enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'trackback_url' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23990

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'editcat.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23989

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'adduser.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23988

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'edituser.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23987

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'addcat.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23986

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'deluser.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23975

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'delcomment.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23974

enji@infosys.tuwien.ac.at MyBloggie 2.1.2/2.1.3 - 'upload.php' Cross-Site Scripting
webapps php CVE-2006-1205;OSVDB-23973

liz0 ADP Forum 2.0.x - 'Subject' HTML Injection
webapps php CVE-2006-1157;OSVDB-23961

Revnic Vasile Easy File Sharing Web Server 3.2 - Full Path Request Arbitrary File Upload
remote windows CVE-2006-1161;OSVDB-23791

Revnic Vasile Easy File Sharing Web Server 3.2 - Format String Denial of Service
dos windows CVE-2006-1159;OSVDB-23792

Kiki sBlog 0.7.2 - 'comments_do.php' Multiple POST Cross-Site Scripting Vulnerabilities
webapps php CVE-2006-1135;OSVDB-23760

Kiki sBlog 0.7.2 - 'search.php?keyword' POST Method Cross-Site Scripting
webapps php CVE-2006-1135;OSVDB-23759

nukedx JiRos Banner Experience 1.0 - Unauthorized Create Admin
webapps asp OSVDB-23780;CVE-2006-1213

Hessam-x Light Weight Calendar 1.x - 'date' Remote Code Execution
webapps php OSVDB-22376;CVE-2006-1252;CVE-2006-0206

DevilBox d2kBlog 1.0.3 - 'memName' SQL Injection
webapps asp OSVDB-23770;CVE-2006-1123