270131
|
- |
|
skoom
|
i.list
|
Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) searchword parameter to search.php or (2) …
|
NVD-CWE-Other
|
CVE-2006-2956
|
2011-03-8 11:37 |
2006-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270132
|
- |
|
enterprise_payroll_systems
|
enterprise_payroll_systems
|
PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter…
|
NVD-CWE-Other
|
CVE-2006-2983
|
2011-03-8 11:37 |
2006-06-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270133
|
- |
|
myscrapbook
|
myscrapbook
|
Multiple cross-site scripting (XSS) vulnerabilities in addwords.php in MyScrapbook 3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) name and (2) comment param…
|
NVD-CWE-Other
|
CVE-2006-3035
|
2011-03-8 11:37 |
2006-06-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270134
|
- |
|
subtext
|
subtext
|
Unspecified vulnerability in the admin login feature in Subtext 1.5, in a multiblog setup, allows remote administrators of one blog to login to another blog.
|
NVD-CWE-Other
|
CVE-2006-3046
|
2011-03-8 11:37 |
2006-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270135
|
- |
|
cescripts
|
event_registration_2checkout event_registration_corporate event_registration_paypal event_registration_rsvp
|
Cross-site scripting (XSS) vulnerability in Event Registration allows remote attackers to inject arbitrary web script or HTML via the (1) event_id parameter to view-event-details.php or (2) select_ev…
|
NVD-CWE-Other
|
CVE-2006-3052
|
2011-03-8 11:37 |
2006-06-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270136
|
- |
|
cescripts
|
car_classifieds
|
Cross-site scripting (XSS) vulnerability in index.php in Car Classifieds allows remote attackers to inject arbitrary web script or HTML via the make_id parameter. NOTE: the provenance of this inform…
|
NVD-CWE-Other
|
CVE-2006-3088
|
2011-03-8 11:37 |
2006-06-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270137
|
- |
|
brian_wotring
|
osiris
|
Format string vulnerability in Brian Wotring Osiris before 4.2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unspecified attack ve…
|
NVD-CWE-Other
|
CVE-2006-3120
|
2011-03-8 11:37 |
2006-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270138
|
- |
|
julian_pawlowski
|
capi4hylafax
|
c2faxrecv in capi4hylafax 01.02.03 allows remote attackers to execute arbitrary commands via null (\0) and shell metacharacters in the TSI string, as demonstrated by a fax from an anonymous number.
|
NVD-CWE-Other
|
CVE-2006-3126
|
2011-03-8 11:37 |
2006-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270139
|
- |
|
php
|
directory_listing_script
|
Cross-site scripting (XSS) vulnerability in index.php in Directory Listing Script allows remote attackers to inject arbitrary web script or HTML via the dir parameter.
|
NVD-CWE-Other
|
CVE-2006-2419
|
2011-03-8 11:36 |
2006-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
270140
|
- |
|
php
|
directory_listing_script
|
The vulnerability has been confirmed in the latest available version of this product. Other versions may also be affected.
|
NVD-CWE-Other
|
CVE-2006-2419
|
2011-03-8 11:36 |
2006-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|