Skip to content
OpenAdvisories

Archive

19 May 2006

Vulnerabilities first published on this day (UTC), newest first.

11 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2491 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) bmc/admin.php in BoastMachine (bMachine) 3.1 and earl…

  • Unscored —
    CVE-2006-2483 Public exploit

    PHP remote file inclusion vulnerability in cart_content.php in Squirrelcart 2.2.2 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2490 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Mobotix IP Network Cameras M1 1.9.4.7 and M10 2.0.5.2, and other…

  • Unscored —
    CVE-2006-2487 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ScozNews 1.2.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2485 Public exploit

    PHP remote file inclusion vulnerability in includes/class_template.php in Quezza 1.0 and earlier, and possibly 1.1.0 al…

  • Unscored —
    CVE-2006-2480 Public exploit

    Format string vulnerability in Dia 0.94 allows user-assisted attackers to cause a denial of service (crash) and possibl…

  • Unscored —
    CVE-2006-2473 Public exploit

    Cross-site scripting (XSS) vulnerability in ow.asp in OpenWiki 0.78 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-2474 Public exploit

    SQL injection vulnerability in lshop.cgi in Cosmoshop 8.11.106 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2465 Public exploit

    Buffer overflow in MP3Info 0.8.4 allows attackers to execute arbitrary code via a long command line argument. NOTE: if …

  • Unscored —
    CVE-2006-2460 Public exploit EPSS 10%

    Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variabl…

  • Unscored —
    CVE-2006-2459 Public exploit

    SQL injection vulnerability in messages.php in PHP-Fusion 6.00.307 and earlier allows remote authenticated users to exe…