CVEs published in October 2006
546 vulnerabilities, 65 critical, 0 exploited.
- fully modded phpbb modded phpbbMultiple PHP remote file inclusion vulnerabilities in Teake Nutma Foing, as modified in Fully...7.5 High
- phpnuke php-nukeIncomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote...5.1 Medium
- phplistCross-site scripting (XSS) vulnerability in index.php in phplist 2.10.2 allows remote attackers...6.8 Medium
- ez-ticketPHP remote file inclusion vulnerability in common.php in EZ-Ticket 0.0.1 allows remote attackers...7.5 High
- johannes erdfelt kawfMultiple PHP remote file inclusion vulnerabilities in Johannes Erdfelt Kawf 1.0 and earlier allow...7.5 High
- net dns dnsPHP remote file inclusion vulnerability in DNS/RR.php in Net_DNS 0.03 and earlier allows remote...7.5 High
- deltascripts php classifiedsPHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1...7.5 High
- mambweatherPHP remote file inclusion vulnerability in Savant2/Savant2_Plugin_options.php in the MambWeather...6.8 Medium
- christopher fowler rssonateMultiple PHP remote file inclusion vulnerabilities in Christopher Fowler (Rhode Island) RSSonate...7.5 High
- rhode island secretary of state open meetings filing systemMultiple PHP remote file inclusion vulnerabilities in Rhode Island Open Meetings Filing...7.5 High
- wikiniMultiple cross-site scripting (XSS) vulnerabilities in actions/usersettings.php in WikiNi before...4.3 Medium
- phpadsnew, phppgads +1 moreCross-site scripting (XSS) vulnerability in lib-history.inc.php in phpAdsNew and phpPgAds before...4.3 Medium
- web group communication center group communication centerSQL injection vulnerability in quiz.php in Web Group Communication Center (WGCC) 0.5.6b and...7.5 High
- geonetwork opensourceSQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to...7.5 High
- 3com superstack 3 switch 44003Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers...7.5 High
- zwahlen informatik online shopCross-site scripting (XSS) vulnerability in article.htm in Zwahlen Online Shop allows remote...4.3 Medium
- jaxultrabbDirect static code injection vulnerability in delete.php in JaxUltraBB (JUBB) 2.0, when...2.6 Low
- bluevirus-design ph pexplorerDirectory traversal vulnerability in explorer_load_lang.php in PH Pexplorer 0.24 allows remote...6.4 Medium
- woltlab burning bookEval injection vulnerability in addentry.php in WoltLab Burning Book 1.1.2 allows remote...7.5 High
- woltlab burning bookMultiple SQL injection vulnerabilities in addentry.php in WoltLab Burning Book 1.1.2 allow remote...7.5 High
- der dirigent dirigentMultiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote...7.5 High
- wiclearMultiple PHP remote file inclusion vulnerabilities in WiClear 0.10 allow remote attackers to...7.5 High
- ben3w 2bgalMultiple PHP file inclusion vulnerabilities in 2BGal 3.0 allow remote attackers to execute...7.5 High
- simple machines forumCross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) allows...4.3 Medium
- simple machines forumCross-site scripting (XSS) vulnerability in index.php in Simple Machines Forum (SMF) 1.1 RC2...4.3 Medium
- aolHeap-based buffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2...7.5 High
- aolBuffer overflow in the AOL.PicDownloadCtrl.1 ActiveX control (YGPPicDownload.dll) 9.2.3.0 in...7.5 High
- xchangeboardMultiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in...5.1 Medium
- serendipityMultiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow...6.8 Medium
- middlebury college segue cmsDirectory traversal vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5.8 and...7.5 High
- middlebury college segue cmsPHP remote file inclusion vulnerability in themes/program/themesettings.inc.php in Segue CMS 1.5...7.5 High
- timothy claason knowledgebankMultiple cross-site scripting (XSS) vulnerabilities in Timothy Claason KnowledgeBank 1.01 allow...4.3 Medium
- trawler web cmsMultiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow...7.5 High
- phpnuke php-nukeMultiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory...7.5 High
- digitalhivePHP remote file inclusion vulnerability in template/purpletech/base_include.php in DigitalHive 2...7.5 High
- maarchUnspecified vulnerability in Maerys Archive (Maarch) before 2.0.1 allows remote authenticated...4.0 Medium
- ceary ultracmsMultiple SQL injection vulnerabilities in include/index.php in UltraCMS 0.9 allow remote...7.5 High
- middlebury college segue cmsMultiple SQL injection vulnerabilities in Segue Content Management System (CMS) before 1.5.8...7.5 High
- rim blackberry enterprise serverResearch in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus...5.0 Medium
- xchangeboardSQL injection vulnerability in XchangeBoard 1.70, and possibly earlier, when magic_quotes_gpc is...7.5 High
- sun iplanet messaging server, java system messaging server +1 moreCross-site scripting (XSS) vulnerability in Webmail in Sun Java System Messaging Server 6.0...4.3 Medium
- speedbergMultiple PHP remote file inclusion vulnerabilities in SpeedBerg 1.2beta1 allow remote attackers...7.5 High
- ssh tectia client, tectia connector, tectia manager +1 more +3 moreSSH Tectia Client/Server/Connector 5.1.0 and earlier, Manager 2.2.0 and earlier, and other...5.0 Medium
- freebsdp1003_1b.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by setting...2.1 Low
- freebsdufs_vnops.c in FreeBSD 6.1 allows local users to cause an unspecified denial of service by...2.1 Low
- castorMultiple PHP remote file inclusion vulnerabilities in 2le.net Castor PHP Web Builder 1.1.1 allow...7.5 High
- castor php web builderPHP remote file inclusion vulnerability in lib/rs.php in 2le.net Castor PHP Web Builder 1.1.1...5.1 Medium
- novell edirectoryThe NCP Engine in Novell eDirectory before 8.7.3.8 FTF1 allows remote attackers to cause an...5.0 Medium
- novell edirectoryMultiple stack-based buffer overflows in Novell eDirectory 8.8.x before 8.8.1 FTF1, and 8.x up to...7.5 High
- drupalDrupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allows form submissions to be redirected, which...2.6 Low
- Show moreLoading…