Skip to content
OpenAdvisories

Archive

1 March 2006

Vulnerabilities first published on this day (UTC), newest first.

10 results · Feed

  • Unscored —
    CVE-2006-0939 Public exploit

    SQL injection vulnerability in DCI-Taskeen 1.03 allows remote attackers to execute arbitrary SQL commands via the (1) i…

  • Unscored —
    CVE-2006-0943 Public exploit

    SQL injection vulnerability in the sondages module in index.php in PwsPHP 1.2.3 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-0944 Public exploit

    Archangel Weblog 0.90.02 allows remote attackers to bypass authentication by setting the ba_admin cookie to 1.

  • Unscored —
    CVE-2006-0942 Public exploit

    SQL injection vulnerability in profil.php in PwsPHP 1.2.3, and possibly earlier versions, allows remote attackers to ex…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in post.php in ShoutLIVE 1.1.0 allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-0947 Public exploit

    Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via …

  • Unscored —
    CVE-2006-0940 Public exploit

    Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to …

  • Unscored —
    CVE-2006-0946 Public exploit

    Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attacker…

  • Unscored —

    PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated admini…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in eZ publish 3.7.3 and earlier allows remote attackers to inject arbitrary we…