CVE-2006-7045

CVE-2006-7045 affects Clan Manager Pro (CMPRO) versions 1.1.0 and earlier. The vulnerability is a PHP remote file inclusion flaw that lets an attacker supply a URL via the (1) rootpath and possibly (2) sitepath parameters to (a) cmpro.ext/comment.core.inc.php and (b) cmpro.intern/comment.core.inc...

CVE-2006-7046

This CVE concerns a PHP remote file inclusion in Clan Manager Pro (CMPRO) 1.1.0. The vulnerable element is cmpro.intern/login.inc.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the rootpath parameter. The description and related records (NVD, Red Hat advisory,...

CVE-2006-7054

The CVE-2006-7054 entry concerns Arkoon FAST360 UTM appliances, affecting the DNS module in versions 3.0 (up to 3.0/29), 3.1–3.3, and 4.0. The vulnerability allows remote attackers to trigger a denial of service (reboot) by sending a malformed DNS message, as demonstrated by the PROTOS DNS testin...

CVE-2006-7051

The CVE-2006-7051 vulnerability concerns the Linux kernel 2.6.x, specifically the sys_timer_create function in posix-timers.c. Local users can create a large number of posix timers, which are allocated in kernel memory but not counted as part of the process’s memory, leading to memory exhaustion ...

CVE-2006-7047

The CVE-2006-7047 entry concerns include.php in Shoutpro 1.0, where a crafted path parameter could bypass IP ban restrictions by referencing an alternate bannedips.php file. The CVE description notes that this was originally reported as remote file inclusion, but the analysis indicates it cannot ...

CVE-2006-7056

CVE-2006-7056 describes multiple PHP remote file inclusion vulnerabilities in DreamCost HostAdmin 3.1 and earlier. The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path parameter to (1) functions.php and (2) members.php. The index.php vector is cov...

CVE-2006-7049

CVE-2006-7049 affects WikkaWiki prior to 1.1.6.2. The Method() in wikka.php calls strstr and strrpos with arguments in the wrong order, which can bypass access restrictions and allow remote attackers to access arbitrary PHP files. Public references also describe it as a local file inclusion vulne...

CVE-2006-7048

CVE-2006-7048 affects Claroline 1.7.5 and involves multiple PHP remote file inclusion vulnerabilities. The issues allow remote attackers to execute arbitrary PHP code by supplying a URL in specific parameters: (1) clarolineRepositorySys to various extauth drivers (ldap.inc.php, etc.), (2) include...

CVE-2006-5877

The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cause a denial of service crash, as demonstrated with Mozilla Thunderbird...

CVE-2006-5877

The CVE-2006-5877 entry concerns the Enigmail extension prior to 0.94.2, which does not properly handle large, encrypted email attachments. This defect can allow remote attackers to cause a denial of service (crash), as demonstrated with Mozilla Thunderbird. The available connected documents corr...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7032

The CVE-2006-7032 entry corresponds to a PHP remote file inclusion vulnerability in phpBB/FlashBB. Specifically, FlashBB 1.1.5 and earlier vulnerable code path is in phpbb/getmsg.php, where an attacker can influence the phpbb_root_path parameter to cause the application to include remote files an...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier is affected by CVE-2006-7031 due to a flaw in mshtml.dll triggered by a table element with a CSS position attribute, allowing remote attackers to cause a denial of service (crash). The vulnerability is documented across multiple sources (NVD/CV...

CVE-2006-7035

The CVE concerns a directory traversal in the Make_thumbnail.php script of the Super Link Exchange Script 1.0. The vulnerability arises from unsafely handling the imgpath parameter, allowing remote attackers to traverse directories (“..” sequences) and read arbitrary files. Affected software: Sup...

CVE-2006-7031

Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service crash via a table element with a CSS attribute that sets the position, which triggers an "unhandled exception" in mshtml.dll...

CVE-2006-7033

The CVE-2006-7033 entry describes a Cross-site Scripting (XSS) vulnerability in Super Link Exchange Script 1.0. The flaw allows remote attackers to inject arbitrary web script or HTML through IMG tags in the search box. This affects the vulnerable component (the search input handling in Super Lin...

CVE-2006-7040

CVE-2006-7040 concerns MERCUR Messaging (2005) prior to Service Pack 4. The vulnerability allows remote attackers to cause a denial of service (crash) by sending a TOP command to the POP3 service. Affected product/version: MERCUR Messaging 2005 before SP4. Root cause details are not explicitly st...

CVE-2006-7030

The CVE-2006-7030 entry concerns Microsoft Internet Explorer 6 SP2 and earlier. It describes a vulnerability where remote attackers can cause a denial of service (crash) by delivering certain malformed HTML, potentially involving applet and base tags without required arguments, which triggers a n...

CVE-2006-7041

The CVE-2006-7041 entry concerns MERCUR Messaging 2005 before Service Pack 4, where the SMTP service is vulnerable to a denial-of-service (infinite loop) triggered by a message with neither originator nor recipient address known. Public sources (NVD/NIST) describe this as a remote DoS with CVSSv2...

CVE-2006-7039

The CVE-2006-7039 entry concerns MERCUR Messaging 2005 before Service Pack 4, specifically an IMAP4 service issue. A remote attacker can crash the service by sending a message with a long subject field, constituting a denial-of-service vulnerability. Exploitation details or patch specifics are no...