CVEs published in June 2006
629 vulnerabilities, 21 critical, 0 exploited.
- facile interactive web interactive webPHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41...7.5 High
- drupalDrupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with mod_mime, does not properly...5.1 Medium
- drupalSQL injection vulnerability in Drupal 4.6.x before 4.6.7 and 4.7.0 allows remote attackers to...7.5 High
- epic designs tinybbCross-site scripting (XSS) vulnerability in Epicdesigns tinyBB 0.3 allow remote attackers to...6.8 Medium
- epic designs tinybbMultiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote attackers to...6.8 Medium
- epic designs tinybbPHP remote file inclusion vulnerability in footers.php in Epicdesigns tinyBB 0.3, when...5.1 Medium
- open-xchangeThe open source version of Open-Xchange 0.8.2 and earlier uses a static default username and...7.5 High
- nukeditutilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users...7.5 High
- phpbb-portal blend portalPHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as...5.1 Medium
- activity mod plus mod plusPHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity...5.1 Medium
- mini-nukeenter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password...5.0 Medium
- mini-nukemembership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote...5.0 Medium
- mini-nukeSQL injection vulnerability in Your_Account.asp in Mini-Nuke 2.3 and earlier allows remote...7.5 High
- enigma haber haberMultiple SQL injection vulnerabilities in Enigma Haber 4.3 and earlier allow remote attackers to...7.5 High
- hot open tickets open ticketsPHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT)...5.1 Medium
- jan chmelik photoalbum bandwCross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows...2.6 Low
- jan chmelik photoalbum bandwCross-site scripting (XSS) vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows...2.6 Low
- epic designs eggbloghome/register.php in Eggblog before 3.0 allows remote attackers to change the password of...7.5 High
- fastpublish cmsPHP remote file inclusion vulnerability in Fastpublish CMS 1.6.9.d allows remote attackers to...7.5 High
- epic designs eggblogSQL injection vulnerability in rss/posts.php in Eggblog before 3.07 allows remote attackers to...6.4 Medium
- suse linuxThe RedCarpet command-line client (rug) does not verify SSL certificates from a server, which...5.0 Medium
- zipcentralStack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute...7.6 High
- punbbCross-site scripting (XSS) vulnerability in PunBB 1.2.11 allows remote authenticated...6.8 Medium
- mozilla firefoxUnspecified versions of Mozilla Firefox allow remote attackers to cause a denial of service ...5.0 Medium
- out of the trees web design selectapixSQL injection vulnerability in view_album.php in SelectaPix 1.4 allows remote attackers to...7.5 High
- variomatCross-site scripting (XSS) vulnerability in news.php in VARIOMAT allows remote attackers to...6.8 Medium
- variomatSQL injection vulnerability in news.php in VARIOMAT allows remote attackers to execute arbitrary...7.5 High
- jiwa financialsJIWA Financials 6.4.14 stores usernames and passwords for all accounts in cleartext in the...4.9 Medium
- jiwa financialsJIWA Financials 6.4.14 passes a Microsoft SQL Server account's username and password, and the...6.5 Medium