|
347321
|
- |
|
discusware
|
discus_freeware discus_professional
|
Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, …
|
NVD-CWE-Other
|
CVE-2006-0073
|
2008-09-6 05:58 |
2006-01-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347322
|
- |
|
openbsd
|
openbsd
|
The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.
|
NVD-CWE-Other
|
CVE-2006-0098
|
2008-09-6 05:58 |
2006-01-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347323
|
- |
|
enhanced_simple_php_gallery
|
enhanced_simple_php_gallery
|
Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message.
|
NVD-CWE-Other
|
CVE-2006-0113
|
2008-09-6 05:58 |
2006-01-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347324
|
- |
|
rockliffe
|
mailsite
|
Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names …
|
NVD-CWE-Other
|
CVE-2006-0130
|
2008-09-6 05:58 |
2006-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347325
|
- |
|
amsn
|
amsn
|
aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the defaul…
|
NVD-CWE-Other
|
CVE-2006-0138
|
2008-09-6 05:58 |
2006-01-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347326
|
- |
|
simpbook
|
simpbook
|
Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.
|
NVD-CWE-Other
|
CVE-2006-0149
|
2008-09-6 05:58 |
2006-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347327
|
- |
|
reamday_enterprises
|
magic_news_plus
|
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_pas…
|
NVD-CWE-Other
|
CVE-2006-0157
|
2008-09-6 05:58 |
2006-01-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347328
|
- |
|
qualityebiz
|
quality_ppc
|
Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: t…
|
NVD-CWE-Other
|
CVE-2006-0215
|
2008-09-6 05:58 |
2006-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347329
|
- |
|
qualityebiz
|
quality_ppc
|
admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters…
|
NVD-CWE-Other
|
CVE-2006-0216
|
2008-09-6 05:58 |
2006-01-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347330
|
- |
|
joomla
|
joomla
|
Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and atta…
|
NVD-CWE-Other
|
CVE-2006-0303
|
2008-09-6 05:58 |
2006-01-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|