote...CVE-2006-1487Public exploit4.3 MediumMarch 29, 2006
fusionzone realestatezoneMultiple cross-site scripting (XSS) vulnerabilities in index.cfm in realestateZONE 4.2 allow...CVE-2006-1486Public exploit4.3 MediumMarch 29, 2006
greymattergm-upload.cgi in Greymatter 1.3.1 allows remote authenticated users with upload privileges to...CVE-2006-14856.5 MediumMarch 29, 2006
kye genius videocam nbGenius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to...CVE-2006-14847.2 HighMarch 29, 2006
desiderata software blazix web serverBlazix Web Server before 1.2.6, when running on Windows, allows remote attackers to obtain the...CVE-2006-14835.0 MediumMarch 29, 2006
conftoolCross-site scripting (XSS) vulnerability in index.php in ConfTool 1.1 allows remote attackers to...CVE-2006-1482Public exploit4.3 MediumMarch 29, 2006
php ticket ticketSQL injection vulnerability in search.php in PHP Ticket 0.71 allows remote authenticated users to...CVE-2006-1481Public exploit6.5 MediumMarch 29, 2006
duda webalbumDirectory traversal vulnerability in start.php in WebAlbum 2.02 allows remote attackers to...CVE-2006-1480Public exploit5.1 MediumMarch 29, 2006
serge rey gtd-phpMultiple cross-site scripting (XSS) vulnerabilities in Serge Rey gtd-php (aka Getting Things Done...CVE-2006-14794.3 MediumMarch 29, 2006
turnkey web tools php live helperDirectory traversal vulnerability in (1) initiate.php and (2) possibly other PHP scripts in...CVE-2006-14787.5 HighMarch 29, 2006
turnkey web tools php live helperMultiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools PHP Live Helper 1.8 allow...CVE-2006-14777.5 HighMarch 29, 2006
microsoft windows xpWindows Firewall in Microsoft Windows XP SP2 produces incorrect application block alerts when the...CVE-2006-14762.6 LowMarch 29, 2006
microsoft windows xpWindows Firewall in Microsoft Windows XP SP2 does not produce application alerts when an...CVE-2006-14752.1 LowMarch 29, 2006
raindance web conferencing proCross-site scripting (XSS) vulnerability in the "failed" functionality in Raindance Web...CVE-2006-14744.3 MediumMarch 29, 2006
fusionzone couponzonefusionZONE couponZONE 4.2 allows remote attackers to obtain the full path of the web server, and...CVE-2006-14325.0 MediumMarch 28, 2006
fusionzone couponzoneCross-site scripting (XSS) vulnerability in local.cfm in fusionZONE couponZONE 4.2 allows remote...CVE-2006-1431Public exploit4.3 MediumMarch 28, 2006
controlzx hmsMultiple cross-site scripting (XSS) vulnerabilities in CONTROLzx HMS (formerly DRZES) 3.3.4 and...CVE-2006-1430Public exploit4.3 MediumMarch 28, 2006
fusionzone classifiedzoneCross-site scripting (XSS) vulnerability in accountlogon.cfm in classifiedZONE 1.2 and earlier...CVE-2006-1429Public exploit4.3 MediumMarch 28, 2006
coinsoft technologies phpcoinMultiple cross-site scripting (XSS) vulnerabilities in phpCOIN 1.2.2 and earlier allow remote...CVE-2006-1428Public exploit4.3 MediumMarch 28, 2006
web-app.org webappMultiple cross-site scripting (XSS) vulnerabilities in WebAPP 0.9.9.3.2 and earlier allow remote...CVE-2006-1427Public exploit4.3 MediumMarch 28, 2006
pixel motion blogMultiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute...CVE-2006-1426Public exploit7.5 HighMarch 28, 2006
phpmyfamilyCross-site scripting (XSS) vulnerability in track.php in phpmyfamily 1.4.1 allows remote...CVE-2006-1425Public exploit4.3 MediumMarch 28, 2006
ubbcentral ubb.threadsSQL injection vulnerability in showflat.php in UBB.threads 5.5.1, 6.0 br5, 6.0.1, 6.0.2, and...CVE-2006-14235.0 MediumMarch 28, 2006
jjwwebdesign phpbookingcalendarSQL injection vulnerability in details_view.php in PHP Booking Calendar 1.0c and earlier allows...CVE-2006-1422Public exploit5.0 MediumMarch 28, 2006
arthur konze webdesign akocommentMultiple SQL injection vulnerabilities in akocomment.php in AkoComment 2.0 module for Mambo, with...CVE-2006-14215.1 MediumMarch 28, 2006
arabless saphplessonSQL injection vulnerability in print.php in SaphpLesson 2.0 allows remote attackers to execute...CVE-2006-1420Public exploit5.0 MediumMarch 28, 2006
nuked-klanSQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote...CVE-2006-1419Public exploit5.0 MediumMarch 28, 2006
caloris planitia technologies e-school management systemCross-site scripting (XSS) vulnerability in default.asp in Caloris Planitia E-School Management...CVE-2006-1418Public exploit2.6 LowMarch 28, 2006
caloris planitia technologies web quiz proMultiple cross-site scripting (XSS) vulnerabilities in Caloris Planitia Online Quiz System (aka...CVE-2006-1417Public exploit4.3 MediumMarch 28, 2006
xigla absolute faq manager .netCross-site scripting (XSS) vulnerability in afmsearch.aspx in Absolute FAQ Manager .NET 4.0 and...CVE-2006-14164.3 MediumMarch 28, 2006
dotnetbb forumsCross-site scripting (XSS) vulnerability in iforget.aspx in dotNetBB 2.42EC SP 3 and earlier...CVE-2006-14154.3 MediumMarch 28, 2006
toast forums forumsMultiple cross-site scripting (XSS) vulnerabilities in toast.asp in Toast Forums 1.6 and earlier...CVE-2006-1414Public exploit4.3 MediumMarch 28, 2006
htmljunction ezhomepageproMultiple cross-site scripting (XSS) vulnerabilities in EZHomepagePro 1.5 and earlier allow remote...CVE-2006-1413Public exploit4.3 MediumMarch 28, 2006
tft gallery galleryTFT Gallery 0.10 stores sensitive information under the web root with insufficient access control...CVE-2006-1412Public exploit5.0 MediumMarch 28, 2006
xigla absolute image gallery xeCross-site scripting (XSS) vulnerability in Absolute Image Gallery XE 2.0 and earlier allows...CVE-2006-14114.3 MediumMarch 28, 2006
xigla absolute live support xeMultiple cross-site scripting (XSS) vulnerabilities in XIGLA Absolute Live Support XE 2.0 and...CVE-2006-14104.3 MediumMarch 28, 2006
vavoomBuffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service...CVE-2006-14095.0 MediumMarch 28, 2006
vavoomVavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop)...CVE-2006-14085.0 MediumMarch 28, 2006
webhost automation helm web hosting control panelMultiple cross-site scripting (XSS) vulnerabilities in Helm Web Hosting Control Panel 3.2.10 and...CVE-2006-1407Public exploit5.8 MediumMarch 28, 2006
uniforumMultiple cross-site scripting (XSS) vulnerabilities in wbadmlog.aspx in uniForum 4.0 and earlier...CVE-2006-14064.3 MediumMarch 28, 2006
sheer vision technologies sscmsCross-site scripting (XSS) vulnerability in search.aspx in SweetSuite.NET Content Management...CVE-2006-14055.8 MediumMarch 28, 2006
industrial imagination blankolMultiple cross-site scripting (XSS) vulnerabilities in bol.cgi in BlankOL 1.0 and earlier allow...CVE-2006-1404Public exploit5.8 MediumMarch 28, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open