CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- sh-newsPHP remote file inclusion vulnerability in misc.php in SH-News 0.93, when register_globals is...6.8 Medium
- limbo cms event modulePHP remote file inclusion in eventcal/mod_eventcal.php in the event module 1.0 for Limbo CMS...6.8 Medium
- the cacti group cactiSQL injection vulnerability in Cacti 0.8.6i and earlier, when register_argc_argv is enabled,...7.5 High
- microsoft windows xpThe Client Server Run-Time Subsystem (CSRSS) in Microsoft Windows allows local users to cause a...6.6 Medium
- mtcmsPHP remote file inclusion vulnerability in admin/admin_settings.php in MTCMS 2.0 and earlier...6.8 Medium
- myphpnuke my egalleryPHP remote file inclusion vulnerability in gallery/displayCategory.php in the My_eGallery 2.5.6...7.5 High
- efkan forum forumSQL injection vulnerability in default.asp in Efkan Forum 1.0 allows remote attackers to execute...7.5 High
- okul merkezi portalPHP remote file inclusion vulnerability in ataturk.php in Okul Merkezi Portal 1.0 allows remote...7.5 High
- mxmania calendar mx basicSQL injection vulnerability in calendar_detail.asp in Calendar MX BASIC 1.0.2 and earlier allows...7.5 High
- chatwmSQL injection vulnerability in SelGruFra.asp in chatwm 1.0 allows remote attackers to execute...7.5 High
- ultimate php board php boardDirect static code injection vulnerability in chat/login.php in Ultimate PHP Board (UPB) 2.0b1...7.5 High
- phpbbxtraPHP remote file inclusion vulnerability in includes/archive/archive_topic.php in Phpbbxtra 2.0...7.5 High
- luckybotMultiple PHP remote file inclusion vulnerabilities in LuckyBot 3 allow remote attackers to...7.5 High
- mxmania newsletter mxSQL injection vulnerability in admin/admin_mail_adressee.asp in Newsletter MX 1.0.2 and earlier...7.5 High
- open newsletter newsletterOpen Newsletter 2.5 and earlier allows remote authenticated administrators to execute arbitrary...6.5 Medium
- open newsletter newsletterThe (1) settings.php and (2) subscribers.php scripts in Open Newsletter 2.5 and earlier do not...7.5 High
- netbula anyboardSQL injection vulnerability in Netbula Anyboard allows remote attackers to execute arbitrary SQL...7.5 High
- logahead unulogahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via...7.5 High
- pnamazuCross-site scripting (XSS) vulnerability in pnamazu 2006.02.28 and earlier allows remote...6.8 Medium
- hlstatsHLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo...5.0 Medium
- hlstatsSQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote...7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in Jelsoft vBulletin allows remote attackers to inject...6.8 Medium
- timberwolfCross-site scripting (XSS) vulnerability in shownews.php in TimberWolf 1.2.2 allows remote...6.8 Medium
- future internet internetCross-site scripting (XSS) vulnerability in index.cfm in Future Internet allows remote attackers...6.8 Medium
- future internet internetMultiple SQL injection vulnerabilities in Future Internet allow remote attackers to execute...7.5 High
- acftpacFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument...3.5 Low
- ciberia content federatorPHP remote file inclusion vulnerability in socios/maquetacion_socio.php (members...6.8 Medium
- fishyshooppages/register/register.php in Fishyshoop 0.930 beta allows remote attackers to create arbitrary...7.5 High
- w3mFormat string vulnerability in the inputAnswer function in file.c in w3m before 0.5.2, when run...9.3 High
- irokez cmsMultiple PHP remote file inclusion vulnerabilities in Irokez CMS 0.7.1 and earlier, when...6.8 Medium
- jinzoraMultiple PHP remote file inclusion vulnerabilities in Jinzora Media Jukebox 2.7 and earlier, when...6.8 Medium
- php live liveMultiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 and earlier allow remote...6.8 Medium
- pwp technologies the classified ad systemMultiple cross-site scripting (XSS) vulnerabilities in default.asp in PWP Technologies The...6.8 Medium
- cwm-design cwmexplorerMultiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier allow remote attackers to...7.5 High
- pagetoolMultiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow...6.8 Medium
- keep it simple guest book it simple guest bookPHP remote file inclusion vulnerability in authenticate.php in Keep It Simple Guest Book (KISGB),...6.8 Medium
- keep it simple guest book it simple guest bookMultiple PHP remote file inclusion vulnerabilities in the Keep It Simple Guest Book (KISGB) allow...7.5 High
- novell netmailThe IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows remote authenticated users to...4.0 Medium
- novell netmailStack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows...6.5 Medium
- phpmymangaMultiple PHP remote file inclusion vulnerabilities in template.php in Phpmymanga 0.8.1 and...7.5 High
- realnetworks realplayerA certain ActiveX control in rpau3260.dll in RealNetworks RealPlayer 10.5 allows remote attackers...5.0 Medium
- http explorer web serverDirectory traversal vulnerability in Http explorer 1.02 allows remote attackers to read arbitrary...5.0 Medium
- cwm-design cwmexplorerDirectory traversal vulnerability in index.php in cwmExplorer 1.0 allows remote attackers to read...7.8 High
- ixprim cmsThe code function in install.fct.php in Ixprim 1.2 produces a guessable value of the confidential...5.1 Medium
- ixprim cmsIxprim 1.2 allows remote attackers to obtain sensitive information via a direct request for...5.0 Medium
- ixprim cmsMultiple SQL injection vulnerabilities in Ixprim 1.2 allow remote attackers to execute arbitrary...6.5 Medium
- microsoft windows event viewerEvent Viewer (eventvwr.exe) in Microsoft Windows does not properly display log data that contains...4.1 Medium
- novell netmailStack-based buffer overflow in the IMAP daemon (IMAPD) in Novell NetMail before 3.52e FTF2 allows...9.0 High
- novell netmailMultiple buffer overflows in Novell NetMail before 3.52e FTF2 allow remote attackers to execute...9.0 High
- ftprushBuffer overflow in FTPRush 1.0.0.610 might allow attackers to gain privileges via a long Host...7.5 High
- Show moreLoading…