Skip to content
OpenAdvisories

Archive

May 2006

Vulnerabilities first published in this month (UTC), newest first.

← April 2006 2006 / May June 2006 →
  1. 122
  2. 218
  3. 314
  4. 429
  5. 536
  6. 6 
  7. 7 
  8. 82
  9. 966
  10. 105
  11. 118
  12. 1266
  13. 13 
  14. 14 
  15. 1522
  16. 1631
  17. 1721
  18. 187
  19. 1936
  20. 209
  21. 214
  22. 2242
  23. 2316
  24. 2433
  25. 2519
  26. 2613
  27. 273
  28. 282
  29. 291
  30. 3038
  31. 3146
All Critical High Medium Low Exploited only Public exploit

199 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2217 Public exploit

    SQL injection vulnerability in index.php in Invision Power Board allows remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-2212 Public exploit EPSS 60%

    Buffer overflow in KarjaSoft Sami FTP Server 2.0.2 and earlier allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2006-2209 Public exploit

    Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2211 Public exploit

    Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitra…

  • Unscored —
    CVE-2006-2214 Public exploit

    Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-2208 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject …

  • Unscored —
    CVE-2006-2175 Public exploit

    PHP remote file inclusion vulnerability in FtrainSoft Fast Click 2.3.8 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2006-2178 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CyberBuild allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-2182 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8…

  • Unscored —
    CVE-2006-2163 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Pinnacle Cart 3.33 and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2006-2180 Public exploit

    Buffer overflow in Golden FTP Server Pro 2.70 allows remote attackers to cause a denial of service (application crash) …

  • Unscored —
    CVE-2006-2176 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in links.php in PHP Linkliste 1.0b allow remote attackers to inject…

  • Unscored —
    CVE-2006-2174 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin/server_day_stats.php in Virtual Hosting Control System (VH…

  • Unscored —
    CVE-2006-2181 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Albinator 2.0.8 and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-2179 Public exploit

    Multiple SQL injection vulnerabilities in CyberBuild allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-2177 Public exploit

    Cross-site scripting (XSS) vulnerability in viewcat.php in geoBlog 1.0 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-2187 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject…

  • Unscored —
    CVE-2006-2156 Public exploit

    Directory traversal vulnerability in help/index.php in X7 Chat 2.0 and earlier allows remote attackers to include arbit…

  • Unscored —
    CVE-2006-2151 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in toplist.php in phpBB TopList 1.3.8 and earlier, when register_globals is ena…

  • Unscored —
    CVE-2006-2149 Public exploit

    PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register…

  • Unscored —
    CVE-2006-2152 Public exploit

    PHP remote file inclusion vulnerability in admin/addentry.php in phpBB Advanced Guestbook 2.4.0 and earlier, when regis…

  • Unscored —
    CVE-2006-2143 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in TextFileBB 1.0.16 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-2138 Public exploit

    Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2006-2142 Public exploit

    PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-2144 Public exploit

    PHP remote file inclusion vulnerability in kopf.php in DMCounter 0.9.2-b allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-2134 Public exploit

    PHP remote file inclusion vulnerability in /includes/kb_constants.php in Knowledge Base Mod for PHPbb 2.0.2 and earlier…

  • Unscored —
    CVE-2006-2137 Public exploit

    PHP remote file inclusion vulnerability in master.php in OpenPHPNuke and 2.3.3 earlier allows remote attackers to execu…

  • Unscored —
    CVE-2006-2109 Public exploit

    Cross-site scripting (XSS) vulnerability in the parse_query_str function in include/print.php in JSBoard 2.0.10 and 2.0…

  • Unscored —
    CVE-2006-2141 Public exploit

    Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows r…

  • Unscored —
    CVE-2006-2140 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in OrbitHYIP 2.0 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-2127 Public exploit

    SQL injection vulnerability in weblog_posting.php in Blog Mod 0.2.x allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2006-2132 Public exploit

    SQL injection vulnerability in detail.asp in DUclassified allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-2124 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SunShop 3.5 and earlier allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2006-2122 Public exploit

    PHP remote file inclusion vulnerability in index.php in CoolMenus allows remote attackers to execute arbitrary code via…

  • Unscored —
    CVE-2006-2121 Public exploit

    PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to e…

  • Unscored —
    CVE-2006-2126 Public exploit

    SQL injection vulnerability in pocategories.php in MaxTrade 1.0.1 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-2119 Public exploit

    PHP remote file inclusion vulnerability in event/index.php in Artmedic Event allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2116 Public exploit

    planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/gallery_admin.php.

  • Unscored —
    CVE-2006-2111 Public exploit EPSS 41%

    A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive i…