Skip to content
OpenAdvisories

Archive

June 2006

Vulnerabilities first published in this month (UTC), newest first.

202 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3324 Public exploit

    The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 80…

  • Unscored —
    CVE-2006-3325 Public exploit

    client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier al…

  • Unscored —
    CVE-2006-3329 Public exploit

    SQL injection vulnerability in search.php in PHP/MySQL Classifieds (PHP Classifieds) allows remote attackers to execute…

  • Unscored —
    CVE-2006-3323 Public exploit

    PHP remote file inclusion vulnerability in admin/admin.php in MF Piadas 1.0 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-3317 Public exploit EPSS 17%

    PHP remote file inclusion vulnerability in phpRaid 3.0.6 allows remote attackers to execute arbitrary code via a URL in…

  • Unscored —
    CVE-2006-3315 Public exploit

    PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows rem…

  • Unscored —
    CVE-2006-3314 Public exploit

    PHP remote file inclusion vulnerability in page.php in an unspecified RahnemaCo.com product, possibly eShop, allows rem…

  • Unscored —
    CVE-2006-3304 Public exploit

    SQL injection vulnerability in cp.php in DeluxeBB 1.07 and earlier allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2006-3298 Public exploit

    Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that c…

  • Unscored —
    CVE-2006-3299 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Usenet Script 0.5 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2006-3294 Public exploit

    PHP remote file inclusion vulnerability in mod_cbsms_messages.php in CBSMS Mambo Module 1.0 and earlier, when register_…

  • Unscored —
    CVE-2006-3295 Public exploit

    Cross-site scripting (XSS) vulnerability in header.php in Open Guestbook 0.5 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-3296 Public exploit

    SQL injection vulnerability in view.php in Open Guestbook 0.5 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2006-3300 Public exploit

    PHP remote file inclusion vulnerability in sms_config/gateway.php in PhpMySms 2.0 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-3309 Public exploit

    SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit (SPT) 1.4.0 and earlier allows remote attac…

  • Unscored —
    CVE-2006-3292 Public exploit

    SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2006-3280 Public exploit EPSS 56%

    Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information …

  • Unscored —
    CVE-2006-3271 Public exploit

    Multiple SQL injection vulnerabilities in Softbiz Dating 1.0 allow remote attackers to execute SQL commands via the (1)…

  • Unscored —
    CVE-2006-3277 Public exploit

    The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier …

  • Unscored —
    CVE-2006-3269 Public exploit

    PHP remote file inclusion vulnerability in includes/functions_cms.php in THoRCMS 1.3.1 allows remote attackers to execu…

  • Unscored —
    CVE-2006-3281 Public exploit EPSS 48%

    Microsoft Internet Explorer 6.0 does not properly handle Drag and Drop events, which allows remote user-assisted attack…

  • Unscored —
    CVE-2006-1470 Public exploit

    OpenLDAP in Apple Mac OS X 10.4 up to 10.4.6 allows remote attackers to cause a denial of service (crash) via an invali…

  • Unscored —
    CVE-2006-3262 Public exploit

    SQL injection vulnerability in the Weblinks module (weblinks.php) in Mambo 4.6rc1 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-3266 Public exploit EPSS 18%

    Multiple PHP remote file inclusion vulnerabilities in Bee-hive Lite 1.2 and earlier, when register_globals is enabled, …

  • Unscored —
    CVE-2006-3259 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.5 allow remote attackers to inject arbitrary web script…

  • Unscored —
    CVE-2006-3255 Public exploit

    SQL injection vulnerability in showmods.php in Woltlab Burning Board (WBB) 1.2 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3256 Public exploit

    SQL injection vulnerability in report.php in Woltlab Burning Board (WBB) 2.3.1 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2006-3253 Public exploit

    Cross-site scripting (XSS) vulnerability in member.php in vBulletin 3.5.x allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-3254 Public exploit

    SQL injection vulnerability in newthread.php in Woltlab Burning Board (WBB) 2.0 RC2 allows remote attackers to execute …

  • Unscored —
    CVE-2006-3252 Public exploit EPSS 62%

    Buffer overflow in the Online Registration Facility for Algorithmic Research PrivateWire VPN software up to 3.7 allows …

  • Unscored —
    CVE-2006-3245 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in activatemember in mvnForum 1.0 GA and earlier allow remote attac…

  • Unscored —
    CVE-2006-3011 Public exploit

    The error_log function in basic_functions.c in PHP before 4.4.4 and 5.x before 5.1.5 allows local users to bypass safe …

  • Unscored —
    CVE-2006-3228 Public exploit EPSS 12%

    Buffer overflow in in_midi.dll for WinAmp 2.90 up to 5.23, including 5.21, allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-2310 Public exploit

    BlueDragon Server and Server JX 6.2.1.286 for Windows allows remote attackers to cause a denial of service (hang) via a…

  • Unscored —
    CVE-2006-3221 Public exploit

    SQL injection vulnerability in index.php in DataLife Engine 4.1 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-3213 Public exploit

    SQL injection vulnerability in WeBBoA Hosting 1.1 allows remote attackers to execute arbitrary SQL commands via the id …

  • Unscored —
    CVE-2006-3210 Public exploit EPSS 14%

    Ralf Image Gallery (RIG) 0.7.4 and other versions before 1.0, when register_globals is enabled, allows remote attackers…

  • Unscored —
    CVE-2006-3199 Public exploit EPSS 15%

    Opera 9 allows remote attackers to cause a denial of service (crash) via an A tag with an href attribute with a URL con…

  • Unscored —
    CVE-2006-2914 Public exploit EPSS 21%

    PHP remote file inclusion vulnerability in DeluxeBB 1.06 allows remote attackers to execute arbitrary code via a URL in…

  • Unscored —
    CVE-2006-3185 Public exploit

    PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbi…