Skip to content
OpenAdvisories

Archive

June 2006

Vulnerabilities first published in this month (UTC), newest first.

← May 2006 2006 / June July 2006 →
  1. 140
  2. 242
  3. 315
  4. 4 
  5. 526
  6. 654
  7. 728
  8. 86
  9. 915
  10. 10 
  11. 11 
  12. 1239
  13. 1347
  14. 148
  15. 1529
  16. 1616
  17. 171
  18. 18 
  19. 1936
  20. 202
  21. 2116
  22. 2237
  23. 2341
  24. 2420
  25. 25 
  26. 269
  27. 2746
  28. 2824
  29. 2928
  30. 3021
All Critical High Medium Low Exploited only Public exploit

646 results · Feed

  • Unscored —
    CVE-2006-3173 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3172 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2006-3195 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2006-3171

    CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a ne…

  • Unscored —
    CVE-2006-3189 Public exploit

    Cross-site scripting (XSS) vulnerability in administration/tblcontent/login1.php in HotPlug CMS 1.0 allows remote attac…

  • Unscored —
    CVE-2006-3168

    SQL injection vulnerability in CS-Forum before 0.82 allows remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2006-3192 Public exploit

    PHP remote file inclusion vulnerability in Ad Manager Pro 2.6 allows remote attackers to execute arbitrary PHP code via…

  • Unscored —
    CVE-2006-3177 Public exploit

    PHP remote file inclusion vulnerability in Admin/rtf_parser.php in The Bible Portal Project 2.12 and earlier allows rem…

  • Unscored —
    CVE-2006-3178

    Directory traversal vulnerability in extract_chmLib example program in CHM Lib (chmlib) before 0.38 allows remote attac…

    chmlib Debian
  • Unscored —
    CVE-2006-3186 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in CMS Faethon 1.3.2 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2006-3196

    index.php in singapore 0.10.0 and earlier allows remote attackers to obtain the installation path via an invalid templa…

  • Unscored —
    CVE-2006-3170

    CS-Forum before 0.82 allows remote attackers to obtain sensitive information via unspecified manipulations, possibly in…

  • Unscored —
    CVE-2006-3176 Public exploit

    SQL injection vulnerability in xarancms_haupt.php in xarancms 2.0 allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2006-3184 Public exploit

    Direct static code injection vulnerability in ASP Stats Generator before 2.1.2 allows remote authenticated attackers to…

  • Unscored —
    CVE-2006-3179

    Cross-site scripting (XSS) vulnerability in tools_ftp_pwaendern.php in Confixx Pro 3.0 and earlier allows remote attack…

  • Unscored —
    CVE-2006-3181

    SQL injection vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2006-3169

    Multiple cross-site scripting (XSS) vulnerabilities in CS-Forum 0.81 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2006-3175 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in mcGuestbook 1.3 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2006-3188

    Multiple SQL injection vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-3197

    Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2006-3190

    SQL injection vulnerability in administration/includes/login/auth.php in HotPlug CMS 1.0 allows remote attackers to exe…

  • Unscored —
    CVE-2006-3187

    Multiple cross-site scripting (XSS) vulnerabilities in Sharky e-shop 3.05 and earlier allow remote attackers to inject …

  • Unscored —
    CVE-2006-3182

    Directory traversal vulnerability in index.php in MobeScripts Mobile Space Community 2.0 allows remote attackers to rea…

  • Unscored —
    CVE-2006-3193 Public exploit EPSS 15%

    Multiple PHP remote file inclusion vulnerabilities in Grayscale BandSite CMS 1.1.1, when register_globals is enabled, a…

  • Unscored —
    CVE-2006-3191 Public exploit

    Cross-site scripting (XSS) vulnerability in comment.php in MPCS 0.2 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2006-3174

    Cross-site scripting (XSS) vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when register_globals is enab…

  • Unscored —
    CVE-2006-3180

    Cross-site scripting (XSS) vulnerability in ftp_index.php in Confixx Pro 3.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2006-3183

    Cross-site scripting (XSS) vulnerability in index.php in MobeScripts Mobile Space Community 2.0 and earlier allows remo…

  • Unscored —
    CVE-2006-3194 Public exploit

    Directory traversal vulnerability in index.php in singapore 0.10.0 and earlier allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2006-3141

    Cross-site scripting (XSS) vulnerability in details.cfm in Tradingeye Shop R4 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2006-3147 Public exploit

    Unspecified vulnerability in Hosting Controller before 6.1 (aka Hotfix 3.2) allows remote authenticated attackers to ga…

  • Unscored —
    CVE-2006-3156

    Cross-site scripting (XSS) vulnerability in index.cgi in Ultimate eShop 1.0 and earlier allows remote attackers to inje…

  • Unscored —
    CVE-2006-3163

    Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-3148

    SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-3137

    Cross-site scripting (XSS) vulnerability in productDetail.asp in Edge eCommerce Shop allows remote attackers to inject …

  • Unscored —
    CVE-2006-3151 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in AssoCIateD (aka ACID) 1.2.0 and earlier allows remote attacker…

  • Unscored —
    CVE-2006-3162 Public exploit

    PHP remote file inclusion vulnerability in include/inc_foot.php in SmartSiteCMS 1.0 and earlier allows remote attackers…

  • Unscored —
    CVE-2006-3150

    SQL injection vulnerability in index.php in CavoxCms 1.0.16 and earlier allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2006-3139

    Multiple SQL injection vulnerabilities in war.php in Virtual War (VWar) 1.5.0 R14 and earlier allow remote attackers to…

  • Unscored —
    CVE-2006-3145

    Buffer overflow in pamtofits of NetPBM 10.30 through 10.33 allows remote attackers to cause a denial of service (crash)…