Skip to content
OpenAdvisories

Archive

19 January 2006

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0324 Public exploit

    SQL injection vulnerability in WebspotBlogging 3.0 allows remote attackers to execute arbitrary SQL commands and bypass…

  • Unscored —
    CVE-2006-0315 Public exploit

    index.php in EZDatabase before 2.1.2 does not properly cleanse the p parameter before constructing and including a .php…

  • Unscored —
    CVE-2006-0318 Public exploit

    SQL injection vulnerability in index.php in BlogPHP 1.0, when magic_quotes_gpc is disabled, allows remote attackers to …

  • Unscored —
    CVE-2006-0312 Public exploit

    create.php in aoblogger 2.3 allows remote attackers to bypass authentication and create new blog entries by setting the…

  • Unscored —
    CVE-2006-0311 Public exploit

    SQL injection vulnerability in login.php in aoblogger 2.3 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-0319 Public exploit

    Directory traversal vulnerability in the FTP server (port 22003/tcp) in Farmers WIFE 4.4 SP1 allows remote attackers to…

  • Unscored —
    CVE-2006-0317 Public exploit

    Cross-site scripting (XSS) vulnerability in rkrt_stats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attacker…

  • Unscored —
    CVE-2006-0310 Public exploit

    Cross-site scripting (XSS) vulnerability in aoblogger 2.3 allows remote attackers to inject arbitrary Javascript via a …

  • Unscored —
    CVE-2006-0320 Public exploit

    SQL injection vulnerability in admin/processlogin.php in Bit 5 Blog 8.01 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-0306 Public exploit EPSS 12%

    The DM Primer (dmprimer.exe) in the DM Deployment Common Component in Computer Associates (CA) BrightStor Mobile Backup…

  • Unscored —
    CVE-2006-0304 Public exploit

    Buffer overflow in Dual DHCP DNS Server 1.0 allows remote attackers to cause a denial of service (application crash) an…

  • Unscored —
    CVE-2006-0308 Public exploit

    PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, mod…