Skip to content
OpenAdvisories

Archive

20 April 2006

Vulnerabilities first published on this day (UTC), newest first.

25 results · Clear filters · Feed

  • Unscored —
    CVE-2006-1943 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Smarter Scripts IntelliLink Pro 5.06 and earlier allow remote at…

  • Unscored —
    CVE-2006-1941 Public exploit

    Neon Responder 5.4 for LANsurveyor allows remote attackers to cause a denial of service (application outage) via a craf…

  • Unscored —
    CVE-2006-1944 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SibSoft CommuniMail 1.2 and earlier allow remote attackers to in…

  • Unscored —
    CVE-2006-1945 Public exploit

    Cross-site scripting (XSS) vulnerability in awstats.pl in AWStats 6.5 and earlier allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-1950 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in banners.cgi in PerlCoders BannerFarm 2.3 and earlier allow remot…

  • Unscored —
    CVE-2006-1946 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Visale 1.0 and earlier allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-1947 Public exploit

    Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute…

  • Unscored —
    CVE-2006-1931 Public exploit EPSS 10%

    The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service …

  • Unscored —
    CVE-2006-1913 Public exploit

    Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attack…

  • Unscored —
    CVE-2006-1917 Public exploit

    SQL injection vulnerability in member.php in Blackorpheus ClanMemberSkript 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1921 Public exploit

    nettools.php in PHP Net Tools 2.7.1 allows remote attackers to execute arbitrary commands via shell metacharacters in t…

  • Unscored —
    CVE-2006-1922 Public exploit

    PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to ex…

  • Unscored —
    CVE-2006-1918 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Papoo 2.1.5 allow remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2006-1909 Public exploit

    Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2006-1929 Public exploit

    PHP remote file inclusion vulnerability in include/common.php in I-Rater Platinum allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-1912 Public exploit

    MyBB (MyBulletinBoard) 1.1.0 does not set the constant KILL_GLOBAL variable in (1) global.php and (2) inc/init.php, whi…

  • Unscored —
    CVE-2006-1919 Public exploit

    PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-1916 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in profile.php in DbbS 2.0-alpha and earlier allow remote attackers…

  • Unscored —
    CVE-2006-1925 Public exploit

    Directory traversal vulnerability in the editnews module (inc/editnews.mdu) in index.php in CuteNews 1.4.1 allows remot…

  • Unscored —
    CVE-2006-1926 Public exploit

    SQL injection vulnerability in showtopic.php in ThWboard 2.84 beta 3 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-1906 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in jjgan852 phpLister 0.4.1 allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-1900 Public exploit EPSS 17%

    Multiple buffer overflows in World Wide Web Consortium (W3C) Amaya 9.4, and possibly other versions including 8.x befor…

  • Unscored —
    CVE-2006-1905 Public exploit EPSS 15%

    Multiple format string vulnerabilities in xiTK (xitk/main.c) in xine 0.99.3 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-1878 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in phpFaber TopSites allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-1893 Public exploit

    Cross-site scripting (XSS) vulnerability in print.php in ar-blog 5.2 allows remote attackers to inject arbitrary web sc…