Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2006
September

CVEs published in September 2006

550 vulnerabilities, 23 critical, 0 exploited.

Known exploitedIn KEVPublic exploitFix available

alphamailAlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging...CVE-2006-47872.1 LowSeptember 14, 2006
moodleMoodle 1.6.1 and earlier allows remote attackers to obtain sensitive information via (1) help.php...CVE-2006-47865.0 MediumSeptember 14, 2006
moodleSQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers...CVE-2006-47857.5 HighSeptember 14, 2006
moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle 1.6.1 and earlier might allow...CVE-2006-47844.3 MediumSeptember 14, 2006
webspellSQL injection vulnerability in squads.php in WebSPELL 4.01.01 and earlier, when register_globals...CVE-2006-47835.1 MediumSeptember 14, 2006
webspellsrc/index.php in WebSPELL 4.01.01 and earlier, when register_globals is enabled, allows remote...CVE-2006-4782Public exploit5.4 MediumSeptember 14, 2006
futuresoft tftp server multithreadedHeap-based buffer overflow in FutureSoft TFTP Server Multithreaded (MT) 1.1 allows remote...CVE-2006-4781Public exploit7.5 HighSeptember 14, 2006
phpbbxs phpbb xsPHP remote file inclusion vulnerability in includes/functions.php in phpBB XS 0.58 and earlier...CVE-2006-4780Public exploit7.5 HighSeptember 14, 2006
phpbb group vitrax premodded phpbbPHP remote file inclusion vulnerability in includes/functions_portal.php in Vitrax Premodded...CVE-2006-4779Public exploit7.5 HighSeptember 14, 2006
cchostSQL injection vulnerability in Creative Commons Tools ccHost before 3.0 allows remote attackers...CVE-2006-47787.5 HighSeptember 14, 2006
microsoft ieHeap-based buffer overflow in the DirectAnimation Path Control (DirectAnimation.PathControl) COM...CVE-2006-4777Public exploitEPSS 79.9%7.6 HighSeptember 14, 2006
cisco iosHeap-based buffer overflow in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19)...CVE-2006-47767.5 HighSeptember 14, 2006
cisco catos, ios +1 moreThe VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers...CVE-2006-47757.8 HighSeptember 14, 2006
cisco iosThe VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) allows remote attackers to cause a...CVE-2006-47747.8 HighSeptember 14, 2006
sun storedge 6130 arraysSun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers...CVE-2006-47735.0 MediumSeptember 14, 2006
hotplug cms cmsHotPlug CMS stores sensitive information under the web root with insufficient access control,...CVE-2006-47725.0 MediumSeptember 14, 2006
jbc forumjbcCross-site scripting (XSS) vulnerability in haut.php in ForumJBC 4 allows remote attackers to...CVE-2006-4771Public exploit4.3 MediumSeptember 14, 2006
adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 6.1 through 7.02 allows remote...CVE-2006-47262.6 LowSeptember 14, 2006
adobe coldfusionAdobe ColdFusion MX 7 and 7.01 allows local users to bypass security restrictions and call...CVE-2006-47254.6 MediumSeptember 14, 2006
adobe coldfusionUnspecified vulnerability in the ColdFusion Flash Remoting Gateway in Adobe ColdFusion MX 7 and 7...CVE-2006-47245.0 MediumSeptember 14, 2006
symantec client security, norton antivirus +1 moreMultiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0,...CVE-2006-34547.2 HighSeptember 14, 2006
miniportalPHP remote file inclusion vulnerability in menu.php in MiniPort@l 2.0 and earlier allows remote...CVE-2006-4770Public exploit7.5 HighSeptember 13, 2006
gtasoft p4cmsPHP remote file inclusion vulnerability in abf_js.php in p4CMS 1.05 allows remote attackers to...CVE-2006-4769Public exploit7.5 HighSeptember 13, 2006
stefan ernst newsscriptMultiple direct static code injection vulnerabilities in add_go.php in Stefan Ernst Newsscript ...CVE-2006-47685.0 MediumSeptember 13, 2006
stefan ernst newsscriptMultiple directory traversal vulnerabilities in Stefan Ernst Newsscript (aka WM-News) 0.5beta...CVE-2006-47676.4 MediumSeptember 13, 2006
stefan ernst newsscriptDirectory traversal vulnerability in print.php in Stefan Ernst Newsscript (aka WM-News) 0.5 beta...CVE-2006-4766Public exploit5.0 MediumSeptember 13, 2006
netgear dg834gtNETGEAR DG834GT Wireless ADSL router running firmware 1.01.28 allows attackers to cause a denial...CVE-2006-47655.0 MediumSeptember 13, 2006
wtoolsPHP remote file inclusion vulnerability in common.php in Thomas LETE WTools 0.0.1-ALPH allows...CVE-2006-4764Public exploit7.5 HighSeptember 13, 2006
ibm lotus domino web accessIBM Lotus Domino Web Access (DWA) 7.0.1 does not expire a client's Lightweight Third-Party...CVE-2006-47637.5 HighSeptember 13, 2006
rssreaderMultiple cross-site scripting (XSS) vulnerabilities in Ykoon RssReader allow remote attackers to...CVE-2006-47624.3 MediumSeptember 13, 2006
luke hutteman sharpreaderMultiple cross-site scripting (XSS) vulnerabilities in Luke Hutteman SharpReader allow remote...CVE-2006-47614.3 MediumSeptember 13, 2006
benjamin pasero and tobias eichert rssowlMultiple cross-site scripting (XSS) vulnerabilities in Benjamin Pasero and Tobias Eichert RSSOwl...CVE-2006-47604.3 MediumSeptember 13, 2006
punbbPunBB 1.2.12 does not properly handle an avatar directory pathname ending in %00, which allows...CVE-2006-47593.6 LowSeptember 13, 2006
phpbb group phpbbphpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated...CVE-2006-47584.6 MediumSeptember 13, 2006
e107Multiple SQL injection vulnerabilities in the admin section in e107 0.7.5 allow remote...CVE-2006-47574.6 MediumSeptember 13, 2006
accomplishtechnology phpmydirectorySQL injection vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows remote...CVE-2006-47567.5 HighSeptember 13, 2006
accomplishtechnology phpmydirectoryCross-site scripting (XSS) vulnerability in alpha.php in phpMyDirectory 10.4.6 and earlier allows...CVE-2006-47554.3 MediumSeptember 13, 2006
comscripts phprogCross-site scripting (XSS) vulnerability in index.php in PHProg before 1.1 allows remote...CVE-2006-4754Public exploit6.8 MediumSeptember 13, 2006
comscripts phprogDirectory traversal vulnerability in index.php in PHProg before 1.1 allows remote attackers to...CVE-2006-4753Public exploit5.0 MediumSeptember 13, 2006
laurentiu matei expandable home page cmsLaurentiu Matei eXpandable Home Page (XHP) CMS 0.5.1 allows remote attackers to obtain the...CVE-2006-47525.0 MediumSeptember 13, 2006
laurentiu matei expandable home page cmsCross-site scripting (XSS) vulnerability in index.php in Laurentiu Matei eXpandable Home Page ...CVE-2006-4751Public exploit6.8 MediumSeptember 13, 2006
openi-cms group openi-cmsPHP remote file inclusion vulnerability in openi-admin/base/fileloader.php in OPENi-CMS 1.0.1,...CVE-2006-4750Public exploit5.1 MediumSeptember 13, 2006
bugada andrea php advanced transfer managerMultiple PHP remote file inclusion vulnerabilities in PHP Advanced Transfer Manager (phpATM) 1.20...CVE-2006-4749Public exploit7.5 HighSeptember 13, 2006
f-art agency blog cmsMultiple SQL injection vulnerabilities in F-ART BLOG:CMS 4.1 allow remote attackers to execute...CVE-2006-47487.5 HighSeptember 13, 2006
idevspot textadsMultiple cross-site scripting (XSS) vulnerabilities in IdevSpot TextAds allow remote attackers to...CVE-2006-4747Public exploit4.3 MediumSeptember 13, 2006
comscripts web server creatorPHP remote file inclusion vulnerability in news/include/customize.php in Web Server Creator 0.1...CVE-2006-4746Public exploit7.5 HighSeptember 13, 2006
scarybear pocketexpense proScaryBear PocketExpense Pro 3.9.1 uses an internally recorded key to protect a data file whose...CVE-2006-47453.6 LowSeptember 13, 2006
abidia wireless, o-anywhere +1 moreAbidia (1) O-Anywhere and (2) Abidia Wireless transmit authentication credentials in cleartext,...CVE-2006-47445.0 MediumSeptember 13, 2006
wordpressWordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a...CVE-2006-4743Fix available5.0 MediumSeptember 13, 2006
idevspot phplinkexchangeCross-site scripting (XSS) vulnerability in user_add.php in IDevSpot PhpLinkExchange 1.0 allows...CVE-2006-4742Public exploit4.3 MediumSeptember 13, 2006
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open