Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
April

CVEs published in April 2006

576 vulnerabilities, 42 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

flexbbCross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers...CVE-2006-19775.8 MediumApril 21, 2006
geekforgod.net prayer request boardCross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1...CVE-2006-19762.6 LowApril 21, 2006
stadtaus.com php-gastebuchCross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows...CVE-2006-19752.6 LowApril 21, 2006
mybulletinboardSQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote...CVE-2006-1974Public exploit7.5 HighApril 21, 2006
linksys rt31p2Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to...CVE-2006-19735.0 MediumApril 21, 2006
wingnut easygalleryCross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote...CVE-2006-19724.3 MediumApril 21, 2006
krankikom contentboxxCross-site scripting (XSS) vulnerability in login.php in KRANKIKOM ContentBoxX allows remote...CVE-2006-1971Public exploit4.3 MediumApril 21, 2006
kcscripts portal packCross-site scripting (XSS) vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds,...CVE-2006-19704.3 MediumApril 21, 2006
kcscripts portal packCross-site scripting (XSS) vulnerability in search/search.cgi in an unspecified KCScripts script,...CVE-2006-19692.6 LowApril 21, 2006
kcscripts news publisher, portal pack +1 moreCross-site scripting (XSS) vulnerability in news/NsVisitor.cgi in KCScripts News Publisher,...CVE-2006-19685.8 MediumApril 21, 2006
kcscripts calendar, portal pack +1 moreCross-site scripting (XSS) vulnerability in calendar/Visitor.cgi in KCScripts Calendar,...CVE-2006-19672.6 LowApril 21, 2006
fortinet fortinet28An unspecified Fortinet product, possibly Fortinet28, allows remote attackers to cause a denial...CVE-2006-19665.0 MediumApril 21, 2006
aasi media net clubs proMultiple cross-site scripting (XSS) vulnerabilities in aasi media Net Clubs Pro 4.0 and earlier...CVE-2006-1965Public exploit5.8 MediumApril 21, 2006
aspsitemSQL injection vulnerability in Haberler.asp in ASPSitem 1.83 and earlier allows remote attackers...CVE-2006-19647.5 HighApril 21, 2006
pcpin chatDirectory traversal vulnerability in main.php in PCPIN Chat 5.0.4 and earlier allows remote...CVE-2006-19635.5 MediumApril 21, 2006
pcpin chatSQL injection vulnerability in PCPIN Chat 5.0.4 and earlier allows remote attackers to execute...CVE-2006-19627.5 HighApril 21, 2006
cisco ethernet subscriber solution engine, hosting solution engine, user registration tool +2 more +4 moreCisco CiscoWorks Wireless LAN Solution Engine (WLSE) and WLSE Express before 2.13, Hosting...CVE-2006-19617.5 HighApril 21, 2006
cisco wireless lan solution engineCross-site scripting (XSS) vulnerability in the appliance web user interface in Cisco CiscoWorks...CVE-2006-1960Public exploit5.8 MediumApril 21, 2006
actualscripts actualanalyzerPHP remote file inclusion vulnerability in direct.php in ActualScripts ActualAnalyzer Lite 2.72...CVE-2006-1959Public exploitEPSS 13.1%7.5 HighApril 21, 2006
wired community software wwwthreadsMultiple SQL injection vulnerabilities in WWWThreads RC 3 allow remote attackers to execute...CVE-2006-19586.4 MediumApril 21, 2006
mambo-foundation mambo, joomla joomla\! +1 moreThe com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to cause a...CVE-2006-19575.0 MediumApril 21, 2006
joomla, mambo +1 moreThe com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain...CVE-2006-19565.0 MediumApril 21, 2006
nfec.de rechnungszentralePHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec)...CVE-2006-19555.0 MediumApril 21, 2006
nfec.de rechnungszentraleSQL injection vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1...CVE-2006-1954Public exploit5.0 MediumApril 21, 2006
perlcoders group bannerfarmMultiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3...CVE-2006-1950Public exploit4.3 MediumApril 20, 2006
nicplex plexcartSQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote...CVE-2006-19497.5 HighApril 20, 2006
ibm lotus notesThe "Add Sender to Address Book" operation (AddSenderToAddressBook.lss) and NameHelper.lss in IBM...CVE-2006-19484.0 MediumApril 20, 2006
nicplex plexumMultiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow...CVE-2006-1947Public exploit7.5 HighApril 20, 2006
visaleMultiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote...CVE-2006-1946Public exploit2.6 LowApril 20, 2006
awstatsCross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote...CVE-2006-1945Public exploitFix available2.6 LowApril 20, 2006
sibsoft communimailMultiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow...CVE-2006-1944Public exploit2.6 LowApril 20, 2006
smarter scripts intellilink proMultiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and...CVE-2006-1943Public exploit2.6 LowApril 20, 2006
k-meleon project k-meleon, mozilla firefox, netscape navigator +2 moreMozilla Firefox 1.5.0.2 and possibly other versions before 1.5.0.4, Netscape 8.1, 8.0.4, and 7.2,...CVE-2006-19425.1 MediumApril 20, 2006
neon software responderNeon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service ...CVE-2006-1941Public exploit5.0 MediumApril 20, 2006
yukihiro matsumoto rubyThe HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to...CVE-2006-1931Public exploitFix availableEPSS 10.4%5.0 MediumApril 20, 2006
hoito green minute** DISPUTED ** Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and...CVE-2006-1930Disputed6.4 MediumApril 20, 2006
i-rater platinumPHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote...CVE-2006-1929Public exploit5.0 MediumApril 20, 2006
cisco ios xrCisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS...CVE-2006-19285.0 MediumApril 20, 2006
cisco ios xrCisco IOS XR, when configured for Multi Protocol Label Switching (MPLS) and running on Cisco CRS...CVE-2006-19275.0 MediumApril 20, 2006
thwboardSQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote...CVE-2006-1926Public exploit5.0 MediumApril 20, 2006
cutephp cutenewsDirectory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in...CVE-2006-1925Public exploit4.3 MediumApril 20, 2006
linphaSQL injection vulnerability in functions/db_api.php in LinPHA 1.1.1 allows remote attackers to...CVE-2006-19246.4 MediumApril 20, 2006
linphaMultiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.1.1 allow remote attackers...CVE-2006-19235.8 MediumApril 20, 2006
sweetphp totalcalendarPHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows...CVE-2006-1922Public exploit6.4 MediumApril 20, 2006
php net tools net toolsnettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via...CVE-2006-1921Public exploit6.4 MediumApril 20, 2006
pmtoolSQL injection vulnerability in index.php in PMTool 1.2.2 allows remote attackers to execute...CVE-2006-19206.4 MediumApril 20, 2006
thomas voecking internet photoshowPHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote...CVE-2006-1919Public exploit7.5 HighApril 20, 2006
papooMultiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to...CVE-2006-1918Public exploit2.6 LowApril 20, 2006
blackorpheus clanmemberskriptSQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote...CVE-2006-1917Public exploit7.5 HighApril 20, 2006
dbbsMultiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier...CVE-2006-1916Public exploit6.8 MediumApril 20, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open