Skip to content
OpenAdvisories

Archive

26 January 2006

Vulnerabilities first published on this day (UTC), newest first.

12 results · Feed

  • Unscored —

    Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaini…

  • Unscored —
    CVE-2006-0443 Public exploit

    Cross-site scripting (XSS) vulnerability in archive.php in CheesyBlog 1.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-0444 Public exploit

    SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrar…

  • Unscored —

    Text Rider 2.4 stores sensitive data in the data directory under the web document root with insufficient access control…

  • Unscored —
    CVE-2006-0442 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in usercp.php in MyBulletinBoard (MyBB) 1.02 allow remote attackers…

  • Unscored —
    CVE-2006-0441 Public exploit EPSS 71%

    Stack-based buffer overflow in Sami FTP Server 2.0.1 allows remote attackers to execute arbitrary code via a long USER …

  • Unscored —

    index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an i…

  • Unscored —

    The embedded HSQLDB in ParosProxy before 3.2.7, when running with JDK 1.4.2 before 1.4.2_08, allows local users to exec…

  • Unscored —

    SQL injection vulnerability in RT Internet Solutions (RTIS) WebAdmin allows remote attackers to execute arbitrary SQL c…

  • Unscored —

    Unspecified vulnerability in HP HP-UX B.11.00, B.11.04, and B.11.11 allows local users to gain privileges via unknown a…

  • Unscored —

    Directory traversal vulnerability in action.php in phpXplorer allows remote attackers to read arbitrary files via ".." …

  • Unscored —

    Unspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Ser…