14488 matches found
CVE-2006-7218
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy...
CVE-2006-7186
cgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in "profile and other functions," a different vulnerability than CVE-2005-0927...
CVE-2006-7184
Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine EE 1.22, and possibly earlier, allow remote attackers to execute arbitrary PHP code via a URL in the toroot parameter to 1 fetchsettings.php or 2 fstyles.php. NOTE: the provenance of this information is unknown; the details are...
CVE-2006-7167
Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for remote login via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-7000
Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to 1 email/mail.php, 2 includes/init.php, 3 certain files in includes/cron/, and 4 jpgraph.php, 5 jpgraphbar.php, 6 jpgraphpie.php, and 7 jpgraphpie3d.php in includes/graph/, which leaks the path in...
CVE-2006-10001
A vulnerability, which was classified as problematic, was found in Subscribe to Comments Plugin up to 2.0.7 on WordPress. This affects an unknown part of the file subscribe-to-comments.php. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading t...
CVE-2006-5393
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10274...
CVE-2006-6025
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10269...
CVE-2006-6024
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10267...
CVE-2006-6017
creationtimestamp| type| source ---|---|--- 2025-04-03 16:35:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10264...
CVE-2006-6016
creationtimestamp| type| source ---|---|--- 2025-04-03 16:34:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10259...
CVE-2006-5014
creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10252...
CVE-2006-5738
creationtimestamp| type| source ---|---|--- 2025-04-03 15:35:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10247...
CVE-2006-5708
creationtimestamp| type| source ---|---|--- 2025-04-03 15:34:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10244...
CVE-2006-5649
creationtimestamp| type| source ---|---|--- 2025-04-03 15:34:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10239...
CVE-2025-2006
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-2006
creationtimestamp| type| source ---|---|--- 2025-03-29 07:28:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9537 2025-03-29 09:31:14+00:00| seen| Telegram/aF4xicIreuyE5yRRD33dmWV9qZXjTlaEQ3JU-sQx2NkHh1A 2025-03-29 09:48:30+00:00| seen|...
CVE-2025-2006 Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
CVE-2025-2006 Inline Image Upload for BBPress <= 1.1.19 - Authenticated (Subscriber+) Arbitrary File Upload
The Inline Image Upload for BBPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the file uploading functionality in all versions up to, and including, 1.1.19. This makes it possible for authenticated attackers, with Subscriber-level...
