CVE-2006-6868

CVE-2006-6868 affects Zen Cart Web Shopping Cart prior to 1.3.7. The vulnerability is described as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. According to the NVD entry, the CVSS v2 base score is 6.8 (Mediu...

CVE-2006-6869

Affects MAXdev MDForum 2.0.1 and earlier. The vulnerability is in includes/search/search_mdforum.php where, if magic_quotes_gpc is disabled and register_globals is enabled, an attacker can cause local file inclusion and code execution by injecting a .. in the PNSVlang cookie to error.php, demonst...

CVE-2006-6858

Miredo versions 0.9.8 through 1.0.5 fail to properly authenticate a Teredo bubble during UDP hole punching when using HMAC-MD5-64, enabling remote attackers to impersonate an arbitrary Teredo client. The vulnerability is described in CVE-2006-6858 and is evidenced in multiple data sources (NVD, C...

CVE-2006-5870

CVE-2006-5870 affects OpenOffice.org 2.0.4 and earlier and StarOffice 6–8, enabling user-assisted remote code execution via crafted WMF/EMF files that trigger heap-based overflows during META_ESCAPE and EMR_POLYPOLYGON processing. Connected advisories (e.g., RHSA-2007:0001) confirm a backported f...

CVE-2006-6852

tDiary 2.0.3 and 2.1.4.200 contain an eval injection vulnerability that lets a remote authenticated attacker run arbitrary Ruby scripts. The root cause is described as incorrect input validation in two web templates (conf.rhtml and i.conf.rhtml), enabling arbitrary code execution on the web serve...

CVE-2006-6851

The CVE-2006-6851 entry documents multiple XSS vulnerabilities in ac4p Mobilelib gold 2, specifically in contact_us.php, exploitable via the (1) email and (2) errr parameters. Affected software is the Mobilelib gold 2 package; the underlying issue is improper input handling in contact_us.php that...

CVE-2006-5749

The CVE-2006-5749 issue affects the Linux kernel 2.4 series up to, but not including, 2.4.34-rc4. It concerns the isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c, which does not call init_timer for the ISDN PPP CCP reset state timer. The underlying cause is a timer initializati...

CVE-2006-6857

CVE-2006-6857 is a documented cross-site scripting (XSS) vulnerability affecting Docebo LMS, specifically in the file modules/credits/credits.php . The issue allows remote attackers to inject arbitrary web script or HTML by supplying a crafted lang parameter. Per the public data, the vulnerabilit...

CVE-2006-6853

Durian Web Application Server 3.02 freeware on Windows is affected by a buffer overflow vulnerability. The issue allows remote code execution via a crafted packet containing a long string sent to TCP port 4002, leading to untrusted data being processed by the server. The CVE description specifies...

CVE-2006-6854

The CVE-2006-6854 entry concerns the De Marchi Daniele QuickCam VC Linux device driver (quickcam-vc) up to version 1.0.9. The vulnerable component is the function qcamvc_video_init in qcamvc.c , which fails to perform proper boundary checks, leading to memory corruption. This could allow an attac...

CVE-2006-6856

WebText CMS ≤ 0.4.5.2 is affected by a Direct static code injection vulnerability. An attacker can remotely inject arbitrary PHP code into a script located under wt/users/ by supplying a crafted im parameter during a profile edit (edycja) operation, and the injected code is then executed through ...

openoffice.org security update

Important: openoffice.org security update Advisory: RHSA-2007:0001-3 Type: Security Advisory Severity: Important Issued on: 2007-01-03 Last updated on: 2007-01-03 Affected Products: Red Hat Desktop v. 3 Red Hat Desktop v. 4 Red Hat Enterprise Linux AS v. 3 Red Hat Enterprise Linux AS v. 4 Red Hat...

CVE-2006-6488

The CVE-2006-6488 issue is a stack-based buffer overflow in ICONICS Dialog Wrapper Module ActiveX (DlgWrapper.dll) DoModal function, exploited by ICONICS OPC-enabled Gauge/Switch/Vessel ActiveX prior to version 8.4.166.0. An attacker can remotely execute arbitrary code by sending a long FileName ...

CVE-2006-4578

The Address Book 1.04e is affected by CVE-2006-4578 via export.php, which dumps MySQL contents and writes username and password hash information to a publicly accessible file. Root cause is the dump exposing credentials in publicly accessible storage, enabling remote attackers to obtain sensitive...

CVE-2006-4577

CVE-2006-4577 affects The Address Book 1.04e. It contains multiple cross-site scripting (XSS) vulnerabilities allowing an attacker to inject arbitrary scripts via: (1) email, (2) websites, (3) groupAddName in save.php; (4) errorMsg in index.php; (5) goTo and (6) search in search.php. CVSS v2 base...

CVE-2006-4575

The CVE-2006-4575 entry describes multiple SQL injection vulnerabilities in The Address Book 1.04e. Affected components include user.php (parameters: lastname, firstname, passwordOld, passwordNew, id, language, defaultLetter, newuserPass, newuserType, newuserEmail), search.php (parameters: goTo, ...

CVE-2006-4576

The vulnerability CVE-2006-4576 is an XSS in The Address Book 1.04e where remote attackers can inject arbitrary web script by uploading an HTML file with a GIF/JPG extension, which is then rendered by Internet Explorer. The provided connected documents confirm the affected product/version and the...

CVE-2006-4582

The CVE-2006-4582 entry describes a Cross-site request forgery (CSRF) vulnerability affecting The Address Book 1.04e. The issue allows remote attackers to perform unauthorized actions as other users, demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php...

CVE-2006-4579

CVE-2006-4579 describes a directory traversal vulnerability in The Address Book 1.04e, where the language parameter can be manipulated with ".." to include arbitrary files. The issue arises in users.php and could allow remote attackers to cause file inclusion, with the documented impact: partial ...

CVE-2006-4580

The CVE concerns The Address Book 1.04e: register.php allows remote attackers to bypass the 'Allow User Self-Registration' setting by supplying mode=confirm, enabling creation of arbitrary users. This is a client-side/configuration abuse affecting user provisioning, with the root cause described ...