Skip to content
OpenAdvisories

Archive

9 January 2006

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0146 Public exploit EPSS 13%

    The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuk…

  • Unscored —
    CVE-2006-0147 Public exploit EPSS 13%

    Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple…

  • Unscored —
    CVE-2005-4637 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kayako SupportSuite 3.00.26 and earlier allow remot…

  • Unscored —
    CVE-2006-0143 Public exploit EPSS 31%

    Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and cause a denial of servi…

  • Unscored —
    CVE-2006-0136 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the guestbook module in modules.php in Phanatic Softwares Chimer…

  • Unscored —
    CVE-2006-0137 Public exploit

    SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attac…

  • Unscored —
    CVE-2006-0123 Public exploit

    Multiple SQL injection vulnerabilities in ADN Forum 1.0b allow remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-0115 Public exploit

    Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2006-0138 Public exploit

    aMSN (aka Alvaro's Messenger) allows remote attackers to cause a denial of service (client hang and termination of clie…

  • Unscored —
    CVE-2006-0133 Public exploit

    Multiple directory traversal vulnerabilities in AIX 5.3 ML03 allow local users to determine the existence of files and …

  • Unscored —
    CVE-2006-0125 Public exploit

    Unspecified vulnerability in appserv/main.php in AppServ 2.4.5 allows remote attackers to include arbitrary files via t…

  • Unscored —
    CVE-2006-0135 Public exploit

    SQL injection vulnerability in login.php in TheWebForum (twf) 1.2.1 allows remote attackers to execute arbitrary SQL co…