267711
|
- |
|
devellion
|
cubecart
|
Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.7-pl1 allow remote attackers to inject arbitrary web script or HTML via the (3) redir, (4) productId, (5) docId, (6) act, and (7) c…
|
NVD-CWE-Other
|
CVE-2006-0245
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267712
|
- |
|
widexl
|
download_tracker
|
Cross-site scripting (XSS) vulnerability in down.pl in Widexl Download Tracker 1.06 allows remote attackers to inject arbitrary web script or HTML via the ID parameter.
|
NVD-CWE-Other
|
CVE-2006-0246
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267713
|
- |
|
netbula
|
anyboard
|
Cross-site scripting (XSS) vulnerability in anyboard.cgi in Netbula Anyboard 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the tK parameter in a find command.
|
NVD-CWE-Other
|
CVE-2006-0247
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267714
|
- |
|
intracom
|
jetspeed
|
Virata-EmWeb web server 6_1_0, as used in (1) Intracom JetSpeed 500 and 520 and (2) Allied Data Technologies CopperJet 811 RouterPlus, allows remote attackers to access privileged information, such a…
|
NVD-CWE-Other
|
CVE-2006-0248
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267715
|
- |
|
bitdamaged
|
geoblog
|
SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary SQL commands, then steal credentials and upload files, via the cat parameter ($tm…
|
CWE-89
SQL Injection
|
CVE-2006-0249
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267716
|
- |
|
faq-o-matic
|
faq-o-matic
|
Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary web script or HTML via the (1) _duration, (2) file, and (3) cmd parameters.
|
NVD-CWE-Other
|
CVE-2006-0251
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267717
|
- |
|
oracle
|
database_server
|
Unspecified vulnerability in the Change Data Capture component of Oracle Database server 9.2.0.7, 10.1.0.5, and 10.2.0.1 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB02.…
|
NVD-CWE-noinfo
|
CVE-2006-0257
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267718
|
- |
|
oracle
|
database_server
|
Unspecified vulnerability in the Connection Manager component of Oracle Database server 8.1.7.4 and 9.0.1.5 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB03.
|
NVD-CWE-noinfo
|
CVE-2006-0258
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267719
|
- |
|
oracle
|
database_server
|
Multiple unspecified vulnerabilities in Oracle Database server 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB04 and (2) DB06 in the (a) Data Pump component;…
|
NVD-CWE-noinfo
|
CVE-2006-0259
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
267720
|
- |
|
oracle
|
database_server
|
Multiple unspecified vulnerabilities in Oracle Database server 9.2.0.7 and 10.1.0.5 have unspecified impact and attack vectors, as identified by Oracle Vuln# (1) DB05 in the (a) Data Pump component; …
|
NVD-CWE-noinfo
|
CVE-2006-0260
|
2017-07-20 10:29 |
2006-01-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|