|
349101
|
7.6 |
HIGH
|
f-secure
|
f-secure_anti-virus
internet_gatekeeper
|
Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service (crash) …
|
NVD-CWE-Other
|
CVE-2006-2838
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349102
|
7.6 |
HIGH
|
f-secure
|
f-secure_anti-virus
internet_gatekeeper
|
Update to a fixed version or apply hotfix.
|
NVD-CWE-Other
|
CVE-2006-2838
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349103
|
6.4 |
MEDIUM
|
webwork
|
webwork
|
Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earlier allows remote attackers to read and write files outside…
|
NVD-CWE-Other
|
CVE-2006-2839
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349104
|
6.4 |
MEDIUM
|
webwork
|
webwork
|
Update to version 2.2.1.
http://sourceforge.net/project/showfiles.php?group_id=93112
|
NVD-CWE-Other
|
CVE-2006-2839
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349105
|
6.8 |
MEDIUM
|
pmwiki
|
pmwiki
|
Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
|
NVD-CWE-Other
|
CVE-2006-2840
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349106
|
6.8 |
MEDIUM
|
pmwiki
|
pmwiki
|
This vulnerability is addressed in the following product release:
PmWiki, PmWiki, 2.1.7
|
NVD-CWE-Other
|
CVE-2006-2840
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349107
|
4.3 |
MEDIUM
|
php_labware
|
labwiki
|
Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the help parameter.
|
NVD-CWE-Other
|
CVE-2006-2850
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349108
|
4.3 |
MEDIUM
|
dotproject
|
dotproject
|
Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly…
|
NVD-CWE-Other
|
CVE-2006-2851
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349109
|
7.5 |
HIGH
|
abarcar
|
abarcar_realty_portal
|
SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
|
NVD-CWE-Other
|
CVE-2006-2853
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349110
|
7.5 |
HIGH
|
ibwd
|
ibwd_guestbook
|
SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL commands via the offset parameter.
|
NVD-CWE-Other
|
CVE-2006-2854
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349111
|
7.5 |
HIGH
|
xuebook
|
xuebook
|
SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter.
|
NVD-CWE-Other
|
CVE-2006-2855
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349112
|
4.6 |
MEDIUM
|
activestate
|
activeperl
|
ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for changing files, which allows local users to gain privileges by creating a malicious s…
|
NVD-CWE-Other
|
CVE-2006-2856
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349113
|
7.5 |
HIGH
|
particle_soft
|
particle_wiki
|
SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the version parameter.
|
NVD-CWE-Other
|
CVE-2006-2861
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349114
|
10.0 |
HIGH
|
alwil
|
avast_antivirus
|
Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.
|
NVD-CWE-Other
|
CVE-2006-2869
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349115
|
4.3 |
MEDIUM
|
intelligent_solutions
|
asp_discussion_forum
|
Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable.
|
NVD-CWE-Other
|
CVE-2006-2870
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349116
|
4.3 |
MEDIUM
|
enigma_haber
|
enigma_haber
|
Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary web script or HTML via the il parameter. NOTE: the provenance of this information…
|
NVD-CWE-Other
|
CVE-2006-2873
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349117
|
4.3 |
MEDIUM
|
osads_alliance_database
|
osads_alliance_database
|
Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Security Leak to lock in HTML-Code," possibly due to a cross-site scripting (XSS) v…
|
NVD-CWE-Other
|
CVE-2006-2874
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349118
|
7.5 |
HIGH
|
alex
|
news-engine
|
SQL injection vulnerability in newscomments.php in Alex News-Engine 1.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via the newsid parameter.
|
NVD-CWE-Other
|
CVE-2006-2879
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349119
|
6.8 |
MEDIUM
|
pyblosxom
|
pyblosxom
|
Cross-site scripting (XSS) vulnerability in the Contributed Packages for PyBlosxom 1.2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the Comments plugin in the (1) …
|
NVD-CWE-Other
|
CVE-2006-2880
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349120
|
6.8 |
MEDIUM
|
pyblosxom
|
pyblosxom
|
This vulnerability is present only in the Contributed Packages of this product.
|
NVD-CWE-Other
|
CVE-2006-2880
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349121
|
4.3 |
MEDIUM
|
knowledgetree
|
knowledgetree
|
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree Open Source 3.0.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) fDocumentId parameter in v…
|
NVD-CWE-Other
|
CVE-2006-2885
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349122
|
4.3 |
MEDIUM
|
jam_warehouse
|
knowledgetree_open_source
|
view.php in KnowledgeTree Open Source 3.0.3 and earlier allows remote attackers to obtain the full installation path via a crafted fDocumentId parameter, which displays the path in the resulting erro…
|
NVD-CWE-Other
|
CVE-2006-2886
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349123
|
2.6 |
LOW
|
mediawiki
|
mediawiki
|
Cross-site scripting (XSS) vulnerability in MediaWiki 1.6.0 up to versions before 1.6.7 allows remote attackers to inject arbitrary HTML and web script via the edit form.
|
NVD-CWE-Other
|
CVE-2006-2895
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349124
|
2.6 |
LOW
|
funkboard
|
funkboard
|
Cross-site scripting (XSS) vulnerability in FunkBoard 0.71 allows remote attackers to inject arbitrary HTML or web script via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-2897
|
2017-07-20 10:31 |
2006-06-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349125
|
5.1 |
MEDIUM
|
cowon_america
|
jetaudio
|
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including…
|
NVD-CWE-Other
|
CVE-2006-2910
|
2017-07-20 10:31 |
2006-07-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349126
|
2.6 |
LOW
|
out_of_the_trees_web_design
|
selectapix
|
Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php.
|
NVD-CWE-Other
|
CVE-2006-2913
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349127
|
5.1 |
MEDIUM
|
cmpro_team
|
clan_manager_pro
|
PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code vi…
|
NVD-CWE-Other
|
CVE-2006-2921
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349128
|
5.0 |
MEDIUM
|
ingate
|
ingate_firewall
ingate_siparator
|
Ingate Firewall in the SIP module before 4.4.1 and SIParator before 4.4.1, when TLS is enabled or when SSL/TLS is enabled in the web server, allows remote attackers to cause a denial of service (cras…
|
NVD-CWE-Other
|
CVE-2006-2924
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349129
|
4.0 |
MEDIUM
|
ingate
|
ingate_firewall
siparator
|
Cross-site scripting (XSS) vulnerability in the web interface in Ingate Firewall before 4.4.1 and SIParator before 4.4.1 allows remote attackers to inject arbitrary web script or HTML, and steal cook…
|
NVD-CWE-Other
|
CVE-2006-2925
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349130
|
7.5 |
HIGH
|
qbik
|
wingate
|
Stack-based buffer overflow in the WWW Proxy Server of Qbik WinGate 6.1.1.1077 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long URL HTTP request.
|
NVD-CWE-Other
|
CVE-2006-2926
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349131
|
4.3 |
MEDIUM
|
xfairguy
|
codeavalanche_freeforum
|
Multiple cross-site scripting (XSS) vulnerabilities in post.asp in CodeAvalanche FreeForum (aka CAForum) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) msg_subject and …
|
NVD-CWE-Other
|
CVE-2006-2927
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349132
|
4.6 |
MEDIUM
|
sun
|
grid_engine
n1_grid_engine
|
Unspecified vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0, when configured in Certificate Security Protocol (CSP) Mode, allows local users to shut down the grid service or gain acce…
|
NVD-CWE-Other
|
CVE-2006-2930
|
2017-07-20 10:31 |
2006-06-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349133
|
5.1 |
MEDIUM
|
twiki
|
twiki
|
TWiki 4.0.0, 4.0.1, and 4.0.2 allows remote attackers to gain Twiki administrator privileges via a TWiki.TWikiRegistration form with a modified action attribute that references the Sandbox web instea…
|
NVD-CWE-Other
|
CVE-2006-2942
|
2017-07-20 10:31 |
2006-06-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349134
|
5.1 |
MEDIUM
|
twiki
|
twiki
|
Successful exploitation requires that the "MapUserToWikiName" setting is enabled.
|
NVD-CWE-Other
|
CVE-2006-2942
|
2017-07-20 10:31 |
2006-06-21 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349135
|
7.5 |
HIGH
|
cgi-rescue
|
webform
|
Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obtaine…
|
NVD-CWE-Other
|
CVE-2006-2943
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349136
|
7.5 |
HIGH
|
cgi-rescue
|
webform
|
This vulnerability is addressed in the following product release:
CGI-RESCUE, WebFORM, 4.2
|
NVD-CWE-Other
|
CVE-2006-2943
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349137
|
5.0 |
MEDIUM
|
cgi-rescue
|
form2mail
|
Unspecified vulnerability in CGI-RESCUE FORM2MAIL 1.21 and earlier allows remote attackers to inject email headers, which facilitates sending spam messages. NOTE: the details for this issue are obta…
|
NVD-CWE-Other
|
CVE-2006-2944
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349138
|
4.0 |
MEDIUM
|
andreas_gohr
|
dokuwiki
|
Unspecified vulnerability in the user profile change functionality in DokuWiki, when Access Control Lists are enabled, allows remote authenticated users to read unauthorized files via unknown attack …
|
NVD-CWE-noinfo
|
CVE-2006-2945
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349139
|
4.0 |
MEDIUM
|
andreas_gohr
|
dokuwiki
|
This affects only users who have Access Control Lists enabled (off by default) and who have restricted the READ permission for certain pages for logged in users.
This vulnerability is addressed in t…
|
NVD-CWE-noinfo
|
CVE-2006-2945
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349140
|
5.0 |
MEDIUM
|
dmx_forum
|
dmx_forum
|
Dmx Forum 2.1a allows remote attackers to obtain username and password information via a direct request to pops/edit.php with a modified membre parameter.
|
NVD-CWE-Other
|
CVE-2006-2947
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349141
|
4.3 |
MEDIUM
|
primoris_software
|
officeflow
|
Cross-site scripting (XSS) vulnerability in default.asp in OfficeFlow 2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the sqlType parameter.
|
NVD-CWE-Other
|
CVE-2006-2953
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349142
|
7.5 |
HIGH
|
primoris_software
|
officeflow
|
SQL injection vulnerability in files.asp in OfficeFlow 2.6 and earlier allows remote attackers to execute arbitrary SQL commands via the Project parameter.
|
NVD-CWE-Other
|
CVE-2006-2954
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349143
|
4.3 |
MEDIUM
|
kaphotoservice
|
kaphotoservice
|
Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) New Category (newcategory) or (2) apage…
|
NVD-CWE-Other
|
CVE-2006-2955
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349144
|
2.6 |
LOW
|
filzip
|
filzip
|
Directory traversal vulnerability in FilZip 3.05 allows remote attackers to write arbitrary files via a .. (dot dot) in a (1) .rar, (2) .tar, (3) .jar, or (4) .gz file. NOTE: the provenance of this …
|
NVD-CWE-Other
|
CVE-2006-2958
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349145
|
7.5 |
HIGH
|
aclogic
|
cesarftp
|
Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long MKD command. NOTE: t…
|
NVD-CWE-Other
|
CVE-2006-2961
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349146
|
2.6 |
LOW
|
emailarchitect
|
email_server
|
Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) errCode and (2) uid pa…
|
NVD-CWE-Other
|
CVE-2006-2974
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349147
|
7.5 |
HIGH
|
coppermine
|
coppermine_photo_gallery
|
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors.
|
NVD-CWE-Other
|
CVE-2006-2976
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349148
|
7.5 |
HIGH
|
dominios_europa
|
picrate
|
Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id, (2) voteid, and (3) vfiel parameters…
|
NVD-CWE-Other
|
CVE-2006-2987
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349149
|
4.3 |
MEDIUM
|
iisworks
|
listpics
|
Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the info parameter.
|
NVD-CWE-Other
|
CVE-2006-2989
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349150
|
4.3 |
MEDIUM
|
vanillasoft
|
vanillasoft_helpdesk
|
Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter.
|
NVD-CWE-Other
|
CVE-2006-2990
|
2017-07-20 10:31 |
2006-06-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
