Skip to content
OpenAdvisories

Archive

6 June 2006

Vulnerabilities first published on this day (UTC), newest first.

54 results · Feed

  • Unscored —
    CVE-2006-2447 Public exploit EPSS 76%

    SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute …

  • Unscored —
    CVE-2006-2855 Public exploit

    SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remo…

  • Unscored —

    PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-2845 Public exploit

    PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2006-2842 Public exploit Scanner template EPSS 47%

    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals …

  • Unscored —

    Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 thr…

  • Unscored —
    CVE-2006-2853 Public exploit

    SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary …

  • Unscored —

    PHP remote file inclusion vulnerability in MyBloggie 2.1.1 and earlier allows remote attackers to execute arbitrary PHP…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-2868 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-2848 Public exploit

    links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reque…

  • Unscored —
    CVE-2006-2861 Public exploit

    SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-2844 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2006-2849 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote atta…

  • Unscored —

    Unspecified vulnerability in OSADS Alliance Database before 1.4 has unknown impact and attack vectors related to a "Sec…

  • Unscored —
    CVE-2006-2857 Public exploit

    SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —

    Unspecified vulnerability in the CHM unpacker in avast! before 4.7.844 has unknown impact and remote attack vectors.

  • Unscored —
    CVE-2006-2873 Public exploit

    Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary we…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2006-2852 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2006-2871 Public exploit

    PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to exec…

  • Unscored —

    Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery …

  • Unscored —
    CVE-2006-2867 Public exploit

    SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2866 Public exploit

    PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in recentchanges.php in PHP Labware LabWiki 1.0 and earlier allows remote atta…

  • Unscored —
    CVE-2006-2858 Public exploit

    SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary…

  • Unscored —

    SQL injection vulnerability in viewimage.php in Particle Gallery 1.0.0 and earlier allows remote attackers to execute a…

  • Unscored —

    SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to …

  • Unscored —

    ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions for chang…

  • Unscored —
    CVE-2006-2835 Public exploit

    SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) fo…

  • Unscored —
    CVE-2006-2854 Public exploit

    SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-2860 Public exploit EPSS 13%

    PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-2864 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2834 Public exploit

    PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-2843 Public exploit

    PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL…

  • Unscored —
    CVE-2006-2847 Public exploit

    SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-2841 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Print.PHP in VisionGate Portal System allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2865 Public exploit

    PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP cod…