268591
|
- |
|
sybase
|
easerver
|
EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection …
|
NVD-CWE-Other
|
CVE-2006-1829
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268592
|
- |
|
sun
|
java_studio_enterprise
|
Sun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable permissions, which allows local users to execute arbitrary commands via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-1830
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268593
|
- |
|
netbsd
|
netbsd
|
Intel RNG Driver in NetBSD 1.6 through 3.0 may incorrectly detect the presence of the pchb interface, which will cause it to always generate the same random number, which allows remote attackers to m…
|
NVD-CWE-Other
|
CVE-2006-1833
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268594
|
- |
|
empire_server
|
empire_server
|
Multiple format string vulnerabilities in Empire Server before 4.3.1 allow attackers to cause a denial of service (crash) via the (1) load, (2) spy and (3) bomb functions.
|
CWE-134
Use of Externally-Controlled Format String
|
CVE-2006-1840
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268595
|
- |
|
cynical_games
|
shoutbook
|
Cross-site scripting (XSS) vulnerability in global.php in ShoutBOOK 1.1 allows remote attackers to inject arbitrary web script or HTML via the (1) LOCATION and (2) URL parameters. NOTE: the provenan…
|
NVD-CWE-Other
|
CVE-2006-1843
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268596
|
- |
|
francisco_burzi
|
php-nuke
|
SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality. NOTE:…
|
NVD-CWE-Other
|
CVE-2006-1847
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268597
|
- |
|
skymarx_solutions
|
xflow
|
Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) position and (2) id parameter.
|
NVD-CWE-Other
|
CVE-2006-1849
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268598
|
- |
|
skymarx_solutions
|
xflow
|
Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) level, (2) position, (3) id, and (4) action …
|
NVD-CWE-Other
|
CVE-2006-1850
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268599
|
- |
|
skymarx_solutions
|
xflow
|
xFlow 5.46.11 and earlier allows remote attackers to determine the installation path of the application via the (1) action parameter to members_only/index.cgi and (2) page parameter customer_area/ind…
|
NVD-CWE-Other
|
CVE-2006-1851
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
268600
|
- |
|
scriptsfrenzy
|
article_publisher_pro
|
SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cname parameter.
|
NVD-CWE-Other
|
CVE-2006-1852
|
2017-07-20 10:30 |
2006-04-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|