154 matches found
CVE-2007-0606
CVE-2007-0606 affects w-agora 4.2.1. Vulnerability arises from bn[] parameter handling in index.php and certain parameters to delete_forum.php, allowing disclosure of server path via error messages. Impact: information disclosure; no exploitation details provided in the sources beyond error-path ...
CVE-2006-0606
The CVE-2006-0606 entry concerns a SQL injection vulnerability in Unknown Domain Shoutbox 2005.07.21 that allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. Affected software is Shoutbox (Unknown Domain). The root cause is improper handling of user-supplied inpu...
CVE-2005-0606
CubeCart 2.0.0–2.0.5 contains a Cross‑Site Scripting (XSS) vulnerability in settings.inc.php. The issue allows remote attackers to inject arbitrary HTML/web script via any of the following parameters used across multiple PHP files: cat_id, PHPSESSID, view_doc, product, session, catname, search, o...
CVE-2005-0606
Cross-site scripting XSS vulnerability in settings.inc.php for CubeCart 2.0.0 through 2.0.5, as used in multiple PHP files, allows remote attackers to inject arbitrary HTML or web script via the 1 catid, 2 PHPSESSID, 3 viewdoc, 4 product, 5 session, 6 catname, 7 search, or 8 page parameters...
CVE-2004-0606
Cross-site scripting XSS vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the 1 CLIENTID or 2 HOSTNAME option of a DHCP request...
CVE-2003-0606
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2003-0606
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2003-0606
sup 1.8 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files...
CVE-2001-0606
Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...
CVE-2001-0606
Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...
CVE-2001-0606
The CVE-2001-0606 entry concerns iPlanet Web Server 4.X on HP-UX 11.04 (VVOS) with VirtualVault A.04.00, where a remote attacker can cause a denial of service via the HTTPS service. The connected sources (NVD/CVE records) provide the affected product and the vulnerability class (remote DoS over H...
CVE-2000-0606
Buffer overflow in kon program in Kanji on Console KON package on Linux may allow local users to gain root privileges via a long -StartupMessage parameter...
CVE-2000-0606
The CVE describes a buffer overflow in the kon program within Kanji on Console (KON) on Linux. The vulnerability is triggered by a long -StartupMessage parameter in KON, potentially allowing local users to gain root privileges. No versions, affected distributions, or explicit exploit details are ...
CVE-1999-0606
The CVE-1999-0606 entry concerns the EZMall 2000 shopping cart CGI program mall2000.cgi. The issue is described as an incorrect configuration that could disclose private information, affecting confidentiality (PARTIAL) with a CVSS v2 base score of 5.0 (Network, low attack complexity, no authentic...