Skip to content
OpenAdvisories

Archive

19 April 2006

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2006-1837 Public exploit

    SQL injection vulnerability in archiv2.php in Fuju News 1.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-1832 Public exploit

    sysinfo.cgi in sysinfo 1.21 allows remote attackers to obtain the installation path via the debugger action.

  • Unscored —
    CVE-2006-1850 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in xFlow 5.46.11 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-1853 Public exploit

    Multiple SQL injection vulnerabilities in ModernBill 4.3.2 and earlier allow remote attackers or administrators to exec…

  • Unscored —
    CVE-2006-1839 Public exploit

    PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when register_globals is enabled, allows …

  • Unscored —
    CVE-2006-1831 Public exploit

    Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allow…

  • Unscored —
    CVE-2006-1838 Public exploit

    edit_kategorie.php in Fuju News 1.0 allows remote attackers to bypass authentication by setting the authorized cookie.

  • Unscored —
    CVE-2006-1834 Public exploit EPSS 12%

    Integer signedness error in Opera before 8.54 allows remote attackers to execute arbitrary code via long values in a st…

  • Unscored —
    CVE-2006-1849 Public exploit

    Multiple SQL injection vulnerabilities in members_only/index.cgi in xFlow 5.46.11 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-1852 Public exploit

    SQL injection vulnerability in category.php in Article Publisher Pro 1.0.1 and earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-1835 Public exploit

    Cross-site scripting (XSS) vulnerability in yearcal.php in Calendarix allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-1828 Public exploit

    SQL injection vulnerability in php121language.php in PHP121 1.4 allows remote attackers to execute arbitrary SQL comman…