CVE-2006-5044

Unspecified vulnerability in Prince Clan Princeclan Chess component compcchess 0.8 and earlier for Mambo and Joomla! has unspecified impact and attack vectors...

CVE-2006-5039

Unspecified vulnerability in Events 1.3 beta module comevents for Joomla! has unspecified impact and attack vectors...

CVE-2006-5024

CVE-2006-5024 affects Paisterist Simple HTTP Scanner (sHTTPScanner) prior to 0.4. The connected PT-2006-5765 entry confirms versions before 0.4 are vulnerable and recommends upgrading to 0.4 or later. The NVD/NVD-derived description notes multiple unspecified vulnerabilities with unknown impact a...

CVE-2006-5025

Technical details about CVE-2006-5025 are not publicly available in the provided documents; no affected versions, root cause, or fixes are disclosed. Monitor for updates.

CVE-2006-4935

The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors...

CVE-2006-4936

Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object. Affects Moodle prior to 1.6.2; underlying cause is improper validation. Impact is described as unspecified, with remote attack vectors mentioned in the provided materials; no remediation de...

CVE-2006-4860

Multiple unspecified vulnerabilities in 1 index.php, 2 minixml.inc.php, 3 doc.inc.php, 4 element.inc.php, 5 node.inc.php, 6 treecomp.inc.php, 7 forum.html.php, 8 forum.php, 9 antihack.php, 10 content.php, 11 initglobals.php, and 12 imanager.php in Limbo aka Lite Mambo CMS 1.0.4.2 before 20060311...

CVE-2006-4860

CVE-2006-4860 concerns Limbo (aka Lite Mambo) CMS 1.0.4.2 before 20060311, with multiple vulnerabilities in 12 PHP/HTML files (index.php, minixml.inc.php, doc.inc.php, element.inc.php, node.inc.php, treecomp.inc.php, forum.html.php, forum.php, antihack.php, content.php, initglobals.php, imanager....

CVE-2006-4831

Unspecified vulnerability in IP over DNS is now easy iodine before 0.3.2 has unknown impact and attack vectors, related to "potential security problems."...

phpMyAdmin 2.x - Multiple Script Array Handling Full Path Disclosures

source: https://www.securityfocus.com/bid/21137/info phpMyAdmin is prone to multiple input-validation vulnerabilities, including an HTML-injection vulnerability, cross-site scripting vulnerabilities, and information-disclosure vulnerabilities. An attacker could exploit these vulnerabilities to vi...

CVE-2006-4468

Multiple unspecified vulnerabilities in Joomla! before 1.0.11, related to unvalidated input, allow attackers to have an unknown impact via unspecified vectors involving the 1 mosMail, 2 JosIsValidEmail, and 3 josSpoofValue functions; 4 the lack of inclusion of globals.php in...

CVE-2006-4475

Joomla! before 1.0.11 does not limit access to the Admin Popups functionality, which has unknown impact and attack vectors...

CVE-2006-4461

Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and attack vectors...

CVE-2006-4228

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface...

CVE-2006-4030

Unspecified vulnerability in the stats module in Gallery 1.5.1-RC2 and earlier allows remote attackers to obtain sensitive information via unspecified attack vectors, related to "two file exposure bugs."...

CVE-2006-4041

SQL injection vulnerability in Pike before 7.6.86, when using a Postgres database server, allows remote attackers to execute arbitrary SQL commands via unspecified attack vectors...

CVE-2006-4049

Unspecified vulnerability in the utxconfig utility in Sun Ray Server Software 3.x allows local users to create or overwrite arbitrary files via unknown attack vectors...

DEBIAN-CVE-2006-4028

Multiple unspecified vulnerabilities in WordPress before 2.0.4 have unknown impact and remote attack vectors. NOTE: due to lack of details, it is not clear how these issues are different from CVE-2006-3389 and CVE-2006-3390, although it is likely that 2.0.4 addresses an unspecified issue related ...

CVE-2006-4028

The WordPress CVE-2006-4028 entry concerns WordPress up to version 2.0.4 with multiple vulnerabilities described in connected advisories. Gentoo/GLSA and Tenable entries indicate a privilege-escalation issue tied to WordPress plugins, stemming from a flaw in capability checking that could allow a...

WordPress <= 2.0.3 - Multiple Vulnerabilities

Because of these vulnerabilities, WordPress 2.0.3 and previous versions have unknown impact and remote attack vectors. Solution Update the WordPress to the latest available version at least 2.0.4...