|
350451
|
7.5 |
HIGH
|
nodez
|
nodez
|
Nodez 4.6.1.1 and earlier stores sensitive data in the list.gtdat file under the web document root with insufficient access control, which allows remote attackers to obtain usernames and password has…
|
NVD-CWE-Other
|
CVE-2006-1164
|
2008-09-6 06:01 |
2006-03-13 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350452
|
4.3 |
MEDIUM
|
runcms
|
runcms
|
Cross-site scripting (XSS) vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter.
|
NVD-CWE-Other
|
CVE-2006-1216
|
2008-09-6 06:01 |
2006-03-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350453
|
4.3 |
MEDIUM
|
wordpress
|
wordpress
|
Multiple "unannounced" cross-site scripting (XSS) vulnerabilities in WordPress before 2.0.2 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2006-1263
|
2008-09-6 06:01 |
2006-03-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350454
|
4.3 |
MEDIUM
|
university_of_washington
|
pubcookie
|
Multiple cross-site scripting (XSS) vulnerabilities in the Microsoft IIS ISAPI filter (aka application server module) in University of Washington Pubcookie 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 be…
|
NVD-CWE-Other
|
CVE-2006-1394
|
2008-09-6 06:01 |
2006-03-27 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350455
|
4.3 |
MEDIUM
|
upoint
|
at1_event_publisher
|
Multiple cross-site scripting (XSS) vulnerabilities in UPOINT @1 Event Publisher allow remote attackers to inject arbitrary web script or HTML via the (1) Event, (2) Description, (3) Time, (4) Websit…
|
NVD-CWE-Other
|
CVE-2006-1436
|
2008-09-6 06:01 |
2006-04-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350456
|
5.0 |
MEDIUM
|
upoint
|
at1_event_publisher
|
UPOINT @1 Event Publisher stores sensitive information under the web document root with insufifcient access control, which allows remote attackers to read private comments via a direct request to eve…
|
NVD-CWE-Other
|
CVE-2006-1437
|
2008-09-6 06:01 |
2006-04-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350457
|
5.0 |
MEDIUM
|
avaya
|
vsu_100
vsu_10000
vsu_2000
vsu_7500
csu_5000
|
The Internet Key Exchange version 1 (IKEv1) implementation in Avaya VSU 100, 2000, 7500, 10000, and CSU 5000, when running IPSec, allows remote attackers to cause a denial of service (crash) via cert…
|
NVD-CWE-Other
|
CVE-2006-0718
|
2008-09-6 06:00 |
2006-02-16 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350458
|
7.5 |
HIGH
|
nocc
|
nocc
|
NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for remote attackers to execute arbitrary code by accessing the e-mail attachment via d…
|
NVD-CWE-Other
|
CVE-2006-0892
|
2008-09-6 06:00 |
2006-02-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350459
|
5.0 |
MEDIUM
|
nocc
|
nocc
|
NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles directory, which leaks e-mail addresses contained in filenames of profiles, and (2) t…
|
NVD-CWE-Other
|
CVE-2006-0893
|
2008-09-6 06:00 |
2006-02-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350460
|
4.3 |
MEDIUM
|
nocc
|
nocc
|
Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the html_error_occurred parameter in error.php, (2) html_…
|
NVD-CWE-Other
|
CVE-2006-0894
|
2008-09-6 06:00 |
2006-02-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350461
|
5.0 |
MEDIUM
|
nocc
|
nocc
|
NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.
|
NVD-CWE-Other
|
CVE-2006-0895
|
2008-09-6 06:00 |
2006-02-25 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350462
|
2.6 |
LOW
|
microsoft
|
word
|
Microsoft Word 2003 allows remote attackers to cause a denial of service (application crash) via a crafted file, as demonstrated by 101_filefuzz.
|
NVD-CWE-Other
|
CVE-2006-0935
|
2008-09-6 06:00 |
2006-02-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350463
|
7.5 |
HIGH
|
pwsphp
|
pwsphp
|
SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the aff_news_form parameter, a different vulner…
|
NVD-CWE-Other
|
CVE-2006-0942
|
2008-09-6 06:00 |
2006-03-1 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350464
|
6.4 |
MEDIUM
|
cactusoft
|
parodia
|
agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AG_ID parameter. NOTE: the provenance of this info…
|
NVD-CWE-Other
|
CVE-2006-1005
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350465
|
6.4 |
MEDIUM
|
cactusoft
|
parodia
|
This vulnerability affects CactuSoft, Parodia version 6.2, and may affect all previous versions as well.
|
NVD-CWE-Other
|
CVE-2006-1005
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350466
|
4.3 |
MEDIUM
|
woltlab
|
burning_board
|
Multiple cross-site scripting (XSS) vulnerabilities in Woltlab Burning Board (wBB) allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter to galerie_index.php an…
|
NVD-CWE-Other
|
CVE-2006-1034
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350467
|
7.5 |
HIGH
|
oracle
|
diagnostics
e-business_suite
|
Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
|
NVD-CWE-Other
|
CVE-2006-1035
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350468
|
7.5 |
HIGH
|
oracle
|
diagnostics
|
Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
|
NVD-CWE-Other
|
CVE-2006-1036
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350469
|
10.0 |
HIGH
|
joomla
|
joomla
|
Unspecified vulnerability in the "Remember Me login functionality" in Joomla! 1.0.7 and earlier has unknown impact and attack vectors.
|
NVD-CWE-Other
|
CVE-2006-1047
|
2008-09-6 06:00 |
2006-03-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350470
|
4.3 |
MEDIUM
|
douran
|
followweb
|
Cross-site scripting (XSS) vulnerability in register.aspx in Douran FollowWeb allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: the provenance of this …
|
NVD-CWE-Other
|
CVE-2006-0373
|
2008-09-6 05:59 |
2006-01-23 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350471
|
6.4 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic Server and WebLogic Express 9.0, 8.1 through SP5, and 7.0 through SP6 allows anonymous binds to the embedded LDAP server, which allows remote attackers to read user entries or cause a de…
|
NVD-CWE-Other
|
CVE-2006-0419
|
2008-09-6 05:59 |
2006-01-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350472
|
5.0 |
MEDIUM
|
bea
|
weblogic_server
|
BEA WebLogic Server and WebLogic Express 8.1 through SP4 and 7.0 through SP6 does not properly handle when servlets use relative forwarding, which allows remote attackers to cause a denial of service…
|
NVD-CWE-Other
|
CVE-2006-0420
|
2008-09-6 05:59 |
2006-01-26 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350473
|
4.3 |
MEDIUM
|
ideosoft_design
|
ideocontent_manager
|
Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script or HTML via the (1) goto_id parameter to index.php or (2) page parameter to news…
|
NVD-CWE-Other
|
CVE-2006-0463
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350474
|
7.5 |
HIGH
|
ideosoft_design
|
ideocontent_manager
|
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the (1) goto_id or (2) mid parameter.
|
NVD-CWE-Other
|
CVE-2006-0464
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350475
|
4.3 |
MEDIUM
|
active121
|
site_manager
|
Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to inject arbitrary web script or HTML via the cerca parameter.
|
NVD-CWE-Other
|
CVE-2006-0465
|
2008-09-6 05:59 |
2006-01-28 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350476
|
4.3 |
MEDIUM
|
communityserver.org
|
community_server
|
Multiple cross-site scripting (XSS) vulnerabilities in Community Server allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. NOTE: this candidate does not contai…
|
CWE-79
クロスサイト・スクリプティング（XSS）
|
CVE-2006-0535
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350477
|
5.0 |
MEDIUM
|
cerulean_studios
|
trillian
|
Cerulean Trillian 3.1.0.120 allows remote attackers to cause a denial of service (client crash) via an AIM message containing the Mac encoded Rich Text Format (RTF) escape sequences (1) \'d1, (2) \'d…
|
NVD-CWE-Other
|
CVE-2006-0543
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350478
|
7.5 |
HIGH
|
microsoft
|
ie
|
urlmon.dll in Microsoft Internet Explorer 7.0 beta 2 (aka 7.0.5296.0) allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a BGSOUND elemen…
|
NVD-CWE-Other
|
CVE-2006-0544
|
2008-09-6 05:59 |
2006-02-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350479
|
4.4 |
MEDIUM
|
suse
|
suse_linux
|
ld in SUSE Linux 9.1 through 10.0, and SLES 9, in certain circumstances when linking binaries, can leave an empty RPATH or RUNPATH, which allows local attackers to execute arbitrary code as other use…
|
NVD-CWE-Other
|
CVE-2006-0646
|
2008-09-6 05:59 |
2006-02-11 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350480
|
7.5 |
HIGH
|
pwsphp
|
pwsphp
|
SQL injection vulnerability in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbitrary SQL commands via the id parameter, possibly in message.php in the espace_membre module. NOTE: th…
|
NVD-CWE-Other
|
CVE-2006-0668
|
2008-09-6 05:59 |
2006-02-14 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350481
|
6.6 |
MEDIUM
|
gentoo
|
app-crypt_pinentry
linux
|
The ebuild for pinentry before 0.7.2-r2 on Gentoo Linux sets setgid bits for pinentry programs, which allows local users to read or overwrite arbitrary files as gid 0.
|
NVD-CWE-Other
|
CVE-2006-0071
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350482
|
7.5 |
HIGH
|
sco
|
openserver
|
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-200…
|
NVD-CWE-Other
|
CVE-2006-0072
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350483
|
4.3 |
MEDIUM
|
discusware
|
discus_freeware
discus_professional
|
Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a URL, …
|
NVD-CWE-Other
|
CVE-2006-0073
|
2008-09-6 05:58 |
2006-01-4 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350484
|
4.6 |
MEDIUM
|
openbsd
|
openbsd
|
The dupfdopen function in sys/kern/kern_descrip.c in OpenBSD 3.7 and 3.8 allows local users to re-open arbitrary files by using setuid programs to access file descriptors using /dev/fd/.
|
NVD-CWE-Other
|
CVE-2006-0098
|
2008-09-6 05:58 |
2006-01-6 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350485
|
5.0 |
MEDIUM
|
enhanced_simple_php_gallery
|
enhanced_simple_php_gallery
|
Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sp_helper_functions.php, which leaks the pathname in an error message.
|
NVD-CWE-Other
|
CVE-2006-0113
|
2008-09-6 05:58 |
2006-01-7 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350486
|
7.5 |
HIGH
|
rockliffe
|
mailsite
|
Mail Management Agent (MAILMA) (aka Mail Management Server) in Rockliffe MailSite 7.0.3.1 and earlier allows remote attackers to attempt authentication with an unlimited number of user account names …
|
NVD-CWE-Other
|
CVE-2006-0130
|
2008-09-6 05:58 |
2006-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350487
|
5.0 |
MEDIUM
|
amsn
|
amsn
|
aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of client's instant-messaging session) by repeatedly sending crafted data to the defaul…
|
NVD-CWE-Other
|
CVE-2006-0138
|
2008-09-6 05:58 |
2006-01-9 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350488
|
4.3 |
MEDIUM
|
simpbook
|
simpbook
|
Cross-site scripting (XSS) vulnerability in SimpBook 1.0, with html_enable on (the default), allows remote attackers to inject arbitrary web script or HTML via the message field.
|
NVD-CWE-Other
|
CVE-2006-0149
|
2008-09-6 05:58 |
2006-01-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350489
|
5.0 |
MEDIUM
|
reamday_enterprises
|
magic_news_plus
|
settings.php in Reamday Enterprises Magic News Plus 1.0.3 allows remote attackers to change the administrator password via a change action that specifies identical values for the passwd and admin_pas…
|
NVD-CWE-Other
|
CVE-2006-0157
|
2008-09-6 05:58 |
2006-01-10 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350490
|
4.3 |
MEDIUM
|
qualityebiz
|
quality_ppc
|
Cross-site scripting (XSS) vulnerability in admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. NOTE: t…
|
NVD-CWE-Other
|
CVE-2006-0215
|
2008-09-6 05:58 |
2006-01-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350491
|
5.0 |
MEDIUM
|
qualityebiz
|
quality_ppc
|
admin.php in QualityEBiz Quality PPC (QPPC) 1.0 build 1644 allows remote attackers to obtain sensitive information, possibly the installation path of the application, via unspecified "meta characters…
|
NVD-CWE-Other
|
CVE-2006-0216
|
2008-09-6 05:58 |
2006-01-17 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350492
|
10.0 |
HIGH
|
joomla
|
joomla
|
Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and atta…
|
NVD-CWE-Other
|
CVE-2006-0303
|
2008-09-6 05:58 |
2006-01-19 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350493
|
4.3 |
MEDIUM
|
chitta
|
mimicboard_2
|
Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters asso…
|
NVD-CWE-Other
|
CVE-2005-4858
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350494
|
4.3 |
MEDIUM
|
chitta
|
mimicboard_2
|
In addition to the sites referenced. http://secunia.com/product/5681/ gives an advisory for the vulnerability as well as additional descripton.
|
NVD-CWE-Other
|
CVE-2005-4858
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350495
|
6.4 |
MEDIUM
|
chitta
|
mimicboard
|
mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mi…
|
NVD-CWE-Other
|
CVE-2005-4859
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350496
|
7.5 |
HIGH
|
jasio.net
|
ragnarok_online_control_panel
|
functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account_manage.php with a trailing "/login.php" PHP_SELF value, which is no…
|
CWE-287
不適切な認証
|
CVE-2005-4861
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350497
|
5.0 |
MEDIUM
|
xwiki
|
xwiki
|
The search functionality in XWiki 0.9.793 indexes cleartext user passwords, which allows remote attackers to obtain sensitive information via a search string that matches a password.
|
CWE-255
証明書・パスワード管理
|
CVE-2005-4862
|
2008-09-6 05:58 |
2005-12-31 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350498
|
7.5 |
HIGH
|
hitachi
|
business_logic
|
Multiple SQL injection vulnerabilities in Hitachi Business Logic - Container (BLC) P-2443-9114 01-00 through 02-06 on Windows, and P-1M43-9111 01-01 through 02-00 on AIX, allow remote attackers to ex…
|
NVD-CWE-Other
|
CVE-2005-4578
|
2008-09-6 05:57 |
2005-12-29 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350499
|
7.5 |
HIGH
|
phpsurveyor
|
phpsurveyor
|
Multiple SQL injection vulnerabilities in PHPSurveyor before 0.991 allow remote attackers to execute arbitrary SQL commands via the (1) sql parameter in browse.php and the (2) sid, (3) lid, (4) gid, …
|
NVD-CWE-Other
|
CVE-2005-4586
|
2008-09-6 05:57 |
2005-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350500
|
7.8 |
HIGH
|
juniper
|
netscreen-security_manager_2004
|
Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3 allow remote attackers to cause a denial of service (crash or hang of server components that are automatically restarted) via a long crafted …
|
NVD-CWE-Other
|
CVE-2005-4587
|
2008-09-6 05:57 |
2005-12-30 |
表示
|
GitHub
Exploit DB
Packet Storm
|
|
|
