|
278931
|
- |
|
arif_supriyanto
|
auracms
|
Multiple cross-site scripting (XSS) vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to inject arbitrary web script or HTML via (1) the judul_artikel parameter in teman.php and …
|
NVD-CWE-Other
|
CVE-2006-3558
|
2018-10-19 01:47 |
2006-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278932
|
- |
|
arif_supriyanto
|
auracms
|
Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the (1) name and (2) pesan paramet…
|
NVD-CWE-Other
|
CVE-2006-3559
|
2018-10-19 01:47 |
2006-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278933
|
- |
|
blue_dojo
|
graffiti_forums
|
SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter.
|
NVD-CWE-Other
|
CVE-2006-3560
|
2018-10-19 01:47 |
2006-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278934
|
- |
|
bt
|
voyager_2091_wireless_adsl_router
|
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as co…
|
CWE-200 CWE-264
Information Exposure Permissions, Privileges, and Access Controls
|
CVE-2006-3561
|
2018-10-19 01:47 |
2006-07-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278935
|
- |
|
easy-cms
|
easy-cms
|
choose_file.php in easy-CMS 0.1.2, when mod_mime is installed, does not restrict uploads of filenames with multiple extensions, which allows remote attackers to execute arbitrary PHP code by uploadin…
|
NVD-CWE-Other
|
CVE-2006-3128
|
2018-10-19 01:46 |
2006-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278936
|
- |
|
qto
|
qtofilemanager
|
Cross-site scripting (XSS) vulnerability in qtofm.php4 in QTOFileManager 1.0 allows remote attackers to inject arbitrary web script or HTML via the msg parameter, as originally reported for index.php.
|
NVD-CWE-Other
|
CVE-2006-3132
|
2018-10-19 01:46 |
2006-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278937
|
- |
|
vwar
|
virtual_war
|
Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) s, (2) showgame, (3) sortorder, and …
|
CWE-89
SQL Injection
|
CVE-2006-3139
|
2018-10-19 01:46 |
2006-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278938
|
- |
|
vbzoom
|
vbzoom
|
SQL injection vulnerability in forum.php in VBZooM 1.11 allows remote attackers to execute arbitrary SQL commands via the MainID parameter.
|
NVD-CWE-Other
|
CVE-2006-3142
|
2018-10-19 01:46 |
2006-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278939
|
- |
|
maximus
|
schoolmax
|
Cross-site scripting (XSS) vulnerability in icue_login.asp in Maximus SchoolMAX 4.0.1 and earlier iCue and iParent applications allows remote attackers to inject arbitrary web script or HTML via the …
|
NVD-CWE-Other
|
CVE-2006-3143
|
2018-10-19 01:46 |
2006-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
278940
|
- |
|
ibd
|
micro_cms
|
PHP remote file inclusion vulnerability in micro_cms_files/microcms-include.php in Implied By Design (IBD) Micro CMS 3.5 (aka 0.3.5) and earlier allows remote attackers to execute arbitrary PHP code …
|
CWE-94
Code Injection
|
CVE-2006-3144
|
2018-10-19 01:46 |
2006-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|