cve.nowby Sazabi

CVEs published June 6, 2006

54 CVEs were published on June 6, 2006: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 54
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 54
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 54

CVE-2006-2447SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute arbitrary commands…UnratedJun 6, 2006
CVE-2005-2460Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitrary web script or…UnratedJun 6, 2006
CVE-2005-2461Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to execute arbitrary SQL…UnratedJun 6, 2006
CVE-2005-2462Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users and possibly…UnratedJun 6, 2006
CVE-2005-2463Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php and other include…UnratedJun 6, 2006
CVE-2005-2464login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cookie to match the…UnratedJun 6, 2006
CVE-2005-2465Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via…UnratedJun 6, 2006
CVE-2005-2466Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers to execute…UnratedJun 6, 2006
CVE-2005-2467Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject arbitrary web…UnratedJun 6, 2006
CVE-2005-2468Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary SQL commands via the…UnratedJun 6, 2006
CVE-2006-2834PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary…UnratedJun 6, 2006
CVE-2006-2835SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in…UnratedJun 6, 2006
CVE-2006-2836SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary…UnratedJun 6, 2006
CVE-2006-2837Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via…UnratedJun 6, 2006
CVE-2006-2838Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50…UnratedJun 6, 2006
CVE-2006-2839Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and…UnratedJun 6, 2006
CVE-2006-2840Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to…UnratedJun 6, 2006
CVE-2006-2841Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code…UnratedJun 6, 2006
CVE-2006-2842PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals is enabled and…UnratedJun 6, 2006
CVE-2006-2843PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL in the (1)…UnratedJun 6, 2006
CVE-2006-2844Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code via a URL in the…UnratedJun 6, 2006
CVE-2006-2845PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the…UnratedJun 6, 2006
CVE-2006-2846Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arbitrary web script…UnratedJun 6, 2006
CVE-2006-2847SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands via the linkID…UnratedJun 6, 2006
CVE-2006-2848links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct request with a modified…UnratedJun 6, 2006

Show all 54 entriesShow fewer entries