CVEs published in June 2006
629 vulnerabilities, 21 critical, 0 exploited.
- thinkfactory ultimate eshopCross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows...4.3 Medium
- thinkfactory ultimate estateMultiple cross-site scripting (XSS) vulnerabilities in Ultimate Auction 1.0 and earlier allow...4.3 Medium
- thinkfactory ultimate estateSQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote...7.5 High
- thinkfactory ultimate estateCross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows...4.3 Medium
- bluehouse project phptraderMultiple SQL injection vulnerabilities in phpTRADER 4.9 SP5 and earlier allow remote attackers to...7.5 High
- associated cmsCross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier...4.3 Medium
- cavoxcmsSQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers...7.5 High
- phpmyforumCross-site scripting (XSS) vulnerability in topic.php in phpMyForum 4.1.3 and earlier allows...4.3 Medium
- open-realtySQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote...7.5 High
- hosting controller controllerUnspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote...6.5 Medium
- toshiba bluetooth stackThe TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote...5.0 Medium
- netpbmBuffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a...5.0 Medium
- ibd micro cmsPHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By...7.5 High
- maximus schoolmaxCross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier...4.0 Medium
- vbzoomSQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute...7.5 High
- dpivision tradingeye shopCross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows...4.3 Medium
- openciSQL injection vulnerability in index.php in openCI 1.0 BETA 0.20.1 and earlier allows remote...7.5 High
- vwar virtual warMultiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier...7.5 High
- accomplishtechnology phpmydirectoryMultiple cross-site scripting (XSS) vulnerabilities in phpMyDirectory 10.4.5 and earlier allow...4.3 Medium
- cutting edge computing edge ecommerce shopCross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows...4.3 Medium
- nucleus group cms** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote...7.5 High
- qto qtofilemanagerCross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote...5.8 Medium
- clubpageMultiple cross-site scripting (XSS) vulnerabilities in Clubpage allow remote attackers to inject...4.3 Medium
- clubpageSQL injection vulnerability in index.php in Clubpage allows remote attackers to execute arbitrary...7.5 High
- nc linklist linklistMultiple cross-site scripting (XSS) vulnerabilities in index.php in NC LinkList 1.2 and earlier...4.3 Medium
- microsoft excelMicrosoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users...5.1 Medium
- easy-cmschoose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of...4.6 Medium
- sun java enterprise system, java system directory server +1 moreMemory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4...7.8 High
- hotwebscripts cms mundoCMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote...5.1 Medium
- hotwebscripts cms mundoSQL injection vulnerability in controlpanel/index.php in CMS Mundo before 1.0 build 008 allows...7.5 High
- chipmailerChipmailer 1.09 allows remote attackers to obtain sensitive information via a direct request to...5.0 Medium
- chipmailerMultiple SQL injection vulnerabilities in main.php in Chipmailer 1.09 allow remote attackers to...7.5 High
- chipmailerCross-site scripting (XSS) vulnerability in main.php in Chipmailer 1.09 allows remote attackers...4.3 Medium
- cisco call managerCross-site scripting (XSS) vulnerability in Cisco CallManager 3.3 before 3.3(5)SR3, 4.1 before 4...4.3 Medium
- emailarchitect email serverCross-site scripting (XSS) vulnerability in EmailArchitect Email Server 6.1 allows remote...4.3 Medium
- doceboMultiple PHP remote file inclusion vulnerabilities in Docebo 3.0.3 and earlier, when...5.1 Medium
- fredi bach phpmydesktop arcadeCross-site scripting (XSS) vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote...4.3 Medium
- bitweaverCRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response...5.0 Medium
- bitweaverusers/index.php in Bitweaver 1.3 allows remote attackers to obtain sensitive information via an...5.0 Medium
- bitweaverCross-site scripting (XSS) vulnerability in Bitweaver 1.3 allows remote attackers to inject...4.3 Medium
- bitweaverRace condition in articles/BitArticle.php in Bitweaver 1.3, when run on Apache with the mod_mime...5.1 Medium
- cisco secure access control serverCross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3...4.3 Medium
- twikiTWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via...5.1 Medium
- hp hp-uxUnspecified vulnerability in Support Tools Manager (xstm, cstm, and stm) on HP-UX B.11.11 and B...4.9 Medium
- ipostmx 2005Multiple SQL injection vulnerabilities in iPostMX 2005 2.0 and earlier allow remote attackers to...7.5 High
- ipostmx 2005Multiple cross-site scripting (XSS) vulnerabilities in iPostMX 2005 2.0 and earlier allow remote...4.3 Medium
- vincent hor calendarix basicMultiple SQL injection vulnerabilities in Calendarix Basic 0.7.20060401 and earlier, with...5.1 Medium
- adobe acrobat readerMultiple unspecified vulnerabilities in Adobe Acrobat Reader (acroread) before 7.0.8 have unknown...6.8 Medium
- phpmyfacturesPhpMyFactures 1.2 and earlier allows remote attackers to bypass authentication and modify data...7.5 High
- phpmyfacturesPhpMyFactures 1.0, and possibly 1.2 and earlier, allows remote attackers to obtain the...5.0 Medium
- Show moreLoading…