CVE-2006-6768

The CVE-2006-6768 entry documents multiple XSS vulnerabilities in the default.asp page of PWP Technologies The Classified Ad System, exploitable via the (1) cat and (2) main parameters. The underlying issue is cross-site scripting in input handling on that page, with a CVSS base score of 6.8 (Med...

CVE-2006-6765

The CVE-2006-6765 entry describes multiple PHP file inclusion vulnerabilities in Pagetool 1.07, specifically in src/admin/pt_upload.php. The underlying issues allow remote attackers to execute arbitrary PHP code by supplying (1) a local filename or FTP/share URI via config_file, or (2) a URL via ...

CVE-2006-6763

CVE-2006-6763 involves the Keep It Simple Guest Book (KISGB). The vulnerability arises from multiple PHP remote file inclusion flaws that allow an attacker to execute arbitrary PHP code by supplying a URL in the parameters: (1) path_to_themes in authenticate.php and (2) default_path_for_themes in...

CVE-2006-6761

CVE-2006-6761 describes a stack-based buffer overflow in the IMAPD of Novell NetMail prior to 3.52e FTF2 . An attacker with authenticated remote access can trigger the overflow by sending a long argument to the IMAP SUBSCRIBE command, potentially allowing arbitrary code execution on affected syst...

CVE-2006-6766

CVE-2006-6766 describes multiple SQL injection vulnerabilities in cwmExplorer 1.1.0 and earlier . Remote attackers can execute arbitrary SQL commands via unspecified vectors. The record aggregates information from third‑party sources with note on provenance, and there is no explicit exposure of a...

CVE-2006-6764

Summary: CVE-2006-6764 affects Keep It Simple Guest Book (KISGB). The flaw is a PHP remote file inclusion in authenticate.php when PHP runs through CGI, enabling an attacker to execute arbitrary PHP code by supplying a URL in the default_path_to_themes parameter. This is the explicit vulnerabilit...

CVE-2006-6762

The CVE-2006-6762 entry affects Novell NetMail’s IMAP server (IMAPD) prior to 3.52e FTF2. A buffer overflow may occur when processing parameters to the APPEND command, enabling a remote authenticated attacker to cause a denial-of-service. Remediation: apply the vendor update per Novell document 3...

CVE-2006-6753

Event Viewer (eventvwr.exe) in Microsoft Windows is affected by a parsing issue when log data contains '%' characters. The vulnerability, as described in the CVE-2006-6753 entry, states that logs with '%' may not be displayed correctly, potentially preventing users from determining the actual dat...

CVE-2006-6757

The CVE-2006-6757 entry concerns a directory traversal vulnerability in cwmExplorer 1.0, specifically in index.php via the show_file parameter, enabling remote attackers to read arbitrary files and source code and obtain sensitive information. The NVD entry lists a CVSS v2 base score of 7.8 (HIGH...

CVE-2006-6759

CVE-2006-6759 affects RealNetworks RealPlayer 10.5 via an ActiveX control in rpau3260.dll. The vulnerability allows a remote attacker to cause a denial-of-service, specifically an IE crash, by invoking the RealPlayer.Initialize method with certain arguments. The connected records confirm the comp...

CVE-2006-6425

CVE-2006-6425 describes a stack-based buffer overflow in the Novell NetMail IMAP daemon (IMAPD) when processing the APPEND command, affecting NetMail versions prior to 3.52e FTF2. An authenticated remote attacker who can access IMAP services could trigger arbitrary code execution in the IMAP serv...

CVE-2006-6760

CVE-2006-6760 concerns Phpmymanga 0.8.1 and earlier. The vulnerability is a PHP remote file inclusion in template.php that lets an attacker cause code execution by supplying a URL in the (1) actionsPage or (2) formPage parameters. The underlying issue is unsafely including external URLs, enabling...

CVE-2006-6756

The vulnerability concerns Ixprim 1.2. The code function in install.fct.php generates a guessable value for the confidential IXP_CODE stored in mainfile.php, which could allow remote attackers to brute-force access to the administration panel. The available documentation links this to a remote-ex...

CVE-2006-6424

The CVE-2006-6424 vulnerability affects Novell NetMail (NMAP STOR and IMAP handling). Affected: NetMail servers prior to 3.52e FTF2; NMAP STOR buffer overflow can yield remote code execution, and IMAP command continuation handling can cause a heap overflow. Confirmed exploitation is possible via ...

CVE-2006-6758

CVE-2006-6758 affects Http Explorer 1.02. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files by using a .. sequence in the URI. The connected documents do not provide exploitation details or a remediation/version fix. If applicable, patch/version info...

CVE-2006-6750

XM Easy Personal FTP Server is affected by a format string vulnerability in the PORT handling which can cause a denial of service (crash). The issue is documented for version 5.0.1, with related notes mentioning 5.3.0 in consolidated records. Root cause is improper handling of format specifiers i...

PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl rgod u fucking little piece of shit faggot. way to ruin a private exploit, scumbag use strict; use IO::Socket; use MIME::Base64; use Getopt::Std; my $app = "PHP-Update 2.7"; my $type = "Remote Code Execution"; my $author = "undefined1"; my $date =...

CVE-2006-6747

The CVE-2006-6747 entry describes a SQL injection in Xt-News 0.1’s show_news.php, exploitable via the id_news parameter. A remote attacker can cause arbitrary SQL execution (no authentication required; network access; low attack complexity) with potential partial impact to confidentiality, integr...

CVE-2006-6747

SQL injection vulnerability in shownews.php in Xt-News 0.1 allows remote attackers to execute arbitrary SQL commands via the idnews parameter...

CVE-2006-6748

CVE-2006-6748 involves a PHP remote file inclusion in i-accueil.php of Newxooper 0.9 and earlier. An attacker can cause arbitrary PHP code execution by supplying a URL in the chemin parameter, enabling remote compromise of affected installations. The description notes that provenance is third-par...