Skip to content
OpenAdvisories

Archive

7 June 2006

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2006-2901 Public exploit

    The web server for D-Link Wireless Access-Point (DWL-2100ap) firmware 2.10na and earlier allows remote attackers to obt…

  • Unscored —
    CVE-2006-2888 Public exploit

    PHP remote file inclusion vulnerability in _wk/wk_lang.php in Wikiwig 4.1 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2006-2889 Public exploit

    Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute…

  • Unscored —
    CVE-2006-2892 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in GANTTy 1.0.3 allows remote attackers to inject arbitrary HTML …

  • Unscored —
    CVE-2006-2884 Public exploit

    SQL injection vulnerability in index.php in Kmita FAQ 1.0 allows remote attackers to execute arbitrary SQL commands via…

  • Unscored —
    CVE-2006-2883 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Kmita FAQ 1.0 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-2896 Public exploit

    profile.php in FunkBoard CF0.71 allows remote attackers to change arbitrary passwords via a modified uid hidden form fi…

  • Unscored —
    CVE-2006-2894 Public exploit

    Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, Mozilla SeaMonkey 1.0.2 and other versions before …

  • Unscored —
    CVE-2006-2881 Public exploit EPSS 18%

    Multiple PHP remote file inclusion vulnerabilities in DreamAccount 3.1 and earlier, when register_globals is enabled, a…

  • Unscored —
    CVE-2006-2887 Public exploit

    Multiple SQL injection vulnerabilities in myNewsletter 1.1.2 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-2899 Public exploit

    Unspecified vulnerability in ESTsoft InternetDISK versions before 2006/04/20 allows remote authenticated users to execu…

  • Unscored —
    CVE-2006-2875 Public exploit

    Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple p…

  • Unscored —
    CVE-2006-2877 Public exploit

    PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PH…