Skip to content
OpenAdvisories

Archive

25 February 2006

Vulnerabilities first published on this day (UTC), newest first.

14 results · Feed

  • Unscored —
    CVE-2006-0891 Public exploit

    Multiple directory traversal vulnerabilities in NOCC Webmail 1.0 allow remote attackers to include arbitrary files via …

  • Unscored —

    Directory traversal vulnerability in SpeedProject Squeez 5.1, as used in (1) ZipStar 5.1 and (2) SpeedCommander 11.01.4…

  • Unscored —
    CVE-2006-0888 Public exploit

    index.php in Invision Power Board (IPB) 2.0.1, with Code Confirmation disabled, allows remote attackers to cause an uns…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in register.php in DEV web management system 1.5 allows remote attackers to in…

  • Unscored —
    CVE-2006-0885 Public exploit

    Cross-site scripting (XSS) vulnerability in show_news.php in CuteNews 1.4.1 allows remote attackers to inject arbitrary…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Calcium 3.10.1 allows remote attackers to inject arbitrary web script or HT…

  • Unscored —

    NOCC Webmail 1.0 stores e-mail attachments in temporary files with predictable filenames, which makes it easier for rem…

  • Unscored —

    SQL injection vulnerability in VCS Virtual Program Management Intranet (VPMi) Enterprise 3.3 allows remote attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Sources/Register.php in Simple Machine Forum (SMF) 1.0.6 allows remote atta…

  • Unscored —

    NOCC Webmail 1.0 allows remote attackers to obtain sensitive information via a direct request to (1) the profiles direc…

  • Unscored —

    Crypt::CBC Perl module 2.16 and earlier, when running in RandomIV mode, uses an initialization vector (IV) of 8 bytes, …

  • Unscored —

    NOCC Webmail 1.0 allows remote attackers to obtain the installation path via a direct request to html/header.php.

  • Unscored —
    CVE-2006-0887 Public exploit

    Eval injection vulnerability in sessions.inc in PHP Base Library (PHPLib) before 7.4a, when index.php3 from the PHPLib …

  • Unscored —
    CVE-2006-0894 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in NOCC Webmail 1.0 allow remote attackers to inject arbitrary web …