Skip to content
OpenAdvisories

Archive

July 2006

Vulnerabilities first published in this month (UTC), newest first.

179 results · Clear filters · Feed

  • Unscored —
    CVE-2006-3395 Public exploit

    PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2006-3372 Public exploit

    Apple Safari 2.0.4/419.3 allows remote attackers to cause a denial of service (application crash) via a DHTML setAttrib…

  • Unscored —
    CVE-2006-3375 Public exploit

    PHP remote file inclusion vulnerability in includes/header.inc.php in Randshop 1.1.1 allows remote attackers to execute…

  • Unscored —
    CVE-2006-3381 Public exploit

    SturGeoN Upload allows remote attackers to execute arbitrary PHP code by uploading a file with a .php extension, then d…

  • Unscored —
    CVE-2006-3401 Public exploit

    Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to caus…

  • Unscored —
    CVE-2006-3364 Public exploit

    SQL injection vulnerability in index.php in the NP_SEO plugin in BLOG:CMS before 4.1.0 allows remote attackers to execu…

  • Unscored —
    CVE-2006-3374 Public exploit

    PHP remote file inclusion vulnerability in index.php in Randshop 1.2 and earlier, including 0.9.3, allows remote attack…

  • Unscored —
    CVE-2006-3400 Public exploit

    Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)…

  • Unscored —
    CVE-2006-3385 Public exploit

    Cross-site scripting (XSS) vulnerability in divers.php in Vincent Leclercq News 5.2 allows remote attackers to inject a…

  • Unscored —
    CVE-2006-3402 Public exploit

    SQL injection vulnerability in VirtuaStore 2.0 allows remote attackers to execute arbitrary SQL commands via the passwo…

  • Unscored —
    CVE-2006-3396 Public exploit

    PHP remote file inclusion vulnerability in galleria.html.php in Galleria Mambo Module 1.0 and earlier for Mambo allows …

  • Unscored —
    CVE-2006-3363 Public exploit

    PHP remote file inclusion vulnerability in index.php in the Glossaire module 1.7 for Xoops allows remote attackers to e…

  • Unscored —
    CVE-2006-3353 Public exploit

    Opera 9 allows remote attackers to cause a denial of service (crash) via a crafted web page that triggers an out-of-bou…

  • Unscored —
    CVE-2006-3354 Public exploit EPSS 17%

    Microsoft Internet Explorer 6 allows remote attackers to cause a denial of service (crash) by setting the Filter proper…

  • Unscored —
    CVE-2006-3347 Public exploit

    SQL injection vulnerability in index.php in deV!Lz Clanportal DZCP 1.3.4 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2006-3343 Public exploit

    PHP remote file inclusion vulnerability in recipe/cookbook.php in CrisoftRicette 1.0pre15b allows remote attackers to e…

  • Unscored —
    CVE-2006-3340 Public exploit EPSS 16%

    Multiple PHP remote file inclusion vulnerabilities in Pearl For Mambo module 1.6 for Mambo, when register_globals is en…

  • Unscored —
    CVE-2006-3341 Public exploit

    SQL injection vulnerability in annonces-p-f.php in MyAds module 2.04jp for Xoops allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-3337 Public exploit

    Cross-site scripting (XSS) vulnerability in frontend/x/files/select.html in cPanel 10.8.2-CURRENT 118 and earlier allow…