Skip to content
OpenAdvisories

Archive

14 March 2006

Vulnerabilities first published on this day (UTC), newest first.

50 results · Feed

  • Unscored —

    Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-1209 Public exploit

    PHP Advanced Transfer Manager 1.00 through 1.30 stores sensitive information, including password hashes, under the web …

  • Unscored —
    CVE-2006-1202 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in textfileBB 1.0 and earlier allow remote attackers to inject arbi…

  • Unscored —
    CVE-2006-1212 Public exploit

    Unspecified vulnerability in index.php in Core CoreNews 2.0.1 allows remote attackers to execute arbitrary commands via…

  • Unscored —

    PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to includ…

  • Unscored —
    CVE-2006-1205 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in myWebland myBloggie 2.1.3 beta and earlier allow remote attacker…

  • Unscored —
    CVE-2006-1214 Public exploit

    UnrealIRCd 3.2.3 allows remote attackers to cause an unspecified denial of service by causing a linked server to send m…

  • Unscored —

    Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, fo…

  • Unscored —

    Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name …

  • Unscored —

    PHP Upload Center stores password hashes under the web root with insufficient access control, which allows remote attac…