CVE-2006-6671

The CVE-2006-6671 entry documents an SQL injection vulnerability in the Burak Yylmaz Download Portal, specifically in down.asp, exploitable via the id parameter to allow remote execution of arbitrary SQL commands. The affected software is the Burak Yylmaz Download Portal; the vulnerable component...

CVE-2006-6677

CVE-2006-6677 affects ESET NOD32 Antivirus prior to 1.1743 . A remote attacker can trigger a crash by sending a crafted .CHM file that induces a divide-by-zero error , resulting in a Denial of Service . The available sources corroborate the vulnerable product and the basic impact; no exploit deta...

CVE-2006-6676

CVE-2006-6676 affects ESET NOD32 Antivirus before version 1.1743, with a heap-based buffer overflow in the OLE2 and CHM parsers triggered by crafted .DOC or .CAB files. This integer overflow allows remote attackers to execute arbitrary code. The vulnerability is documented in CVE records and NVD/...

CVE-2006-6678

Summary: CVE-2006-6678 affects netrik prior to 1.15.5 (noted fixes in 1.15.4-1sarge1 per Debian DSA-1251-1). The edit_textarea function in form-file.c does not properly sanitize temporary filenames when editing textarea fields, enabling an attacker to inject shell metacharacters in the filename t...

CVE-2006-6675

CVE-2006-6675 describes an XSS vulnerability in Novell NetWare 6.5 Support Pack 5 and 6, and Novell Apache on NetWare 2.0.48. The issue allows remote attackers to inject arbitrary web script or HTML through unspecified parameters in the Welcome web-app. Public references list affected products an...

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion

Newxooper-PHP 0.9.1 - mapage.php Remote File Inclusion Newxooper-php v0.9.1chemin Remote File Include Vulnerabilty Download:http://www.easy-script.com/newxoope-091.zip Author:Dr Max Virus Location:Egypt Bug in compteur/mapage.php In Line:37 Vul Code: REQUIRE "$chemin/compteur/mapage.txt"; POC:...

rateme-rfi.txt

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + ;;ii,,:: + + :::: :: ;;tt;;:: + + ;;:: ..,,:: ;;ii,,:: + + ,,,, ii;;,, ii;;:: ;;ii,,:: + + ii:: tt;;,, ..tt;;,,.. ;;ii;;:: + + ii,,:: ttii,, ..ff;;;;:: ;;ii;;:: + + tt;;::..,, tt;;,, ff;;;;...

TYPO3 'spell-check-logic.php' 'userUid' Parameter Arbitrary Command Execution

The remote host is running TYPO3, an open source content management system written in PHP. The version of TYPO3 installed on the remote host fails to sanitize user-supplied input to the 'userUid' parameter before using it in the 'spell-check-logic.php' script to execute a command. An...

CVE-2006-6669

Cross-site scripting XSS vulnerability in exporthandler.php in WebCalendar 1.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter...

CVE-2006-6660

The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service crash via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag...

CVE-2006-6670

Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL...

CVE-2006-6660

The nodeType function in KDE libkhtml 4.2.0 and earlier, as used by Konquerer, KMail, and other programs, allows remote attackers to cause a denial of service crash via malformed HTML tags, possibly involving a COL SPAN tag embedded in a RANGE tag...

CVE-2006-6668

Cross-site scripting XSS vulnerability in VerliAdmin 0.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-6666

CVE-2006-6666 is a PHP remote file inclusion flaw in VerliAdmin 0.3 and earlier. The vulnerability allows remote authenticated users to execute arbitrary PHP code by supplying a crafted URL in the q parameter of index.php. Affected software is explicitly VerliAdmin 0.3 and earlier; CVSS v2 base s...

CVE-2006-6661

This CVE affects PHP-Update (blog.php)

CVE-2006-6668

CVE-2006-6668 describes a cross-site scripting (XSS) vulnerability in VerliAdmin 0.3 and earlier. The affected software is a web administration tool, with the vulnerability enabling remote attackers to inject arbitrary web script or HTML via unspecified vectors. The initial sources identify an NV...

CVE-2006-6667

CVE-2006-6667: Multiple SQL injection vulnerabilities in VerliAdmin 0.3 and earlier allow remote attackers to execute arbitrary SQL via nick_mod or nick to repass.php or verify.php. The NVD entry lists a CVSSv2 base score of 7.5 (HIGH, NETWORK, LOW complexity, no auth). Connected records corrobor...

CVE-2006-6663

The CVE-2006-6663 entry concerns the Marathon Aleph One server component, affected in versions prior to 0.17.1 and dated 2006-12-17. The vulnerability allows remote attackers to cause an application crash (denial of service) through unspecified vectors related to the process of “gathering net gam...

CVE-2006-6662

CVE-2006-6662 describes an unspecified vulnerability in Linux User Management (novell-lum) affecting SUSE Linux Enterprise Desktop 10 and Open Enterprise Server 9. Under unspecified conditions, local users could log in to the console without a password. The connected documents reaffirm the affect...

CVE-2006-6665

CVE-2006-6665 is a buffer overflow in AstonSoft DeepBurner Pro and Free up to version 1.8.0 (and related versions 1.9.0.228 per referenced module) that can be triggered by a long file-name tag in a DBR file. Public proof-of-concept/public exploits exist (e.g., Metasploit module and Exploit-DB ent...