Skip to content
OpenAdvisories

Archive

28 February 2006

Vulnerabilities first published on this day (UTC), newest first.

9 results · Clear filters · Feed

  • Unscored —
    CVE-2006-0933 Public exploit

    Cross-site scripting (XSS) vulnerability in PHPX 3.5.9 allows remote attackers to inject arbitrary web script or HTML v…

  • Unscored —
    CVE-2006-0922 Public exploit

    CubeCart 3.0 through 3.6 does not properly check authorization for an administration session because of a missing auth.…

  • Unscored —
    CVE-2006-0927 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the JGS-XA JGS-Gallery Addon 4.0.0 and earlier for Woltlab Burni…

  • Unscored —
    CVE-2006-0936 Public exploit

    Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and exe…

  • Unscored —
    CVE-2006-0920 Public exploit

    Oi! Email Marketing System 3.0 (aka Oi! 3) stores the server's FTP password in cleartext on a Configuration web page, w…

  • Unscored —
    CVE-2006-0925 Public exploit

    Format string vulnerability in the IMAP4rev1 server in Alt-N MDaemon 8.1.1 and possibly 8.1.4 allows remote attackers t…

  • Unscored —
    CVE-2006-0911 Public exploit EPSS 16%

    NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumpti…

  • Unscored —
    CVE-2006-0923 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to injec…

  • Unscored —
    CVE-2006-0906 Public exploit

    SQL injection vulnerability in D3Jeeb Pro 3 allows remote attackers to execute arbitrary SQL commands via the catid par…