Vuldb Updates

A vulnerability identified as critical has been detected in SAP Internet Transaction Server. Affected by this vulnerability is an unknown functionality of the file /scripts/wgate. The manipulation leads to basic cross site scripting. This vulnerability is referenced as CVE-2006-5114. Remote exploitation of the attack is possible. Furthermore, an exploit is available. It is preferable to disable the affected component.

A vulnerability, which was classified as critical, has been found in InterVations NaviCOPA Web Server 2.01. This affects an unknown function. The manipulation leads to memory corruption. This vulnerability is traded as CVE-2006-5112. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in KGB 1.87 and classified as problematic. Affected is an unknown function of the file kgcall.php. This manipulation of the argument engine causes path traversal. This vulnerability is handled as CVE-2006-5115. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability was found in phpMyAdmin up to 2.9.0 Dev and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Libraries. Such manipulation leads to information disclosure. This vulnerability is uniquely identified as CVE-2006-5117. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability was found in PHPSelect Web Development Division. It has been classified as critical. Affected by this issue is some unknown functionality of the file index.php3. Performing a manipulation of the argument Application_Root results in file inclusion. This vulnerability was named CVE-2006-5118. The attack may be initiated remotely. There is no available exploit.

A vulnerability was found in Zen Cart 1.3.5. It has been declared as problematic. This affects an unknown part. Executing a manipulation of the argument admin_email can lead to cross site scripting. The identification of this vulnerability is CVE-2006-5119. The attack may be launched remotely. There is no exploit available.

A vulnerability was found in Scott Metoyer Red Mombin 0.7. It has been rated as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to basic cross site scripting. This vulnerability is referenced as CVE-2006-5120. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability categorized as critical has been discovered in PostNuke 0.762. This issue affects some unknown processing. The manipulation of the argument hits results in sql injection. This vulnerability is identified as CVE-2006-5121. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as problematic has been detected in HP Mercury SiteScope 8.2. Impacted is an unknown function. This manipulation causes basic cross site scripting. This vulnerability is tracked as CVE-2006-5122. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability marked as critical has been reported in Joshua Muheim phpMyWebmin 1.0. The impacted element is an unknown function of the file window.php. Performing a manipulation of the argument target results in file inclusion. This vulnerability is cataloged as CVE-2006-5124. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability described as problematic has been identified in Joshua Muheim phpMyWebmin 1.0. This affects the function opendir of the file window.php. Executing a manipulation of the argument target can lead to information disclosure. This vulnerability is registered as CVE-2006-5125. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Froxlor up to 2.3.5. It has been declared as critical. This affects the function Language::loadLanguage of the component API Endpoint. The manipulation of the argument def_language results in improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is cataloged as CVE-2026-41228. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Froxlor up to 2.3.5. It has been rated as critical. This vulnerability affects the function PhpHelper::parseArrayToString in the library lib/userdata.inc.php of the component Setting Handler. This manipulation of the argument privileged_user causes code injection. This vulnerability is registered as CVE-2026-41229. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability has been found in Froxlor up to 2.3.5 and classified as problematic. This affects the function DomainZones::add. Performing a manipulation results in crlf injection. This vulnerability was named CVE-2026-41230. The attack may be initiated remotely. There is no available exploit. The affected component should be upgraded.

A vulnerability marked as critical has been reported in Froxlor up to 2.3.5. This affects the function DataDump.add of the component Destination Handler. Performing a manipulation of the argument fixed_homedir results in link following. This vulnerability is reported as CVE-2026-41231. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability classified as problematic was found in Froxlor up to 2.3.5. This affects the function EmailSender::add of the component Email Address Handler. Such manipulation leads to incorrect authorization. This vulnerability is traded as CVE-2026-41232. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability categorized as problematic has been discovered in Froxlor up to 2.3.5. This affects the function Domains.add. Such manipulation of the argument adminid leads to incorrect authorization. This vulnerability is listed as CVE-2026-41233. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Gutentor Plugin up to 3.5.5 on WordPress. Affected is an unknown function of the component Gutenberg Block Handler. The manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2026-2951. The attack may be launched remotely. There is no exploit available.

A vulnerability identified as problematic has been detected in socialrocket Social Rocket Plugin up to 1.3.4.2 on WordPress. Affected by this vulnerability is an unknown functionality. This manipulation causes cross site scripting. This vulnerability is registered as CVE-2026-1923. Remote exploitation of the attack is possible. No exploit is available.

A vulnerability has been found in cloudways Breeze Cache Plugin up to 2.4.4 on WordPress and classified as critical. Impacted is the function fetch_gravatar_from_remote. This manipulation causes unrestricted upload. The identification of this vulnerability is CVE-2026-3844. It is possible to initiate the attack remotely. There is no exploit available. The affected component should be upgraded.