Skip to content
OpenAdvisories

Archive

13 July 2006

Vulnerabilities first published on this day (UTC), newest first.

57 results · Feed

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Horde Application Framework 3.0.0 through 3.0.10 and 3.1.0 throu…

  • Unscored —
    CVE-2006-3545 EPSS 14%

    Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service (application crash) via a web…

  • Unscored —

    Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.3 Final allow remote attackers to execute arbitr…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in submit.php in PHP-Fusion before 6.01.3 allow remote attackers to…

  • Unscored —

    PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct requ…

  • Unscored —

    Directory traversal vulnerability in index.php in MKPortal 1.0.1 Final allows remote attackers to include and execute a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in F5 Networks FirePass 4100 5.x allow remote attackers to inject a…

  • Unscored —

    MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows r…

  • Unscored —
    CVE-2006-3543 Public exploit

    Multiple SQL injection vulnerabilities in Invision Power Board (IPB) 1.x and 2.x allow remote attackers to execute arbi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in demo.php in BeatificFaith Eprayer Alpha allow remote attackers t…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Garry Glendown Shopping Cart 0.9 allow remote attackers to injec…

  • Unscored —

    SQL injection vulnerability in Meine Links (aka My Links) in Kyberna ky2help allows remote authenticated users to execu…

  • Unscored —
    CVE-2006-3556 Public exploit

    PHP remote file inclusion vulnerability in extcalendar.php in Mohamed Moujami ExtCalendar 2.0 allows remote attackers t…

  • Unscored —

    Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL …

  • Unscored —

    Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat …

  • Unscored —
    CVE-2006-3546 Public exploit

    Patrice Freydiere ImgSvr (aka ADA Image Server) allows remote attackers to cause a denial of service (daemon crash) via…

  • Unscored —
    CVE-2003-1304 Public exploit

    EarlyImpact ProductCart 1.0 through 2.0 stores database/EIPC.mdb under the web root with insufficient access control, w…