CVE-2006-6837

Technical details about CVE-2006-6837 are not publicly provided in the supplied documents; monitor for updates.

CVE-2006-6840

CVE-2006-6840 affects phpBB up to version 2.0.22 (and some older distributions) where a negative start parameter could lead to invalid output. The available connected sources confirm this as a remote web-app vulnerability in phpBB’s 2.0.x line with limited, unspecified impact and unknown exploita...

CVE-2006-6843

CVE-2006-6843 affects BE IT EasyPartner 0.0.9 beta for Joomla! and is described as a PHP remote file inclusion vulnerability that allows remote execution of arbitrary PHP code via unspecified vectors. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE List) but explicit ex...

CVE-2006-6845

CVE-2006-6845 : CMS Made Simple 1.0.2 has a Cross-site scripting (XSS) vulnerability in index.php via the cntnt01searchinput parameter in a Search action, allowing remote attackers to inject arbitrary web script or HTML. The provided documents do not include remediation steps or fixed versions.

CVE-2006-6838

The vulnerability CVE-2006-6838 affects the Rediff Bol Downloader ActiveX (OCX) control. The issue allows remote attackers to execute arbitrary files and obtain sensitive information (usernames and pathnames) by supplying a URL in the url vbscript parameter. The connected sources provide no detai...

CVE-2006-6850

Vulnerability overview: CVE-2006-6850 is a PHP remote file inclusion in the Shadowed Portal 5.7 Roster Module (character_roster), specifically via include.php. The root cause is insufficient validation of the mod_root parameter in the include mechanism, allowing an attacker to supply a URL and ha...

CVE-2006-6839

CVE-2006-6839 affects phpBB before 2.0.22. The issue is described as an unspecified vulnerability with unknown impact and remote attack vectors related to redirection targets not being properly validated. CVSS base score listed as 10.0 (high impact). Debian/DSA-1488-1 indicates fixes: etch (stabl...

CVE-2006-6848

The CVE-2006-6848 entry describes an SQL injection in ASPTicker 1.0, exploiting admin.asp via PATH_INFO (possibly related to the Password parameter) to allow remote execution of arbitrary SQL. This conveys a remote, unauthenticated risk with potential data exposure or modification. No remediation...

CVE-2006-6841

Affected product: phpBB (2.x). The issue CVE-2006-6841 arises from forms not performing session checks, enabling CSRF-like actions by an attacker on behalf of a logged-in user. Descriptions consistently indicate unknown impact in the original note, and multiple advisories/OSS records align on thi...

CVE-2006-6842

The CVE-2006-6842 entry describes an SQL injection vulnerability in admin/admin_acronyms.php of Acronym Mod 0.9.5 for phpBB2 Plus 1.53, allowing remote attackers to execute arbitrary SQL commands via the id parameter. Public references (e.g., Exploit-DB 3033) indicate known exploits. Affected com...

CVE-2006-6847

CVE-2006-6847 affects RealNetworks RealPlayer 10.5 via an ActiveX control (ierpplug.dll). The vulnerability allows a remote attacker to cause a denial of service (Internet Explorer 7 crash) by invoking RealPlayer.OpenURLInPlayerBrowser with a long second argument. Exploitation details are not pro...

CVE-2006-6844

CVE-2006-6844 : XSS vulnerability in the optional user comment module of CMS Made Simple 1.0.2. An attacker can inject arbitrary JavaScript/HTML via the user comment form, potentially affecting other users who view the comments. Metrics indicate a medium severity (CVSSv2 base score 6.8) with netw...

CVE-2006-6846

CVE-2006-6846 covers multiple SQL injection vulnerabilities in the While You Were Out (WYWO) InOut Board 1.0. The flaws allow remote attackers to run arbitrary SQL commands through: (1) num parameter in phonemessage.asp, (2) catcode parameter in faqDsp.asp, and (3) Username and (4) Password field...

Microsoft Windows SNMP Service GetBulk Memory Corruption (MS06-074; CVE-2006-5583)

A buffer overflow vulnerability has been reported in Microsoft Windows SNMP Service.The service fails to properly handle malformed 'GetBulkRequest' SNMP messages.An attacker could exploit this vulnerability via a specially crafted SNMP message.Successful exploitation may allow an attacker to crea...

CVE-2006-6829

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, allowing remote attackers to download the database (forum.mdb) via a direct request. The CVSS data indicates a HIGH base score (7.8), network attack vector, no authentication, and complete...

CVE-2006-6836

CVE-2006-6836 concerns multiple unspecified vulnerabilities in osp-cert for IBM OS/400 V5R3M0, tied to ASN.1 parsing. Connected sources reference ASN.1 parsing as the underlying issue and describe unspecified impact and attack vectors, with no detailed affected components, versions, or a remediat...

CVE-2006-6827

Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long string in the Flash8b.AllowScriptAccess method...

CVE-2006-6830

The CVE-2006-6830 entry describes a PHP remote file inclusion in b2 Blog 0.5 and earlier (b2verifauth.php) that lets an attacker execute arbitrary PHP code via the index parameter. Affected software: b2 Blog up to version 0.5 and earlier. Root cause: improper handling of the index URL parameter e...

CVE-2006-6829

Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from third par...

CVE-2006-6828

CVE-2006-6828 describes multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier. The affected components are (1) default.asp (grup parameter) and (2) admin.asp (id parameter) or (3) admin.asp, allowing remote attackers to execute arbitrary SQL commands. The default.asp/grup vector i...