|
280871
|
- |
|
tritanium_scripts
|
tritanium_bulletin_board
|
Succesful exploitation requires that "register_globals" is enabled.
|
NVD-CWE-Other
|
CVE-2006-1768
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280872
|
- |
|
userland
|
manila
|
Multiple cross-site scripting (XSS) vulnerabilities in UserLand Manila 9.5 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the mode parameter in msgReader$1 and (2) …
|
NVD-CWE-Other
|
CVE-2006-1769
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280873
|
- |
|
azerbaijan_development_group
|
azdgvote
|
Multiple PHP remote file inclusion vulnerabilities in Azerbaijan Design & Development Group (AZDG) AzDGVote allow remote attackers to execute arbitrary PHP code via a URL in the int_path parameter in…
|
NVD-CWE-Other
|
CVE-2006-1770
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280874
|
- |
|
saxotech
|
saxopress
|
Directory traversal vulnerability in misc in pbcs.dll in SAXoTECH SAXoPRESS, aka Saxotech Online (formerly Publicus) allows remote attackers to read arbitrary files and possibly execute arbitrary pro…
|
NVD-CWE-Other
|
CVE-2006-1771
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280875
|
- |
|
hp
|
compaqhttpserver system_management_homepage
|
HP System Management Homepage (SMH) 2.1.3.132, when running on CompaqHTTPServer/9.9 on Windows, Linux, or Tru64 UNIX, and when "Trust by Certificates" is not enabled, allows remote attackers to bypas…
|
NVD-CWE-Other
|
CVE-2006-1774
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280876
|
- |
|
hp
|
compaqhttpserver system_management_homepage
|
The only way to prevent this is to set the Trust level to "Trust by Certificates"
|
NVD-CWE-Other
|
CVE-2006-1774
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280877
|
- |
|
simplog
|
simplog
|
PHP remote file inclusion vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the s parameter.
|
NVD-CWE-Other
|
CVE-2006-1776
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280878
|
- |
|
simplog
|
simplog
|
Directory traversal vulnerability in doc/index.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences …
|
NVD-CWE-Other
|
CVE-2006-1777
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280879
|
- |
|
simplog
|
simplog
|
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.2 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) blogid parameter in (a) index.php and (b) arch…
|
NVD-CWE-Other
|
CVE-2006-1778
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
280880
|
- |
|
simplog
|
simplog
|
Cross-site scripting (XSS) vulnerability in login.php in Jeremy Ashcraft Simplog 0.9.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the btag parameter.
|
NVD-CWE-Other
|
CVE-2006-1779
|
2018-10-19 01:36 |
2006-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|