Vulnerabilities

DATE CVE VULNERABILITY TITLE RISK
2006-04-21 CVE-2006-1981 Local Security vulnerability in Mac OS X
Unspecified vulnerability in Java InputMethods on Mac OS X 10.4.5 may cause InputMethods to send input events for secure fields to the wrong text field, which might reveal the password to others who can view the screen.
local
low complexity
apple
2.1
2006-04-21 CVE-2006-1980 Cross-Site Scripting vulnerability in W2B Online Banking SID Parameter
Cross-site scripting (XSS) vulnerability in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML via the (1) query string, (2) SID parameter, or (3) ilang parameter.
network
high complexity
w2b
2.6
2006-04-21 CVE-2006-1979 HTML Injection vulnerability in Manic web Mwguest 2.1.0
Cross-site scripting (XSS) vulnerability in mwguest.php in Manic Web MWGuest 2.1.0 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter.
network
manic-web
5.8
2006-04-21 CVE-2006-1978 SQL Injection vulnerability in Flexbb
SQL injection vulnerability in inc/start.php in FlexBB 0.5.5 and earlier allows remote attackers to execute arbitrary SQL commands via the flexbb_username COOKIE parameter.
network
low complexity
flexbb CWE-89
7.5
2006-04-21 CVE-2006-1977 Cross-Site Scripting vulnerability in FlexBB
Cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters.
network
flexbb
5.8
2006-04-21 CVE-2006-1976 Cross-Site Scripting vulnerability in Geekforgod.Net Prayer Request Board Beta1
Cross-site scripting (XSS) vulnerability in addRequest.php in Prayer Request Board (PRB) Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field.
network
high complexity
geekforgod-net
2.6
2006-04-21 CVE-2006-1975 Cross-Site Scripting vulnerability in Stadtaus.Com PHP-Gastebuch 1.61
Cross-site scripting (XSS) vulnerability in guestbook_newentry.php in PHP-Gastebuch 1.61 allows remote attackers to inject arbitrary web script or HTML via the Kommentar field.
network
high complexity
stadtaus-com
2.6
2006-04-21 CVE-2006-1974 SQL Injection vulnerability in MyBB Index.PHP Referrer Cookie
SQL injection vulnerability in index.php in MyBB (MyBulletinBoard) before 1.04 allows remote attackers to execute arbitrary SQL commands via the referrer parameter.
network
low complexity
mybulletinboard
7.5
2006-04-21 CVE-2006-1973 Remote Malformed SIP Packet Denial Of Service vulnerability in Linksys RT31P2
Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiation Protocol (SIP) messages.
network
low complexity
linksys
5.0
2006-04-21 CVE-2006-1972 Cross-Site Scripting vulnerability in EasyGallery EasyGallery.PHP
Cross-site scripting (XSS) vulnerability in EasyGallery.php in Wingnut EasyGallery allows remote attackers to inject arbitrary web script or HTML via the ordner parameter.
network
wingnut
4.3