Skip to content
OpenAdvisories

Archive

6 June 2006

Vulnerabilities first published on this day (UTC), newest first.

32 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2447 Public exploit EPSS 76%

    SpamAssassin before 3.1.3, when running with vpopmail and the paranoid (-P) switch, allows remote attackers to execute …

  • Unscored —
    CVE-2006-2855 Public exploit

    SQL injection vulnerability in index.php in xueBook 1.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2006-2845 Public exploit

    PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2006-2842 Public exploit Scanner template EPSS 47%

    PHP remote file inclusion vulnerability in functions/plugin.php in SquirrelMail 1.4.6 and earlier, if register_globals …

  • Unscored —
    CVE-2006-2853 Public exploit

    SQL injection vulnerability in content.php in abarcar Realty Portal 5.1.5 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2006-2868 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-2848 Public exploit

    links.asp in aspWebLinks 2.0 allows remote attackers to change the administrative password, possibly via a direct reque…

  • Unscored —
    CVE-2006-2861 Public exploit

    SQL injection vulnerability in index.php in Particle Wiki 1.0.2 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-2844 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Redaxo 3.0 allow remote attackers to execute arbitrary PHP code v…

  • Unscored —
    CVE-2006-2849 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in includes/webdav/server.php in Bytehoard 2.1 Epsilon/Delta allows remote atta…

  • Unscored —
    CVE-2006-2857 Public exploit

    SQL injection vulnerability in index.php in LifeType 1.0.4 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2006-2873 Public exploit

    Cross-site scripting (XSS) vulnerability in hava.asp in Enigma Haber 4.2 allows remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2006-2852 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows re…

  • Unscored —
    CVE-2006-2871 Public exploit

    PHP remote file inclusion vulnerability in include/common.php in CyBoards PHP Lite 1.25 allows remote attackers to exec…

  • Unscored —
    CVE-2006-2867 Public exploit

    SQL injection vulnerability in editpost.php in CoolForum 0.8.3 beta and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2006-2866 Public exploit

    PHP remote file inclusion vulnerability in layout/prepend.php in DotClear 1.2.4 and earlier allows remote attackers to …

  • Unscored —
    CVE-2006-2858 Public exploit

    SQL injection vulnerability in viewmsg.asp in LocazoList Classifieds 1.05e allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2835 Public exploit

    SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) fo…

  • Unscored —
    CVE-2006-2854 Public exploit

    SQL injection vulnerability in index.php in iBWd Guestbook 1.0 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-2860 Public exploit EPSS 13%

    PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2006-2864 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-2834 Public exploit

    PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to…

  • Unscored —
    CVE-2006-2843 Public exploit

    PHP remote file inclusion vulnerability in Redaxo 2.7.4 allows remote attackers to execute arbitrary PHP code via a URL…

  • Unscored —
    CVE-2006-2847 Public exploit

    SQL injection vulnerability in links.asp in aspWebLinks 2.0 allows remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2006-2841 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute…

  • Unscored —
    CVE-2006-2865 Public exploit

    PHP remote file inclusion vulnerability in template.php in phpBB 2 allows remote attackers to execute arbitrary PHP cod…

  • Unscored —
    CVE-2006-2863 Public exploit

    PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-2468 Public exploit

    Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2005-2460 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-2461 Public exploit

    Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to exe…

  • Unscored —
    CVE-2005-2466 Public exploit

    Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers …

  • Unscored —
    CVE-2005-2467 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject…