Skip to content
OpenAdvisories

Archive

27 January 2006

Vulnerabilities first published on this day (UTC), newest first.

20 results · Feed

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-0461 Public exploit

    Cross-site scripting (XSS) vulnerability in core.input.php in ExpressionEngine 1.4.1 allows remote attackers to inject …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in IdeoContent Manager allows remote attackers to inject arbitrary web script …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in risultati_ricerca.php in active121 Site Manager allows remote attackers to …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.asp in Goldstag Content Management System allows remote attackers to…

  • Unscored —
    CVE-2006-0462 Public exploit

    SQL injection vulnerability in comentarios.php in AndoNET Blog 2004.09.02 allows remote attackers to execute arbitrary …

  • Unscored —

    ioFTPD 0.5.84 u responds with different messages depending on whether or not a username exists, which allows remote att…

  • Unscored —
    CVE-2005-4671 Public exploit

    Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attack…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remot…

  • Unscored —
    CVE-2005-4674 Public exploit

    Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2005-4675 Public exploit

    Cross-site scripting (XSS) vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2005-4670 Public exploit

    Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attack…

  • Unscored —

    Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown…

  • Unscored —

    Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has …

  • Unscored —
    CVE-2006-0057 EPSS 20%

    Microsoft Internet Explorer 5.01, 5.5, and 6 allows remote attackers to bypass the Kill bit settings for dangerous Acti…

  • Unscored —
    CVE-2006-0450 Public exploit

    phpBB 2.0.19 and earlier allows remote attackers to cause a denial of service (application crash) by (1) registering ma…

  • Unscored —

    Early termination vulnerability in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allows remote attackers t…

  • Unscored —

    Unspecified vulnerability in WeBWorK 2.1.3 and 2.2-pre1 allows remote privileged attackers to execute arbitrary command…

  • Unscored —

    Multiple directory traversal vulnerabilities in (1) EPSTIMAP4S.EXE and (2) SPA-IMAP4S.EXE in the IMAP service in E-Post…

  • Unscored —

    Multiple buffer overflows in E-Post Mail Server 4.10 and SPA-PRO Mail @Solomon 4.00 allow remote attackers to execute a…