Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
June

CVEs published in June 2006

629 vulnerabilities, 21 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

f-secure anti-virus, internet gatekeeper +1 moreBuffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and...CVE-2006-28387.6 HighJune 6, 2006
techno dreams guest bookCross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to...CVE-2006-28374.3 MediumJune 6, 2006
pineapple technologies loreSQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier...CVE-2006-28367.5 HighJune 6, 2006
arabless saphplessonSQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL...CVE-2006-2835Public exploit7.5 HighJune 6, 2006
gnopastePHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier...CVE-2006-2834Public exploit7.5 HighJune 6, 2006
drupalCross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows...CVE-2006-28332.6 LowJune 6, 2006
drupalCross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x...CVE-2006-28322.6 LowJune 6, 2006
drupalDrupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache...CVE-2006-28317.5 HighJune 6, 2006
apache spamassassinSpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote...CVE-2006-2447Public exploitFix availableEPSS 75.8%5.1 MediumJune 6, 2006
tibco hawk, rendezvous, runtime agent +2 moreBuffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk...CVE-2006-28307.5 HighJune 5, 2006
tibco hawk, hawk monitoring agent, runtime agent +2 moreBuffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime...CVE-2006-28296.8 MediumJune 5, 2006
php-nuke evGlobal variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP...CVE-2006-2828Public exploit6.4 MediumJune 5, 2006
qualiteam x-cart** DISPUTED ** SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X...CVE-2006-2827Disputed6.4 MediumJune 5, 2006
phplib team phplibSQL injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a allows...CVE-2006-2826Public exploit7.5 HighJune 5, 2006
cpanelcPanel does not automatically synchronize the PHP open_basedir configuration directive between...CVE-2006-28255.1 MediumJune 5, 2006
logicalware mailmanagerLogicalware MailManager before 2.0.10 does not remove 0xc8 0x27 (0xc8 followed by a single-quote...CVE-2006-28247.5 HighJune 5, 2006
a.shopkartKatrien De Graeve a.shopKart 2.0 (aka ashopKart20) stores sensitive information under the web...CVE-2006-28235.0 MediumJune 5, 2006
xfairguy codeavalanche freeforumSQL injection vulnerability in admin/default.asp in Dusan Drobac CodeAvalanche FreeForum (aka...CVE-2006-28227.5 HighJune 5, 2006
deltascripts pro publishMultiple cross-site scripting (XSS) vulnerabilities in DeltaScripts Pro Publish allow remote...CVE-2006-2821Public exploit6.8 MediumJune 5, 2006
hotwebscripts weblog oggiCross-site scripting (XSS) vulnerability in HotWebScripts.com Weblog Oggi 1.0 allows remote...CVE-2006-28204.3 MediumJune 5, 2006
barnraiser iglooPHP remote file inclusion vulnerability in Wiki.php in Barnraiser Igloo 0.1.9 and earlier allows...CVE-2006-2819Public exploit7.5 HighJune 5, 2006
cameron mckay informiumPHP remote file inclusion vulnerability in common-menu.php in Cameron McKay Informium 0.12.0...CVE-2006-2818Public exploit7.5 HighJune 5, 2006
tekno.portalSQL injection vulnerability in bolum.php in tekno.Portal allows remote attackers to execute...CVE-2006-2817Public exploit7.5 HighJune 5, 2006
coolphp magazineMultiple cross-site scripting (XSS) vulnerabilities in index.php in coolphp magazine allow remote...CVE-2006-28164.3 MediumJune 5, 2006
two shoes mambo factory simpleboardMultiple cross-site scripting (XSS) vulnerabilities in Two Shoes M-Factory (TSMF) SimpleBoard 1.1...CVE-2006-28156.8 MediumJune 5, 2006
ishopcartMultiple buffer overflows in the (1) vGetPost and (2) main functions in easy-scart.c through easy...CVE-2006-2814Public exploit7.5 HighJune 5, 2006
ishopcartDirectory traversal vulnerability in easy-scart.cgi in iShopCart allows remote attackers to read...CVE-2006-28137.8 HighJune 5, 2006
dominios europa picrateMultiple cross-site scripting (XSS) vulnerabilities in index.php in Dominios Europa PICRATE (aka...CVE-2006-28126.8 MediumJune 5, 2006
cantico ovidentiaMultiple PHP remote file inclusion vulnerabilities in Cantico Ovidentia 5.8.0 allow remote...CVE-2006-2811Public exploitEPSS 17.4%7.5 HighJune 5, 2006
belchior foundry vcardMultiple cross-site scripting (XSS) vulnerabilities in Belchior Foundry vCard 2.9 allow remote...CVE-2006-28106.8 MediumJune 5, 2006
ar-blogMultiple cross-site scripting (XSS) vulnerabilities in index.php in ar-blog 5.2 allow remote...CVE-2006-28096.8 MediumJune 5, 2006
lycos htmlgear guestgearCross-site scripting (XSS) vulnerability in Lycos Tripod htmlGEAR guestGEAR (aka Guest Gear)...CVE-2006-28086.8 MediumJune 5, 2006
aspwebsoft speedy asp discussion forumASPwebSoft Speedy Asp Discussion Forum allows remote attackers to change the password of any...CVE-2006-2807Public exploit10.0 HighJune 5, 2006
apache jamesThe SMTP server in Apache Java Mail Enterprise Server (aka Apache James) 2.2.0 allows remote...CVE-2006-28067.8 HighJune 5, 2006
jelsoft vbulletinSQL injection vulnerability in VBulletin 3.0.10 allows remote attackers to execute arbitrary SQL...CVE-2006-2805Public exploit5.0 MediumJune 3, 2006
goss icmCross-site scripting (XSS) vulnerability in index.cfm in Goss Intelligent Content Management (iCM...CVE-2006-28046.8 MediumJune 3, 2006
deltascripts php manualmakerMultiple cross-site scripting (XSS) vulnerabilities in PHP ManualMaker 1.0 allows remote...CVE-2006-2803Public exploit6.8 MediumJune 3, 2006
xine gxine, xine-lib +1 moreBuffer overflow in the HTTP Plugin (xineplug_inp_http.so) for xine-lib 1.1.1 allows remote...CVE-2006-2802Public exploitFix availableEPSS 11.1%5.0 MediumJune 3, 2006
unak cmsMultiple SQL injection vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote attackers to...CVE-2006-28017.5 HighJune 3, 2006
unak cmsMultiple cross-site scripting (XSS) vulnerabilities in Unak CMS 1.5 RC2 and earlier allow remote...CVE-2006-28006.8 MediumJune 3, 2006
toenda software development toendacmsCross-site scripting (XSS) vulnerability in content_footer.php in toendaCMS 0.7.0 allows remote...CVE-2006-27996.8 MediumJune 3, 2006
phpcommunitycalendarMultiple cross-site scripting (XSS) vulnerabilities in phpCommunityCalendar 4.0.3 allow remote...CVE-2006-2798Public exploit6.8 MediumJune 3, 2006
phpcommunitycalendarMultiple SQL injection vulnerabilities in phpCommunityCalendar 4.0.3 allow remote attackers to...CVE-2006-2797Public exploit7.5 HighJune 3, 2006
new-place captivateCross-site scripting (XSS) vulnerability in gallery.php in Captivate 1.0 allows remote attackers...CVE-2006-27966.8 MediumJune 3, 2006
xiti tracking scriptMultiple cross-site scripting (XSS) vulnerabilities in XiTi Tracking Script 6 and 7 RC allow...CVE-2006-27956.8 MediumJune 3, 2006
aspsitemHesabim.asp in ASPSitem 2.0 and earlier allows remote attackers to read private messages of other...CVE-2006-2794Public exploit7.8 HighJune 3, 2006
aspsitemSQL injection vulnerability in Anket.asp in ASPSitem 2.0 and earlier allows remote attackers to...CVE-2006-2793Public exploit7.5 HighJune 3, 2006
woltlab burning boardSQL injection vulnerability in misc.php in Woltlab Burning Board (WBB) 2.3.4 allows remote...CVE-2006-27927.5 HighJune 3, 2006
net art media iboutique.mallDirectory traversal vulnerability in index.php in iBoutique.MALL and possibly iBoutique allows...CVE-2006-27915.0 MediumJune 3, 2006
sun storage automated diagnostic environmentA package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world...CVE-2006-27907.2 HighJune 2, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open