CVE-2006-6451

SWsoft Plesk 8.0.1 and earlier are affected by multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to get_password.php or login_up.php3. The issue is documented across CVE-2006-6451, with CVSSv2 base metrics indicating a mediu...

CVE-2006-6453

The CVE affects J-OWAMP Web Interface 2.1, via JOWAMP_ShowPage.php, enabling remote authenticated users to execute arbitrary PHP code through a URL in the link parameter. Base CVSS v2 score 6.5 (MEDIUM). Exploitation details exist in external references (e.g., Exploit-DB). No remediation details ...

CVE-2006-6444

The CVE-2006-6444 issue affects Nostra DivX Player versions 2.1, 2.2.00.0 (and possibly earlier). It is caused by a stack-based buffer overflow triggered by a long string in an M3U file, which allows a remote attacker to execute arbitrary code. The vulnerability is exploitable remotely via crafte...

CVE-2006-6446

CVE-2006-6446 describes an SQL injection vulnerability in index.php of iWare Professional 5.0.4, triggered when magic_quotes_gpc is disabled. An attacker can remotely execute arbitrary SQL commands via the D parameter. The entry notes the provenance as third‑party information and provides CVSS 2....

CVE-2006-6450

Concrete details found: PatchLink Update Server (basis for Novell ZENworks Patch Management) is affected by CVE-2006-6450. The vulnerability lies in dagent/downloadreport.asp where unsanitized input for the parameters agentid and pass is used to construct SQL queries. This allows an unauthenticat...

CVE-2006-6443

CVE-2006-6443 affects the NDPS Print Provider for Windows component NDPPNT.DLL in Novell Client 4.91. The vulnerability is described as a buffer overflow in ndppnt.dll with remote attack vectors and high impact (confidentiality, integrity, and availability). The CVSS details indicate network acce...

CVE-2006-6383

CVE-2006-6383 affects PHP 5.2.0 and 4.4. It allows local users to bypass safe_mode and open_basedir restrictions via a malicious path and a null byte before a ";" in a session_save_path argument, followed by an allowed path, causing PHP to validate the allowed path but set session.save_path to th...

CVE-2006-6379

CVE-2006-6379 affects the BrightStor ARCserve Backup Discovery Service. A buffer overflow in the ASBRDCST.DLL discovery component allows remote attackers to execute arbitrary code via specially crafted packets sent to the Discovery Service. Affected products include BrightStor ARCserve Backup (r1...

CVE-2006-6332

Stack-based buffer overflow in net80211/ieee80211wireless.c in MadWifi before 0.9.2.1 allows remote attackers to execute arbitrary code via unspecified vectors, related to the encodeie and giwscancb functions...

CVE-2006-6419

jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor JCE 1.1.0 beta 2 and earlier for Joomla! comjce allows remote attackers to include and possibly execute arbitrary local files via the 1 plugin or 2 file parameter. NOTE: The provenance of this information is unknown; the...

CVE-2006-6442

Stack-based buffer overflow in the SetClientInfo function in the CDDBControlAOL.CDDBAOLControl ActiveX control cddbcontrol.dll, as used in America Online AOL 7.0 4114.563, 8.0 4129.230, and 9.0 Security Edition 4156.910, and possibly other products, allows remote attackers to execute arbitrary co...

CVE-2006-6415

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAdspath parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAdspath is used as a...

CVE-2006-6426

PHP remote file inclusion vulnerability in design/thinkedit/render.php in ThinkEdit 1.9.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the templatefile parameter...

CVE-2006-6433

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 have a timestamping flaw that can let remote attackers evade detection when audits rely on timestamps. The provided sources describe the affected products and the root cause (inaccur...

CVE-2006-6332

CVE-2006-6332 : A stack-based buffer overflow in the MadWifi driver (net80211/ieee80211_wireless.c) up to version 0.9.2.1 allows remote code execution; vulnerable component includes encode_ie and giwscan_cb. Public advisories confirm that MadWifi 0.9.2.1 fixes the issue. Affected platforms refere...

CVE-2006-6413

Cross-site scripting XSS vulnerability in Amateras sns 3.11 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-6442

The connected advisories confirm CVE-2006-6442 affects the Gracenote CDDBControl ActiveX control (cddbcontrol.dll) used in AOL software. A stack-based buffer overflow in SetClientInfo allows remote attackers to execute arbitrary code by providing a long ClientId/option string. Impact is remote co...

CVE-2006-6429

CVE-2006-6429 affects Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000. The vulnerability allows attackers to modify certain configuration settings via unspecified vectors related to the TFTP/BOOTP auto configuration option . The i...

CVE-2006-6426

ThinkEdit 1.9.2 and earlier is affected. The vulnerability is a PHP remote file inclusion in design/thinkedit/render.php triggered by the template_file parameter when register_globals is enabled, allowing an attacker to execute arbitrary PHP code remotely. Root cause is the insecure handling of t...

CVE-2006-6435

The CVE affects Xerox WorkCentre/WorkCentre Pro SNMP: versions prior to 12.050.03.000, 13.x prior to 13.050.03.000, and 14.x prior to 14.050.03.000 do not generate authentication failure traps, enabling remote attackers to perform brute-force login attempts to gain system access and obtain sensit...