|
279351
|
- |
|
virtual_hosting_control_system
|
virtual_hosting_control_system
|
The check_login function in login.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not exit when authentication fails, which allows remote attackers to gain unauthorized access.
|
NVD-CWE-Other
|
CVE-2006-0685
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279352
|
- |
|
virtual_hosting_control_system
|
virtual_hosting_control_system
|
add_user.php in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier does not check user privileges when adding a new administrative user, which allows remote attackers to gain unauthorized acce…
|
NVD-CWE-Other
|
CVE-2006-0686
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279353
|
- |
|
docmgr
|
docmgr
|
process.php in DocMGR 0.54.2 does not initialize the $siteModInfo variable when a direct request is made, which allows remote attackers to include arbitrary local files or possibly remote files via a…
|
NVD-CWE-Other
|
CVE-2006-0687
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279354
|
- |
|
nicecoder
|
indexu
|
PHP remote file include vulnerability in application.php in nicecoder.com indexu 5.0.0 and 5.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the base_path parameter.
|
NVD-CWE-Other
|
CVE-2006-0688
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279355
|
- |
|
scheduling_management.com
|
time_tracking_software
|
Cross-site scripting (XSS) vulnerability in the Registration Form in TTS Time Tracking Software 3.0 allows remote attackers to inject arbitrary web script or HTML via the UserName parameter.
|
NVD-CWE-Other
|
CVE-2006-0689
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279356
|
- |
|
scheduling_management.com
|
time_tracking_software
|
Multiple SQL injection vulnerabilities in TTS Time Tracking Software 3.0 allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
|
NVD-CWE-Other
|
CVE-2006-0690
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279357
|
- |
|
scheduling_management.com
|
time_tracking_software
|
edituser.php in TTS Time Tracking Software 3.0 does not verify that the name and password are correct, which allows remote attackers to overwrite arbitrary data belonging to any account.
|
NVD-CWE-Other
|
CVE-2006-0691
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279358
|
- |
|
carey_briggs
|
php_mysql_timesheet
|
Multiple SQL injection vulnerabilities in Carey Briggs PHP/MYSQL Timesheet 1 and 2 allow remote attackers to execute arbitrary SQL commands via the (1) yr, (2) month, (3) day, and (4) job parameters …
|
CWE-89
SQL Injection
|
CVE-2006-0692
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279359
|
- |
|
carey_briggs
|
php_mysql_timesheet
|
The vendor has supplied a patch which is available at:
http://www.hotscripts.com/Detailed/51138.html
|
CWE-89
SQL Injection
|
CVE-2006-0692
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
279360
|
- |
|
roberto_butti
|
calimba
|
Multiple SQL injection vulnerabilities in rb_auth.php in Roberto Butti CALimba 0.99.2 beta and earlier allow remote attackers to execute arbitrary SQL commands and bypass login authentication via the…
|
NVD-CWE-Other
|
CVE-2006-0693
|
2018-10-20 00:45 |
2006-02-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|