VYPR

CVEs

344,036 total · page 6483 of 6,881

AllCriticalHighKEV
  • CVE-2006-4920Sep 21, 2006
    Siteatschool
    Siteatschool
    risk 0.04cvss —epss 0.11

    Multiple PHP remote file inclusion vulnerabilities in Site@School (S@S) 2.4.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to (1) starnet/modules/sn_allbum/slideshow.php, and (2) starnet/themes/editable/main.inc.php.

  • CVE-2006-4921Sep 21, 2006
    Siteatschool
    Siteatschool
    risk 0.04cvss —epss 0.07

    PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.

  • CVE-2006-4922Sep 21, 2006
    Siteatschool
    Siteatschool
    risk 0.04cvss —epss 0.07

    Unrestricted file upload vulnerability in starnet/editors/htmlarea/popups/images.php in Site@School (S@S) 2.4.02 and earlier allows remote attackers to upload and execute arbitrary files with executable extensions.

  • CVE-2006-4923Sep 21, 2006
    Esyndicat
    Esyndicat Portal System
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in search.php in eSyndiCat Portal System allows remote attackers to inject arbitrary web script or HTML via the what parameter.

  • CVE-2006-4904Sep 21, 2006
    Qualiteam
    X Cart
    risk 0.04cvss —epss 0.07

    Dynamic variable evaluation vulnerability in cmpi.php in Qualiteam X-Cart 4.1.3 and earlier allows remote attackers to overwrite arbitrary program variables and execute arbitrary PHP code, as demonstrated by PHP remote file inclusion via the xcart_dir parameter.

  • CVE-2006-4905Sep 21, 2006
    Artmedic Webdesign
    links
    risk 0.00cvss —epss 0.02

    PHP remote file inclusion vulnerability in index.php in Artmedic Links 5.0 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter, which is processed by the readfile function.

  • CVE-2006-4906Sep 21, 2006
    More.groupware
    More.groupware
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in modules/calendar/week.php in More.groupware 0.74 allows remote attackers to execute arbitrary SQL commands via the new_calendarid parameter.

  • CVE-2006-4907Sep 21, 2006
    Ohio State University
    Osu Httpd
    risk 0.00cvss —epss 0.02

    OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message.

  • CVE-2006-4908Sep 21, 2006
    OSU
    OSU
    risk 0.00cvss —epss 0.02

    OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL containing an * (asterisk) wildcard, which displays all matching file and directory information.

  • CVE-2006-4909Sep 21, 2006
    Cisco Systems, Inc.
    Guard Ddos Mitigation Appliance
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Cisco Guard DDoS Mitigation Appliance before 5.1(6), when anti-spoofing is enabled, allows remote attackers to inject arbitrary web script or HTML via certain character sequences in a URL that are not properly handled when the…

  • CVE-2006-4910Sep 21, 2006
    Cisco Systems, Inc.
    Ids
    risk 0.00cvss —epss 0.04

    The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attackers to cause a denial of service (unresponsive device) via a crafted SSLv2 Client Hello packet.

  • CVE-2006-4911Sep 21, 2006
    Cisco Systems, Inc.
    IPS
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in Cisco IPS 5.0 before 5.0(6p2) and 5.1 before 5.1(2), when running in inline or promiscuous mode, allows remote attackers to bypass traffic inspection via a "crafted sequence of fragmented IP packets".

  • CVE-2006-4912Sep 21, 2006
    PHP Docwriter
    PHP Docwriter
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in PHP DocWriter 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the script parameter.

  • CVE-2006-4913Sep 21, 2006
    Alstrasoft
    E Friends
    risk 0.04cvss —epss 0.09

    Directory traversal vulnerability in chat/getStartOptions.php in AlstraSoft E-friends 4.85 allows remote attackers to include arbitrary local files and possibly execute arbitrary code via a .. (dot dot) sequence and trailing null (%00) byte in the lang parameter, as demonstrated…

  • CVE-2006-4914Sep 21, 2006
    A.l Pifou
    A.l Pifou
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in A.l-Pifou 1.8p2 allows remote attackers to read arbitrary files via ".." sequences in the ze_langue_02 cookie, as demonstrated by using the choix_lng parameter to choix_langue.php to indirectly set the cookie, then accessing livre_dor.php to…

  • CVE-2006-4438Sep 20, 2006
    Doctor Web Ltd
    Dr.web
    risk 0.04cvss —epss 0.10

    Heap-based buffer overflow in SpIDer for Dr.Web Scanner for Linux 4.33, and possibly earlier versions, allows remote attackers to execute arbitrary code via an LHA archive with an extended header that contains a long directory name.

  • CVE-2006-4890Sep 19, 2006
    Unak
    CMS
    risk 0.04cvss —epss 0.08

    Multiple PHP remote file inclusion vulnerabilities in UNAK-CMS 1.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the dirroot parameter to (1) fckeditor/editor/filemanager/browser/default/connectors/php/connector.php or (2)…

  • CVE-2006-4891Sep 19, 2006
    Techno Dreams
    Articles And Papers Package
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in ArticlesTableview.asp in Techno Dreams Articles & Papers Package 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter.

  • CVE-2006-4892Sep 19, 2006
    Techno Dreams
    Faq Manager Package
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in faqview.asp in Techno Dreams FAQ Manager Package 1.0 allows remote attackers to execute arbitrary SQL commands via the key parameter.

  • CVE-2006-4893Sep 19, 2006
    Phpbb Xs
    Phpbb Xs
    risk 0.00cvss —epss 0.03

    PHP remote file inclusion vulnerability in bb_usage_stats/includes/bb_usage_stats.php in phpBB XS 0.58 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter, a different vector than CVE-2006-4780.

  • CVE-2006-4894Sep 19, 2006
    Idevspot
    Nixieaffiliate
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in forms/lostpassword.php in iDevSpot NixieAffiliate 1.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter.

  • CVE-2006-4895Sep 19, 2006
    Idevspot
    Nixieaffiliate
    risk 0.00cvss —epss 0.02

    IDevSpot NexieAffiliate 1.9 and earlier allows remote attackers to delete arbitrary affiliates via a modified id parameter to delete.php.

  • CVE-2006-4897Sep 19, 2006
    Cmtexts
    Cmtexts
    risk 0.04cvss —epss 0.08

    CMtextS 1.0 and earlier stores users_logins/admin.txt under the web document root with insufficient access control, which allows remote attackers to obtain the administrator password.

  • CVE-2006-4898Sep 19, 2006
    Guanxicrm
    guanxiCRM
    risk 0.03cvss —epss 0.06

    PHP remote file inclusion vulnerability in include/phpxd/phpXD.php in guanxiCRM 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the appconf[rootpath] parameter.

  • CVE-2006-2191Sep 19, 2006
    GNU
    Mailman
    risk 0.00cvss —epss 0.02

    Format string vulnerability in Mailman before 2.1.9 allows attackers to execute arbitrary code via unspecified vectors. NOTE: the vendor has disputed this vulnerability, stating that it is "unexploitable.

  • CVE-2006-4334Sep 19, 2006
    Gzip
    Gzip
    risk 0.00cvss —epss 0.04

    Unspecified vulnerability in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (crash) via a crafted GZIP (gz) archive, which results in a NULL dereference.

  • CVE-2006-4335Sep 19, 2006
    Gzip
    Gzip
    risk 0.00cvss —epss 0.05

    Array index error in the make_table function in unlzh.c in the LZH decompression component in gzip 1.3.5, when running on certain platforms, allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted GZIP archive…

  • CVE-2006-4336Sep 19, 2006
    Gzip
    Gzip
    risk 0.00cvss —epss 0.06

    Buffer underflow in the build_tree function in unpack.c in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted leaf count table that causes a write to a negative index.

  • CVE-2006-4337Sep 19, 2006
    Gzip
    Gzip
    risk 0.00cvss —epss 0.06

    Buffer overflow in the make_table function in the LHZ component in gzip 1.3.5 allows context-dependent attackers to execute arbitrary code via a crafted decoding table in a GZIP archive.

  • CVE-2006-4338Sep 19, 2006
    Gzip
    Gzip
    risk 0.00cvss —epss 0.04

    unlzh.c in the LHZ component in gzip 1.3.5 allows context-dependent attackers to cause a denial of service (infinite loop) via a crafted GZIP archive.

  • CVE-2006-4871Sep 19, 2006
    Keyvan1
    Eshoppingpro
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in search_run.asp in Keyvan1 (aka Keyvan Janghorbani) EShoppingPro 1.0 allows remote attackers to execute arbitrary SQL commands via the order parameter.

  • CVE-2006-4872Sep 19, 2006
    Keyvan1
    Ecardpro
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in search.asp in Keyvan1 (aka Keyvan Janghorbani) ECardPro 2.0 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.

  • CVE-2006-4873Sep 19, 2006
    Jupiter CMS
    CMS
    risk 0.00cvss —epss 0.02

    Jupiter CMS allows remote attackers to obtain sensitive information via a direct request for (1) includes/functions.php, (2) modules/register.php, (3) modules/poll.php, (4) modules/panel.php, (5) modules/pm.php, (6) modules/news.php, (7) modules/templates_change.php, (8)…

  • CVE-2006-4874Sep 19, 2006
    Jupiter CMS
    CMS
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Jupiter CMS allow remote attackers to inject arbitrary web script or HTML via the (1) language[Admin name] and (2) language[Admin back] parameters in (a) modules/blocks.php; the (3) language[Register title] and (4)…

  • CVE-2006-4875Sep 19, 2006
    Jupiter CMS
    CMS
    risk 0.04cvss —epss 0.07

    Unrestricted file upload vulnerability in modules/galleryuploadfunction.php in Jupiter CMS allows remote attackers to upload picture files, and possibly files with arbitrary extensions, to gallery/albums/public.

  • CVE-2006-4876Sep 19, 2006
    Jupiter CMS
    CMS
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Jupiter CMS allow remote attackers to execute arbitrary SQL commands via (1) the user name during login, or the (2) key or (3) fpwusername parameters in modules/register.

  • CVE-2006-4877Sep 19, 2006
    David Bennett
    PHP Post
    risk 0.04cvss —epss 0.09

    Variable overwrite vulnerability in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to overwrite arbitrary program variables via multiple vectors that use the extract function, as demonstrated by the table_prefix parameter in (1) index.php, (2) profile.php,…

  • CVE-2006-4878Sep 19, 2006
    David Bennett
    PHP Post
    risk 0.00cvss —epss 0.06

    Directory traversal vulnerability in footer.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to read and include arbitrary local files via a .. (dot dot) sequence in the template parameter. NOTE: this was later reported to affect 1.0.1, and…

  • CVE-2006-4879Sep 19, 2006
    David Bennett
    PHP Post
    risk 0.00cvss —epss 0.02

    SQL injection vulnerability in profile.php in David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter.

  • CVE-2006-4880Sep 19, 2006
    David Bennett
    PHP Post
    risk 0.00cvss —epss 0.02

    David Bennett PHP-Post (PHPp) 1.0 and earlier allows remote attackers to obtain sensitive information via a direct request for (1) footer.php, (2) template.php, or (3) lastvisit.php, which reveals the installation path in various error messages.

  • CVE-2006-4881Sep 19, 2006
    David Bennett
    PHP Post
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in David Bennett PHP-Post (PHPp) 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the replyuser parameter in (a) pm.php; (2) the txt_jumpto parameter in (b) dropdown.php; the (3) txt_error…

  • CVE-2006-4882Sep 19, 2006
    Julian Roberts
    Charon Cart
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in Review.asp in Julian Roberts Charon Cart 3 allows remote attackers to execute arbitrary SQL commands via the ProductID parameter.

  • CVE-2006-4883Sep 19, 2006
    Idevspot
    Bizdirectory
    risk 0.00cvss —epss 0.02

    Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot BizDirectory allow remote attackers to inject arbitrary web script or HTML via (1) the stylesheet parameter in Feed.php or (2) the message parameter in status.php.

  • CVE-2006-4884Sep 19, 2006
    Idevspot
    Isupport
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title…

  • CVE-2006-4885Sep 19, 2006
    Shadowed Portal
    Portal
    risk 0.04cvss —epss 0.07

    PHP remote file inclusion vulnerability in Shadowed Portal 5.599 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root parameter in (1) footer.php and (2) header.php. NOTE: the provenance of this information is unknown; the details are obtained…

  • CVE-2006-4886Sep 19, 2006
    McAfee
    Virusscan Enterprise
    risk 0.00cvss —epss 0.00

    The VirusScan On-Access Scan component in McAfee VirusScan Enterprise 7.1.0 and Scan Engine 4.4.00 allows local privileged users to bypass security restrictions and disable the On-Access Scan option by opening the program via the task bar and quickly clicking the Disable button,…

  • CVE-2006-4887Sep 19, 2006
    Apple Inc.
    Mac OS X
    risk 0.00cvss —epss 0.00

    Apple Remote Desktop (ARD) for Mac OS X 10.2.8 and later does not drop privileges on the remote machine while installing certain applications, which allows local users to bypass authentication and gain privileges by selecting the icon during installation. NOTE: it could be…

  • CVE-2006-4888Sep 19, 2006
    Microsoft
    Ie
    risk 0.01cvss —epss 0.17

    Microsoft Internet Explorer 6 and earlier allows remote attackers to cause a denial of service (application hang) via a CSS-formatted HTML INPUT element within a DIV element that has a larger size than the INPUT.

  • CVE-2006-4889Sep 19, 2006
    Telekorn
    Signkorn Guestbook
    risk 0.04cvss —epss 0.10

    Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook (SL) 1.3 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir_path parameter in (1) index.php, (2) includes/functions.gb.php, (3)…

  • CVE-2006-4535Sep 19, 2006
    Linux
    Kernel
    risk 0.00cvss —epss 0.00

    The Linux kernel 2.6.17.10 and 2.6.17.11 and 2.6.18-rc5 allows local users to cause a denial of service (crash) via an SCTP socket with a certain SO_LINGER value, possibly related to the patch for CVE-2006-3745. NOTE: older kernel versions for specific Linux distributions are…