Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-06-27 | CVE-2006-3267 | SQL Injection vulnerability in Infinite Core Technologies ICT SQL injection vulnerability in index.php in Infinite Core Technologies (ICT) 1.0 Gold and earlier allows remote attackers to execute arbitrary SQL commands via the post parameter. | 7.5 |
| 2006-06-27 | CVE-2006-3263 | SQL-Injection vulnerability in Mambo SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter. | 7.5 |
| 2006-06-27 | CVE-2006-3262 | SQL Injection vulnerability in Mambo Weblinks SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers to execute arbitrary SQL commands via the title parameter. | 7.5 |
| 2006-06-27 | CVE-2006-3223 | Unspecified vulnerability in Broadcom products Format string vulnerability in CA Integrated Threat Management (ITM), eTrust Antivirus (eAV), and eTrust PestPatrol (ePP) r8 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a scan job with format strings in the description field. | 7.5 |
| 2006-06-27 | CVE-2006-3252 | Remote Buffer Overflow vulnerability in Algorithmic Research Privatewire Gateway 3.7 Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows remote attackers to execute arbitrary code via a long GET request. | 7.5 |
| 2006-06-27 | CVE-2006-3251 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Hashcash Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries. | 7.5 |
| 2006-06-27 | CVE-2006-3243 | SQL-Injection vulnerability in MyBulletinBoard SQL injection vulnerability in usercp.php in MyBB (MyBulletinBoard) 1.0 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the showcodebuttons parameter. | 7.5 |
| 2006-06-27 | CVE-2006-3239 | SQL Injection vulnerability in Vbzoom 1.00/1.01/1.11 SQL injection vulnerability in message.php in VBZooM 1.11 and earlier allows remote attackers to execute arbitrary SQL commands via the UserID parameter. | 7.5 |
| 2006-06-27 | CVE-2006-3238 | SQL Injection vulnerability in VBZoom Multiple SQL injection vulnerabilities in VBZooM 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) MemberID parameter to rank.php, and the (2) QuranID parameter to lng.php. | 7.5 |
| 2006-06-27 | CVE-2006-3236 | SQL Injection vulnerability in thinkWMS Multiple SQL injection vulnerabilities in thinkWMS 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in (a) index.php or (b) printarticle.php, and the (2) catid parameter in index.php. | 7.5 |