Skip to content
OpenAdvisories

Archive

18 January 2006

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0287 Public exploit EPSS 29%

    Unspecified vulnerability in the Oracle HTTP Server component of Oracle Database Server 10.1.0.5 and Application Server…

  • Unscored —
    CVE-2006-0251 Public exploit

    Cross-site scripting (XSS) vulnerability in fom.cgi in Faq-O-Matic 2.711 allows remote attackers to inject arbitrary we…

  • Medium —
    CVE-2006-0254 Public exploit EPSS 32%

    Apache Geronimo console 1.0 vulnerable to cross-site scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by t…

  • Unscored —
    CVE-2006-0249 Public exploit

    SQL injection vulnerability in viewcat.php in BitDamaged geoBlog MOD_1.0 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-0244 Public exploit

    Directory traversal vulnerability in workspaces.php in phpXplorer 0.9.33 allows remote attackers to include arbitrary f…

  • Unscored —
    CVE-2006-0237 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in GTP iCommerce allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-0235 Public exploit

    SQL injection vulnerability in WhiteAlbum 2.5 allows remote attackers to execute arbitrary SQL commands via the dir par…

  • Unscored —
    CVE-2006-0240 Public exploit

    Multiple SQL injection vulnerabilities in Simple Blog 2.1 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2006-0234 Public exploit

    SQL injection vulnerability in index.php in microBlog 2.0 RC-10 allows remote attackers to execute arbitrary SQL comman…