Skip to content
OpenAdvisories

Archive

7 April 2006

Vulnerabilities first published on this day (UTC), newest first.

21 results · Feed

  • Unscored —
    CVE-2006-1662 Public exploit

    The frontpage option in Limbo CMS 1.0.4.2 and 1.0.4.1 allows remote attackers to execute arbitrary PHP commands via the…

  • Unscored —
    CVE-2006-1661 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SKForum 1.5 and earlier allow remote attackers to inject arbitra…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in Chucky A. Ivey N.T. 1.1.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-1659 Public exploit

    Multiple SQL injection vulnerabilities in Softbiz Image Gallery allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-1673 Public exploit

    Cross-site scripting (XSS) vulnerability in vbugs.php in Dark_Wizard vBug Tracker 3.5.1 and earlier allows remote attac…

  • Unscored —

    Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to ca…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in image_desc.php in Softbiz Image Gallery allows remote attackers to inject a…

  • Unscored —

    Control cards for Cisco Optical Networking System (ONS) 15000 series nodes before 20060405 allow remote attackers to ca…

  • Unscored —
    CVE-2006-1664 Public exploit EPSS 15%

    Buffer overflow in xine_list_delete_current in libxine 1.14 and earlier, as distributed in xine-lib 1.1.1 and earlier, …

  • Unscored —

    Direct static code injection vulnerability in ticker.db.php in Chucky A. Ivey N.T. 1.1.0 allows remote administrators t…

  • Unscored —

    The installation of Cisco Transport Controller (CTC) for Cisco Optical Networking System (ONS) 15000 series nodes adds …

  • Unscored —

    SQL injection vulnerability in forum.php in Arab Portal 2.0.1 stable allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2006-1668 Public exploit

    newimage.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Gallery) 3.1g and earlier allow…

  • Unscored —
    CVE-2006-1667 Public exploit

    SQL injection vulnerability in slides.php in Eric Gerdes Crafty Syntax Image Gallery (CSIG) (aka PHP thumbnail Photo Ga…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Arab Portal 2.0.1 stable allow remote attackers to inject arbitr…

  • Unscored —

    SQL injection vulnerability in chat/messagesL.php3 in phpHeaven Team PHPMyChat 0.14.5 and earlier allows remote attacke…

  • Unscored —

    SQL injection vulnerability in manage_account.php in Tux Racer TuxBank 0.7x and 0.8 allows remote attackers to execute …

  • Unscored —

    Trusted Mobility Agent PC Policy in Trust Digital Trusted Mobility Suite provides a cancel button that bypasses the dom…

  • Unscored —
    CVE-2005-4770 Public exploit

    SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solution…

  • Unscored —

    liby2util in Yet another Setup Tool (YaST) in SUSE Linux before 20051007 preserves permissions and ownerships when copy…

  • Unscored —
    CVE-2005-4769 Public exploit

    SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitr…