Skip to content
OpenAdvisories

Archive

29 June 2006

Vulnerabilities first published on this day (UTC), newest first.

28 results · Feed

  • Unscored —

    Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP …

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code vi…

  • Unscored —
    CVE-2006-3317 Public exploit EPSS 17%

    PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in…

  • Unscored —

    SQL injection vulnerability in view.php in phpRaid 3.0.4, and possibly other versions, allows remote attackers to execu…

  • Unscored —

    SQL injection vulnerability in register.php for phpRaid 3.0.6 and possibly other versions, when the authorization type …

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.4 and 3.0.5 allow remote attackers to execute arbitra…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in ashmans and Bill Echlin QaTraq 6.5 RC and earlier allow remote a…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in search.jsp in Netsoft smartNet 2.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2006-3315 Public exploit

    PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows rem…

  • Unscored —
    CVE-2006-3314 Public exploit

    PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows rem…

  • Unscored —

    Unspecified vulnerability in the Windows Client API in Novell GroupWise 5.x through 7 might allow users to obtain "rand…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in UebiMiau Webmail 2.7.10, and 2.7.2 and earlier allow remote atta…

  • Unscored —

    Unspecified vulnerability in the wpprop code for Project EROS bbsengine before 20060622-0315 has unknown impact and rem…

  • Unscored —

    Multiple SQL injection vulnerabilities in Project EROS bbsengine before bbsengine-20060429-1550-jam allow remote attack…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in phpQLAdmin 2.2.7 and earlier allow remote attackers to inject ar…

  • Unscored —
    CVE-2006-3304 Public exploit

    SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-3298 Public exploit

    Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that c…

  • Unscored —
    CVE-2006-3299 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary …

  • Unscored —

    parse_notice (TiCPU) in EnergyMech (emech) before 3.0.2 allows remote attackers to cause a denial of service (crash) vi…

  • Unscored —
    CVE-2006-3294 Public exploit

    PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in pm.php in DeluxeBB 1.07 and earlier allow remote attackers to in…

  • Unscored —
    CVE-2006-3295 Public exploit

    Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-3296 Public exploit

    SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-3300 Public exploit

    PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers t…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in error.php in UebiMiau Webmail 2.7.10 and earlier allows remote attackers to…

  • Unscored —

    PHP remote file inclusion vulnerability in mod_cbsms.php in CBSMS Mambo Module 1.0 and earlier, when register_globals i…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the preparestring function in lib/common.php in Project EROS bbsengine befo…

  • Unscored —
    CVE-2006-3309 Public exploit

    SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attac…