Skip to content
OpenAdvisories

Archive

January 2006

Vulnerabilities first published in this month (UTC), newest first.

134 results · Clear filters · Feed

  • Unscored —
    CVE-2005-4619 Public exploit

    SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-0079 Public exploit

    SQL injection vulnerability in auth.php in ScozNet ScozBook BETA 1.1 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-0074 Public exploit

    SQL injection vulnerability in profile.php in PHPenpals allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-0076 Public exploit

    PHP remote file include vulnerability in forum.php in oaBoard 1.0 allows remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-0075 Public exploit

    Direct static code injection vulnerability in phpBook 1.3.2 and earlier allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2006-0072 Public exploit

    Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o comma…

  • Unscored —
    CVE-2006-0073 Public exploit

    Cross-site scripting (XSS) vulnerability in DiscusWare Discus Freeware 3.10.5 and Professional 3.10.4 allows remote att…

  • Unscored —
    CVE-2006-0066 Public exploit

    SQL injection vulnerability in index.php in PHPjournaler 1.0 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2006-0064 Public exploit

    PHP remote file include vulnerability in includes/orderSuccess.inc.php in CubeCart allows remote attackers to execute a…

  • Unscored —
    CVE-2005-4605 Public exploit

    The procfs code (proc_misc.c) in Linux 2.6.14.3 and other versions before 2.6.15 allows attackers to read sensitive ker…

  • Unscored —
    CVE-2005-4593 Public exploit EPSS 14%

    PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allow…

  • Unscored —
    CVE-2005-4596 Public exploit

    Cross-site scripting (XSS) vulnerability in read.php in AdesGuestbook 2.0 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2005-4598 Public exploit

    Cross-site scripting (XSS) vulnerability in home.php in OoApp Guestbook 2.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2005-4600 Public exploit

    Directory traversal vulnerability in tiny_mce_gzip.php in TinyMCE Compressor PHP before 1.06 allows remote attackers to…