Skip to content
OpenAdvisories

Archive

6 June 2006

Vulnerabilities first published on this day (UTC), newest first.

54 results · Feed

  • Unscored —
    CVE-2006-2863 Public exploit

    PHP remote file inclusion vulnerability in class.cs_phpmailer.php in CS-Cart 1.3.3 allows remote attackers to execute a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in forum_search.asp in Intelligent Solutions Inc. ASP Discussion Forum allows …

  • Unscored —
    CVE-2005-2468 Public exploit

    Multiple SQL injection vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to execute arbitrary S…

  • Unscored —

    login.php in PCXP/TOPPE CMS allows remote attackers to bypass authentication and gain privileges by modifying the cooki…

  • Unscored —
    CVE-2005-2460 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Kayako liveResponse 2.x allow remote attackers to inject arbitra…

  • Unscored —
    CVE-2005-2461 Public exploit

    Multiple SQL injection vulnerabilities in the calendar feature in Kayako liveResponse 2.x allow remote attackers to exe…

  • Unscored —
    CVE-2005-2466 Public exploit

    Multiple SQL injection vulnerabilities in the auth_user function in admin.php in OpenBook 1.2.2 allow remote attackers …

  • Unscored —

    Kayako liveResponse 2.x allows remote attackers to obtain sensitive information via a direct request to addressbook.php…

  • Unscored —

    Kayako liveResponse 2.x, when logging in a user, records the password in plaintext in the URL, which allows local users…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2005-2467 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MySQL Eventum 1.5.5 and earlier allow remote attackers to inject…

  • Unscored —

    Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInf…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x be…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to in…