Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nukedx vulnerabilities and exploits
(subscribe to this query)
515
VMScore
CVE-2006-2735
PHP remote file inclusion vulnerability in language/lang_english/lang_activity.php in Activity MOD Plus (Amod) 1.1.0, as used with phpBB when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE:...
Activity Mod Plus Activity Mod Plus 1.1.0
1 EDB exploit
515
VMScore
CVE-2006-2736
PHP remote file inclusion vulnerability in blend_data/blend_common.php in Blend Portal 1.2.0, as used with phpBB when register_globals is enabled, allows remote malicious users to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NOTE: This is a similar vulne...
Phpbb-portal Blend Portal 1.2.0
1 EDB exploit
685
VMScore
CVE-2006-2740
Multiple SQL injection vulnerabilities in Epicdesigns tinyBB 0.3 allow remote malicious users to execute arbitrary SQL commands via the (1) q parameter in (a) forgot.php, and the (2) username and (3) password parameters in (b) login.php, and other unspecified vectors.
Epic Designs Tinybb
1 EDB exploit
755
VMScore
CVE-2006-2744
PHP remote file inclusion vulnerability in p-popupgallery.php in F@cile Interactive Web 0.8.41 up to and including 0.8.5 allows remote malicious users to execute arbitrary PHP code via a URL in the l parameter.
Facile Interactive Web Facile Interactive Web 0.8.5
Facile Interactive Web Facile Interactive Web 0.8.41
1 EDB exploit
515
VMScore
CVE-2006-2745
Multiple PHP remote file inclusion vulnerabilities in F@cile Interactive Web 0.8.5 and previous versions, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the (1) pathfile parameter in (a) p-editpage.php and (b) p-editbox.p...
Facile Interactive Web Facile Interactive Web 0.8.41
Facile Interactive Web Facile Interactive Web
1 EDB exploit
685
VMScore
CVE-2006-2746
Multiple cross-site scripting (XSS) vulnerabilities in F@cile Interactive Web 0.8.5 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) lang parameter in index.php, and the (2) mytheme and (3) myskin parameters in multiple "p...
Facile Interactive Web Facile Interactive Web 0.8.41
Facile Interactive Web Facile Interactive Web
1 EDB exploit
435
VMScore
CVE-2006-2755
Cross-site scripting (XSS) vulnerability in index.php in UBBThreads 5.x and previous versions allows remote malicious users to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords.
Ubbcentral Ubb.threads 5.0
Ubbcentral Ubb.threads 6.1.1
Ubbcentral Ubb.threads 6.2
Ubbcentral Ubb.threads 6.4.2
Ubbcentral Ubb.threads 6.4.3
Ubbcentral Ubb.threads 6.5.3
Ubbcentral Ubb.threads 5.5.1
Ubbcentral Ubb.threads 6.0
Ubbcentral Ubb.threads 6.2.1
Ubbcentral Ubb.threads 6.2.2
Ubbcentral Ubb.threads 6.4.4
Ubbcentral Ubb.threads 6.5
Ubbcentral Ubb.threads 6.0.3
Ubbcentral Ubb.threads 6.1
Ubbcentral Ubb.threads 6.4
Ubbcentral Ubb.threads 6.4.1
Ubbcentral Ubb.threads 6.5.2
Ubbcentral Ubb.threads 6.5.2 Beta2
Ubbcentral Ubb.threads 6.0.1
Ubbcentral Ubb.threads 6.0.2
Ubbcentral Ubb.threads 6.2.3
Ubbcentral Ubb.threads 6.3
1 EDB exploit
755
VMScore
CVE-2006-2793
SQL injection vulnerability in Anket.asp in ASPSitem 2.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the hid parameter.
Aspsitem Aspsitem 1.83
Aspsitem Aspsitem
1 EDB exploit
755
VMScore
CVE-2006-0870
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and previous versions allows remote malicious users to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well.
Mini-nuke Mini-nuke Cms
1 EDB exploit
755
VMScore
CVE-2006-0961
SQL injection vulnerability in yazdir.asp in Cilem Hiber 1.1 allows remote malicious users to execute arbitrary SQL commands via the haber_id parameter. NOTE: this product has also been referred to as "Cilem News," although that does not appear to be the proper name.
Cilem Cilem Haber 1.1
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-4463
CVE-2024-29895
inject
CVE-2023-52689
CVE-2024-5049
CVE-2024-5051
privilege escalation
physical
CVE-2023-52676
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »