Skip to content
OpenAdvisories

Archive

June 2006

Vulnerabilities first published in this month (UTC), newest first.

← May 2006 2006 / June July 2006 →
  1. 140
  2. 242
  3. 315
  4. 4 
  5. 526
  6. 654
  7. 728
  8. 86
  9. 915
  10. 10 
  11. 11 
  12. 1239
  13. 1347
  14. 148
  15. 1529
  16. 1616
  17. 171
  18. 18 
  19. 1936
  20. 202
  21. 2116
  22. 2237
  23. 2341
  24. 2420
  25. 25 
  26. 269
  27. 2746
  28. 2824
  29. 2928
  30. 3021
All Critical High Medium Low Exploited only Public exploit

646 results · Feed

  • Unscored —
    CVE-2006-3004

    Multiple cross-site scripting (XSS) vulnerabilities in Ez Ringtone Manager allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2006-3000

    Cross-site scripting (XSS) vulnerability in search.php in OkScripts OkArticles 1.0 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-2998 Public exploit

    PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2006-2996 Public exploit

    PHP remote file inclusion vulnerability in inc/design.inc.php in LoveCompass aePartner 0.8.3 and earlier allows remote …

  • Unscored —
    CVE-2006-2984

    Cross-site scripting (XSS) vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-2993

    Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2006-2992

    Cross-site scripting (XSS) vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers t…

  • Unscored —
    CVE-2006-2987

    Multiple SQL injection vulnerabilities in Dominios Europa PICRATE (aka TAL RateMyPic) 1.0 allow remote attackers to exe…

  • Unscored —
    CVE-2006-2989

    Cross-site scripting (XSS) vulnerability in listpics.asp in ASP ListPics 4.3 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2006-2995 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebprojectDB 0.1.3 and earlier allow remote attackers to execute …

  • Unscored —
    CVE-2006-2908 Public exploit

    The domecode function in inc/functions_post.php in MyBulletinBoard (MyBB) 1.1.2, and possibly other versions, allows re…

  • Unscored —
    CVE-2006-2988

    Cross-site scripting (XSS) vulnerability in dictionary.php in Chemical Dictionary allows remote attackers to inject arb…

  • Unscored —
    CVE-2006-2983

    PHP remote file inclusion vulnerability in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier allows remote…

  • Unscored —
    CVE-2006-2999

    Cross-site scripting (XSS) vulnerability in search.php in OkScripts QuickLinks 1.1 allows remote attackers to inject ar…

  • Unscored —
    CVE-2006-2985

    SQL injection vulnerability in index.php in IntegraMOD 1.4.0 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-2994

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in phazizGuestbook 2.0 allow remote attackers to injec…

  • Unscored —
    CVE-2006-2990

    Cross-site scripting (XSS) vulnerability in default.asp in VanillaSoft Helpdesk 2005 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-2991

    Multiple cross-site scripting (XSS) vulnerabilities in Ringlink 3.2 allow remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2006-2982 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Enterprise Timesheet and Payroll Systems (EPS) 1.1 and earlier al…

  • Unscored —
    CVE-2006-2986 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) …

  • Unscored —
    CVE-2006-2997

    Cross-site scripting (XSS) vulnerability in ZMS 2.9 and earlier, when register_globals is enabled, allows remote attack…

  • Unscored —
    CVE-2006-2981

    SQL injection vulnerability in vs_search.php in Arantius Vice Stats before 1.0.1 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-2975

    Multiple cross-site scripting (XSS) vulnerabilities in pblguestbook.php in PBL Guestbook 1.31 allow remote attackers to…

  • Unscored —
    CVE-2006-2980

    SQL injection vulnerability in block_forum_topic_new.php in ViArt Shop Free 2.5.5, and possibly other distributions inc…

  • Unscored —
    CVE-2006-2979

    Multiple cross-site scripting (XSS) vulnerabilities in ViArt Shop Free 2.5.5, and possibly other distributions includin…

  • Unscored —
    CVE-2006-2974

    Multiple cross-site scripting (XSS) vulnerabilities in EmailArchitect Email Server 6.1.0.5 and earlier allow remote att…

  • Unscored —
    CVE-2006-2972

    SQL injection vulnerability in vs_resource.php in Arantius Vice Stats 0.5b and 1.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2006-2978

    Mafia Moblog 0.6M1 and earlier allows remote attackers to obtain the installation path in an error message via a direct…

  • Unscored —
    CVE-2006-2977

    SQL injection vulnerability in big.php in Mafia Moblog 0.6M1 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-2973 Public exploit

    Multiple SQL injection vulnerabilities in month.php in PHP Lite Calendar Express 2.2 allow remote attackers to execute …

  • Unscored —
    CVE-2006-2976

    Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack …

  • Unscored —
    CVE-2006-2969

    Cross-site scripting (XSS) vulnerability in L0j1k tinyMuw 0.1.0 allow remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2006-2943

    Unspecified vulnerability in CGI-RESCUE WebFORM 4.1 and earlier allows remote attackers to inject email headers, which …

  • Unscored —
    CVE-2006-2963

    Cross-site scripting (XSS) vulnerability in Suchergebnisse.asp in Cabacos Web CMS 3.8.498 and earlier allows remote att…

  • Unscored —
    CVE-2006-2957

    Cross-site scripting (XSS) vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-2961 Public exploit EPSS 62%

    Stack-based buffer overflow in CesarFTP 0.99g and earlier allows remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2006-2949

    Cross-site scripting (XSS) vulnerability in private.php in MyBB 1.1.2 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2006-2956

    Multiple cross-site scripting (XSS) vulnerabilities in i.List 1.5 beta and earlier allow remote attackers to inject arb…

  • Unscored —
    CVE-2006-2955 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in KAPhotoservice 7.5 and earlier allow remote attackers to inject …

  • Unscored —
    CVE-2006-2960

    PHP remote file inclusion vulnerability in includes/joomla.php in Joomla! 1.0 allows remote attackers to execute arbitr…